{"slug":"use-claude-code-with-aperture","title":"Use Claude Code with Aperture","tags":["tailscale"],"agent_summary":"Last validated: Apr 9, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Use Claude Code with Aperture\r\n\r\nLast validated: Apr 9, 2026\r\n\r\nAperture by Tailscaleis currently [in alpha](https://tailscale.com/docs/reference/tailscale-release-stages#alpha).\r\n\r\nConfigure [Claude Code](https://docs.anthropic.com/en/docs/claude-code) to send requests through [Aperture by Tailscale](https://tailscale.com/docs/aperture) so your organization gets centralized API key management, usage tracking, and session logging.\r\n\r\n## [Prerequisites](https://tailscale.com/docs/aperture/how-to/use-claude-code\\#prerequisites)\r\n\r\nBefore you begin, you need:\r\n\r\n- An Aperture instance with at least one configured AI provider (such as Anthropic), accessible from your device. Refer to [get started with Aperture](https://tailscale.com/docs/aperture/get-started) if you have not set this up.\r\n- The Aperture host URL (default: `http://ai`) accessible from your device. Use `http://`, not `https://`.\r\n- [Claude Code](https://docs.anthropic.com/en/docs/claude-code) installed on your device.\r\n\r\nTo avoid unexpected TLS issues, use `http://` for the Aperture URL when configuring LLM clients. All connections remain encrypted using WireGuard, even when HTTPS is not used.\r\n\r\nAperture routes requests based on the model name, not the LLM client. Any LLM client configured to use Aperture can access any provider your admin has set up. Refer to the [provider compatibility reference](https://tailscale.com/docs/aperture/provider-compatibility) for the full list of supported providers and API formats.\r\n\r\n## [Configure Claude Code](https://tailscale.com/docs/aperture/how-to/use-claude-code\\#configure-claude-code)\r\n\r\nTo configure Claude Code to use Aperture, create or edit the global Claude Code settings file (`~/.claude/settings.json`) to use the Aperture URL as the `ANTHROPIC_BASE_URL`. The following example includes some additional recommended settings:\r\n\r\n```json\r\n{\r\n \"apiKeyHelper\": \"echo '-'\",\r\n \"env\": {\r\n \"ANTHROPIC_BASE_URL\": \"http://ai\"\r\n }\r\n}\r\n```\r\n\r\nThe `apiKeyHelper` setting returns a placeholder value because Aperture injects credentials automatically. You do not need to configure an API key on the client.\r\n\r\nYou can also configure Claude Code using environment variables instead of a settings file. Set the following environment variables:\r\n\r\n```shell\r\nexport ANTHROPIC_BASE_URL=\"http://ai\"\r\n```\r\n\r\nClaude Code v1.x requires additional configuration because the `apiKeyHelper` setting does not exist in earlier versions. You must provide a placeholder authentication token and explicitly specify the model.\r\n\r\n```json\r\n{\r\n \"model\": \"claude-sonnet-4-5\",\r\n \"env\": {\r\n \"ANTHROPIC_AUTH_TOKEN\": \"bearer-managed\",\r\n \"ANTHROPIC_BASE_URL\": \"http://ai\"\r\n }\r\n}\r\n```\r\n\r\n### [Claude Code with Amazon Bedrock](https://tailscale.com/docs/aperture/how-to/use-claude-code\\#claude-code-with-amazon-bedrock)\r\n\r\nIf your Aperture instance routes through Amazon Bedrock, add the following to your `settings.json` instead of the default configuration:\r\n\r\n```json\r\n{\r\n \"env\": {\r\n \"ANTHROPIC_MODEL\": \"claude-sonnet-4-5\",\r\n \"ANTHROPIC_BEDROCK_BASE_URL\": \"http://ai/bedrock\",\r\n \"CLAUDE_CODE_USE_BEDROCK\": \"1\",\r\n \"CLAUDE_CODE_SKIP_BEDROCK_AUTH\": \"1\"\r\n }\r\n}\r\n```\r\n\r\nIf you use Claude Code in VS Code with Bedrock, also add `\"claudeCode.disableLoginPrompt\": true` to your VS Code user settings JSON (open the **Command Palette** and select **Preferences: Open User Settings (JSON)**).\r\n\r\n### [Claude Code with Vertex AI](https://tailscale.com/docs/aperture/how-to/use-claude-code\\#claude-code-with-vertex-ai)\r\n\r\nIf your Aperture instance routes through Vertex AI, add the following to your `settings.json` instead of the default configuration. Replace `YOUR_PROJECT_ID` with your Google Cloud project ID.\r\n\r\n```json\r\n{\r\n \"env\": {\r\n \"CLOUD_ML_REGION\": \"global\",\r\n \"ANTHROPIC_VERTEX_PROJECT_ID\": \"YOUR_PROJECT_ID\",\r\n \"CLAUDE_CODE_USE_VERTEX\": \"1\",\r\n \"CLAUDE_CODE_SKIP_VERTEX_AUTH\": \"1\",\r\n \"ANTHROPIC_VERTEX_BASE_URL\": \"http://ai/v1\"\r\n }\r\n}\r\n```\r\n\r\nIf you use Claude Code in VS Code with Vertex, also add `\"claudeCode.disableLoginPrompt\": true` to your VS Code user settings JSON (open the **Command Palette** and select **Preferences: Open User Settings (JSON)**).\r\n\r\n## [Verify the connection](https://tailscale.com/docs/aperture/how-to/use-claude-code\\#verify-the-connection)\r\n\r\n1. Send a test message in Claude Code.\r\n2. Open the Aperture dashboard at `http://ai/ui/` and confirm the request appears on the **Logs** page.\r\n\r\nIf the request does not appear, refer to the [Aperture troubleshooting guide](https://tailscale.com/docs/aperture/troubleshooting).\r\n\r\n## [Next steps](https://tailscale.com/docs/aperture/how-to/use-claude-code\\#next-steps)\r\n\r\n- [Grant model access to users](https://tailscale.com/docs/aperture/how-to/grant-model-access): Control which models each user or group can access through Aperture.\r\n- [View your usage dashboards](https://tailscale.com/docs/aperture/reference/dashboard): Monitor token consumption, costs, and session activity across your organization.\r\n- [Set per-user spending limits](https://tailscale.com/docs/aperture/how-to/set-per-user-spending-limits): Configure quota buckets to control costs for individual users.\r\n","html":"

Use Claude Code with Aperture

\n

Last validated: Apr 9, 2026

\n

Aperture by Tailscaleis currently in alpha.

\n

Configure Claude Code to send requests through Aperture by Tailscale so your organization gets centralized API key management, usage tracking, and session logging.

\n

Prerequisites

\n

Before you begin, you need:

\n\n

To avoid unexpected TLS issues, use http:// for the Aperture URL when configuring LLM clients. All connections remain encrypted using WireGuard, even when HTTPS is not used.

\n

Aperture routes requests based on the model name, not the LLM client. Any LLM client configured to use Aperture can access any provider your admin has set up. Refer to the provider compatibility reference for the full list of supported providers and API formats.

\n

Configure Claude Code

\n

To configure Claude Code to use Aperture, create or edit the global Claude Code settings file (~/.claude/settings.json) to use the Aperture URL as the ANTHROPIC_BASE_URL. The following example includes some additional recommended settings:

\n
{\r\n  \"apiKeyHelper\": \"echo '-'\",\r\n  \"env\": {\r\n    \"ANTHROPIC_BASE_URL\": \"http://ai\"\r\n  }\r\n}\n
\n

The apiKeyHelper setting returns a placeholder value because Aperture injects credentials automatically. You do not need to configure an API key on the client.

\n

You can also configure Claude Code using environment variables instead of a settings file. Set the following environment variables:

\n
export ANTHROPIC_BASE_URL=\"http://ai\"\n
\n

Claude Code v1.x requires additional configuration because the apiKeyHelper setting does not exist in earlier versions. You must provide a placeholder authentication token and explicitly specify the model.

\n
{\r\n \"model\": \"claude-sonnet-4-5\",\r\n \"env\": {\r\n  \"ANTHROPIC_AUTH_TOKEN\": \"bearer-managed\",\r\n  \"ANTHROPIC_BASE_URL\": \"http://ai\"\r\n }\r\n}\n
\n

Claude Code with Amazon Bedrock

\n

If your Aperture instance routes through Amazon Bedrock, add the following to your settings.json instead of the default configuration:

\n
{\r\n  \"env\": {\r\n    \"ANTHROPIC_MODEL\": \"claude-sonnet-4-5\",\r\n    \"ANTHROPIC_BEDROCK_BASE_URL\": \"http://ai/bedrock\",\r\n    \"CLAUDE_CODE_USE_BEDROCK\": \"1\",\r\n    \"CLAUDE_CODE_SKIP_BEDROCK_AUTH\": \"1\"\r\n  }\r\n}\n
\n

If you use Claude Code in VS Code with Bedrock, also add \"claudeCode.disableLoginPrompt\": true to your VS Code user settings JSON (open the Command Palette and select Preferences: Open User Settings (JSON)).

\n

Claude Code with Vertex AI

\n

If your Aperture instance routes through Vertex AI, add the following to your settings.json instead of the default configuration. Replace YOUR_PROJECT_ID with your Google Cloud project ID.

\n
{\r\n  \"env\": {\r\n    \"CLOUD_ML_REGION\": \"global\",\r\n    \"ANTHROPIC_VERTEX_PROJECT_ID\": \"YOUR_PROJECT_ID\",\r\n    \"CLAUDE_CODE_USE_VERTEX\": \"1\",\r\n    \"CLAUDE_CODE_SKIP_VERTEX_AUTH\": \"1\",\r\n    \"ANTHROPIC_VERTEX_BASE_URL\": \"http://ai/v1\"\r\n  }\r\n}\n
\n

If you use Claude Code in VS Code with Vertex, also add \"claudeCode.disableLoginPrompt\": true to your VS Code user settings JSON (open the Command Palette and select Preferences: Open User Settings (JSON)).

\n

Verify the connection

\n
    \n
  1. Send a test message in Claude Code.
    2. \n
  2. Open the Aperture dashboard at http://ai/ui/ and confirm the request appears on the Logs page.
    3. \n
\n

If the request does not appear, refer to the Aperture troubleshooting guide.

\n

Next steps

\n\n"}