Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.227 ·

apiKeyHelper output is validated before it is sent

Your apiKeyHelper output is now checked for junk characters and length before being used.

You'll notice New Features
JSON All of v2.1.227
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
AuthArea: what it touches
New FeaturesKind: in v2.1.227,
New FeaturesSection of the release
What

If you use an apiKeyHelper script to supply your API key, its output is now checked for characters that cannot appear in a key and for a maximum length. Bad output makes Claude Code stop with an error telling you the script must print only the key. Previously any non-empty output was sent as-is.

Details
  • The rejection message is "apiKeyHelper output rejected: not a printable-ASCII token".
  • Failure throws rather than falling back to an unauthenticated request, so a script that prints logs or a prompt alongside the key now fails loudly instead of causing a confusing auth error.
Evidence

apiKeyHelper output rejected: not a printable-ASCII token

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from
Names in the bundleapiKeyHelper

See this entry in the whole of v2.1.227 →

Feedback