Unclear What the replacement check requires of the token is not stated.
What
ANTHROPIC_AUTH_TOKEN is an environment variable that holds a token Claude Code sends in the Authorization header. Claude Code used to check that this token was issued for an audience called claude-gateway before treating it as a gateway token. That exact requirement is gone, replaced by a different check.
Why
This may change when Claude Code sends your token to the base URL you have set, so it is worth checking if you use a gateway.
Names in the bundleANTHROPIC_AUTH_TOKEN
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added since
A small documentation edit on Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry touched a line naming ANTHROPIC_AUTH_TOKEN after this was published.
There is no service-token flow for unattended pipelines. Gateway sign-in always runs the browser device flow, so a CI job with no developer to approve the sign-in can't authenticate; configure those against your provider directly. Deploy `…claude-apps-gateway see the edit
Confirmed since
Anthropic's documentation has since written up ANTHROPIC_AUTH_TOKEN, on claude-in-microsoft-foundry.
env -u ANTHROPIC_API_KEY ANTHROPIC_AUTH_TOKEN="$ACCESS_TOKEN" ant messages create \build-with-claude/claude-in-microsoft-foundry see the edit
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
What the replacement check requires of the token is not stated.
Anthropic's documentation agrees
Anthropic's documentation has since written up ANTHROPIC_AUTH_TOKEN, on claude-in-microsoft-foundry.