diff --git a/.github/workflows/autogen-docs-notify.yml b/.github/workflows/autogen-docs-notify.yml
index a969339e..7bd0c510 100644
--- a/.github/workflows/autogen-docs-notify.yml
+++ b/.github/workflows/autogen-docs-notify.yml
@@ -96,6 +96,11 @@ jobs:
           PR_URL: ${{ github.event.pull_request.html_url }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          # Skips claude-code-action's OIDC -> GitHub App token exchange
+          # (which needs id-token: write) and uses the job's own minimally
+          # scoped GITHUB_TOKEN instead. Unrelated to anthropic_api_key,
+          # which is the separate Anthropic-auth path.
+          github_token: ${{ secrets.GITHUB_TOKEN }}
           additional_permissions: |
             actions: read
           # The triggering PR is authored by Renovate; without this,