Anime, manga, and games, with a take · A Yukimedia publication

Claude Code Email Address Report Repeats a July Complaint

A GitHub issue filed on November 5, 2026 by user taylor-edwards says Claude Code put an email address into the User-Agent header of requests to external sites.

Reporting from 1 source: GIGAZINE.

Why it matters

The November 5 issue restates a complaint filed on July 17 and logged again in August, so attention falls on Anthropic's handling of a roughly four-month-old report rather than on new evidence.

Claude Code Email Address Report Repeats a July Complaint

Key Facts

  • GitHub user taylor-edwards filed issue 107757 against anthropics/claude-code on November 5, 2026, alleging email addresses were sent to third parties in the User-Agent header.
  • A similar complaint about an email address used as a User-Agent was filed on GitHub on July 17, 2026 under issue 78431.
  • Logs posted on August 11 showed an email address inside the User-Agent on curl calls to an external site's API, five times in a one-hour session.
  • Engineer Chris Rackin found Claude Code sent his email address externally more than 10 times in one month, including to the U.S. Securities and Exchange Commission.
  • Developer Simon Willison stated that sending email addresses externally without explicit user confirmation is unacceptable.

The same complaint was filed on July 17, 2026, and logs posted on August 11 recorded the behavior five times in a one-hour session. Engineer Chris Rackin counted more than 10 transmissions in a month, including to the U.S. Securities and Exchange Commission.

Issue 107757 was filed on November 5, 2026 by GitHub user taylor-edwards, who argued that a settings toggle is not enough and that the mechanism sending the information should be removed. The same account reported receiving dozens of scam emails a day, with no confirmation that Claude Code caused the increase.

The behavior was already on record. Logs posted on August 11 showed an email address inside the User-Agent of curl calls to an external site's API, five times in a one-hour session. A Hacker News post around October 30 raised both the email carried in instructions to the AI and the forwarding of that information outward. One user described a User-Agent that carried a name, employer, team name and project repository.

Written with AI by Yomimono from the 1 cited source below, including Japanese-language reporting where cited. See our editorial policy.

Add Yomimono as a preferred source on Google

Sources