CLAUDE_CODE_CERT_STORE

Updated October 13, 2026 by Alex Sorokoletov

CLAUDE_CODE_CERT_STORE is a Claude Code environment variable: Controls which certificate authority store Claude Code uses for TLS verification. The v2.1.101 changelog[1] explains that the OS CA certificate store is now trusted by default, "so enterprise TLS proxies work without extra setup." Setting this to bundled reverts to using only the bundled CA certificates shipped with…. Added between v2.1.100 and v2.1.104 and still present in v2.1.294. It is listed in the official reference.

How to set it

For one session, export it in the shell that starts Claude Code:

export CLAUDE_CODE_CERT_STORE=<value>
claude

To apply it to every session, add it to the env object of a settings file:

// ~/.claude/settings.json
{
  "env": {
    "CLAUDE_CODE_CERT_STORE": "<value>"
  }
}

Release notes that mention it

• Claude Code v2.1.104 — 2 New Environment Variables: Enterprise TLS and SDK OAuth
• Claude Code Version Tracker: Undocumented Env Vars, Feature Gates & Models

Related variables

• CLAUDE_CODE_CLIENT_CERT: Path to client certificate for mTLS.
• ANTHROPIC_API_KEY: Primary API key for Claude API.
• ANTHROPIC_AUTH_TOKEN: Alternative bearer token; takes priority over API key.
• CLAUDE_AI_AUTHORIZE_URL: Authorization URL endpoint.
• CLAUDE_BG_AUTH_SNAPSHOT_PATH: Path for snapshotting background session auth credentials to disk.
• CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR: File descriptor to read API key from.
• CLAUDE_CODE_API_KEY_HELPER_TTL_MS: Cache TTL for API key helper.
• CLAUDE_CODE_CLIENT_KEY: Path to client private key.

Frequently asked questions

All variables, searchable: Claude Code environment variables.