# Claude Code user reports email leak in User-Agent header

Digest AI · Agents & Tools · published 2026-11-05T22:17:15Z

Canonical: https://digestai.news/story/claude-code-user-reports-email-leak-in-user-agent-header

## Summary

A user filed a bug report on GitHub alleging that Anthropic's Claude Code tool leaks their email address to third-party websites. The report claims that during web searches, the tool includes the user's email in the User-Agent request header without explicit permission. The user states this behavior has resulted in receiving dozens of scam emails daily and argues the feature should be removed entirely rather than made optional. They cite a lack of faith in Anthropic's privacy practices and say they are migrating their company to Pi with OpenRouter. The report includes environment details such as the platform (darwin) and version (2.1.318). This is a single user report and has not been independently verified by Anthropic or other sources.

## Key points

- User claims Claude Code sends email address in User-Agent header during web searches.
- Report states this caused dozens of scam emails and led to user leaving for Pi.
- Bug report filed on GitHub with version 2.1.318 on darwin platform.

## Why it matters

If verified, this represents a significant privacy vulnerability in a popular AI coding tool, potentially exposing user identities to scammers and undermining trust in agentic AI tools.

## Sources

1. [Claude Code sends your email address to websites](https://github.com/anthropics/claude-code/issues/107757) (github.com, 2026-11-05, primary source)

Part of the developing story: [Anthropic Navigates Claude Feature Rollouts and Security Concerns](https://digestai.news/thread/anthropic-launches-claude-duet-a-proactive-ai-assistant-for-us-paid-users) (4 stories)

## Cite

Digest AI, "Claude Code user reports email leak in User-Agent header", 5 November 2026, https://digestai.news/story/claude-code-user-reports-email-leak-in-user-agent-header

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/claude-code-user-reports-email-leak-in-user-agent-header.json