You'll notice
Useful4 Signal3
Your Anthropic credential is stripped from telemetry sent to a third-party collector.
What's wrong with this entry?
Anonymous. No account, no email.
What
Before sending telemetry, Claude Code now compares the credential it holds against the endpoint host and, if they do not match, removes the auth headers with the reason misrouted_credential. Pointing OpenTelemetry metrics at a third-party collector no longer leaks your Anthropic credential to it.
Details
- Applies whenever OTel metrics export runs; there is no flag to turn it off.
- The BigQuery metrics exporter checks in three places: it skips export entirely when the metrics endpoint is misrouted, skips the organization
metrics_enabledlookup when that endpoint is misrouted, and otherwise sends without auth headers rather than failing outright. - The
metrics_enabledrequest moved toauth: "none"with headers attached explicitly, and raises a new error when no usable credential exists.
Evidence
credential withheld: this telemetry endpoint is not the host it belongs to
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.