What
When you use Claude through a cloud provider, Claude Code checks at launch whether your account can reach the model. A successful check is now saved in ~/.claude/cache/provider-probe-verdicts.json and reused for up to 15 minutes (900000 ms) on later launches. For Bedrock the log reads [bedrock-probe] <model>: accessible (cached).
- The saved result is keyed on a hash of the region, project, base URL, the skip-auth setting and the names of
ANTHROPIC_CUSTOM_HEADERS. - For Bedrock the key also covers your AWS identity:
AWS_PROFILE,AWS_CONFIG_FILE,AWS_SHARED_CREDENTIALS_FILE,AWS_ACCESS_KEY_ID,AWS_ROLE_ARN, the web-identity and container credential variables, and theawsCredentialExportandawsAuthRefreshsettings. - The cache is skipped when short-lived or bearer credentials are in use, such as
AWS_BEARER_TOKEN_BEDROCK,CLOUDSDK_AUTH_ACCESS_TOKEN, orCLAUDE_CODE_SKIP_VERTEX_AUTHtogether withANTHROPIC_API_KEY, among others.
Why
Before, every launch ran the check again, so startup on Bedrock or Vertex should be faster. Switching AWS profile, role or credentials changes the key, so a stale "accessible" result does not carry over.
ANTHROPIC_API_KEY
Set up Claude Code for your organization modified, high confidence
| [Login enforcement](/docs/en/settings-reference#forceloginmethod) | Restrict login to a specific method or Anthropic organization. The method restriction applies across the VS Code extension, Agent SDK, `claude setup-token`, and `/instal…see the edit
ANTHROPIC_API_KEY
Authentication modified, high confidence
* **`ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, or `apiKeyHelper`**: blocked at startup. Under `forceLoginOrgUUID`, organization membership can't be verified for an environment credential, and under `forceLoginMethod` the credential would…see the edit
ANTHROPIC_API_KEY
Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry modified, medium confidence
* **Credentials**: the gateway token is the session's only credential. [Anthropic profiles](/docs/en/authentication#anthropic-profiles-and-federation-credentials) and any earlier claude.ai login are ignored while signed in, so developers d…see the edit
ANTHROPIC_API_KEY
Claude apps gateway deployment and operations modified, medium confidence
| Startup exits with `Administrator policy requires a Cloud gateway sign-in on this machine` | The developer's environment sets `ANTHROPIC_API_KEY` or `ANTHROPIC_AUTH_TOKEN`, their settings configure an [`apiKeyHelper`](/docs/en/settings-r…see the edit
ANTHROPIC_API_KEY
Error reference modified, medium confidence
If the machine also holds an Anthropic-issued credential and the managed settings set `forceLoginMethod` or `forceLoginOrgUUID`, Claude Code exits at startup instead. That credential can be an `ANTHROPIC_API_KEY` or `ANTHROPIC_AUTH_TOKEN` …see the edit
ANTHROPIC_API_KEY
Connect Claude Code to an LLM gateway modified, medium confidence
| `This machine's managed settings require a first-party login`, or [`Administrator policy requires a Cloud gateway sign-in`](/docs/en/errors#administrator-policy-requires-a-cloud-gateway-sign-in) when managed settings set `forceLoginMetho…see the edit
ANTHROPIC_API_KEY
Roll out an LLM gateway for your organization modified, medium confidence
Don't include `forceLoginMethod`, `forceLoginOrgUUID`, or `forceLoginGatewayUrl` in managed settings alongside a gateway credential. `forceLoginMethod` or `forceLoginOrgUUID`, with any value, blocks `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOK…see the edit
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Only the Bedrock path was traced end to end, and the 15-minute window was not confirmed to belong to this cache.
Anthropic's documentation agrees
ANTHROPIC_API_KEY on Set up Claude Code for your organization