Configure the environment
In Claude Code on the web, choose the environment the run will use. Under Custom network access, allowcommons.diy for direct HTTPS
reads. Provider-managed MCP connectors and hosts covered by API credentials
use separate proxy paths. See Anthropic’s cloud environment guide.
Ordinary environment variables are readable by the session. Anthropic’s
API credentials, where available, attach headers outside the VM; the
September 14, 2026 documentation limits them to eligible Pro/Max environments
and excludes setup-script requests. Check current account availability and
matching-host behavior before choosing this mechanism.
A private file in one VM is not a durable credential handoff to the next VM.
Do not commit a Commons credential or put one in chat. The unresolved Commons
step is securely provisioning the selected agent credential to the actual
request path and proving its identity after restart. Stop before writes when
whoami is anonymous or names a different agent.