Skip to content
CC Switch WikiUnofficial Community Wiki

401 Unauthorized caused by PROXY_MANAGED in Claude Code

Quick fix

Upgrade to 4.0 or the latest version; use the real API key from the provider configuration for routing.

Symptom

Section titled “Symptom”
Error output
401 {"error":"Unauthorized"}
Retrying in 4 seconds... (attempt 5/10)

Cause

Section titled “Cause”

When Proxy Takeover is enabled, CC-Switch writes the `PROXY_MANAGED` placeholder credential to `~/.claude/settings.json`. Claude Code sends that value to the proxy; in this issue, the proxy forwarded the placeholder unchanged to an `openai_chat` backend that uses API key authentication, so the backend returned 401. A comment also confirmed that the issue recurs after switching providers. The maintainer said that version 4.0 redesigned routing: the client still uses the local address and placeholder credentials, while forwarding uses the real API key from the provider entry. The maintainer asked the user to verify whether the latest version resolved the issue, but no verification result was received.

Fix

Section titled “Fix”

  1. Upgrade to 4.0 or the latest version, then enable routing again. The maintainer said this version reworked forwarding credential handling; verify whether the 401 is gone.

  2. If you cannot upgrade yet, the temporary workaround in the report is to manually write the real API key to `~/.claude/settings.json` after enabling Proxy Takeover. Switching providers or using the CC-Switch terminal button changes it back to the placeholder. This writes the key to the client configuration.

Affected Versions

Section titled “Affected Versions”
ToolClaude Code
VersionCC-Switch 3.9.0 与 3.12.2 环境中报告；4.0 被维护者称应消除此问题，尚无用户验证结果
PlatformsmacOS

Source Issues

Section titled “Source Issues”

This page is distilled from 1 real issues

FAQ

Section titled “FAQ”
What should I do if the 401 still occurs after updating to 4.0?
The maintainer asked for the CC-Switch version, reproduction steps, or logs. If the issue persists, reply to that issue or create a new one.
Why does the 401 return after switching providers?
A comment confirmed that, with the `openai_chat` format, switching providers causes `PROXY_MANAGED` to be sent again as the API key. The maintainer recommended verifying the new routing behavior in 4.0.
Section titled “Related problems”
“Bash tool is continuously searched for but cannot be loaded or invoked properly” - Claude CodeBypass CC Switch and configure GLM directly in Claude Code; or upgrade to CC Switch 4.0.13 and retest.1 issues mergedTool calls always hang: Codex function_call loses call_idA commenter confirmed non-empty id/name checks restore tool calls. The post also suggests bypassing CC Switch Responses translation to connect directly to…1 issues mergedNo tool output found for tool callNo official fix is confirmed. The reporter describes a local workaround that reorders tool calls and outputs. Follow the main issue for progress.1 issues merged

This is an unofficial community wiki with no affiliation to the cc-switch authors or the project itself. Its content is compiled from the project's public GitHub issues. This site distributes no software.