Sweep 19 Sep 2026 · 02:36Z Build v2.1.278 500 read Stable v2.1.267 Latest v2.1.278 Next v2.1.278 Feeds RSS JSON llms.txt Unofficial
Claude Code v2.1.273 ·

API keys sourced from apiKeyHelper now go through model-catalog policy checks

Auth detection now recognizes keys from apiKeyHelper and routes them through the same model-catalog policy check as other auth methods

TierUnder the hoodhow much it should matter to you
Useful2my rating, 1 to 5
Signal2worth watching, 1 to 5
AreaAuthwhat it touches
KindInternal Changesin v2.1.273,
Group of 2 Under the hood

Auth detection now recognizes keys from apiKeyHelper and routes them through the same model-catalog policy check as other auth methods

What

  • The function that determines the active authentication type now returns both the auth type and whether the API key came from an apiKeyHelper, and treats a key sourced this way as present even if its actual value is empty or falsy.
  • A new api_key_helper case was added to the logic that decides model-catalog access policy, so it now goes through the same allow_model_catalog policy check that was previously only applied to not_claude_ai_auth. The no-auth-method case also gained API-key-specific served-catalog handling.

Why

This ensures that when an organization supplies API keys via an apiKeyHelper script rather than a static key, Claude Code correctly recognizes that an API key is in use and applies the same model-catalog access policy as it does for other authentication methods.

Read from
Names in the bundleapiKeyHelper
Since it was published

The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.

Added since A small documentation edit on Claude apps gateway deployment and operations touched a line naming apiKeyHelper after this was published. | Startup exits with `Administrator policy requires a Cloud gateway sign-in on this machine` | The developer's environment sets `ANTHROPIC_API_KEY` or `ANTHROPIC_AUTH_TOKEN`, their settings configure an [`apiKeyHelper`](/docs/en/settings-r… claude-apps-gateway-deploy see the edit
Confirmed since Anthropic's documentation has since written up apiKeyHelper, on Extend Claude with skills. * A session that doesn't use a sign-in stored by `/login`, such as one that authenticates with an API key, or one where `ANTHROPIC_AUTH_TOKEN`, `CLAUDE_CODE_OAUTH_TOKEN`, or an `apiKeyHelper` script supplies the credential skills see the edit
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agreesAnthropic's documentation has since written up apiKeyHelper, on Extend Claude with skills.

See this entry in the whole of v2.1.273 →