Authentication Settings

settings.json keys for authentication:

{
  "apiKeyHelper": "/bin/generate_temp_api_key.sh",
  "awsAuthRefresh": "aws sso login --profile myprofile",
  "awsCredentialExport": "/bin/generate_aws_grant.sh",
  "forceLoginMethod": "claudeai",
  "forceLoginOrgUUID": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
}

apiKeyHelper — custom shell script to generate a temporary API key. Value is sent as X-Api-Key and Authorization: Bearer headers.
awsAuthRefresh — script that modifies the .aws directory (e.g. SSO login).
awsCredentialExport — script that outputs JSON with AWS credentials.
forceLoginMethod — restrict login to Claude.ai accounts only ("claudeai" | "console").
forceLoginOrgUUID — auto-select this org UUID at login; requires forceLoginMethod to be set.