[FEATURE] MTLS Support with Apple KeyChain and Credential Support

Preflight Checklist

• [x] I have searched existing requests and this feature hasn't been requested yet
• [x] This is a single feature request (not multiple features)

Problem Statement

In secure corporate environments we use mTLS to auth corporate devices to our LLM gateways. Claude Code CLI only supports mTLS by passing the cert and pem file via environment variables. This requires the user having the ability to export the cert file from the credenital store on the device (which is not allowed otherwise defeats the whole purpose).

Proposed Solution

The CLI should support native calls for Mac and Windows to pull the creds from the OS credenital stores. See here for more information https://victoronsoftware.com/posts/mtls-with-apple-keychain/

Alternative Solutions

_No response_

Priority

High - Significant impact on productivity

Feature Category

Configuration and settings

Use Case Example

We issue keys to access Claude via LiteLLM we do not want people to use those keys from non-work machines.

Additional Context

_No response_