better-ccflare 3.1.2-beta.3 → 3.1.3

package/README.md

@@ -297,7 +297,7 @@ export ANTHROPIC_BASE_URL=http://localhost:8080
 claude
 ```
 
-**Important:** When using Claude CLI with an active OAuth login, do **NOT** set `ANTHROPIC_API_KEY`. Setting both will trigger a warning from Claude CLI about conflicting authentication methods.
+**Important:** When using Claude CLI with an active OAuth login, do **NOT** set `ANTHROPIC_AUTH_TOKEN`. Setting both will trigger a warning from Claude CLI about conflicting authentication methods.
 
 ### Option 2: Using API Key Authentication
 
@@ -309,7 +309,13 @@ claude /logout
 
 # Then set both the base URL and API key
 export ANTHROPIC_BASE_URL=http://localhost:8080
-export ANTHROPIC_API_KEY=dummy-key
+
+# If better-ccflare has NO API keys configured (open access):
+export ANTHROPIC_AUTH_TOKEN=dummy-key
+
+# If better-ccflare HAS API keys configured (protected):
+# Generate a key first: better-ccflare --generate-api-key "My VPS"
+export ANTHROPIC_AUTH_TOKEN=btr-abcdef1234567890...  # Use your real better-ccflare API key
 
 # Make sure to configure your accounts in the better-ccflare dashboard
 
@@ -317,9 +323,43 @@ export ANTHROPIC_API_KEY=dummy-key
 claude
 ```
 
+### Option 3: Remote/Headless VPS Setup (Secure Proxy)
+
+Use better-ccflare on a trusted server to avoid storing OAuth credentials on untrusted/temporary machines:
+
+**On your trusted server (running better-ccflare):**
+```bash
+# Add your Claude account with OAuth
+better-ccflare --add-account myaccount --mode claude-oauth --priority 0
+
+# Generate an API key for remote access
+better-ccflare --generate-api-key "Remote VPS"
+# Save the generated key: btr-abcdef1234567890...
+
+# Start the server (ensure it's accessible remotely)
+better-ccflare --serve
+```
+
+**On your untrusted/temporary VPS:**
+```bash
+# Set the remote better-ccflare URL and API key
+export ANTHROPIC_BASE_URL=https://your-server.com:8080
+export ANTHROPIC_AUTH_TOKEN=btr-abcdef1234567890...  # Your better-ccflare API key
+
+# Start Claude CLI (no need to login - better-ccflare handles auth)
+claude
+```
+
+**How it works:**
+- Claude Code CLI sends requests with your better-ccflare API key
+- better-ccflare validates the API key and proxies requests using its stored OAuth credentials
+- Your OAuth credentials stay secure on your trusted server
+- You can use Claude Code on any machine without storing sensitive credentials
+
 ### Which method should I use?
 
-- **Have Claude Pro/Team?** Use Option 1 (OAuth only) - simpler and no API key needed
+- **Have Claude Pro/Team and working locally?** Use Option 1 (OAuth only) - simpler and no API key needed
+- **Working on untrusted/temporary machines?** Use Option 3 (Remote VPS setup) - keeps credentials secure
 - **Using only API keys in better-ccflare?** Use Option 2 (logout + API key)
 - **Getting auth conflict warnings?** You have both methods active - choose one and follow its steps above
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "better-ccflare",
-	"version": "3.1.2-beta.3",
+	"version": "3.1.3",
 	"description": "Load balancer proxy for Claude API with intelligent distribution across multiple OAuth accounts to avoid rate limiting",
 	"license": "MIT",
 	"repository": {