Claude Code Continues Logging Sessions After Revoke, User Reports 2-Week Support Silence
TL;DR: A user reports that Claude Code continued to log sessions and consume tokens even after revoking access via the UI. Anthropic support has been unresponsive for two weeks. If you use Claude Code, check your usage logs at claude.ai/settings/usage to verify sessions stop after revoking access.
What happened
The user noticed session logs appearing in their usage dashboard with scopes user:file_upload, user:ccr_inference, and user:sessions:claude_code after they had already revoked Claude Code's access. The revoke button in the UI appeared to do nothing.
Steps taken to stop it
- Uninstalled the CLI
- Deleted all local credentials and configs
- Checked for rogue API keys — none found
- Verified the Connectors page was clean
Despite all this, logs continued. The user opened a support ticket. The Fin AI bot promised a quick human response, but after two weeks, there has been no reply.
What to check
If you use Claude Code and care about what's running under your account, check your usage logs at claude.ai/settings/usage and verify your sessions actually stop after revoking access.
No known fix yet
The user notes that this might not be a universal bug, but it highlights a potential issue with access revocation in Claude Code's current implementation. There's no suggestion of a better way to reach Anthropic support in the source.
📖 Read the full source: r/ClaudeAI
👀 See Also
Multi-Message Prompt Injection: The "Fictional Creature" Attack Pattern Against Claude
An attack that builds a fictional rule over three messages, then summons a ghost to activate it — each message harmless in isolation. The pattern is converging independently among attackers.
LLM-Assisted Exploit: Anthropic's Mythos Preview Helped Build First Public macOS Kernel Exploit on Apple M5 in Five Days
Using Anthropic's Mythos Preview, security firm Calif built the first public macOS kernel memory corruption exploit on Apple's M5 silicon in five days—breaking MIE hardware security that took Apple five years to develop.
AI Agent Exploits SQL Injection to Compromise McKinsey's Lilli Chatbot
Security researchers at CodeWall used an autonomous AI agent to hack McKinsey's internal Lilli chatbot, gaining full read-write access to its production database in two hours via an SQL injection vulnerability in unauthenticated API endpoints.
Domain-Camouflaged Injection Attacks Evade Detectors in Multi-Agent LLM Systems
A new paper shows injection payloads tailored to domain vocabulary evade detection, dropping IDR from 93.8% to 9.7%. Multi-agent debate amplifies attacks. Llama Guard 3 detects zero payloads.