Follow Discord
Sweep 22 Sep 2026 · 17:19Z Build v2.1.280 501 read Stable v2.1.267 Latest v2.1.280 Next v2.1.280 Feeds RSS JSON llms.txt Unofficial
Claude Code v2.1.257 ·

New file-descriptor-based secret passing for subprocesses

Auth tokens can now be handed to subprocesses over file descriptors instead of plaintext environment variables.

TierUse it nowhow much it should matter to you
Useful5my rating, 1 to 5
Signal4worth watching, 1 to 5
AreaAuthwhat it touches
KindNew Featuresin v2.1.257,
Use it now Notable No documentation found

Auth tokens can now be handed to subprocesses over file descriptors instead of plaintext environment variables.

New environment variables — CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR, CLAUDE_CODE_GATEWAY_TOKEN_FILE_DESCRIPTOR, CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR, and CLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR — let auth tokens be passed to subprocesses via file descriptor instead of plaintext environment variables. The list of secret env vars scrubbed from subprocess environments was also expanded.

Read from
Names in the bundleCLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTORCLAUDE_CODE_API_KEY_FILE_DESCRIPTORCLAUDE_CODE_GATEWAY_TOKEN_FILE_DESCRIPTORCLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR
How sure we are
One source agreesOne thing we can check says the same as this entry.
The name it cites is new in this buildNew in this build: CLAUDE_CODE_GATEWAY_TOKEN_FILE_DESCRIPTOR

See this entry in the whole of v2.1.257 →

Feedback