Claude Code Sent Account Emails in User-Agent Headers: Anthropic Engineer Apologizes, 2.1.317 Adds a Privacy Mod, Next Release Removes Email From Model Context
GitHub issue #107757 (2026-11-05) reported that Claude Code put the signed-in account email into the User-Agent of web requests to third-party sites, which the reporter linked to a flood of scam emails; the issue drew 955 reactions and the HN thread hit 1,582 points. Lydia Hallie, who works on Claude Code, apologized on HN: the email was added to model context so @author tags would stop hallucinating names, and the next release (expected early next week) removes it. The interim fix is the built-in privacy mod on by default in 2.1.317+, whose own README calls it a courtesy, not a boundary.
Key Takeaways
- Cause (per an Anthropic engineer): the signed-in email sat in model context, and when the model wrote its own curl it used it as a User-Agent contact
- Reach: issue #107757 has 955 reactions and 103 comments; the HN thread reached 1,582 points and 506 comments
- Stopgap: from 2.1.317 (npm, Nov 2) the default-on cc-plugin-privacy mod refuses Bash/PowerShell calls that hold the email and name a User-Agent
- Gaps (per its README): WebFetch, WebSearch, MCP tools, scripts, variables and emails in URLs are not checked
- Status: stable is still 2.1.311 and latest is 2.1.319; the real fix needs the next release that drops email from context






