Claude Code is facing serious allegations of embedding hidden spyware-like mechanisms to monitor users linked to China by injecting covert metadata into prompt messages. The accusations claim that Claude Code identifies custom routes directed through proxy servers—specifically those using the non-default ANTHROPIC_BASE_URL setting—and surreptitiously tags routing details, such as timezones and proxy information, without user awareness. This functionality raises concerns, as users employ proxies to navigate access limitations imposed by Anthropic, which restricts direct connections from certain regions. Given that Claude Code operates as an autonomous coding agent with significant permissions, the potential for hidden metadata injection represents a significant breach of user trust, far exceeding typical tracking practices associated with standard chatbots.

Anthropic: Anthropic is an AI company that develops the Claude family of large language models and related tools. The news directly accuses Anthropic of embedding undisclosed fingerprinting mechanisms in its Claude Code product to detect and tag China-linked custom proxy routes.
Claude Code: Claude Code is an Anthropic-developed AI coding agent capable of reading files, editing code, and running commands with user permissions. According to the news, the tool allegedly inspects non-default ANTHROPIC_BASE_URL settings for China-linked gateways and injects invisible signals into prompts without user visibility.
IntCyberDigest: IntCyberDigest is an X account and publication covering cybersecurity and technology developments. It originated the breaking claim in the news alleging that Claude Code covertly transmits routing and connection metadata via system prompts.

Access Limitations: Anthropic restricts direct access from certain regions, prompting some users to employ proxies that the alleged mechanism is designed to identify.
Agent Capabilities: Claude Code functions as an autonomous coding agent with file system and command execution access, making any hidden metadata injection more sensitive than typical chatbot tracking.
Proxy Configuration: Users set custom ANTHROPIC_BASE_URL values to route Claude Code requests through intermediate servers or gateways before reaching Anthropic.