Claude Code now works out how the sign-in credential for a session was supplied. It looks at these environment variables:
CLAUDE_CODE_OAUTH_TOKEN, an access tokenANTHROPIC_API_KEY, an API key- the file descriptor versions of both, where the value is passed through an open file handle instead of the variable itself
The result is a short label, such as an environment variable, a file descriptor or none. The label is attached to two analytics events: the one sent when Claude Code fetches remote settings, and the one sent about policy limits on the first prompt.
Claude Code also sends a separate event when fetching remote settings begins, but only when it is running in a particular cloud mode.
This is reporting only. It shows which way credentials were provided, not the credentials themselves, and it does not change how you sign in.