Pick a scenario. Watch the auth flow resolve. See which billing pool gets debited and which paths violate the Terms of Service.
sk-ant-oat01-… is an OAuth token from a claude.ai subscription, scoped to first-party tools. sk-ant-api03-… is a Console API key, scoped to per-token billing. They never cross-fund.ANTHROPIC_AUTH_TOKEN → ANTHROPIC_API_KEY → subscription OAuth. The first match wins, silently. Run /status to see which.