Claude Code put users’ emails in User-Agent headers

Anthropic says the next Claude Code release, expected early next week, strips the account email from the model’s context, after users found the model pasting it into headers of requests it wrote. If you pin the npm stable channel, still 2.1.311 on November 6, you have that email in context and no built-in check at all.

The stopgap cc-plugin-privacy mod runs in 2.1.317 and later, on by default. It reads only Bash, PowerShell and Monitor calls, so web tools, MCP tools and scripts written to disk pass, and some users report it loaded without firing on 2.1.317 and 2.1.318.

Open /plugins to confirm it’s enabled; a PreToolUse hook that exits with code 2 blocks any call holding your address.