[BUG] Claude Code provider fails with "Invalid API key" despite working CLI authentication

[kazyur]

Problem (one or two sentences)

Claude Code provider fails with "Invalid API key" despite working CLI authentication

Context (who is affected and when)

Environment:

Problem:
The Claude Code provider consistently fails with "Invalid API key · Fix external API key" error despite having a properly authenticated Claude CLI that works perfectly in terminal.
Steps to Reproduce:

Install Claude CLI and authenticate with subscription token
Verify CLI works: /Users/andrewkazyur/.local/bin/claude "test" - responds correctly
Configure Roo Code with Claude Code provider pointing to /Users/andrewkazyur/.local/bin/claude
Attempt to use Roo Code - fails with "Invalid API key" error

Expected Behavior:
Roo Code should use the authenticated Claude CLI session for requests
Actual Behavior:
Command fails with exit code 1:
Command failed with exit code 1: /Users/andrewkazyur/.local/bin/claude -p --system-prompt ...
Additional Context:

Claude CLI works perfectly when called directly from terminal
Environment variable ANTHROPIC_API_KEY is properly set with subscription token
Token is valid for 1 year and tied to Claude Max subscription
Same authentication works for interactive Claude CLI usage

Suspected Issue:
The Claude Code provider appears unable to properly interface with Claude CLI's authentication when spawning external processes, despite the CLI being properly authenticated and functional.

Additional information:
When Anthropic API key is connected, RooCode works perfectly

Reproduction steps

OS: macOS Sequoia
Roo Code version: v3.28.8
Claude CLI version: 1.0.124

Expected result

Roo Code should use the authenticated Claude CLI session for requests even when it's authenticated with the token (roo chat subscription)

Actual result

Command fails with exit code 1: Command failed with exit code 1: /Users/andrewkazyur/.local/bin/claude -p --system-prompt ... . Roo said Invalid API key · Fix external API key

Variations tried (optional)

Claude CLI works perfectly when called directly from terminal
Environment variable ANTHROPIC_API_KEY is properly set with subscription token
Token is valid for 1 year and tied to Claude Max subscription
Same authentication works for interactive Claude CLI usage

Suspected Issue:
The Claude Code provider appears unable to properly interface with Claude CLI's authentication when spawning external processes, despite the CLI being properly authenticated and functiona

App Version

v3.28.8

API Provider (optional)

None

Model Used (optional)

Claude Code

Roo Code Task Links (optional)

https://app.roocode.com/task/b6ed7652-8c42-4614-ba59-800fef91cd26

Relevant logs or errors (optional)

[roomote]

I'm exploring a potential fix for the Claude Code provider authentication issue and will open a PR to share progress.

[roomote]

Opened PR #8323 with my attempt at addressing this issue: #8323

The fix ensures that the Claude CLI subprocess properly inherits environment variables (including ANTHROPIC_API_KEY) from the parent process, which should resolve the authentication issue you're experiencing.

Feedback welcome!

[kazyur]

works well now.

[kazyur]

NO, unfortunately I marked it as close to early. I did not notice that I added a key into anthropic configuration.

Another issue that may intervene here is that when you create a new configuration profile in the settings it inherits all the keys from an existing profile. While I would expect it to be created from a clean sheet.