# Claude Platform WIF Is GA: Ditch the Static API Key Now

> Source: <https://byteiota.com/claude-platform-wif-keyless-auth-ga/>
> Published: 2026-06-20 13:09:20+00:00

Last year, GitGuardian found 1.27 million AI-service credentials exposed on public GitHub — up 81% from the year before. The root cause is predictable: every team shipping an LLM-powered feature starts by dropping a static API key into a CI secret, a container environment variable, or a .env file that eventually ends up in a commit. Anthropic’s answer to this is now generally available. As of June 17, Workload Identity Federation (WIF) is live on the Claude Platform. Your workload presents an OIDC token from the identity provider you already run. Anthropic validates it and returns a short-lived access token. […]

The post