Non-Interactive Mode Fails to Authenticate Using Provided API Key

I am having the same issue. Running the latest version of Claude Code 0.2.49

Also on 0.2.50, seemingly works on Mac but not on Ubuntu @bcherny @levpopov

Also on 0.2.50, seemingly works on Mac but not on Ubuntu @bcherny @levpopov

I am on Mac, running Claude Code in a Docker container, env var ANTHROPIC_API_KEY is set, and still getting the message that it's an invalid API key and I need to run /login. Updated to 0.2.50

Same with Claude Code 0.2.53 (Ubuntu 22.04.5 LTS docker container on MacOS)

Looking into this. It seems like a potential workaround is to use ENTRYPOINT ["claude"] instead. Please let me know if this works for you.

same problem here, using my own keys or a special key generated by Anthropic support (I just pointed them to this thread too)

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 24.04.2 LTS
Release:        24.04
Codename:       noble
$ ANTHROPIC_API_KEY=sk-ant... claude -p "hello"
Invalid API key · Please run /login
$ claude -v
0.2.53 (Claude Code)

I asked claude to read its own code and find the issue (_"read the code from /usr/bin/claude and find why using ANTHROPIC_API_KEY doesn't work when run in headless mode using -p"_)

{
  "cost_usd": 1.2548647000000004,
  "duration_ms": 250381,
  "duration_api_ms": 250382,
  "result": "After examining the code, I can see why `ANTHROPIC_API_KEY` environment variable doesn't work when running in headless mode with the `-p` flag. Here is the relevant information:\n\n1. In the function `Sw(I)` (likely standing for \"Swap\" or \"Switch API Key\"), there's code that handles API key selection with different logic paths based on certain conditions:\n\n```javascript\nfunction Sw(I) {\n    let Z = i0();\n    if (I && process.env.ANTHROPIC_API_KEY)\n        return process.env.ANTHROPIC_API_KEY;\n    if (!1 === \"true\") {\n        if (!process.env.ANTHROPIC_API_KEY)\n            throw new Error(\"ANTHROPIC_API_KEY env var is required\");\n        return process.env.ANTHROPIC_API_KEY;\n    } {\n        let G = Lk();\n        if (G)\n            return G;\n        return M41();\n    }\n    return null;\n}\n```\n\n2. The issue is that the parameter `I` controls whether the environment variable is used. When running in headless mode with `-p`, this parameter is set to `false`, causing the API key selection logic to bypass the environment variable and look for a stored key instead.\n\n3. The code includes a function `fU2(I)` that validates API keys against an approved list stored in the user's configuration. Only keys that have been previously approved are accepted.\n\nWhen you run with `-p` flag (headless mode), the code path calls `Sw(false)`, which skips checking the environment variable and instead tries to use the stored API key from the system's credential storage (Keychain on macOS), or from the application's own configuration.\n\nTo make it work in headless mode, you would need to either:\n\n1. Use the stored API key that was previously set up and approved during interactive mode\n2. Modify the code to check the environment variable in headless mode too"
}

I don't have the time right now to check this - just sharing in case someone else is looking at it!

I confirm that claude could fix itself (using v0.2.54)

The function Sw(I) is responsible for API key validation and selection.

Here's the buggy snippet:

function Sw(I) {
  let Z = i0();
  if (I && process.env.ANTHROPIC_API_KEY) 
    return process.env.ANTHROPIC_API_KEY;
  if (!1 === "true") {
    if (!process.env.ANTHROPIC_API_KEY)
      throw new Error("ANTHROPIC_API_KEY env var is required");
    return process.env.ANTHROPIC_API_KEY;
  }
  let G = Lk();
  if (G) return G;
  return M41();
  return null;
}

Change the function to this:

function Sw(I) {
  let Z = i0();
  // Always check environment variable first
  if (process.env.ANTHROPIC_API_KEY) 
    return process.env.ANTHROPIC_API_KEY;
  // Fall back to stored key if no environment variable
  let G = Lk();
  if (G) return G;
  return M41();
  return null;
}

...and voila:

$ ANTHROPIC_API_KEY="sk-ant-api03-..." claude -p "hi"
Hello! I'm here to help you with software engineering tasks. How may I assist you today?

I think it's my first contrib to a non-open-source software, and also my first using a software to fix itself!

I built a Docker container based on .devcontainer/Dockerfile and confirmed that it runs without any issues—the "Invalid API key · Please run /login" error did not occur.

Since this code is not open source, it's quite difficult to pinpoint the exact cause. However, it's likely that the issue with failing to retrieve the key properly lies in the internal shell version or one of the dependent libraries.

Fix landing in the next version. Thanks for the reports!

Fixed in 0.2.59. Restart to update.

I think this issue has resurfaced:

~/dev/reproduce
➜ claude --version
0.2.90 (Claude Code)

~/dev/reproduce
➜ claude -p "hello"
Invalid API key · Please run /login

But when I start a session by calling claude it just picks up on my API key.

I'm getting this issue too with the 0.2.90 version!

I am getting the same on v1.0.11

Same on 1.0.43. APi key is certainly valid

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.