Hidden Claude Desktop code reveals an unreleased self-hosted session endpoint

Coder had already disclosed customer-workspace execution; RuntimeWire found an unreleased Desktop setting that reroutes session APIs, but the relationship remains unresolved.

By · Published

RUNTIMEWIRE INVESTIGATION — Original analysis

Original reporting by RuntimeWire, based on reverse engineering.

Why it matters

Enterprises are pushing control beyond the model endpoint. A customer-run session host would centralize Claude Code execution, policy and audit while keeping Desktop as the employee interface.

Reporting record

Finding

Claude Desktop 2.2553.1 contains an internal, unreleased configuration that can redirect Code session traffic to an organization-specified HTTPS session host while supporting corporate authentication and a restricted bridge to local files.

How we verified

Methods: reverse engineering.

RuntimeWire's static analysis of the packaged Claude Desktop 2.2553.1 source found the “Self-hosted execution” configuration, routing for Code session and environment-provider APIs, authentication plumbing, and a device-file WebSocket bridge.

RuntimeWire statically analyzed the packaged application and compared the September 18 build with a September 10 comparison package; it did not alter the internal-build gate, execute the hidden functionality, authenticate to private services, or contact the placeholder endpoint.

Tested versions:

  • Claude Desktop 2.2553.1

Reproduction

Reproduction does not apply to this reporting (document-driven).

Company response

RuntimeWire requested comment; the company had not responded by publication time.

A desktop computer's screen shows a luminous data connection leading to remote server racks, with a smaller link returning to a local file folder.

Claude Desktop 2.2553.1 contains an internal configuration that can redirect the Code tab's session traffic to an organization-specified HTTPS server, according to RuntimeWire's static analysis of the app's packaged source.

Three days before that build, Coder announced Claude Code support for Agent Relay, an early-access integration that also places tool execution inside customer-controlled workspaces. Coder said it developed the integration with support from the Claude Code team and was working with selected design partners.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.