Claude Code 2.1.299 stops sending a gateway key on some Anthropic requests

Claude Code 2.1.299, in the changelog, includes two fixes for requests that go to Anthropic while ANTHROPIC_BASE_URL points at a third-party gateway.

The first line says: fixed feature flag, startup, fast mode, profile, and feedback requests to Anthropic carrying the API key configured for a third-party gateway (ANTHROPIC_BASE_URL). The same line says Anthropic API keys are still sent. The second line says: fixed the server-managed settings request to Anthropic carrying a third-party gateway’s API key when a managed settings file sets ANTHROPIC_BASE_URL.

Those are the request types the 2.1.299 notes name. The section does not assign a CVE, and it does not give a severity. It also does not say that Anthropic logged the key, stored it, or used it for anything beyond receiving the request.

Which version has the fix

The npm registry page for @anthropic-ai/claude-code, read at 05:35 UTC on 15 October 2026, records these dist-tags:

Tag	Version	Publish time on the registry
2.1.299	2.1.299	2026-10-14T00:23:19.588Z
latest and next	2.1.300	2026-10-14T14:27:26.554Z
stable	2.1.292	2026-10-06T17:10:31.715Z

The registry’s own modified time at that read was 2026-10-14T18:27:06.025Z. Version 2.1.299 is the changelog section that contains the two fixes. Version 2.1.300 is the newer latest tag. The 2.1.300 notes, which sit above 2.1.299 in the same file, do not say those fixes were reverted. The stable tag is 2.1.292, published on 6 October, which is before 2.1.299. As of this read, the stable channel does not include the fix.

If you pointed Claude Code at a gateway

Install 2.1.299 or a later build if you take versions from latest. If your install follows the stable dist-tag, 2.1.292 is what that tag still named on 15 October, and these notes are not in it.

Teams that ran Claude Code with ANTHROPIC_BASE_URL set to a proxy or gateway, and with that gateway’s API key configured, may want to review the key and rotate it. That is ordinary hygiene when a secret may have been presented to a party other than the service it was issued for. It is a precaution for the operator. The changelog does not tell anyone to rotate keys, and it does not describe Anthropic’s handling of them.