Unclear It is not stated what Claude Code does differently when this flag is set.
What
Claude Code has a new hidden flag, --host-auth-is-org-sign-in. A desktop app that runs Claude Code can pass it to say that the ANTHROPIC_AUTH_TOKEN it manages is an Anthropic organization sign-in that the app obtained itself. ANTHROPIC_AUTH_TOKEN holds the value Claude Code sends to prove who you are. The flag is meant for desktop apps only.
Why
This is part of how desktop apps hand their sign-in to Claude Code.
Names in the bundleANTHROPIC_AUTH_TOKEN
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added since
A small documentation edit on Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry touched a line naming ANTHROPIC_AUTH_TOKEN after this was published.
There is no service-token flow for unattended pipelines. Gateway sign-in always runs the browser device flow, so a CI job with no developer to approve the sign-in can't authenticate; configure those against your provider directly. Deploy `…claude-apps-gateway see the edit
Confirmed since
Anthropic's documentation has since written up ANTHROPIC_AUTH_TOKEN, on claude-in-microsoft-foundry.
ANTHROPIC_AUTH_TOKEN="$(az account get-access-token --resource https://ai.azure.com --query accessToken -o tsv)" \build-with-claude/claude-in-microsoft-foundry see the edit
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not stated what Claude Code does differently when this flag is set.
Anthropic's documentation agrees
Anthropic's documentation has since written up ANTHROPIC_AUTH_TOKEN, on claude-in-microsoft-foundry.