Most devs might already be aware of this but I didn't know until today. I was working on an app on my personal desktop using Claude Code. I'm building an app and to test it and Claude asked me to add my API key to my local environment to test the API calls. Then, in my OTHER terminal session Claude switched to my API key to do all of the tasks in the work it was doing even though I pay $200/mo for a subscription. Luckily I have alerts that notified me before it passed $20 in API spend but I think this feels very scammy. Just a heads up to those that don't know this yet. It's their policy to switch to API if there is a key in the environment even if you have a monthly subscription. Claude said it was supposed to ask me first but I was never warned at all.
Subreddit: r/ClaudeAI