🤖 claude-code spills the user’s e-mail in User-Agent
In anthropics/claude-code: Bug Report: Privacy violation in User-Agent header #107757
I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the
User-Agentrequest header while conducting web searches without my permission. This should not be a setting with opt-out or opt-in behavior, it needs to be removed from the harness entirely. It is not for the good of anyone involved: it does nothing for services which dislike agentic traffic, does not preserve my anonymity on the web, and is a goldmine for scammers. I am migrating my company to Pi with OpenRouter since I have no faith in anthropic preserving my privacy.
The funniest comment:
Alternative explanation for this issue:
The email address went rogue and escaped the sandbox.