Some coding agents let you sign in with a chat subscription you already pay for, while others or the same ones accept API credentials. Which to use depends on who pays, whether your team needs central controls, and which features need an account. Check each vendor's current plan page, because terms change.
What the docs say today
Anthropic's Claude Code overview says most surfaces require a Claude subscription or an Anthropic Console account. It adds that the terminal, VS Code and JetBrains also support third-party providers. On first use it prompts you to log in, and if the API key environment variable is set and you approve it, it skips the login prompt. The desktop app requires a paid subscription, and a few handoff features, such as teleporting a cloud session into the terminal, require a claude.ai subscription.
OpenAI's Codex CLI page says that on first run you choose Sign in with ChatGPT or another available sign-in method. The page does not say which ChatGPT plans include Codex, so check OpenAI's pricing page for that. We could not confirm plan inclusion from the page we fetched.
How to decide
Use a subscription login when you are an individual, you already have the plan, and you want a predictable monthly bill. It is the shortest path to trying an agent.
Use API credentials when you need usage tied to a project or team budget, you run agents in CI or on servers, or an administrator needs to control keys centrally.
Use a third-party provider path when your company already buys model access through a cloud provider and wants everything under one contract. Claude Code documents this for the terminal and the two main IDEs.
What does not change
- The agent can still run commands and edit files, so permissions matter on any account type.
- MCP servers you add have the same trust problem either way.
- Anything you paste or the agent reads goes to the provider under that account's terms. Anthropic's security page notes consumer and commercial terms differ, and that Free, Pro and Max users fall under consumer terms while Team, Enterprise and API users fall under commercial terms. Read the one that applies to you before using client code.
Key hygiene
An API key in an environment variable is a secret. Keep it out of shell history and dotfiles in repositories. Claude Code stores credentials in the macOS Keychain when available, in a restricted file on Linux, and in a profile protected file on Windows.
Budget questions
This post does not quote prices because they change and vary by plan. If you are comparing costs, fetch the current public pricing page, note the date, and test with a real task.
For how MCP fits regardless of sign-in method, see adding an MCP server to Claude Code.
Quick check
Can I use one agent with my subscription and in CI?
Often CI uses API credentials, since a personal login is not meant for shared automation. Check the vendor's terms for your plan.
Does the sign-in method change security?
It changes data terms and billing, not what the agent can do on your machine. Permissions and sandboxing still apply.
Sources
Last reviewed: 19 October 2026.
