{"version":"2.1.247","anchor":"bot-and-service-account-tokens-are-now-recognised","canonical_anchor":"bot-and-service-account-tokens-are-now-recognised","heading":"Bot and service-account tokens are now recognised","tier":"internal","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247\/e\/bot-and-service-account-tokens-are-now-recognised","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247","markdown":"### Bot and service-account tokens are now recognised\n\nClaude Code can now tell when your token is a bot or service account with no user behind it.\n\n**What**\n\nNew checks read the auth token's claims to tell whether it is acting as a bot or belongs to a service account, which have no user identity attached.\n\n**Details**\n\n- Bot detection accepts `act_as_bot` as either a boolean true or the string \"true\".\n- A service account is identified by having no account UUID and no subject, but non-empty `org_service_name` and `code_agent_id`.\n\n**Evidence**\n\n`code_agent_id`\n\n- Area: Auth\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 4\/5"}