How Anthropic’s New API Credits Shift Claude’s Value Proposition For Enterprise Architects
Anthropic added monthly API credits to Max and Ultra plans, while Cursor removed a tampered extension that posed a backdoor risk to developers.
Key points
- Anthropic updated pricing pages to include API credits for higher tiers.
- Cursor removed a compromised Claude Code extension after an 11-hour window.
- The malicious extension attempted to install an SSH-based persistent backdoor.
Anthropic updated its pricing page to include monthly API credits for the Max and Ultra subscription tiers, according to the current text on claude.com.reported The Max plan now includes $100 in monthly API credits, while the Ultra tier provides $200.reportedAnthropic added API credits to its paid plans while a separate security issue affected a coding tool.Anthropic’s pricing update bundles API credits with Max and Ultra, distinct from the Cursor extension compromise. These credits allow users to build on the Claude Platform directly from their subscription.
Evidence: reported
Claude Pricing page updated: Plans & pricing | Claude by Anthropicpagewatch-anthropic
The announcement
The updated pricing structure introduces these credits as a new feature for the Max and Ultra plans. Both paid tiers also include access to Fable, with usage limits tied to the weekly allowance.
The context
Reading between the lines
The company removed the extension upon discovery and worked with hosting providers to take the attacker’s server offline. Anthropic confirmed the incident only impacted Cursor users and was unrelated to its own systems.
The business case
For platform architects, the addition of API credits changes the total cost of ownership for Max and Ultra subscribers. Teams can now prototype or run small-scale workloads on the Claude Platform without separate API billing, up to the monthly credit limit. This integrates development access directly into the consumer-facing subscription model.
Why it matters
- Architects can leverage included API credits for testing, reducing immediate out-of-pocket costs for platform integration.
- The Cursor incident highlights supply chain risks for AI coding tools, requiring verification of extension integrity.
- Anthropic’s statement clarifies that the breach did not affect its core infrastructure, isolating the risk to the marketplace.
- Credit limits vary by tier, influencing vendor choice for teams needing consistent API access beyond the included amount.
Topics: Anthropic, Cursor, API pricing, security, extensions
Updated
Then / now / next
Claude subscriptions did not include monthly API credits for platform usage.
Max and Ultra plans include $100 and $200 in monthly API credits respectively.
Monitor for further updates on the Cursor marketplace rebuild and security measures.
Story timeline
- Then Claude subscriptions did not include monthly API credits for platform usage.
- 30 Oct 2026 Hackers hijacked a Claude Code extension, exposing yet another new AI security risk
- 01 Nov 2026 DeepSeek open sources Super-Agent, a coding agent research prototype it says proactively monitors developer group chats for coding issues and suggests solutions (Debby Wu/Bloomberg)
- 01 Nov 2026 Claude Pricing page updated: Plans & pricing | Claude by Anthropic
- 01 Nov 2026 Claude Pricing page updated: Plans & pricing | Claude by Anthropic
- 01 Nov 2026 Anthropic Pricing page updated: Plans & pricing | Claude by Anthropic
- 01 Nov 2026 Empathetic prompts can turn AI chatbots into seemingly traumatized conversational partners
- 01 Nov 2026 Anthropic Pricing page updated: Plans & pricing | Claude by Anthropic
- 01 Nov 2026 Show HN: HackerBooks – HackerTube, but for books mentioned on HN
- Now Max and Ultra plans include $100 and $200 in monthly API credits respectively.
- Next Monitor for further updates on the Cursor marketplace rebuild and security measures.
The strongest doubt
Counterpoint from the sources
Cursor noted the backdoor mechanism likely failed due to code flaws, reducing the immediate impact on users.
For readers
Developers
- Check systems for signs of infection if the extension was installed on October 29.
- Verify extension integrity before installation to avoid tampered code.
Business
- Evaluate if Max or Ultra credits cover prototype API needs.
- Assess supply chain risks for third-party coding assistants.
Investors
- Note Anthropic’s strategy to bundle API access with subscriptions.
- Observe market reaction to security incidents in AI tooling.
Numbers in context
Circle area is proportional to the magnitude; labels retain signs. Figures may describe different measures. Read their contexts above.Ask the article
Local keyword search of this article; no generated answers.Did this article give you the evidence you needed?
Your choice stays on this device. No public tally.Questions readers ask
Do all Claude plans include API credits?
No, only the Max and Ultra plans include monthly API credits of $100 and $200 respectively.
Was Anthropic’s system compromised in the Cursor incident?
No, Anthropic stated the incident only impacted Cursor users and was unrelated to its systems.
How long was the malicious extension available?
The tampered extension was available on the Cursor marketplace for roughly 11 hours.
Connected stories
Reading receipt
- Anthropic updated pricing pages to include API credits for higher tiers.
- Cursor removed a compromised Claude Code extension after an 11-hour window.
- The malicious extension attempted to install an SSH-based persistent backdoor.