`setup-token` auth restricted to Haiku only — Sonnet/Opus return `rate_limit_error`, making Claude Code integration unusable for Pro subscribers

[ThunderEagle]

Environment

• OS: Windows 11
• NadirClaw version: 0.20.0
• Auth method: claude setup-token → nadirclaw auth setup-token
• Claude subscription: Pro (claude.ai)

Steps to reproduce

1. Run claude setup-token to obtain a subscription token
2. Store it via nadirclaw auth setup-token
3. Also set it as ANTHROPIC_API_KEY env var (required — LiteLLM doesn't pick it up from the credentials store otherwise)
4. Run nadirclaw test with any multi-tier config involving Sonnet or Opus

Expected behavior

All configured models respond OK, consistent with what a Pro subscriber can access natively in Claude Code and the claude.ai desktop app.

Actual behavior

Haiku passes, Sonnet and Opus both return:

litellm.RateLimitError: AnthropicException - {"type":"error","error":{"type":"rate_limit_error","message":"Error"}}

Notes

• The same Claude Pro account has full access to Sonnet and Opus natively through Claude Code and the desktop app
• The error presents as a rate limit but occurs immediately on the first request, suggesting it is actually a model access restriction on the subscription token auth path rather than a genuine rate limit
• This makes the Claude Code integration (nadirclaw claude onboard) effectively useless for Pro subscribers without a separate paid API key, despite the README advertising setup-token as the supported auth path for subscription users

[doramirdor]

Thanks for the detailed report. There were actually two separate things here, and v0.21.0 addresses the one that's clearly ours.

The bug we fixed: nadirclaw test was calling litellm.completion() directly. LiteLLM sends an Anthropic credential as x-api-key — but a setup-token is a subscription/OAuth token (sk-ant-oat01-…), which Anthropic expects via Authorization: Bearer plus the anthropic-beta: oauth-2025-04-20,claude-code-20250219 header. So nadirclaw test was probing your models over an auth path the real server never uses. That also explains why you had to set ANTHROPIC_API_KEY to get it to do anything. nadirclaw test now probes Anthropic models through the same OAuth path as nadirclaw serve.

What to retest: the actual Claude Code integration goes through nadirclaw serve → POST /v1/messages, which has always sent the correct Bearer + beta headers (it wasn't using the broken test path). Could you point Claude Code at the running server and confirm whether Sonnet/Opus still return rate_limit_error? After upgrading: pip install -U nadirclaw && nadirclaw test and a real nadirclaw serve run.

If it still fails through the server: that points to an Anthropic-side restriction on the subscription token rather than a NadirClaw bug — an immediate rate_limit_error only on Sonnet/Opus (Haiku OK) is consistent with subscription model-access gating. Two things that often matter for OAuth subscription tokens used outside the official client:

• Claude Code identity — the official client sends a system prompt that begins with the Claude Code identity string; some setups find premium models are gated without it. If retesting through the server still fails, I can add an opt-in flag that injects that identity block for OAuth requests for you to try.
• Plan tier — Opus access in particular differs between Pro and Max.

Leaving this open until you've had a chance to retest through the server — the result tells us whether anything further is actionable on our side.

[ThunderEagle]

Thank you for addressing this quickly. I'll attempt to retest tonight.

[ThunderEagle]

Tested on v0.21.0.

nadirclaw test: Haiku passes, Opus still fails — error is now a clean
429 Too Many Requests direct from Anthropic rather than the previous
LiteLLM auth error, so the credential path fix is working, but the
model access restriction remains.

Direct POST to /v1/messages with "model":"claude-sonnet-4-6" also
returns an immediate rate_limit_error. Haiku works fine through the
same path.

Interested in trying the Claude Code identity injection flag you mentioned
— that seems like the most likely remaining cause given Haiku works but
Sonnet/Opus don't on the same token.

 > curl -s -X POST http://localhost:8856/v1/messages -H "Content-Type: application/json" -H "x-model-override: claude-sonnet-4-6" -d $body
{"model":"claude-haiku-4-5-20251001","id":"msg_0155M7oFmj9kg71hEskiyfBa","type":"message","role":"assistant","content":[{"type":"text","text":"ok"}],"stop_reason":"end_turn","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":11,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"cache_creation":{"ephemeral_5m_input_tokens":0,"ephemeral_1h_input_tokens":0},"output_tokens":4,"service_tier":"standard","inference_geo":"not_available"}}

 > $body = '{"model":"claude-sonnet-4-6","max_tokens":100,"messages":[{"role":"user","content":"say the word ok"}]}'
  default  us-east-1 
 ~
 > curl -s -X POST http://localhost:8856/v1/messages -H "Content-Type: application/json" -d $body
{"type":"error","error":{"type":"rate_limit_error","message":"Error"},"request_id":"req_011CcPM2fEHvb6RTihxuGDXd"}

[doramirdor]

Built the identity-injection flag — #75.

Your retest was exactly the signal we needed: Haiku OK + Sonnet/Opus rate_limit_error on the same sk-ant-oat* token, through both nadirclaw test and a raw POST /v1/messages, is the classic fingerprint of Anthropic gating premium models behind the official Claude Code identity. The real client always leads each request with a fixed identity system block; your curl (and our proxy) weren't sending it.

What the PR adds: an opt-in NADIRCLAW_CLAUDE_CODE_IDENTITY=1 that prepends

You are Claude Code, Anthropic's official CLI for Claude.

as the first system block on OAuth requests — on both /v1/messages and the OAuth completion path. It's OAuth-only (no effect on sk-ant-api* keys), idempotent (skips if already present, so real Claude Code traffic is untouched), and preserves any system prompt you send after it. Off by default since it changes what the model sees.

To try it from the branch before it's released:

pip install "git+https://github.com/NadirRouter/NadirClaw.git@fix/oauth-claude-code-identity"
export NADIRCLAW_CLAUDE_CODE_IDENTITY=1
nadirclaw serve

then repeat your Sonnet/Opus curl against /v1/messages.

Two possible outcomes:

• Sonnet/Opus start returning completions → identity gating was the cause; we'll merge and ship it in v0.21.1.
• Still rate_limit_error → that points to plan-tier model-access gating on the subscription itself (Opus access in particular differs between Pro and Max) rather than anything NadirClaw can fix. Either way the result is dispositive.

Let me know how the retest goes and I'll finalize the merge.

[ThunderEagle]

Sir, I think you may have done it.

 > $body = '{"model":"nadir-auto","max_tokens":100,"messages":[{"role":"user","content":"say the word ok"}]}'
  default  us-east-1  7ms 
 ~
 > curl -s -X POST http://localhost:8856/v1/messages -H "Content-Type: application/json" -H "x-model-override: claude-sonnet-4-6" -d $body
{"model":"claude-haiku-4-5-20251001","id":"msg_01KY2ykhhBFBzN7oDquY81Xy","type":"message","role":"assistant","content":[{"type":"text","text":"ok"}],"stop_reason":"end_turn","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":25,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"cache_creation":{"ephemeral_5m_input_tokens":0,"ephemeral_1h_input_tokens":0},"output_tokens":4,"service_tier":"standard","inference_geo":"not_available"}}
  default  us-east-1  1.367s 
 ~
 > $body = '{"model":"claude-sonnet-4-6","max_tokens":100,"messages":[{"role":"user","content":"say the word ok"}]}'
  default  us-east-1  7ms 
 ~
 > curl -s -X POST http://localhost:8856/v1/messages -H "Content-Type: application/json" -d $body
{"model":"claude-sonnet-4-6","id":"msg_012MugHWDGfPG8fNyG89XbDA","type":"message","role":"assistant","content":[{"type":"text","text":"ok"}],"stop_reason":"end_turn","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":26,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"cache_creation":{"ephemeral_5m_input_tokens":0,"ephemeral_1h_input_tokens":0},"output_tokens":4,"service_tier":"standard","inference_geo":"not_available"}}
  default  us-east-1  1.121s 
 ~
 > $body = '{"model":"claude-opus-4-8","max_tokens":100,"messages":[{"role":"user","content":"say the word ok"}]}'
  default  us-east-1  8ms 
 ~
 > curl -s -X POST http://localhost:8856/v1/messages -H "Content-Type: application/json" -d $body
{"model":"claude-opus-4-8","id":"msg_01TC9DuajM66grYCo71M5JkG","type":"message","role":"assistant","content":[{"type":"text","text":"ok"}],"stop_reason":"end_turn","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":35,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"cache_creation":{"ephemeral_5m_input_tokens":0,"ephemeral_1h_input_tokens":0},"output_tokens":4,"output_tokens_details":{"thinking_tokens":0},"service_tier":"standard","inference_geo":"not_available"}}

[ThunderEagle]

I may have spoke too soon, when I did a nadirclaw serve and then fired up VS Code and attempted to use Claude Code, I see these in the output.

INFO:     127.0.0.1:65464 - "POST /v1/messages?beta=true HTTP/1.1" 400 Bad Request
21:28:55 DEBUG    httpcore.http11  receive_response_headers.complete return_value=(b'HTTP/1.1', 400, b'Bad Request', [(b'Date', b'Fri, 26 Jun 2026 01:28:55 GMT'), (b'Content-Type', b'application/json'), (b'Transfer-Encoding', b'chunked'), (b'Connection', b'keep-alive'), (b'x-should-retry', b'false'), (b'request-id', b'req_011CcR1CchSsJCLEPRTBgNGW'), (b'strict-transport-security', b'max-age=31536000; includeSubDomains; preload'), (b'anthropic-organization-id', b'[REDACTED]'), (b'traceresponse', b'00-5ed1fd3d46a70292cc95f7f2d5a36dec-8468b84b4da9ee65-01'), (b'Server', b'cloudflare'), (b'Content-Encoding', b'gzip'), (b'vary', b'Accept-Encoding'), (b'server-timing', b'x-originResponse;dur=259'), (b'cf-cache-status', b'DYNAMIC'), (b'set-cookie', b'[REDACTED]'), (b'Content-Security-Policy', b"default-src 'none'; frame-ancestors 'none'"), (b'X-Robots-Tag', b'none'), (b'CF-RAY', b'a11870227b1019ef-CMH')])

[doramirdor]

Confirmed on your end — thank you for the thorough back-and-forth. The Haiku-OK / premium-gated fingerprint plus your branch retest are exactly what made this diagnosable.

Shipped in v0.21.1 (now released — pip install -U nadirclaw): https://github.com/NadirRouter/NadirClaw/releases/tag/v0.21.1

For anyone landing here from a search: if you auth with a Claude subscription token (sk-ant-oat*) and Haiku works but Sonnet/Opus return an immediate rate_limit_error, set NADIRCLAW_CLAUDE_CODE_IDENTITY=1 before nadirclaw serve. It's opt-in because it changes the system prompt the model sees. Details are in the README "subscription token / premium models" troubleshooting section.

Closing as resolved — reopen if it regresses.