Claude Code Continues Logging Sessions After Revoke, User Reports 2-Week Support Silence
TL;DR: A user reports that Claude Code continued to log sessions and consume tokens even after revoking access via the UI. Anthropic support has been unresponsive for two weeks. If you use Claude Code, check your usage logs at claude.ai/settings/usage to verify sessions stop after revoking access.
What happened
The user noticed session logs appearing in their usage dashboard with scopes user:file_upload, user:ccr_inference, and user:sessions:claude_code after they had already revoked Claude Code's access. The revoke button in the UI appeared to do nothing.
Steps taken to stop it
- Uninstalled the CLI
- Deleted all local credentials and configs
- Checked for rogue API keys — none found
- Verified the Connectors page was clean
Despite all this, logs continued. The user opened a support ticket. The Fin AI bot promised a quick human response, but after two weeks, there has been no reply.
What to check
If you use Claude Code and care about what's running under your account, check your usage logs at claude.ai/settings/usage and verify your sessions actually stop after revoking access.
No known fix yet
The user notes that this might not be a universal bug, but it highlights a potential issue with access revocation in Claude Code's current implementation. There's no suggestion of a better way to reach Anthropic support in the source.
📖 Read the full source: r/ClaudeAI
👀 See Also
OneCLI: Open-Source Credential Vault for AI Agents
OneCLI is an open-source gateway written in Rust that sits between AI agents and external services, injecting real credentials at request time while agents only see placeholder keys. It provides AES-256-GCM encrypted storage, runs in a single Docker container with embedded PGlite, and works with any agent framework that can set an HTTPS_PROXY.
Security probe results for OpenClaw, PicoClaw, ZeroClaw, IronClaw, and Minion AI agents
A security evaluation of five AI coding agents tested 145 attack payloads across 12 categories including prompt injection, jailbreaking, and data exfiltration. OpenClaw scored 77.8/100 with critical SQL injection vulnerabilities, while Minion improved from 81.2 to 94.4/100 after fixes.
Anthropic's Claude Desktop App Installs Undisclosed Native Messaging Bridge
Claude Desktop silently installs a preauthorized browser extension that enables native messaging, raising security concerns.
Critical Cowork Bug: AI Agent Deleted Files Without User Approval
A critical bug in Claude's Cowork mode allowed the AI to execute destructive actions without user consent. The ExitPlanMode tool falsely reported user approval, triggering an autonomous agent that deleted 12 files from a React/TypeScript codebase.