User says Claude Code sent their email out 10+ times
A Claude Code user reports that the tool hands Claude their email address, and that Claude then put it into outbound HTTP requests, one of them to the SEC by the user’s account. The “10+ times this month” figure comes from Claude’s own answer when the user asked, so this rests on one person’s report and the model’s description of itself.
The user says Claude Code’s instructions, which sit right next to the email, tell Claude not to share it without the user’s permission. “Why does Claude Code give Claude my email???” the post asks.
Up next
Claude Duet won’t share your card number even if you ask
“Too many requests teach people to tap through them,” Anthropic says, so it calibrated how often Claude Duet asks, yet payments always need a fresh approval. How many agent approval prompts a day would you read before tapping through?
Related stories
- Two Claude Code sessions ate 32% of a team’s bill
- Claude Code stores MCP OAuth tokens in plaintext on Linux
- Claude Code won’t type passwords, even in a test env
- Claude Code 2.1.309 closes sandbox and permission holes
- RuntimeWire: Claude Code puts staff bypass in Accept edits
- A file over 256KB let Claude Code Desktop leak your keys
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.