Claude Code put account emails in web requests' User-Agent; Anthropic shipped a guard module Nov. 5 but calls it a stopgap

An issue spread among developers saying Anthropic's coding agent Claude Code sent the signed-in account's email address in the User-Agent header of requests to outside websites.

According to a DEV Community post, GitHub issue 107757 was filed at 10:13 p.m. on Nov. 5: Claude Code's web tools put the account email in request headers to arbitrary third-party sites. The reporter claimed to get dozens of scam emails a day. The post said issue 81138, filed July 25, about the same email being injected into every session's system prompt, was still unfixed.

An Anthropic staff member replied the same day that a built-in module, cc-plugin-privacy, in v2.1.317 and later "deterministically blocks this behavior." It is on by default and can be toggled in /plugins. A Claude Code team member called it a stopgap: it misses the address in URLs, request bodies, curl -u or From: headers, and cases where Claude writes and runs its own script. Reports also said the leak still appeared on 2.1.318, and that the module was missing from /plugins for one user.

Anthropic said it is "removing the account email address from the context Claude Code gives the model," in a release expected early next week. As of Nov. 6 the stable channel still served 2.1.311, which lacks the guard. A summary post reached r/ClaudeCode's daily top posts. To check: run claude --version for 2.1.317 or later, and look for cc-plugin-privacy in /plugins.