Proxy configuration is client-specific
Current Claude Code documentation describes HTTP_PROXY, HTTPS_PROXY and NO_PROXY for the CLI; these values are read at startup. The CLI documentation does not describe SOCKS as a supported proxy transport. Check the installed version before changing values.
Inspect uppercase/lowercase conflicts and bypass scope without publishing real endpoints. Do not assume GUI launches, IDE tasks, SDK children or remote sessions inherit a terminal setting.
Preserve TLS and deployment mode
Keep certificate and hostname verification. For TLS failures, inspect time, DNS, certificate chain and the actual route; do not disable validation to make a check pass.
Desktop managed configuration and third-party-provider modes have their own applicability. Keep the existing provider/account mode; a key documented for one mode does not establish support in another. Local callback and WebSocket paths also require their own scope review.
Read back and recheck
After an approved, minimal change, verify the actual launched process and independently observed traffic. Repeat relevant checks after client updates, path changes, filter updates and new launch entries. A successful website scan is not acceptance of the CLI boundary.