Skip to security model
SECURITY MODEL ยท JULY 2026

Separation without shortcuts.

Claude Profile Router is a Digital Research Group product created by Robert Moore. It is designed to make subscription ownership explicit inside Nimbalyst and does not rotate accounts, pool usage, or silently fail over between subscriptions.

Extension boundary

The product is implemented as a Nimbalyst extension rather than a patch to the Nimbalyst application bundle. Each managed profile receives an isolated Claude configuration directory, and connection uses Claude's official sign-in flow.

Credentials and provider usage

Credentials remain in the normal Claude CLI and macOS Keychain flows. Provider usage access is held in memory for the request and sent only to Anthropic's usage endpoint without following redirects. Usage reads are cached and subject to a cooldown to avoid unnecessary polling. Prompt content and credentials are excluded from extension status and audit logs.

Landing-page controls

The production server requires a strong application secret and configured lead-delivery adapter. The form uses same-origin CSRF protection, strict server-side validation, IP and email throttling, a bot trap, request-size limits, one-time download tokens, security headers, and a restrictive production Content Security Policy.

Installation integrity

The public installation route must remain disabled until the extension is approved and listed in the Nimbalyst Marketplace. When enabled, the visible user-clicked link opens the marketplace listing; the user still reviews permissions and presses Install in Nimbalyst. The page never places lead data in the custom-scheme URL or claims that a downloaded file installs itself.

Responsible use

Use only accounts and subscriptions you are authorized to access. Account use remains subject to Anthropic's, Nimbalyst's, and your organization's terms. This independent extension does not guarantee provider compliance or uninterrupted compatibility with future Nimbalyst versions.