Claude Code Anthropic's Terminal Coding Agent
Claude Code is Anthropic's agentic coding tool that lives in your terminal and IDE, edits and runs real code, and is included with a Pro or Max subscription or billed through the API.

Claude Code is Anthropic’s agentic coding tool. It runs in your terminal, reads your whole project, and edits files, runs commands, and works through multi-step tasks while you watch. It solves the problem of context-switching between a chat window and your editor: instead of copying snippets back and forth, you hand Claude Code a task in plain language and it works directly in your repository. It is the same agentic engine that powers Claude Cowork for knowledge work, pointed at code.
Where it lives
Claude Code is primarily a program you run on your own machine, and it connects straight to the Claude model API with no backend server or remote code index in between. It can also run as a cloud session on Anthropic-managed infrastructure (or your organization’s self-hosted environment), started from the browser, phone, desktop app, or terminal; cloud sessions are available on Pro, Max, and Team plans and for eligible Enterprise seats.
Install it
Anthropic’s recommended install is the native installer, which updates itself in the background. Homebrew (brew install --cask claude-code), WinGet (winget install Anthropic.ClaudeCode), Linux package managers, and npm (npm install -g @anthropic-ai/claude-code) are also supported. Once installed, it runs inside any project directory.
# Install once (macOS, Linux, WSL)
curl -fsSL https://claude.ai/install.sh | bash
# Start an interactive session in your project
cd my-project
claudeWhat it is for
Once a session is open, you describe work in plain language and Claude Code carries it out across your files.
> explain how authentication flows through this codebase
> fix the failing test in tests/login.spec.ts, then run the suite
> add a rate limiter to the /api/upload route and update the docsFor automation and scripting, the headless mode runs a one-shot task and prints the result, which is useful in CI and shell pipelines.
# Headless: run a single task and print the output
claude -p "summarize the changes in the last 5 commits"A typical task moves through the same loop every time, which is what makes it an agentic loop rather than a single answer.
Recent changes
Projects as multi-agent cloud threads (17 September 2026). Anthropic relaunched Projects in Claude Code as a way to run several agents under one goal. A coordinator scopes the request and delegates it to parallel threads; each thread is a full Claude Code cloud session working on its own git branch and copy of the repo, and can split its work further with subagents. Where threads touch the same code, the overlap surfaces as an ordinary merge conflict. Threads run in the cloud at launch, with local tools and code support described as coming soon. It is a beta for select Pro and Max subscribers (Team and Enterprise later), and Anthropic warns that because every thread is a full session, projects reach usage limits faster. This is distinct from the older claude.ai Projects workspaces. Unlike the local terminal flow shown above, this mode runs on Anthropic’s infrastructure rather than your machine. See Claude Code relaunches Projects as coordinated parallel cloud threads .
Claude Opus 5.5 (22 September 2026). The new Opus model is available in Claude Code, including fast mode (up to 2.5x faster output at $8/$40 per million tokens on API billing). See Claude Opus 5.5 launches at $4/$20, with thinking always on and Claude by Anthropic for the full lineup and pricing.
Plugin4Shell (disclosed 17-18 September 2026). AIR Security disclosed a zero-click remote-code-execution flaw affecting Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI: an attacker who controls a plugin repository could create a branch named like the marketplace’s pinned 40-character commit SHA, so the agent’s background plugin update checked out malicious code while appearing to honour the pin. According to AIR, Anthropic fixed it in Claude Code 2.1.179 (released 16 June 2026), and no in-the-wild exploitation is known. If you run an older build or install plugins from Bitbucket, GitLab or self-hosted marketplaces, update Claude Code and review which plugins auto-update. See Plugin4Shell: a zero-click plugin flaw in coding agents . Anthropic’s own advisory followed on 9 October 2026 as GHSA-pq7j-f95f-qfcv / CVE-2026-86063 (High, CVSS 4.0 7.7 in Anthropic’s advisory; the CVE record on NVD gives 7.5), and it says Claude Desktop’s plugin install flow was affected too.
Security advisories disclosed in October 2026, all fixed in earlier releases. Anthropic published three advisories that month. The minimum safe versions are the fixed versions they name:
Advisory What Severity (Anthropic) Fixed in GHSA-pq7j-f95f-qfcv / CVE-2026-86063 (9 Oct) Plugin commit SHA pin bypass, Claude Code and Claude Desktop (CWE-494, CWE-829) High, CVSS 4.0 7.7 Claude Code 2.1.179 GHSA-4p2j-qj3c-6x84 / CVE-2026-88066 (13 Oct) Claude Desktop on Windows ran git.exewithout an absolute path, so agit.exeplanted in a project directory ran when the project was opened (CWE-427)High, CVSS 4.0 7.5 Claude Desktop 1.8089.0 GHSA-5j29-h97v-84ch / CVE-2026-103435 (5 Oct) Write-time symlink following (TOCTOU): a path checked at permission time was re-resolved at write time, so an attacker with write access to a shared workspace could redirect a write outside the project (CWE-22, CWE-61, CWE-367) High, CVSS 4.0 7.7 Claude Code 2.1.129 Each advisory says users on standard auto-update “have received this fix already”. If you pin versions or update by hand, check that you are at or above these. The October 2026 agent security roundup covers them alongside the MCP SDK and framework advisories.
Which subscription you need
Claude Code is covered by a normal Claude subscription, so you do not pay separately for the chat apps and the coding agent.
- Pro (about 19 EUR per month, listed at 20 US dollars): includes Claude Code in the terminal and in supported IDEs, alongside the web, desktop, and mobile apps on one subscription.
- Max (about 92 or 185 EUR per month, listed at 100 or 200 US dollars): the same access with 5x or 20x the usage and priority on new models.
- Team Premium and Enterprise: Claude Code for organizations, with admin controls and billing.
- API: pay-per-token billing for automation. Since 15 June 2026, programmatic use (the Agent SDK, the
claude -pheadless command, the GitHub Actions integration, and third-party apps) draws from a separate monthly Agent SDK credit at standard API rates, rather than your interactive subscription pool.
The Claude product family
Claude Code is one of several products built on the same models. They differ mainly in where they run and what they produce.
| Where it lives | What it is for | Plan needed | |
|---|---|---|---|
| Claude Code | Terminal and IDEs | Editing, running, and shipping code | Pro, Max, Team Premium, or API |
| Claude Design | claude.ai (Anthropic Labs) | Designing UI and documents as HTML | Pro, Max, Team, Enterprise |
| Claude Cowork | Claude app (desktop, and since September 2026 web and mobile) | Autonomous multi-step knowledge work | Paid plans (Pro and Max first for the merged app) |
| Claude apps and API | Web, mobile, desktop, API | Chat, analysis, building on the model | Free and up |
When not to use it
- You do not write or run code. For document and file work without a terminal, Claude Cowork fits better.
- You want a chat answer, not file edits. The Claude apps are the lighter choice for questions and drafting.
- You need a visual prototype. Claude Design produces editable interface and document layouts; Claude Code produces working code.
- Your budget is strict and usage is heavy. Watch the plan limits, since large agent runs consume usage quickly and programmatic runs bill at API rates.
Further reading
AI agent security roundup, October 2026 : the Claude Code and Claude Desktop advisories in context
Claude Cowork : the same agent architecture for knowledge work instead of code
Claude Design : turning conversation into editable HTML and document layouts
Claude by Anthropic : the models and apps underneath all of these products
Claude Code vs Cursor vs Codex : how the leading coding agents compare
Agentic loops : the plan, act, and check cycle behind agent coding tools
Claude Code by Anthropic (official product page) : features, supported IDEs, and setup
Set up Claude Code (Anthropic docs) : install methods, release channels, and updates
Use Claude Code in the cloud (Anthropic docs) : cloud sessions and plan availability
Use Claude Code with your Pro or Max plan (Anthropic Help Center) : what each plan covers
Projects redesigned: from folder to conversation (Anthropic, 17 September 2026) : Anthropic’s announcement of the Projects beta
Claude Code relaunches Projects to manage multiple AI agents in the cloud (The Verge, 17 September 2026) : threads, coordinator, and beta scope
Claude Code revamps projects so you can work and pay in parallel (The Register, 18 September 2026) : usage-limit warning and plan availability
Introducing Claude Opus 5.5 (Anthropic, 22 September 2026) : the new Opus model and fast mode in Claude Code
Critical flaw in Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI (heise, 21 September 2026) : Plugin4Shell and the Claude Code 2.1.179 fix
Plugin4Shell zero-click RCE hits Claude Code, Codex, Copilot and Gemini CLI (Cyber Security News, 18 September 2026) : technical details of the SHA-pinning bypass
GHSA-pq7j-f95f-qfcv, Anthropic, 9 October 2026 : plugin SHA pin bypass, fixed in 2.1.179, Claude Desktop also affected
GHSA-4p2j-qj3c-6x84, Anthropic, 13 October 2026 : Claude Desktop for Windows
git.exesearch path, fixed in 1.8089.0GHSA-5j29-h97v-84ch, Anthropic, 5 October 2026 : symlink TOCTOU file write, fixed in 2.1.129