Unclear It is not clear when the two conditions are met or whether the stored headers are ever sent with a request.
In remote cloud sessions, Claude Code can ask the cloud session service for a signed copy of the client's IP address (the network address the connection comes from). It signs in to that service with the session's own credentials. It keeps the result to reuse within the same run, stored as two request headers, which are labels attached to a web request:
x-ssr-client-ip: the IP addressx-ssr-client-ip-sig: a signature that proves the address came from the service
The fetch happens while a request is being set up, and only when two conditions inside Claude Code are met. At that point it only fills the stored copy and does not attach the headers to anything.
This is part of how remote sessions run and is unlikely to be visible when you use Claude Code on your own computer. It suggests the service will be able to check which address a request really came from.
It is not clear when the two conditions are met or whether the stored headers are ever sent with a request.