What changed
Three log/transcript security fixes (credentials visible in redacted logs via zero-width spaces, percent-encoded Bearer tokens only partly masked, MCP error messages exposing credential values), one gateway billing bug (cache writes at wrong pricing tier), plus credential refresh fixes, parallel-tool-call session resume fix, API 400 fix for non-text tool return values, and VSCode bookmarks.
TL;DR
v2.1.286 patches three separate ways Claude Code was leaking credentials into logs and transcripts, fixes a gateway spending meter that underbilled prompt cache writes, and adds VSCode response bookmarks.
Developer signal
Three security items to review immediately:
- Zero-width-space credential leak in redacted logs/transcripts: Redacted logs and session transcripts included in feedback zip files were retaining secrets surrounded by invisible characters (U+200B zero-width spaces). If you have exported sessions or submitted feedback that included API keys, tokens, or passwords โ and your feedback zip was sent to Anthropic or stored elsewhere โ those secrets may have been readable despite appearing redacted. Update to v2.1.286 and audit any transcripts generated before this fix.
- Percent-encoded Bearer tokens only partly masked: Bearer tokens with percent-encoding (e.g., OAuth tokens containing
%2B, %2F) were only partially obscured in logs โ the unencoded portion after the last encoded character was visible. Affects anyone using MCP servers with OAuth-style auth tokens.
- MCP error messages exposing credential values: When an MCP server returned an error, the error message could include literal credential values if the token appeared before a key name in the error string (
Bearer <key>). Fixed: error messages now sanitize these patterns.
Additionally: the Claude apps gateway was pricing 1-hour prompt cache writes at the cheaper 5-minute rate, resulting in underbilling. This is now corrected โ gateway spend meters will show higher costs for cache writes going forward. Review your recent gateway billing if cost predictability matters.
New features: VSCode extension gains a bookmarks feature to save and revisit Claude's responses within a conversation; Claude Tag (Slack) can now set spend limits directly from a channel ID or Slack link.