隠されていた Claude Desktop のコードが未公開の自己ホスト型セッションエンドポイントを明らかにする
Coderは既に顧客ワークスペースでの実行を開示していた。RuntimeWireはセッションAPIをリルートする未公開のDesktop設定を発見したが、その関係は未解決のままである。
By Ryan Merket · Published
RUNTIMEWIRE INVESTIGATION — Original analysis
Original reporting by RuntimeWire, based on reverse engineering.
なぜ重要なのか
企業はモデルエンドポイントの先まで制御を押し進めている。顧客が運用するセッションホストは、従業員のインターフェースとしてDesktopを維持しつつ、Claude Codeの実行、ポリシー、および監査を集中管理するだろう。
Reporting record
Finding
Claude Desktop 2.2553.1 contains an internal, unreleased configuration that can redirect Code session traffic to an organization-specified HTTPS session host while supporting corporate authentication and a restricted bridge to local files.
How we verified
Methods: reverse engineering.
RuntimeWire's static analysis of the packaged Claude Desktop 2.2553.1 source found the “Self-hosted execution” configuration, routing for Code session and environment-provider APIs, authentication plumbing, and a device-file WebSocket bridge.
RuntimeWire statically analyzed the packaged application and compared the September 18 build with a September 10 comparison package; it did not alter the internal-build gate, execute the hidden functionality, authenticate to private services, or contact the placeholder endpoint.
Tested versions:
- Claude Desktop 2.2553.1
Reproduction
Reproduction does not apply to this reporting (document-driven).
Company response
RuntimeWire requested comment; the company had not responded by publication time.
Claude Desktop 2.2553.1 contains an internal configuration that can redirect the Code tab's session traffic to an organization-specified HTTPS server, according to RuntimeWire's static analysis of the app's packaged source.
Three days before that build, Coder announced Claude Code support for Agent Relay, an early-access integration that also places tool execution inside customer-controlled workspaces. Coder said it developed the integration with support from the Claude Code team and was working with selected design partners.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.