Anthropic 正式禁止使用订阅授权用于第三方用途。

Anthropic 正式禁止使用订阅授权用于第三方用途。
Anthropic officially bans using subscription auth for third party use

原始链接: https://code.claude.com/docs/en/legal-and-compliance

## Claude Code：法律与合规摘要本文档概述了使用Claude Code的法律和合规方面。您的使用受**商业条款**（团队、企业、Claude API）或**消费者服务条款**（免费、Pro、Max）管辖，具体取决于您的计划。现有的商业协议适用于Claude Code的使用，除非另有约定。 **合规性：** 对于已激活业务伙伴协议（BAA）和零数据保留（ZDR）的客户，BAA扩展到Claude Code的使用。所有使用还受Anthropic **使用政策**约束。 **身份验证至关重要：** 免费、Pro和Max计划仅对Claude Code和Claude.ai使用OAuth – 在其他地方使用这些令牌是被禁止的。使用Agent SDK或通过API构建的开发者*必须*使用API密钥。第三方开发者不能通过这些计划提供Claude.ai登录。 **安全性：** Anthropic优先考虑信任和安全，Trust Center & Transparency Hub中提供相关资源。应通过HackerOne报告安全漏洞。

## Claude OAuth 禁用总结 Anthropic 明确禁止在第三方应用程序中使用 Claude 免费、专业和 Max 计划的 OAuth 令牌。这意味着开发者**不能**允许用户使用他们的 Claude 凭据登录到他们的应用程序。该公司明确表示这违反了他们的服务条款。即使开发者没有使用他们*自己的*帐户进行转售，而是允许用户通过 OAuth 连接，此限制也适用。Anthropic 倾向于开发者使用按令牌使用量计费的 API 密钥，或云提供商集成。此举似乎直接针对像 OpenClaw 和 OpenCode 这样的项目，这些项目之前利用了 OAuth 登录。虽然像伪造请求这样的解决方法是可能的，但 Anthropic 保留执行禁令的权利，并且可能会在没有警告的情况下这样做。其他 LLM 提供商，如 OpenAI (ChatGPT)，*允许* OAuth 连接，而 Gemini 则不允许。

Legal agreements
License
Commercial agreements
Compliance
Healthcare compliance (BAA)
Usage policy
Acceptable use
Authentication and credential use
Security and trust
Trust and safety
Security vulnerability reporting

Legal agreements

License

Your use of Claude Code is subject to:

Commercial Terms - for Team, Enterprise, and Claude API users
Consumer Terms of Service - for Free, Pro, and Max users

Commercial agreements

Whether you’re using the Claude API directly (1P) or accessing it through AWS Bedrock or Google Vertex (3P), your existing commercial agreement will apply to Claude Code usage, unless we’ve mutually agreed otherwise.

Compliance

Healthcare compliance (BAA)

If a customer has a Business Associate Agreement (BAA) with us, and wants to use Claude Code, the BAA will automatically extend to cover Claude Code if the customer has executed a BAA and has Zero Data Retention (ZDR) activated. The BAA will be applicable to that customer’s API traffic flowing through Claude Code.

Usage policy

Acceptable use

Claude Code usage is subject to the Anthropic Usage Policy. Advertised usage limits for Pro and Max plans assume ordinary, individual usage of Claude Code and the Agent SDK.

Authentication and credential use

Claude Code authenticates with Anthropic’s servers using OAuth tokens or API keys. These authentication methods serve different purposes:

OAuth authentication (used with Free, Pro, and Max plans) is intended exclusively for Claude Code and Claude.ai. Using OAuth tokens obtained through Claude Free, Pro, or Max accounts in any other product, tool, or service — including the Agent SDK — is not permitted and constitutes a violation of the Consumer Terms of Service.
Developers building products or services that interact with Claude’s capabilities, including those using the Agent SDK, should use API key authentication through Claude Console or a supported cloud provider. Anthropic does not permit third-party developers to offer Claude.ai login or to route requests through Free, Pro, or Max plan credentials on behalf of their users.

Anthropic reserves the right to take measures to enforce these restrictions and may do so without prior notice. For questions about permitted authentication methods for your use case, please contact sales.

Security and trust

Trust and safety

You can find more information in the Anthropic Trust Center and Transparency Hub.

Security vulnerability reporting

Anthropic manages our security program through HackerOne. Use this form to report vulnerabilities.

⌘I