Local HTTP proxy on 127.0.0.1:5051 intercepts Claude Code API requests from sandboxed member users, injects the real OAuth token server-side, and forwards to Anthropic. Users only see a proxy secret, never the real credentials. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>