OK sure, but you’d better hope Claude Code gets it right on the first try, or that’s $200 down the drain. Also, what if the detection mechanism involves a challenge-response that happens once a week? Or randomly a couple times a month? Or after 15 minutes of use from a new public IP? Or arbitrarily if you ask it to code something with a particular topic?

There are lots of ways they could be doing this. And remember again, if they get you, they don’t have to tell you how they got you (so you might not be able to even glean information in return for the $200 you’d be losing).

Sure the internet has hundreds of thousands of super smart coders, but the subset who are willing to throw money and credit cards down the drain in order to maintain a circumvention strategy for something like this is pretty low. I’m sure a few people will figure it out, but they won’t want to tell anyone lest Anthropic nerf their workaround, so I doubt that exploits of this will become widespread.

And if you’re Anthropic, that’s probably good enough.

Then just run Claude Code in a PTY and proxy requests in and out?