Claude Code cloud sessions now set up a repo’s environment themselves and store API keys Claude cannot see
Confirmed
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- 2 of 5
- Last verified
- 8 November 2026
Your AI and this story
- GPT-6 Astra190 days after its cutoff
- Claude Opus 5.5129 days after its cutoff
- Gemini 4 Argon220 days after its cutoff
- Grok 4.7159 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 129 days before it.
Key facts
- Plans: Pro, Max and Ultra
- Environment saved for reuse across sessions
- Announcement: @ClaudeDevs, ~640k views
- Same week: Apiiro reported 1,122 public GitHub files exposing passwords via Claude Code’s ‘Don’t ask again’ permission settings (HN 434 pts)
What happened
Announced only on X. Quote: “API keys are saved securely, so Claude never sees them.”
Sources
2 sources from 2 sites. Numbers match the chips in the text.
2 sources: 1 primary, 1 press
Primary
- ClaudeDevs on Xx.com, official
Press
- Apiiro: coding agents leaking secrets via ‘Don’t Ask Again’apiiro.com, press
Changes
- Filed