Claude Code Authentication & OAuth Errors
First identify the active credential and the exact failure. A temporary authentication-service outage, a revoked OAuth session, an invalid API key, and cloud-provider credentials require different fixes; repeatedly logging in cannot repair all four.
11777 related issues · 1895 open · 9882 resolved · peaked at 2524 open (2026-07)
Authentication triage
What to do now
- Identify the active credential: Run /status in Claude Code, or claude auth status in a terminal, and note whether the session uses a Claude account, an API key, or Bedrock, Vertex AI, or Foundry credentials.
- Separate service failures from local credentials: For “Authentication service was unavailable,” check Anthropic service status and retry after the incident clears. For a 401, revoked token, or expired token, continue with a clean re-authentication.
- Refresh a revoked or expired OAuth session: Run /login. If the same error returns in that session, run /logout first, close Claude Code, restart it, and complete login again.
- Resolve credential precedence: If login succeeds but Claude Code still uses the wrong identity, check /status again. An ANTHROPIC_API_KEY or cloud-provider configuration can take precedence over subscription OAuth; change only the credential source you intend to use.
Reference: Claude Code authentication · Claude Code error reference · Login troubleshooting
Backlog trend over time
The line shows how many issues in this topic were open at the end of each month, derived by
counting each issue from its creation date until it was closed. First-party data from the
anthropics/claude-code tracker.
Common questions
- How do I fix “OAuth token revoked” in Claude Code?
- Run /login to authenticate again. If the revoked-token error returns immediately, run /logout, close Claude Code, restart it, and complete a fresh login.
- Why does Claude Code still reject me after login succeeds?
- Claude Code may be using a different credential than the browser login. Use /status to identify the active method; an API key or cloud-provider configuration can take precedence over subscription OAuth.
- What should I do when the authentication service is unavailable?
- Treat it as a possible service incident first: check Anthropic status and retry after recovery. Clearing working credentials during an outage adds risk without fixing the upstream failure.
All authentication & login failures issues
Ranked by community engagement (reactions and comments).
- [MODEL] Claude Code is unusable for complex engineering tasks with the Feb updates
- [FEATURE] Add the ability to manage multiple Claude accounts within the Claude Desktop app with easy switching between profiles.
- [BUG] Phone verification
- [FEATURE] Multi-account switching in Claude Mobile app without shared email
- [MODEL] Claude verbose code comments by default — ignores instructions to stop.
- [FEATURE] Support Amazon Bedrock as backend for Claude Desktop / Cowork
- [FEATURE] Secure secrets injection for Claude Code on the web
- [Feature Request] Support for MCP Sampling to leverage Claude Max subscriptions and reduce API costs
- [Feature Request] Add --session-name and /session-name for custom session identification
- [MODEL] Claude Code can not stop using the word "load-bearing"
- [FEATURE] Allow Claude Code Web to start sessions from branches other than default branch
- Claude Code cannot connect to GitHub's remote MCP server using OAuth authentication
- Linear Integration: Assign issues to Claude Code to trigger cloud agent sessions
- [FEATURE] Enable Auto mode support for Amazon Bedrock models
- Claude.ai MCP servers auto-injected into Claude Code without opt-in — causes OOM crashes on resource-constrained systems
- [FEATURE] Preview: Allow configurable external URL whitelist for OAuth and other third-party required flows
- [BUG] API Error: Rate limit reached despite Claude Max subscription and only 16% usage
- [FEATURE] Passkey (WebAuthn) sign-in for Claude accounts, across every surface
- [FEATURE] Support AWS Bedrock + AWS SSO in `claude remote-control`
- Feature request: Support multiple Slack workspaces in the built-in Slack connector
- [MODEL] Frequently uses Bash tools (sed/grep/etc) when use-case is well aligned to other builtin tools (Read/Grep/etc)
- [FEATURE] AWS Bedrock authentication support for Chrome extension
- Feature Request: Multi-Account Profile Support
- API Error: 401 {"type":"error","error":{"type":"authenticati...
- [BUG] Claude code requires users to constantly login
- [FEATURE] Enable Claude Code to access chat history in Claude App
- Migrate Claude Cowork from Electron to Electrobun
- Claude Code OAuth login fails with a timeout error. `auth.anthropic.com` does not resolve via DNS, making it impossible to authenticate.
- Feature Request: Support multiple account login and switching (like `gh auth switch`)
- [FEATURE] Support targeting specific Chrome instances/profiles for Claude in Chrome integration
- GitHub connector links repositories successfully but Claude cannot access content for ANY repository (account-wide, public and private alike) — recent regression
- [BUG] CVP-approved Claude.ai organization still receives cyber safeguard blocks in Claude Code
- [BUG] Claude Desktop doesn't connect to Custom MCPs altogether (not with OAuth 2.1 nor with SSE)
- v2.1.113+ broken on Termux/Android: native binary requires glibc, no JS fallback
- [BUG] [SOLVE!] Missing API key when SSH'ing into macOS
- Feature Request: API Fallback for Pro/Max Subscriptions When Limits Are Reached
- Feature Request: Machine to Machine Authentication for Claude Max Subscriptions
- [FEATURE] Multi-account support in VSCode extension
- [BUG] Cannot paste auth code into "Paste code here if prompted >" during /login in Dev Container (v2.1.105)
- [FEATURE] Automatic Model Switching for Plan Mode
- [BUG] login with pasting auth code doesn't work
- Model behavior: /goal Stop-hook directive cited as authorization for unrequested actions; absence-from-search treated as evidence of absence; structure-as-substance under pushback
- [BUG] In the middle of running I get `⎿ API Error: 401 {"type":"error","error":{"type":"authentication_error","message":"OAuth authentication is currently not supported."}}`
- [Bug] Anthropic API Credential Restriction Preventing API Requests
- [Bug] Remote Control unavailable despite Pro plan authentication
- [FEATURE] Support for multiple accounts / profiles
- Allow hiding/removing unused cloud connectors (Gmail, Google Calendar, etc.)
- [BUG] Scheduled routines fail every MCP tool call with "MCP tool call requires approval" on custom connectors (regression ~2026-05-20)
- [BUG] Slack plugin fails to authenticate - "does not support dynamic client registration"
- [Feature Request] Add 'claude model list' CLI command for non-interactive model queries
- [BUG] Claude Code defaults to 1M context on fresh session with no workaround on Pro plan
- Claude Code: constantly seeing 'API Error (Request timed out...)' - Retrying in .. seconds.. (attempt x/10)'
- [BUG] Google Drive connector shows connected but tools not exposed in Cowork
- [BUG] OAuth Request Failed Internal server error
- [Bug/Documentation] 'Organization has been disabled' error when ANTHROPIC_API_KEY overrides Max/Pro subscription
- [BUG] Missing `scope` Parameter in Dynamic Client Registration and Authorization Requests
- [BUG] Claude Code does not work with MCP servers that does not implement Dynamic Client Registration
- [BUG] Claude Code OAuth login times out after browser authorization and ends in internal server error
- [BUG] plugin:github:github MCP fails with HTTP 400 — malformed JSON-RPC payload missing version tag
- [Feature Request] Account-level settings sync across devices
- Go-based CLI tools (gh, terraform, etc.) fail with TLS error due to built-in HTTPS proxy
- [Bug] Potential session/cache leakage between workspace instances or consumer accounts
- MCP OAuth regression: client metadata document redirect_uris missing port causes auth failure for providers supporting CIMD
- [BUG] OAuth error: timeout of 15000ms exceeded
- [BUG] Sessions become unresponsive after upgrade to 2.0.60 (suspected background agent blocking)
- [FEATURE] Support Azure DevOps repositories in Claude Code on the web (Cloud Sessions)
- [FEATURE] Claude can reconnect to a broken MCP in a manner similar to how it performs other actions
- Claude OAuth requires dynamic client registration, making Azure AD/Entra ID integration complex
- Plugin marketplace clone triggers unexplained SSH key access prompt on startup
- Frequent re-authentication required with multiple concurrent Claude Code sessions (OAuth refresh token race condition)
- [FEATURE] Built-in secrets management with optional third-party integrations
- [Bug] Jira Authentication Fails: Persistent Reconnection and Session Issues
- [BUG] Session Disappeared After Logout / Restart of Claude Code Desktop - HOW to restore the sessions ASAP???
- [BUG]
- /remote-control (/rc) not recognized as built-in command in existing session
- [BUG] API 400
- Multi-Session Support for Claude in Chrome (Tab Group Isolation)
- [BUG] OAuth token expiration disrupts autonomous workflows – refresh token handling needed
- [BUG] MCP OAuth appends trailing slash to `resource` parameter, breaking Entra ID auth (AADSTS9010010)
- [BUG] Fable 5 gated behind usage credits dialog on Max when authenticated via claude setup-token (inference-only scope cannot read entitlements)
- [BUG] Claude Code Web Cannot Use gh CLI Commands (Permission Denied)
- [BUG] Claude on MacOS does not use default browser for logging in
- [BUG] VS Code extension ignores CLAUDE_CONFIG_DIR environment variable
- Claude.ai sign-in (magic link) emails delayed 2-5 minutes since mid-July 2026
- [BUG] OAuth login fails with 500 error and 15s timeout — cannot authenticate via browser flow
- [FEATURE] --bare mode: option to preserve OAuth/keychain auth while skipping context
- Support device-code authentication flow (RFC 8628) for Pro/Max subscription users in headless environments
- [BUG] MCP OAuth: Claude doesn't auto-refresh access tokens, daily "Connection expired" despite valid refresh token
- Use subscription and fallback to credits, or allow switching without re-login
- [BUG] CLI login fails to allow pasting the code from the browser when terminal paste bracketing is enabled
- Subscription usage jumping to 80% within minutes of reset
- [BUG] /api/oauth/usage endpoint returns persistent 429 for Claude Max users (retry-after: 0)
- [MODEL] Repetitive "belt-and-suspenders" idiom across unrelated sessions
- [Feature Request] Support MCP servers with Client ID Metadata Documents (CIMD) OAuth authentication
- Feature Request: Support for multiple Claude Code sessions with different accounts
- [BUG] Unable to access Claude Code after successful OAuth login with Google account
- Channels not available on personal Max plan - --channels ignored
- [BUG] Unable to Login
- [MODEL] Opus 4.6 continuously stuck in explore and thinking loops (Claude Code)
- [BUG] claude binary re-registers as new app in macOS Privacy & Security on every version update (versioned install path, not code signing)
- [BUG] OAuth redirect_uri uses localhost instead of 127.0.0.1, violating RFC 8252 Section 7.3
- Feature Request: Named account profiles for quick switching between multiple claude.ai accounts
- Feature Request: Extend Environment Variable Expansion to `settings.json` files
- [BUG] Account email (PII) is injected into the model's system prompt without consent, disclosure,
- Support pre-configured OAuth client credentials without requiring Dynamic Client Registration
- Feature Request: Meaningful plan file names
- [BUG] New VS Code Extension does not recognize ANTHROPIC_BASE_URL and shows login screen
- [Bug] Anthropic API Error: Credential Authorization Restriction
- [BUG] Published Claude Code artifacts do not appear in the mobile app (they show on web and desktop)
- [BUG] Claude Code login fails with OAuth timeout on Windows
- [BUG] OAuth error: timeout of 15000ms exceeded can not login it keeps timout even though I tried token too
- Marketplace plugin cloning should default to HTTPS instead of SSH
- Better file search, fuzzy search
- [BUG] Claude.ai completely down. Cannot access Claude code or website: Rate exceeded
- [BUG] MCP OAuth tokens without expires_in and refresh_token silently expires
- [BUG] OAuth error: Request failed with status code 500
- Slack MCP plugin OAuth fails: redirect_uri not registered in Slack app configuration
- [BUG] Freshly installed Claude Code ignores settings.json
- [Bug] Anthropic API Error: Usage credits required for 1M context window with opus-plan model
- [BUG] Plugin userConfig values not prompted on enable
- [BUG] sandbox: SOCKS5 proxy requires authentication that BSD nc cannot negotiate, breaking SSH git operations
- [BUG] Auto mode blocked by persistent "safety classifier temporarily unavailable" outage — Edit/Write/Bash all fail
- [BUG] Claude Code MCP client ignores scopes_supported from OAuth protected resource metadata, preventing refresh token issuance
- Remote Control: mobile app fails with "GitHub repository access check failed" when environment has git_repo_url
- [FEATURE] Expose rate-limit / plan quota usage in statusLine JSON input
- Persistent Warning When Using API Key Directly
- 2.1.120 regression: claude --resume / --continue crash with "g9H is not a function"
- [BUG] Cowork: Global instructions silently revert to older version after saving
- Authentication Failure After Login in v1.0.68 at ssh remote
- [FEATURE] Give users control over weekly limit reset timing (configurable reset day, or banked on-demand resets like Codex)
- MCP claude.ai Microsoft 365 connector rejects personal Microsoft accounts (Hotmail/Outlook.com/Live)
- [MODEL] Should not encourage shell command substitution `$(...)` in system prompt — causes permission approval dialog spam
- Claude Code Analytics Admin API does not return subscription/OAuth users
- [FEATURE] 1. Agent Hierarchy in Hook Events, 2. Intermediate Text Output Hook, 3. SubagentStart Hook
- Rename the conversation
- Cowork: Add ability to remove individual entries from the recent folders list
- [Bug] Anthropic API Error: OAuth token missing user:profile scope for usage data
- [BUG] API Error: "invalid_request_error" "The request body is not valid JSON"
- [BUG] API Error: Rate limit reached
- [BUG] Missing API key · Run /login on Max subscription
- [BUG] Environment variables from `env` section not passed to MCP servers
- How can I use my API key without signing in?
- [FEATURE] Add native GitHub Issues integration for reading and implementing issues
- [BUG] `"awsAuthRefresh":` setting causes constant repeated auth attempts
- [FEATURE] Support using Dispatch in Claude Desktop
- OAuth error: Request failed with status code 500
- [BUG] API Error: Rate limit reached on Cowork only - account-specific, persists across machines
- [FEATURE] Add PostWorktreeCreate hook (or setup command) for environment initialization in worktrees
- Claude Desktop App stuck in login loop with 'Invalid authorization' error
- Ignore User Configuration: Co-Authored-By Lines Added Despite `includeCoAuthoredBy: false`
- Long Context Beta Not Available for Current Subscription
- [iPadOS] App crashes when opening any session in Code tab (v1.260618.0) — main-thread stack overflow in SwiftUI
- API Error: 401 {"type":"error","error":{"type":"authenticati...
- [Bug] Auto-compact never triggers despite statusline reporting "100% context used" (v2.1.153, Max sub, 200K mode)
- Hard block on typing passwords breaks legitimate dev/test workflows - needs a permission-gated opt-in for own dev environments
- Claude Code ignores deny rules in .claude/settings.local.json - security vulnerability
- [BUG] claude setup-token/CLAUDE_CODE_OAUTH_TOKEN is not enough to authenticate claude
- [MODEL] Complex engineering behavior regression across sessions; request RCA and auditability guarantees
- [BUG]
- [Bug] Private marketplace clone fails with HTTPS authentication error
- While using it, API 401 errors appear. Even after I log out and log in, the same errors pop up.
- bypassPermissions mode now prompts on `cd DIR && grep …` when a Read() deny rule is configured (regression in 2.1.259)
- [Feature] Cowork desktop app: support host proxy settings (HTTP/HTTPS/NTLM) for enterprise network environments
- [BUG] Cloud/Cowork sessions: git proxy now blocks all pushes — "not in this session's authorized repository set"; PAT pass-through no longer works (CCR_TEST_GITPROXY rollout?)
- [BUG] I am not able to login through VSCode extension
- Fable 5 model behavior: 16 min of silent tool calls, then AskUserQuestion about never-shared findings during incident response
- Dispatch main conversation permanently offline despite working Cowork tasks
- [BUG] Dispatch-spawned Claude Code sessions ignore user's model and permission-mode settings — no way to change from mobile
- [BUG] Constantly Getting API Error: 500
- [MODEL] Measurable quality regression in Claude generation 5 (Fable 5 / Opus 5 / Sonnet 5): worse nonsense detection, ~2x verbosity, under-disclosed model fallback (Fable 5 → Opus 4.8) — reproducible measurements
- Sonnet 4.6 1M context unavailable on Max 20x plan - only Opus 1M appears in /model
- Support 1Password op:// secret references in settings.json env section
- Mobile Companion App for Remote Session Interaction
- Google Drive claude.ai connector not loading in VS Code extension despite being connected in claude.ai
- Notion plugin MCP server: persistent Internal Server Error after reinstall
- [BUG] Claude Code login times out after successful OAuth browser flow
- 🐛 Bug Report: Unable to log in to Claude Code CLI with Teams (organization) account
- [Bug] Authentication redirect loops to onboarding for existing account with active subscription
- [BUG] Cannot connect Remote GitHub MCP Server
- [BUG] Can't paste auth token into the CLI app, so can't auth.
- [FEATURE] Include `logo_uri` in Claude Code CIMD metadata document
- Feature: when login choose anthropic workspace
- [BUG] /login leads to invalid IP Address
- [BUG] macOS OAuth authentication succeeds but auth token not persisted - shows 'Missing API key' after successful login
- Feature Request: Separate parallelTasksCount for Planning and Execution Modes
- [BUG] Auth Flow Broken (Windows)
- [FEATURE] Support MCP server configuration in ~/.claude/settings.json (user-managed file)
- [BUG] # Issue: Misleading Cost Command Output in Claude Code
- [BUG] `AWS_BEARER_TOKEN_BEDROCK` auth broken in 2.1.92+ (regression from 2.1.91)
- [FEATURE] Disable reading ANTHROPIC_API_KEY from local `.env` files in the SDK
- [BUG] Claude account /login OAuth loop — state parameter dropped after "sign in again to continue" redirect
- Connect claude.ai Projects to Claude Code (VS Code / CLI)
- New 'native' installer: Bun/Zig hype train delivers 2010 anti-patterns: no version control, rollbacks, or professional package management
- /usage command incorrectly shows 'only available for subscription plans' for Pro subscribers
- [BUG] VS Code extension doesn't load Chrome browser tools in chat panel despite docs stating @browser should work (Linux)
- [BUG] CLAUDE OAUTH IS DOWN - FIX PLZ
- [BUG] Claude in Chrome MCP tools: "Navigation to this domain is not allowed" on all domains (v1.0.66)
- [Bug] Anthropic API Error: OAuth token missing user:profile scope
- [BUG] Claude Code - Persistent Logout & Configuration Loss Bug Report
- [BUG] Bedrock: Claude Opus 4.7 returns permission_error despite AUTHORIZED entitlement status