[Bug] Anthropic API Error: Usage Policy violation blocks security research requests

[cedricmerlin]

Bug Description
I am a security searcher and I am spamming by this kind of message everytime API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). This request triggered
cyber-related safeguards. To request an adjustment pursuant to our Cyber Verification Program based on how you use Claude, fill out https://claude.com/form/cyber-use-c
ase?token=[REDACTED] To learn more
about the program or provide feedback, visit o… Please double press esc to edit your last message or start a new session for Claude Code to assist with a different
task. If you are seeing this refusal repeatedly, try running /model claude-sonnet-4-20250514 to switch models. I can't go further, it's hard to work like this

Environment Info

• Platform: darwin
• Terminal: Apple_Terminal
• Version: 2.1.119
• Feedback ID: 04907435-c055-4c06-868b-e0c2465353d4

Errors

[{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/src/entrypoints/cli.js:50:3448)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-07T11:12:26.620Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/src/entrypoints/cli.js:50:3448)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-07T11:12:36.335Z"},{"error":"McpToolCallError: ### Error\nTimeoutError: browserBackend.callTool: Timeout 5000ms exceeded.\nCall log:\n\u001b[2m  - waiting for locator('aria-ref=e44')\u001b[22m\n\u001b[2m    - locator resolved to <button tabindex=\"1\" class=\"onetrust-close-btn-handler banner-close-button ot-close-link\">Continuer sans accepter</button>\u001b[22m\n\u001b[2m  - attempting click action\u001b[22m\n\u001b[2m    2 × waiting for element to be visible, enabled and stable\u001b[22m\n\u001b[2m      - element is not visible\u001b[22m\n\u001b[2m    - retrying click action\u001b[22m\n\u001b[2m    - waiting 20ms\u001b[22m\n\u001b[2m    2 × waiting for element to be visible, enabled and stable\u001b[22m\n\u001b[2m      - element is not visible\u001b[22m\n\u001b[2m    - retrying click action\u001b[22m\n\u001b[2m      - waiting 100ms\u001b[22m\n\u001b[2m    10 × waiting for element to be visible, enabled and stable\u001b[22m\n\u001b[2m       - element is not visible\u001b[22m\n\u001b[2m     - retrying click action\u001b[22m\n\u001b[2m       - waiting 500ms\u001b[22m\n\n    at QI7 (/$bunfs/root/src/entrypoints/cli.js:4829:63)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-07T11:50:24.005Z"},{"error":"McpToolCallError: ### Error\nError: Ref e28 not found in the current page snapshot. Try capturing new snapshot.\n    at QI7 (/$bunfs/root/src/entrypoints/cli.js:4829:63)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-07T11:50:31.857Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/src/entrypoints/cli.js:50:3448)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-07T12:11:10.210Z"},{"error":"The socket connection was closed unexpectedly. For more information, pass `verbose: true` in the second argument to fetch()","timestamp":"2026-05-07T22:25:13.033Z"},{"error":"McpToolCallError: ### Error\nSyntaxError: Unexpected token ')'\n    at eval (eval at evaluate (:302:30), <anonymous>:2:38)\n    at UtilityScript.evaluate (<anonymous>:304:16)\n    at UtilityScript.<anonymous> (<anonymous>:1:44)\n    at QI7 (/$bunfs/root/src/entrypoints/cli.js:4829:63)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-07T23:37:50.962Z"},{"error":"McpToolCallError: ### Error\nSyntaxError: Unexpected token ')'\n    at eval (eval at evaluate (:302:30), <anonymous>:2:38)\n    at UtilityScript.evaluate (<anonymous>:304:16)\n    at UtilityScript.<anonymous> (<anonymous>:1:44)\n    at QI7 (/$bunfs/root/src/entrypoints/cli.js:4829:63)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-07T23:38:00.223Z"},{"error":"McpToolCallError: ### Error\nError: page.evaluate: TypeError: Failed to fetch\n    at window.fetch.window.fetch (https://js.datadome.co/tags.js:2:34420)\n    at https://app.datadome.co/dashboard/polyfills-RFVDMNQH.js:3:3146\n    at Be.n.<computed> (https://app.datadome.co/dashboard/polyfills-RFVDMNQH.js:2:33555)\n    at https://app.datadome.co/dashboard/chunk-HGVDKGO3.js:15:6551\n    at new $ (https://app.datadome.co/dashboard/polyfills-RFVDMNQH.js:3:2238)\n    at t.fetch (https://app.datadome.co/dashboard/chunk-HGVDKGO3.js:15:6523)\n    at b (https://app.datadome.co/dashboard/chunk-FOGQPX35.js:16:474)\n    at eval (eval at evaluate (:302:30), <anonymous>:21:25)\n    at async <anonymous>:328:30\n    at QI7 (/$bunfs/root/src/entrypoints/cli.js:4829:63)\n    at processTicksAndRejections (na…

Note: Content was truncated.

[github-actions]

Found 3 possible duplicate issues:

1. Authorized bounty/CTF security research blocked mid-session — need context-aware handling for whitehat workflows #48977
2. Opus 4.6/4.7 refuses to do any cybersecurity research #50162
3. [BUG] Cyber Use Case Exemption Granted and works with Claude Chat but still keep getting FPs from safety system when using Claude Code API access. Approved Cyber Use Case Exemption not fully propagating to API in Claude Code using Opus. #49679

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[github-actions]

This issue has been automatically closed as a duplicate of #48977.

If this is incorrect, please re-open this issue or create a new one.

🤖 Generated with Claude Code

[rupertlssmith]

I am not a security researcher, and I get blocked by this message quite often! As a false positive. Trying to debug my compiler code...

[FurryMileon]

I keep having this problem with the new cyber protection thing
The moment the model reads Minecraft's code it immediately gets cut off by the protection and that's it (it doesn't trigger on all files and for some reason not always EXCEPT the naturalspawner file — if you give that code to Claude Opus 4.8 it instantly gets blocked by the protection)

spawn.txt

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.