Claude Code v2.1.247 ·
Bot and service-account tokens are now recognised
Claude Code can now tell when your token is a bot or service account with no user behind it.
Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
AuthArea: what it touches
Internal ChangesKind: in v2.1.247,
What probably matters to youSection of the release
What
New checks read the auth token's claims to tell whether it is acting as a bot or belongs to a service account, which have no user identity attached.
Details
- Bot detection accepts
act_as_bot as either a boolean true or the string "true". - A service account is identified by having no account UUID and no subject, but non-empty
org_service_name and code_agent_id.
Evidence
code_agent_id
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.247 →
