Keycloak, Claude Code's headless OAuth tokens and language model types

17 September 2026#

  • Keycloak. Explored Keycloak, an open source, self-hosted equivalent of Microsoft Entra ID (Azure AD), a Java server.
  • Learning resources. Great learning materials curated at aman.ai. Spending a lot of time reading these.
  • Claude Code tokens. claude setup-token gives a one-year OAuth token tied to your subscription; export it as CLAUDE_CODE_OAUTH_TOKEN and Claude Code runs headless (claude -p "...") in CI/CD or scripts, billed against your subscription’s usage limits rather than a separate pay-per-token API key. Note - this only works for running Claude Code itself (CLI, -p mode, the GitHub Action, Agent SDK). It is not a general-purpose API credential.
  • Language models. There are two types of language models: masked language model (trained to predict missing tokens anywhere in a sequence, ex usage: sentiment analysis, text classification) and autoregressive language model (predict next token in sequence, using only preceding tokens, ex text generation).

18 September 2026#

  • Foundational models. It is easy to build cool demos with foundational models, it’s hard to create a profitable product.
  • Evals. Eval set is very important when building AI applications. Try to include different themed questions and answers as a golden set for better confidence and evaluations when building AI apps. Playing blind without evals is a nightmare when model upgrades are required, which you need to eventually.