CLAUDE_CODE_CERT_STORE

Updated October 23, 2026 by Alex Sorokoletov

CLAUDE_CODE_CERT_STORE is a Claude Code environment variable: Comma-separated CA sources to trust: bundled, system, or both (the default since v2.1.101). Unknown values are ignored with a warning. Added between v2.1.100 and v2.1.104 and still present in v2.1.310. It is listed in the official reference.

How to set it

For one session, export it in the shell that starts Claude Code:

export CLAUDE_CODE_CERT_STORE=<value>
claude

To apply it to every session, add it to the env object of a settings file:

// ~/.claude/settings.json
{
  "env": {
    "CLAUDE_CODE_CERT_STORE": "<value>"
  }
}

Release notes that mention it

• Claude Code "self signed certificate in certificate chain": NODE_EXTRA_CA_CERTS, CLAUDE_CODE_CERT_STORE and the emSign Block
• Claude Code v2.1.104 — 2 New Environment Variables: Enterprise TLS and SDK OAuth
• Claude Code Version Tracker: Undocumented Env Vars, Feature Gates & Models

Related variables

• CLAUDE_CODE_CLIENT_CERT: Path to client certificate for mTLS.
• ANTHROPIC_API_KEY: Primary API key for Claude API.
• ANTHROPIC_AUTH_TOKEN: Alternative bearer token; takes priority over API key.
• CLAUDE_AI_AUTHORIZE_URL: Authorization URL endpoint.
• CLAUDE_BG_AUTH_SNAPSHOT_PATH: Path for snapshotting background session auth credentials to disk.
• CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR: File descriptor to read API key from.
• CLAUDE_CODE_API_KEY_HELPER_TTL_MS: Cache TTL for API key helper.
• CLAUDE_CODE_CLIENT_KEY: Path to client private key.

Frequently asked questions

All variables, searchable: Claude Code environment variables.