{"version":"2.1.321","anchor":"plugin-http-fetch-hook-httpfetch-with-credential-redactio","canonical_anchor":"plugin-http-fetch-hook-httpfetch-with-credential-redactio","heading":"Plugins can intercept and rewrite Claude Code's web requests","tier":"use","area":"Plugins","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-http-fetch-hook-httpfetch-with-credential-redactio","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321","markdown":"### Plugins can intercept and rewrite Claude Code's web requests\n\nPlugins can now hook outgoing web requests to answer or rewrite them, but are never lent your sign-in\n\n**Unclear.** It is not known whether plugins can use this hook by default.\n\n**What**\n\nPlugins can now hook `http.fetch`, the point where Claude Code sends a request over the internet. A plugin is an add-on that extends Claude Code, and a hook here is plugin code that runs at that point. A hook can do either of these:\n\n- Answer the request itself, with a status, headers and text.\n\n- Rewrite the request before it goes out.\n\nPlugins are lent credentials, meaning passwords or keys, only in limited ways, and never your session's sign-in. A check that runs before the request can refuse it, and a refused request comes back as a 403 permission error.\n\n**Why**\n\nPlugins can now intercept and change outgoing requests, including requests to the API, so it is worth knowing what any installed plugin is allowed to do.\n\n- Area: Plugins\n- Names: `http.fetch`\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 4\/5\n- Scope: individual\n- Heads-up: no"}