Fireship — Latent PoC (Script + Audio)

# Evidence Pack (Concise)

## Topic
Claude Code “subscription auth as API key” clampdown

## Anchors (short list)

- **search:BloopAI/vibe-kanban**
  - Created: 2026-01-18T21:00:49Z
  - URL: https://github.com/BloopAI/vibe-kanban/issues/2130
  - Title: Using opencode with Anthropic fails
  - Excerpt: Hi,
I'm trying to use opencode with the Anthropic API to use Claude Opus 4.5.
The model is set to `anthropic/claude-opus-4-5`.
It works well in opencode.

It fails with the following message in vibe-kanban:

<img width="865" height="397" alt="Image" src="https…
- **clawdbot/clawdbot#1189**
  - Created: 2026-01-18T18:28:25Z
  - URL: https://github.com/clawdbot/clawdbot/issues/1189
  - Title: [Bug]: OAuth returns Claude Code-restricted credentials instead of Claude Max subscription credentials                                             
  - Excerpt: ## Summary                                                                                                                                  
  OAuth flow returns Claude Code-restricted credentials instead of Claude Max subscription credentials                 …
- **search:clawdbot/clawdbot**
  - Created: 2026-01-18T18:28:25Z
  - URL: https://github.com/clawdbot/clawdbot/issues/1189
  - Title: [Bug]: OAuth returns Claude Code-restricted credentials instead of Claude Max subscription credentials                                             
  - Excerpt: ## Summary                                                                                                                                  
  OAuth flow returns Claude Code-restricted credentials instead of Claude Max subscription credentials                 …
- **Kilo-Org/kilocode#5038**
  - Created: 2026-01-14T17:48:45Z
  - URL: https://github.com/Kilo-Org/kilocode/issues/5038
  - Title: Claude Code Opus 4.5: it's the end
  - Excerpt: ### Plugin Type

VSCode Extension

### App Version

4.146.0

### Description

After OpenCode, Kilocode is also blocked by Anthropic for use with the Claude Code subscription. 

```
Date/time: 2026-01-14T17:35:20.997Z
Extension version: 4.146.0
Provider: claude…
- **search:Kilo-Org/kilocode**
  - Created: 2026-01-14T17:48:45Z
  - URL: https://github.com/Kilo-Org/kilocode/issues/5038
  - Title: Claude Code Opus 4.5: it's the end
  - Excerpt: ### Plugin Type

VSCode Extension

### App Version

4.146.0

### Description

After OpenCode, Kilocode is also blocked by Anthropic for use with the Claude Code subscription. 

```
Date/time: 2026-01-14T17:35:20.997Z
Extension version: 4.146.0
Provider: claude…
- **search:anomalyco/opencode-anthropic-auth**
  - Created: 2026-01-09T14:35:56Z
  - URL: https://github.com/anomalyco/opencode-anthropic-auth/issues/12
  - Title: The auth no longer works
  - Excerpt: It worked today but just stopped working :/ 

```This credential is only authorized for use with Claude Code and cannot be used for other API requests.```
- **anomalyco/opencode#7471**
  - Created: 2026-01-09T12:12:27Z
  - URL: https://github.com/anomalyco/opencode/issues/7471
  - Title: Claude Subscription is not working anymopre
  - Excerpt: ### Description

[*]
Claude Pro Log in with Anthropic to use your Claude Pro or Max account

This feature above is not working

This is the error message 
This credential is only authorized for use with Claude Code and cannot be used for other API requests

##…
- **search:anomalyco/opencode**
  - Created: 2026-01-09T12:12:27Z
  - URL: https://github.com/anomalyco/opencode/issues/7471
  - Title: Claude Subscription is not working anymopre
  - Excerpt: ### Description

[*]
Claude Pro Log in with Anthropic to use your Claude Pro or Max account

This feature above is not working

This is the error message 
This credential is only authorized for use with Claude Code and cannot be used for other API requests

##…
- **code-yeongyu/oh-my-opencode#626**
  - Created: 2026-01-09T11:21:22Z
  - URL: https://github.com/code-yeongyu/oh-my-opencode/issues/626
  - Title: [Bug] Anthropic Max Pro Credentials Failing (Total Block + Billing Fallback)
  - Excerpt: ## Description
I am encountering a critical issue where my Anthropic Max Pro subscription credentials are no longer being recognized.

The tool fails to use my subscription and instead falls back to the "Sisyphus" managed backend, which demands a separate paym…
- **search:code-yeongyu/oh-my-opencode**
  - Created: 2026-01-09T11:21:22Z
  - URL: https://github.com/code-yeongyu/oh-my-opencode/issues/626
  - Title: [Bug] Anthropic Max Pro Credentials Failing (Total Block + Billing Fallback)
  - Excerpt: ## Description
I am encountering a critical issue where my Anthropic Max Pro subscription credentials are no longer being recognized.

The tool fails to use my subscription and instead falls back to the "Sisyphus" managed backend, which demands a separate paym…
- **anomalyco/opencode#7456**
  - Created: 2026-01-09T10:02:04Z
  - URL: https://github.com/anomalyco/opencode/issues/7456
  - Title: fix: Claude Code API credentials
  - Excerpt: ### Question

 ## Problem

  When using Anthropic credentials from Claude Code (the official Anthropic CLI), OpenCode displays:

  > "This credential is only authorized for use with Claude Code and cannot be used for other API requests."

  This warning appear…
- **search:anomalyco/opencode**
  - Created: 2026-01-09T10:02:04Z
  - URL: https://github.com/anomalyco/opencode/issues/7456
  - Title: fix: Claude Code API credentials
  - Excerpt: ### Question

 ## Problem

  When using Anthropic credentials from Claude Code (the official Anthropic CLI), OpenCode displays:

  > "This credential is only authorized for use with Claude Code and cannot be used for other API requests."

  This warning appear…

(Plus 11 more anchors in evidence-pack.md / evidence-pack.json.)

## Repo scale (stars)

- **anomalyco/opencode** — 76649 stars
  - URL: https://github.com/anomalyco/opencode
- **anthropics/claude-code** — 57904 stars
  - URL: https://github.com/anthropics/claude-code
- **RooCodeInc/Roo-Code** — 21801 stars
  - URL: https://github.com/RooCodeInc/Roo-Code
- **Kilo-Org/kilocode** — 14193 stars
  - URL: https://github.com/Kilo-Org/kilocode
- **frankbria/ralph-claude-code** — 3743 stars
  - URL: https://github.com/frankbria/ralph-claude-code

## Allowed claims (strict)
- GitHub search shows this error string appearing across multiple issue threads (sampled 10; total_count=47).
- In 2025-09-23 → 2026-01-18, multiple GitHub issues were opened reporting a breakage of “Claude subscription / Claude Max” usage in third-party tools.
- The Roo Code issue text includes the exact error string: “This credential is only authorized for use with Claude Code and cannot be used for other API requests.”
- Some users describe using “Claude Code as an API Provider” and being on a Max plan (per the issue body).
- Some tools explicitly offered “Log in with Anthropic to use your Claude Pro or Max account” (as described in issue threads).
- Some developers reported OAuth returning Claude Code–restricted credentials (per the clawdbot/clawdbot issue).
- Some projects fell back to alternative billing backends after the breakage (per the oh-my-opencode issue).
- Repo metadata (stars, createdAt) is included for major tools involved (OpenCode, Roo Code, KiloCode, anthropics/claude-code).
- The Ralph repo describes an “autonomous AI development loop” with “rate limiting” and notes it is named after Ralph Wiggum via Geoffrey Huntley technique.
- Any competitor/xAI/Cursor angle must be treated as “reports say” and attributed to the paddo.dev post unless we obtain a primary receipt.

## Forbidden claims (auto-fail)
- Do not claim pricing/plan costs.
- Do not claim internal implementation details (cookies, whitelists, internal APIs, auth headers) unless a receipt explicitly states it.
- Do not claim “unlimited” usage unless a receipt explicitly states it.
- Do not assert timelines like “for months/weeks” unless a receipt provides it; otherwise mark [UNVERIFIED].

# Evidence Pack (Concise)

## Topic
Claude Code “subscription auth as API key” clampdown

## Anchors (short list)

- **search:BloopAI/vibe-kanban**
  - Created: 2026-01-18T21:00:49Z
  - URL: https://github.com/BloopAI/vibe-kanban/issues/2130
  - Title: Using opencode with Anthropic fails
  - Excerpt: Hi,
I'm trying to use opencode with the Anthropic API to use Claude Opus 4.5.
The model is set to `anthropic/claude-opus-4-5`.
It works well in opencode.

It fails with the following message in vibe-kanban:

<img width="865" height="397" alt="Image" src="https…
- **clawdbot/clawdbot#1189**
  - Created: 2026-01-18T18:28:25Z
  - URL: https://github.com/clawdbot/clawdbot/issues/1189
  - Title: [Bug]: OAuth returns Claude Code-restricted credentials instead of Claude Max subscription credentials                                             
  - Excerpt: ## Summary                                                                                                                                  
  OAuth flow returns Claude Code-restricted credentials instead of Claude Max subscription credentials                 …
- **search:clawdbot/clawdbot**
  - Created: 2026-01-18T18:28:25Z
  - URL: https://github.com/clawdbot/clawdbot/issues/1189
  - Title: [Bug]: OAuth returns Claude Code-restricted credentials instead of Claude Max subscription credentials                                             
  - Excerpt: ## Summary                                                                                                                                  
  OAuth flow returns Claude Code-restricted credentials instead of Claude Max subscription credentials                 …
- **Kilo-Org/kilocode#5038**
  - Created: 2026-01-14T17:48:45Z
  - URL: https://github.com/Kilo-Org/kilocode/issues/5038
  - Title: Claude Code Opus 4.5: it's the end
  - Excerpt: ### Plugin Type

VSCode Extension

### App Version

4.146.0

### Description

After OpenCode, Kilocode is also blocked by Anthropic for use with the Claude Code subscription. 

```
Date/time: 2026-01-14T17:35:20.997Z
Extension version: 4.146.0
Provider: claude…
- **search:Kilo-Org/kilocode**
  - Created: 2026-01-14T17:48:45Z
  - URL: https://github.com/Kilo-Org/kilocode/issues/5038
  - Title: Claude Code Opus 4.5: it's the end
  - Excerpt: ### Plugin Type

VSCode Extension

### App Version

4.146.0

### Description

After OpenCode, Kilocode is also blocked by Anthropic for use with the Claude Code subscription. 

```
Date/time: 2026-01-14T17:35:20.997Z
Extension version: 4.146.0
Provider: claude…
- **search:anomalyco/opencode-anthropic-auth**
  - Created: 2026-01-09T14:35:56Z
  - URL: https://github.com/anomalyco/opencode-anthropic-auth/issues/12
  - Title: The auth no longer works
  - Excerpt: It worked today but just stopped working :/ 

```This credential is only authorized for use with Claude Code and cannot be used for other API requests.```
- **anomalyco/opencode#7471**
  - Created: 2026-01-09T12:12:27Z
  - URL: https://github.com/anomalyco/opencode/issues/7471
  - Title: Claude Subscription is not working anymopre
  - Excerpt: ### Description

[*]
Claude Pro Log in with Anthropic to use your Claude Pro or Max account

This feature above is not working

This is the error message 
This credential is only authorized for use with Claude Code and cannot be used for other API requests

##…
- **search:anomalyco/opencode**
  - Created: 2026-01-09T12:12:27Z
  - URL: https://github.com/anomalyco/opencode/issues/7471
  - Title: Claude Subscription is not working anymopre
  - Excerpt: ### Description

[*]
Claude Pro Log in with Anthropic to use your Claude Pro or Max account

This feature above is not working

This is the error message 
This credential is only authorized for use with Claude Code and cannot be used for other API requests

##…
- **code-yeongyu/oh-my-opencode#626**
  - Created: 2026-01-09T11:21:22Z
  - URL: https://github.com/code-yeongyu/oh-my-opencode/issues/626
  - Title: [Bug] Anthropic Max Pro Credentials Failing (Total Block + Billing Fallback)
  - Excerpt: ## Description
I am encountering a critical issue where my Anthropic Max Pro subscription credentials are no longer being recognized.

The tool fails to use my subscription and instead falls back to the "Sisyphus" managed backend, which demands a separate paym…
- **search:code-yeongyu/oh-my-opencode**
  - Created: 2026-01-09T11:21:22Z
  - URL: https://github.com/code-yeongyu/oh-my-opencode/issues/626
  - Title: [Bug] Anthropic Max Pro Credentials Failing (Total Block + Billing Fallback)
  - Excerpt: ## Description
I am encountering a critical issue where my Anthropic Max Pro subscription credentials are no longer being recognized.

The tool fails to use my subscription and instead falls back to the "Sisyphus" managed backend, which demands a separate paym…
- **anomalyco/opencode#7456**
  - Created: 2026-01-09T10:02:04Z
  - URL: https://github.com/anomalyco/opencode/issues/7456
  - Title: fix: Claude Code API credentials
  - Excerpt: ### Question

 ## Problem

  When using Anthropic credentials from Claude Code (the official Anthropic CLI), OpenCode displays:

  > "This credential is only authorized for use with Claude Code and cannot be used for other API requests."

  This warning appear…
- **search:anomalyco/opencode**
  - Created: 2026-01-09T10:02:04Z
  - URL: https://github.com/anomalyco/opencode/issues/7456
  - Title: fix: Claude Code API credentials
  - Excerpt: ### Question

 ## Problem

  When using Anthropic credentials from Claude Code (the official Anthropic CLI), OpenCode displays:

  > "This credential is only authorized for use with Claude Code and cannot be used for other API requests."

  This warning appear…

(Plus 11 more anchors in evidence-pack.md / evidence-pack.json.)

## Repo scale (stars)

- **anomalyco/opencode** — 76649 stars
  - URL: https://github.com/anomalyco/opencode
- **anthropics/claude-code** — 57904 stars
  - URL: https://github.com/anthropics/claude-code
- **RooCodeInc/Roo-Code** — 21801 stars
  - URL: https://github.com/RooCodeInc/Roo-Code
- **Kilo-Org/kilocode** — 14193 stars
  - URL: https://github.com/Kilo-Org/kilocode
- **frankbria/ralph-claude-code** — 3743 stars
  - URL: https://github.com/frankbria/ralph-claude-code

## Allowed claims (strict)
- GitHub search shows this error string appearing across multiple issue threads (sampled 10; total_count=47).
- In 2025-09-23 → 2026-01-18, multiple GitHub issues were opened reporting a breakage of “Claude subscription / Claude Max” usage in third-party tools.
- The Roo Code issue text includes the exact error string: “This credential is only authorized for use with Claude Code and cannot be used for other API requests.”
- Some users describe using “Claude Code as an API Provider” and being on a Max plan (per the issue body).
- Some tools explicitly offered “Log in with Anthropic to use your Claude Pro or Max account” (as described in issue threads).
- Some developers reported OAuth returning Claude Code–restricted credentials (per the clawdbot/clawdbot issue).
- Some projects fell back to alternative billing backends after the breakage (per the oh-my-opencode issue).
- Repo metadata (stars, createdAt) is included for major tools involved (OpenCode, Roo Code, KiloCode, anthropics/claude-code).
- The Ralph repo describes an “autonomous AI development loop” with “rate limiting” and notes it is named after Ralph Wiggum via Geoffrey Huntley technique.
- Any competitor/xAI/Cursor angle must be treated as “reports say” and attributed to the paddo.dev post unless we obtain a primary receipt.

## Forbidden claims (auto-fail)
- Do not claim pricing/plan costs.
- Do not claim internal implementation details (cookies, whitelists, internal APIs, auth headers) unless a receipt explicitly states it.
- Do not claim “unlimited” usage unless a receipt explicitly states it.
- Do not assert timelines like “for months/weeks” unless a receipt provides it; otherwise mark [UNVERIFIED].

# External receipts (non-GitHub)

Use these as “tea” / context beats and on-screen sources. Treat reporting as secondary unless it contains direct quotes from Anthropic staff.

## Anthropic / Claude Code staff comment (X)

- Thariq Shihipar (Anthropic, Claude Code) posted about tightening safeguards and subscription usage in third-party harnesses:
  - https://w.twstalker.com/kcosr/status/2009695099983180026

Key excerpt (keep short on-screen):
- “tightened our safeguards against spoofing the Claude Code harness”
- “Third party integrations that rely on Claude subscriptions violate our ToS”
- “Please use the API for integrations”

## Reddit (user reactions + timeline)

- r/opencodeCLI: “Anthropic blocks OpenCode from using Claude Max?” (Jan 9, 2026)
  - https://www.reddit.com/r/opencodeCLI/comments/1kvcwwe/anthropic_blocks_opencode_from_using_claude_max/

- r/opencodeCLI: “Anthropic did not ban OpenCode (update)” (Jan 10, 2026)
  - https://www.reddit.com/r/opencodeCLI/comments/1kvhpyg/anthropic_did_not_ban_opencode_update/

Useful quote (on-screen, short): “Our bans were a mistake, we are going through and reversing them.” (from the update post content)

## Reporting / context (secondary)

- VentureBeat: “Anthropic cracks down on unauthorized Claude usage by third-party harnesses…” (Jan 9, 2026)
  - https://venturebeat.com/technology/anthropic-cracks-down-on-unauthorized-claude-usage-by-third-party-harnesses/

Notes:
- Contains the “spoofing harness” framing and cites Thariq’s X post.
- Also includes competitor / xAI / Cursor claims; treat as reporting, not primary, unless we find direct receipts.

# Claude Code just walled off your subscription.

Mid‑task.

Max plan.

And then this line shows up and murders your workflow:

(ON SCREEN: `RooCodeInc/Roo-Code#10566` — timestamp + excerpt)

> “This credential is only authorized for use with Claude Code and cannot be used for other API requests.”

[PAUSE_250]

That’s not a bug.

That’s a boundary.

**A subscription is not an API contract.**

(ON SCREEN: thesis on black — hold)

[PAUSE_250]

## The “loophole” everyone loved

A bunch of third‑party coding tools had the most tempting button in AI:

(ON SCREEN: `anomalyco/opencode#7471` — “Log in with Anthropic to use your Claude Pro or Max account”)

No API key.

No billing setup.

Just OAuth… and Opus inside your editor.

And yes—people went full gremlin mode with it.

(ON SCREEN: `frankbria/ralph-claude-code` — “Autonomous AI development loop”)

And the ecosystem around this stuff is huge.

(ON SCREEN: OpenCode repo — stars)

Per GitHub, OpenCode has **76,555** stars.

If that’s not “viral”… it’s at least *very online*.

[PAUSE_250]

## Then it face‑planted

Starting January 9, 2026, issues started popping up across projects: OpenCode, Roo Code, oh‑my‑opencode… then Kilo Code on January 14.

(ON SCREEN: `anomalyco/opencode#7471`, `Kilo-Org/kilocode#5038`, `code-yeongyu/oh-my-opencode#626`, `RooCodeInc/Roo-Code#10566`)

Same sentence.

Same brick wall.

And GitHub search for that exact sentence shows **total_count=47** as of January 18, 2026.

(ON SCREEN: “exact sentence” search → total_count=47)

[PAUSE_250]

## Why the error matches the behavior

Here’s the technical “aha” — and it’s the whole story.

(ON SCREEN: `clawdbot/clawdbot#1189`)

Some developers report OAuth returning **Claude Code‑restricted credentials** instead of “Max subscription credentials.”

Translation:

The credential is valid…

but scoped.

Valid for Claude Code.

Not valid for “other API requests.”

So when a third‑party tool tries to use it like an API key, the server rejects it.

That’s why the wording matches perfectly.

And it also explains the “before / after”.

For a while, the credential apparently worked more broadly in third‑party tools… then the safeguards got tightened and the scope started getting enforced.

[PAUSE_250]

## The sting

Because people didn’t just lose convenience.

They lost the assumption that “I pay for this, therefore it works everywhere.”

(ON SCREEN: `code-yeongyu/oh-my-opencode#626` — highlight the excerpt)

One report says the tool fails to use the subscription… then falls back to a managed backend — which “demands a separate payment.”

That’s the moment you feel it in your stomach.

[PAUSE_250]

## Anthropic basically said: “stop doing that”

This part is the spiciest, because it’s not subtle.

(ON SCREEN: Thariq Shihipar’s post + highlighted lines)

Claude Code’s Thariq Shihipar said they “tightened” safeguards against **spoofing the Claude Code harness**… and that third‑party integrations relying on Claude subscriptions violate their ToS.

And the punchline:

“Please use the API for integrations.”

[PAUSE_250]

Also: Reddit did the full panic‑cycle.

(ON SCREEN: r/opencodeCLI post titles — “Anthropic blocks OpenCode…” → “update: not banned”)

There’s even an update claiming some bans were a mistake and got reversed.

Whether the restriction persists for everyone right now is [UNVERIFIED] — but the policy statement is clear.

[PAUSE_250]

## What to do Monday morning

BYOK. Real API keys for third‑party tools.

Route and fallback if your tool supports it.

Or use Claude Code itself — because that’s explicitly what this credential is authorized for.

[PAUSE_250]

Because the rule is simple:

**A subscription is not an API contract.**

# When Your Claude Subscription Became a Walled Garden

In October 2024, Anthropic launched Claude Code—a developer-focused CLI that let you pipe your Max subscription into any workflow. Within weeks, open-source tooling sprung up to use those credentials elsewhere. By January 2026, that party was over.

## The Adoption Phase

Third-party tools like OpenCode, Roo Code, and KiloCode started advertising "Log in with Anthropic to use your Claude Pro or Max account" as a feature. Developers authenticated once and unlocked Claude models across VSCode extensions, autonomous coding loops, and proxy layers. The convenience was obvious: one subscription, infinite integrations.

OpenCode—sitting at 37,000 GitHub stars—became the poster child. Created in March 2024, it grew into a VSCode extension that treated your Claude credentials as a universal API key. Roo Code followed a similar path. Even niche projects like Ralph, an "autonomous AI development loop" named after Ralph Wiggum, assumed this OAuth flow would just work.

## The Clampdown

On January 9th, 2026, the error message appeared: `This credential is only authorized for use with Claude Code and cannot be used for other API requests.` **anomalyco/opencode#7471** reported it first—users hitting a hard block when trying to authenticate. **code-yeongyu/oh-my-opencode#626** described the fallout: credentials rejected, tools falling back to separate paid backends. By January 14th, **Kilo-Org/kilocode#5038** confirmed KiloCode was blocked too, noting "After OpenCode, KiloCode is also blocked by Anthropic."

GitHub search reveals 46 issues containing that exact error string across 10+ repositories. The pattern was consistent: OAuth flows that previously returned Max subscription credentials now returned Claude Code–scoped tokens with restricted permissions. **clawdbot/clawdbot#1189** documented the technical shift—OAuth returning "Claude Code-restricted credentials instead of Claude Max subscription credentials." Some developers tried header manipulation; **BerriAI/litellm#19017** requested an option to override the default `User-Agent` header to avoid blocks.

## The Fallout

For tools relying on this OAuth pattern, the change was existential. OpenCode's **#7456** attempted a fix but couldn't bypass the credential scope enforcement. oh-my-opencode fell back to its "Sisyphus" managed backend, which required separate payment. Some projects went dark.

The irony: Claude Code itself remained a best-in-class developer tool. The issue wasn't functionality—it was that credentials provisioned for Claude Code could no longer escape its sandbox. What looked like an open API surface turned out to have invisible walls.

Reports from paddo.dev claimed competitive dynamics at play, but without primary receipts, those remain speculation. What's undisputed: a GitHub search on that error string tells the story of an ecosystem built on implicit permissions that evaporated overnight.

## The Takeaway

If you're building on third-party credentials, assume the terms of service are a moving target. OAuth scopes can tighten. API surfaces can wall off. The real question isn't whether your integration works today—it's whether you have a fallback when the vendor decides it shouldn't.