# Claude Code put a user's email in User-Agent headers — a bug report

> A GitHub issue says Claude Code leaked a user's email to the websites it fetched, and the user blames it for daily scam emails.

- Org: Anthropic
- Date: 2026-11-05
- Category: security
- Source: https://github.com/anthropics/claude-code/issues/107757
- Canonical page: https://ai-tldr.dev/releases/claude-code-email-in-user-agent-report/

## In short

A Claude Code 2.1.318 user reports that the agent sent their email address to third-party sites in the User-Agent header during web searches. A reply points to a built-in privacy mod in 2.1.317 and later. The issue is still open.

## What it is

GitHub issue #107757, opened on 5 November 2026 by taylor-edwards, reports that Claude Code 2.1.318 on macOS sent the user's email address to arbitrary third parties in the User-Agent request header while it searched the web. The reporter says they now get dozens of scam emails a day and asks for the behaviour to be removed entirely, not made a setting.

## How it works

The report does not show the raw header or a reproduction. In the Hacker News thread, commenters say the login email sits in Claude Code's system prompt, so the model can choose to add it to a curl User-Agent; others posted headers with names and repo URLs, while one user saw only the default 'Claude-User (claude-code/2.1.318 ...)' string. Release 2.1.317 added a check that asks before a web or shell tool call sends the account email to the network.

## Why it matters

Anything in an agent's context can end up in its network requests, so an email in the system prompt can reach every site the agent visits. A reply on the issue says a built-in mod called cc-plugin-privacy blocks this in 2.1.317 and later and can be turned off in /plugins, but the reporter was already on 2.1.318.

## Who it's for

Claude Code users who let the agent fetch web pages or run curl

## Links

- [GitHub Issue](https://github.com/anthropics/claude-code/issues/107757)
- [HN Discussion](https://news.ycombinator.com/item?id=50385272)
- [2.1.317 Release Notes](https://github.com/anthropics/claude-code/releases/tag/v2.1.317)