One read of Claude Developer Platformapi-20260828T000723Z
127 pages moved out of 688 read.
Pages moved
127
significant first
Pages read
688
in this capture
Captured
00:07 UTC
Corpus hash
f8f8bcbeab53
corpus-hash
What this read moved
26-50 of 127, page 2 of 6This capture is too large to show at once. Changes 26-50 of 127 are below, significant first; the rest are on the following screens.
api/admin/api_keys/update Changed · +58 / -12 lines
from line 52
5252
5353 ID of the actor that created the object.
5454
55 - `type: string`
55 - `type: "service_account" or "user"`
5656
5757 Type of the actor that created the object.
5858
59 - `"service_account"`
60
61 - `"user"`
62
5963 - `expires_at: string or null`
6064
6165 RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires.
from line 74
7074
7175 Partially redacted hint for the API key.
7276
73 - `principal: object or null`
77 - `principal: object or object or null`
7478
75 The ID and type of the principal the API key acts as, or `null` if the key is not bound to a principal.
79 The principal the API key acts as (a User or a Service Account), or `null` if the API key is not bound to a principal.
7680
77 - `id: string`
81 - `UserActor object`
7882
79 ID of the principal the API key acts as: a User ID (`user_...`) when the type is `user`, or a Service Account ID (`svac_...`) when the type is `service_account`.
83 - `type: "user_actor"`
8084
81 - `type: "service_account" or "user"`
85 Principal type. Always `"user_actor"` for a User.
8286
83 Type of the principal the API key acts as.
87 default: user_actor
8488
85 - `"service_account"`
89 - `user_id: string`
8690
87 - `"user"`
91 ID of the User the API key acts as.
8892
93 - `ServiceAccountActor object`
94
95 - `service_account_id: string`
96
97 ID of the Service Account the API key acts as.
98
99 - `type: "service_account_actor"`
100
101 Principal type. Always `"service_account_actor"` for a Service Account.
102
103 default: service_account_actor
104
105 - `scope: object or object`
106
107 Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace.
108
109 - `Organization object`
110
111 - `type: "organization"`
112
113 Scope type. Always `"organization"`: the API key has no Workspace. Only a principal-bound API key can have this scope.
114
115 default: organization
116
117 - `Workspace object`
118
119 - `type: "workspace"`
120
121 Scope type. Always `"workspace"`: the API key belongs to one Workspace.
122
123 default: workspace
124
125 - `workspace_id: string`
126
127 ID of the Workspace the API key belongs to. Unlike the deprecated top-level `workspace_id`, this is the Workspace's real ID even for the organization's default Workspace.
128
89129 - `status: "active" or "archived" or "expired" or "inactive"`
90130
91131 Status of the API key.
from line 148
108148
109149 - `workspace_id: string or null`
110150
111 ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace.
151 **Deprecated**: Use `scope` instead. `workspace_id` is `null` both for an API key in the default Workspace and for a principal-bound API key that has no Workspace.
112152
153 Deprecated: use `scope` instead. ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace. Also `null` for a principal-bound API key that has no Workspace; `scope` tells the two apart.
154
113155## Example
114156
115157```bash
from line 176
134176 "name": "Developer Key",
135177 "partial_key_hint": "sk-ant-api03-R2D...igAA",
136178 "principal": {
137 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
138 "type": "user"
179 "type": "user_actor",
180 "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q"
181 },
182 "scope": {
183 "type": "workspace",
184 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
139185 },
140186 "status": "active",
141187 "type": "api_key",
api/admin/cost_report Changed · +10 / -2 lines
from line 65
6565
6666 End of the time bucket (exclusive) in RFC 3339 format.
6767
68 format: date-time
69
6870 - `results: array of object`
6971
7072 List of cost items for this time bucket. There may be multiple items if one or more `group_by[]` parameters are specified.
from line 148
146148
147149 Start of the time bucket (inclusive) in RFC 3339 format.
148150
151 format: date-time
152
149153 - `has_more: boolean`
150154
151155 Indicates if there are more results.
from line 179
175179 "context_window": "0-200k",
176180 "cost_type": "tokens",
177181 "currency": "USD",
178 "description": "Claude Sonnet 4 Usage - Input Tokens",
182 "description": "Claude Opus 5 Usage - Input Tokens",
179183 "inference_geo": "global",
180 "model": "claude-opus-4-6",
184 "model": "claude-opus-5",
181185 "service_tier": "standard",
182186 "token_type": "uncached_input_tokens",
183187 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
from line 209
205209
206210 End of the time bucket (exclusive) in RFC 3339 format.
207211
212 format: date-time
213
208214 - `results: array of object`
209215
210216 List of cost items for this time bucket. There may be multiple items if one or more `group_by[]` parameters are specified.
from line 291
285291 - `starting_at: string`
286292
287293 Start of the time bucket (inclusive) in RFC 3339 format.
294
295 format: date-time
288296
289297 - `has_more: boolean`
290298
api/admin/cost_report/retrieve Changed · +6 / -2 lines
from line 63
6363
6464 End of the time bucket (exclusive) in RFC 3339 format.
6565
66 format: date-time
67
6668 - `results: array of object`
6769
6870 List of cost items for this time bucket. There may be multiple items if one or more `group_by[]` parameters are specified.
from line 146
144146
145147 Start of the time bucket (inclusive) in RFC 3339 format.
146148
149 format: date-time
150
147151 - `has_more: boolean`
148152
149153 Indicates if there are more results.
from line 177
173177 "context_window": "0-200k",
174178 "cost_type": "tokens",
175179 "currency": "USD",
176 "description": "Claude Sonnet 4 Usage - Input Tokens",
180 "description": "Claude Opus 5 Usage - Input Tokens",
177181 "inference_geo": "global",
178 "model": "claude-opus-4-6",
182 "model": "claude-opus-5",
179183 "service_tier": "standard",
180184 "token_type": "uncached_input_tokens",
181185 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
api/admin/external_keys Changed · +20 / -20 lines
from line 24
2424
2525 - `region: optional string or null`
2626
27 AWS region. Derived from kms_arn if omitted.
27 AWS region. Derived from `kms_arn` if omitted.
2828
2929 - `role_arn: optional string or null`
3030
from line 56
5656
5757 - `vault_uri: string`
5858
59 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
59 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
6060
6161 - `client_id: optional string or null`
6262
from line 122
122122
123123 - `region: optional string or null`
124124
125 AWS region. Derived from kms_arn if omitted.
125 AWS region. Derived from `kms_arn` if omitted.
126126
127127 - `role_arn: optional string or null`
128128
from line 152
152152
153153 - `vault_uri: string`
154154
155 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
155 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
156156
157157 - `client_id: optional string or null`
158158
from line 276
276276
277277 - `region: optional string or null`
278278
279 AWS region. Derived from kms_arn if omitted.
279 AWS region. Derived from `kms_arn` if omitted.
280280
281281 - `role_arn: optional string or null`
282282
from line 306
306306
307307 - `vault_uri: string`
308308
309 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
309 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
310310
311311 - `client_id: optional string or null`
312312
from line 423
423423
424424 - `region: optional string or null`
425425
426 AWS region. Derived from kms_arn if omitted.
426 AWS region. Derived from `kms_arn` if omitted.
427427
428428 - `role_arn: optional string or null`
429429
from line 453
453453
454454 - `vault_uri: string`
455455
456 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
456 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
457457
458458 - `client_id: optional string or null`
459459
from line 543
543543
544544 - `region: optional string or null`
545545
546 AWS region. Derived from kms_arn if omitted.
546 AWS region. Derived from `kms_arn` if omitted.
547547
548548 - `role_arn: optional string or null`
549549
from line 575
575575
576576 - `vault_uri: string`
577577
578 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
578 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
579579
580580 - `client_id: optional string or null`
581581
from line 631
631631
632632 - `region: optional string or null`
633633
634 AWS region. Derived from kms_arn if omitted.
634 AWS region. Derived from `kms_arn` if omitted.
635635
636636 - `role_arn: optional string or null`
637637
from line 661
661661
662662 - `vault_uri: string`
663663
664 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
664 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
665665
666666 - `client_id: optional string or null`
667667
from line 867
867867
868868 - `region: optional string or null`
869869
870 AWS region. Derived from kms_arn if omitted.
870 AWS region. Derived from `kms_arn` if omitted.
871871
872872 - `role_arn: optional string or null`
873873
from line 897
897897
898898 - `vault_uri: string`
899899
900 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
900 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
901901
902902 - `client_id: optional string or null`
903903
from line 969
969969
970970 - `region: optional string or null`
971971
972 AWS region. Derived from kms_arn if omitted.
972 AWS region. Derived from `kms_arn` if omitted.
973973
974974 - `role_arn: optional string or null`
975975
from line 999
999999
10001000 - `vault_uri: string`
10011001
1002 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
1002 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
10031003
10041004 - `client_id: optional string or null`
10051005
from line 1071
10711071
10721072 - `region: optional string or null`
10731073
1074 AWS region. Derived from kms_arn if omitted.
1074 AWS region. Derived from `kms_arn` if omitted.
10751075
10761076 - `role_arn: optional string or null`
10771077
from line 1101
11011101
11021102 - `vault_uri: string`
11031103
1104 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
1104 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
11051105
11061106 - `client_id: optional string or null`
11071107
from line 1173
11731173
11741174 - `region: optional string or null`
11751175
1176 AWS region. Derived from kms_arn if omitted.
1176 AWS region. Derived from `kms_arn` if omitted.
11771177
11781178 - `role_arn: optional string or null`
11791179
from line 1203
12031203
12041204 - `vault_uri: string`
12051205
1206 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
1206 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
12071207
12081208 - `client_id: optional string or null`
12091209
api/admin/external_keys/create Changed · +4 / -4 lines
from line 22
2222
2323 - `region: optional string or null`
2424
25 AWS region. Derived from kms_arn if omitted.
25 AWS region. Derived from `kms_arn` if omitted.
2626
2727 - `role_arn: optional string or null`
2828
from line 54
5454
5555 - `vault_uri: string`
5656
57 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
57 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
5858
5959 - `client_id: optional string or null`
6060
from line 120
120120
121121 - `region: optional string or null`
122122
123 AWS region. Derived from kms_arn if omitted.
123 AWS region. Derived from `kms_arn` if omitted.
124124
125125 - `role_arn: optional string or null`
126126
from line 150
150150
151151 - `vault_uri: string`
152152
153 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
153 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
154154
155155 - `client_id: optional string or null`
156156
api/admin/external_keys/update Changed · +4 / -4 lines
from line 44
4444
4545 - `region: optional string or null`
4646
47 AWS region. Derived from kms_arn if omitted.
47 AWS region. Derived from `kms_arn` if omitted.
4848
4949 - `role_arn: optional string or null`
5050
from line 76
7676
7777 - `vault_uri: string`
7878
79 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
79 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
8080
8181 - `client_id: optional string or null`
8282
from line 132
132132
133133 - `region: optional string or null`
134134
135 AWS region. Derived from kms_arn if omitted.
135 AWS region. Derived from `kms_arn` if omitted.
136136
137137 - `role_arn: optional string or null`
138138
from line 162
162162
163163 - `vault_uri: string`
164164
165 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
165 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
166166
167167 - `client_id: optional string or null`
168168
api/admin/invites Changed · +11 / -11 lines
from line 4
44
55**POST** `/v1/organizations/invites`
66
7For Claude Enterprise organizations, this endpoint's availability is in beta.
7Invite a user to join the organization by email.
88
99On plans that draw members from a finite pool of purchased seats, the invite automatically consumes a seat from the lowest tier with availability; there is no seat-tier parameter. When no seat is free the request fails with a 400 error rather than purchasing a seat.
1010
from line 20
2020
2121 Role for the invited User.
2222
23 The accepted values depend on the organization type. Console and API organizations accept `user`, `developer`, `billing`, and `claude_code_user`; `admin` cannot be assigned through the API. Claude Enterprise organizations (beta) accept `user` and `managed`.
23 The accepted values depend on the organization type. Console and API organizations accept `user`, `developer`, `billing`, and `claude_code_user`; `admin` cannot be assigned through the API. Claude Enterprise organizations accept `user` and `managed`.
2424
2525 - `"billing"`
2626
from line 34
3434
3535- `rbac_group_ids: optional array of string`
3636
37 RBAC group IDs to assign to the User when the Invite is accepted. A non-empty array is accepted only for a Claude Enterprise organization with RBAC groups (beta), and requires the key to carry the `write:rbac_groups` scope.
37 RBAC group IDs to assign to the User when the Invite is accepted. A non-empty array is accepted only for a Claude Enterprise organization with RBAC groups, and requires the key to carry the `write:rbac_groups` scope.
3838
3939 maxItems: 100
4040
from line 70
7070
7171 - `rbac_group_ids: array of string`
7272
73 RBAC group IDs recorded on the Invite (beta, Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
73 RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
7474
7575 - `role: "admin" or "billing" or "claude_code_user" or 6 more`
7676
from line 149
149149
150150**GET** `/v1/organizations/invites/{invite_id}`
151151
152For Claude Enterprise organizations, this endpoint's availability is in beta.
152Retrieve an invite by ID.
153153
154154### Path parameters
155155
from line 189
189189
190190 - `rbac_group_ids: array of string`
191191
192 RBAC group IDs recorded on the Invite (beta, Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
192 RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
193193
194194 - `role: "admin" or "billing" or "claude_code_user" or 6 more`
195195
from line 263
263263
264264**GET** `/v1/organizations/invites`
265265
266For Claude Enterprise organizations, this endpoint's availability is in beta.
266List the organization's invites.
267267
268268### Query parameters
269269
from line 293
293293
294294 Filter to items whose `role` equals one of the supplied values. Repeatable; values are OR'ed together.
295295
296 Accepted values depend on the organization type: Console and API organizations accept `user`, `developer`, `billing`, `admin`, and `claude_code_user`; Claude Enterprise organizations (beta) accept `user`, `owner`, `primary_owner`, `membership_admin`, and `managed`.
296 Accepted values depend on the organization type: Console and API organizations accept `user`, `developer`, `billing`, `admin`, and `claude_code_user`; Claude Enterprise organizations accept `user`, `owner`, `primary_owner`, `membership_admin`, and `managed`.
297297
298298- `statuses: optional array of "accepted" or "expired" or "pending"`
299299
from line 337
337337
338338 - `rbac_group_ids: array of string`
339339
340 RBAC group IDs recorded on the Invite (beta, Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
340 RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
341341
342342 - `role: "admin" or "billing" or "claude_code_user" or 6 more`
343343
from line 430
430430
431431**DELETE** `/v1/organizations/invites/{invite_id}`
432432
433For Claude Enterprise organizations, this endpoint's availability is in beta.
433Delete a pending invite.
434434
435435### Path parameters
436436
from line 504
504504
505505 - `rbac_group_ids: array of string`
506506
507 RBAC group IDs recorded on the Invite (beta, Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
507 RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
508508
509509 - `role: "admin" or "billing" or "claude_code_user" or 6 more`
510510
api/admin/invites/create Changed · +4 / -4 lines
from line 2
22
33**POST** `/v1/organizations/invites`
44
5For Claude Enterprise organizations, this endpoint's availability is in beta.
5Invite a user to join the organization by email.
66
77On plans that draw members from a finite pool of purchased seats, the invite automatically consumes a seat from the lowest tier with availability; there is no seat-tier parameter. When no seat is free the request fails with a 400 error rather than purchasing a seat.
88
from line 18
1818
1919 Role for the invited User.
2020
21 The accepted values depend on the organization type. Console and API organizations accept `user`, `developer`, `billing`, and `claude_code_user`; `admin` cannot be assigned through the API. Claude Enterprise organizations (beta) accept `user` and `managed`.
21 The accepted values depend on the organization type. Console and API organizations accept `user`, `developer`, `billing`, and `claude_code_user`; `admin` cannot be assigned through the API. Claude Enterprise organizations accept `user` and `managed`.
2222
2323 - `"billing"`
2424
from line 32
3232
3333- `rbac_group_ids: optional array of string`
3434
35 RBAC group IDs to assign to the User when the Invite is accepted. A non-empty array is accepted only for a Claude Enterprise organization with RBAC groups (beta), and requires the key to carry the `write:rbac_groups` scope.
35 RBAC group IDs to assign to the User when the Invite is accepted. A non-empty array is accepted only for a Claude Enterprise organization with RBAC groups, and requires the key to carry the `write:rbac_groups` scope.
3636
3737 maxItems: 100
3838
from line 68
6868
6969 - `rbac_group_ids: array of string`
7070
71 RBAC group IDs recorded on the Invite (beta, Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
71 RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
7272
7373 - `role: "admin" or "billing" or "claude_code_user" or 6 more`
7474
api/admin/invites/list Changed · +3 / -3 lines
from line 2
22
33**GET** `/v1/organizations/invites`
44
5For Claude Enterprise organizations, this endpoint's availability is in beta.
5List the organization's invites.
66
77## Query parameters
88
from line 32
3232
3333 Filter to items whose `role` equals one of the supplied values. Repeatable; values are OR'ed together.
3434
35 Accepted values depend on the organization type: Console and API organizations accept `user`, `developer`, `billing`, `admin`, and `claude_code_user`; Claude Enterprise organizations (beta) accept `user`, `owner`, `primary_owner`, `membership_admin`, and `managed`.
35 Accepted values depend on the organization type: Console and API organizations accept `user`, `developer`, `billing`, `admin`, and `claude_code_user`; Claude Enterprise organizations accept `user`, `owner`, `primary_owner`, `membership_admin`, and `managed`.
3636
3737- `statuses: optional array of "accepted" or "expired" or "pending"`
3838
from line 76
7676
7777 - `rbac_group_ids: array of string`
7878
79 RBAC group IDs recorded on the Invite (beta, Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
79 RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none.
8080
8181 - `role: "admin" or "billing" or "claude_code_user" or 6 more`
8282
api/admin/rbac_groups Changed · +8 / -72 lines
### Headers ### Headers ### Headers ### Headers ### Headers #### Headers #### Headers #### Headers
from line 6
66
77List RBAC Groups in the Claude Enterprise tenant.
88
9The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
9The RBAC Groups API is available to Claude Enterprise organizations only.
1010
1111### Query parameters
1212
from line 22
2222
2323 Optionally set to the `next_page` token from the previous response.
2424
25### Headers
26
27- `"anthropic-beta": optional array of string`
28
29 Optional header to specify the beta version(s) you want to use.
30
31 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
32
3325### Returns
3426
3527- `data: array of RbacGroup`
from line 110
118110
119111Retrieve an RBAC Group by ID.
120112
121The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
113The RBAC Groups API is available to Claude Enterprise organizations only.
122114
123115### Path parameters
124116
from line 118
126118
127119 ID of the RBAC Group.
128120
129### Headers
130
131- `"anthropic-beta": optional array of string`
132
133 Optional header to specify the beta version(s) you want to use.
134
135 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
136
137121### Returns
138122
139123- `RbacGroup object`
from line 192
208192
209193Create an RBAC Group in the Claude Enterprise tenant. Groups created via the API have source type `"direct"`.
210194
211The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
195The RBAC Groups API is available to Claude Enterprise organizations only.
212196
213### Headers
214
215- `"anthropic-beta": optional array of string`
216
217 Optional header to specify the beta version(s) you want to use.
218
219 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
220
221197### Body parameters
222198
223199- `name: string`
from line 280
304280
305281Update an RBAC Group's name. Groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
306282
307The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
283The RBAC Groups API is available to Claude Enterprise organizations only.
308284
309285### Path parameters
310286
from line 288
312288
313289 ID of the RBAC Group.
314290
315### Headers
316
317- `"anthropic-beta": optional array of string`
318
319 Optional header to specify the beta version(s) you want to use.
320
321 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
322
323291### Body parameters
324292
325293- `name: optional string or null`
from line 374
406374
407375Delete an RBAC Group. Groups provisioned by an identity provider (source type `"scim"`) cannot be deleted via the API.
408376
409The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
377The RBAC Groups API is available to Claude Enterprise organizations only.
410378
411379### Path parameters
412380
from line 382
414382
415383 ID of the RBAC Group.
416384
417### Headers
418
419- `"anthropic-beta": optional array of string`
420
421 Optional header to specify the beta version(s) you want to use.
422
423 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
424
425385### Returns
426386
427387- `RbacGroupDeleted object`
from line 486
526486
527487List members of an RBAC Group.
528488
529The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
489The RBAC Groups API is available to Claude Enterprise organizations only.
530490
531491#### Path parameters
532492
from line 508
548508
549509 Optionally set to the `next_page` token from the previous response.
550510
551#### Headers
552
553- `"anthropic-beta": optional array of string`
554
555 Optional header to specify the beta version(s) you want to use.
556
557 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
558
559511#### Returns
560512
561513- `data: array of RbacGroupMember`
from line 578
626578
627579Add a User to an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
628580
629The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
581The RBAC Groups API is available to Claude Enterprise organizations only.
630582
631583#### Path parameters
632584
from line 586
634586
635587 ID of the RBAC Group.
636588
637#### Headers
638
639- `"anthropic-beta": optional array of string`
640
641 Optional header to specify the beta version(s) you want to use.
642
643 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
644
645589#### Body parameters
646590
647591- `user_id: string`
from line 652
708652
709653Remove a User from an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
710654
711The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
655The RBAC Groups API is available to Claude Enterprise organizations only.
712656
713657#### Path parameters
714658
from line 663
719663- `user_id: string`
720664
721665 ID of the User.
722
723#### Headers
724
725- `"anthropic-beta": optional array of string`
726
727 Optional header to specify the beta version(s) you want to use.
728
729 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
730666
731667#### Returns
732668
api/admin/rbac_groups/create Changed · +1 / -9 lines
## Headers
from line 4
44
55Create an RBAC Group in the Claude Enterprise tenant. Groups created via the API have source type `"direct"`.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
8
9## Headers
10
11- `"anthropic-beta": optional array of string`
12
13 Optional header to specify the beta version(s) you want to use.
14
15 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
7The RBAC Groups API is available to Claude Enterprise organizations only.
168
179## Body parameters
1810
api/admin/rbac_groups/delete Changed · +1 / -9 lines
## Headers
from line 4
44
55Delete an RBAC Group. Groups provisioned by an identity provider (source type `"scim"`) cannot be deleted via the API.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Groups API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 11
1111- `group_id: string`
1212
1313 ID of the RBAC Group.
14
15## Headers
16
17- `"anthropic-beta": optional array of string`
18
19 Optional header to specify the beta version(s) you want to use.
20
21 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
2214
2315## Returns
2416
api/admin/rbac_groups/list Changed · +1 / -9 lines
## Headers
from line 4
44
55List RBAC Groups in the Claude Enterprise tenant.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Groups API is available to Claude Enterprise organizations only.
88
99## Query parameters
1010
from line 19
1919- `page: optional string`
2020
2121 Optionally set to the `next_page` token from the previous response.
22
23## Headers
24
25- `"anthropic-beta": optional array of string`
26
27 Optional header to specify the beta version(s) you want to use.
28
29 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
3022
3123## Returns
3224
api/admin/rbac_groups/members Changed · +3 / -27 lines
### Headers ### Headers ### Headers
from line 6
66
77List members of an RBAC Group.
88
9The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
9The RBAC Groups API is available to Claude Enterprise organizations only.
1010
1111### Path parameters
1212
from line 28
2828
2929 Optionally set to the `next_page` token from the previous response.
3030
31### Headers
32
33- `"anthropic-beta": optional array of string`
34
35 Optional header to specify the beta version(s) you want to use.
36
37 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
38
3931### Returns
4032
4133- `data: array of RbacGroupMember`
from line 98
10698
10799Add a User to an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
108100
109The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
101The RBAC Groups API is available to Claude Enterprise organizations only.
110102
111103### Path parameters
112104
from line 106
114106
115107 ID of the RBAC Group.
116108
117### Headers
118
119- `"anthropic-beta": optional array of string`
120
121 Optional header to specify the beta version(s) you want to use.
122
123 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
124
125109### Body parameters
126110
127111- `user_id: string`
from line 172
188172
189173Remove a User from an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
190174
191The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
175The RBAC Groups API is available to Claude Enterprise organizations only.
192176
193177### Path parameters
194178
from line 183
199183- `user_id: string`
200184
201185 ID of the User.
202
203### Headers
204
205- `"anthropic-beta": optional array of string`
206
207 Optional header to specify the beta version(s) you want to use.
208
209 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
210186
211187### Returns
212188
api/admin/rbac_groups/members/create Changed · +1 / -9 lines
## Headers
from line 4
44
55Add a User to an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Groups API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 11
1111- `group_id: string`
1212
1313 ID of the RBAC Group.
14
15## Headers
16
17- `"anthropic-beta": optional array of string`
18
19 Optional header to specify the beta version(s) you want to use.
20
21 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
2214
2315## Body parameters
2416
api/admin/rbac_groups/members/delete Changed · +1 / -9 lines
## Headers
from line 4
44
55Remove a User from an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Groups API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 15
1515- `user_id: string`
1616
1717 ID of the User.
18
19## Headers
20
21- `"anthropic-beta": optional array of string`
22
23 Optional header to specify the beta version(s) you want to use.
24
25 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
2618
2719## Returns
2820
api/admin/rbac_groups/members/list Changed · +1 / -9 lines
## Headers
from line 4
44
55List members of an RBAC Group.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Groups API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 25
2525- `page: optional string`
2626
2727 Optionally set to the `next_page` token from the previous response.
28
29## Headers
30
31- `"anthropic-beta": optional array of string`
32
33 Optional header to specify the beta version(s) you want to use.
34
35 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
3628
3729## Returns
3830
api/admin/rbac_groups/retrieve Changed · +1 / -9 lines
## Headers
from line 4
44
55Retrieve an RBAC Group by ID.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Groups API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 11
1111- `group_id: string`
1212
1313 ID of the RBAC Group.
14
15## Headers
16
17- `"anthropic-beta": optional array of string`
18
19 Optional header to specify the beta version(s) you want to use.
20
21 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
2214
2315## Returns
2416
api/admin/rbac_groups/update Changed · +1 / -9 lines
## Headers
from line 4
44
55Update an RBAC Group's name. Groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API.
66
7The RBAC Groups API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Groups API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 11
1111- `group_id: string`
1212
1313 ID of the RBAC Group.
14
15## Headers
16
17- `"anthropic-beta": optional array of string`
18
19 Optional header to specify the beta version(s) you want to use.
20
21 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
2214
2315## Body parameters
2416
api/admin/rbac_roles Changed · +3 / -27 lines
### Headers ### Headers #### Headers
from line 6
66
77List RBAC Roles in the organization.
88
9The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
9The RBAC Roles API is available to Claude Enterprise organizations only.
1010
1111### Query parameters
1212
from line 22
2222
2323 Optionally set to the `next_page` token from the previous response.
2424
25### Headers
26
27- `"anthropic-beta": optional array of string`
28
29 Optional header to specify the beta version(s) you want to use.
30
31 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
32
3325### Returns
3426
3527- `data: array of RbacRole`
from line 95
10395
10496Retrieve an RBAC Role by ID.
10597
106The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
98The RBAC Roles API is available to Claude Enterprise organizations only.
10799
108100### Path parameters
109101
from line 103
111103
112104 ID of the RBAC Role.
113105
114### Headers
115
116- `"anthropic-beta": optional array of string`
117
118 Optional header to specify the beta version(s) you want to use.
119
120 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
121
122106### Returns
123107
124108- `RbacRole object`
from line 197
213197
214198List the permissions an RBAC Role grants.
215199
216The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
200The RBAC Roles API is available to Claude Enterprise organizations only.
217201
218202#### Path parameters
219203
from line 218
234218- `page: optional string`
235219
236220 Optionally set to the `next_page` token from the previous response.
237
238#### Headers
239
240- `"anthropic-beta": optional array of string`
241
242 Optional header to specify the beta version(s) you want to use.
243
244 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
245221
246222#### Returns
247223
api/admin/rbac_roles/list Changed · +1 / -9 lines
## Headers
from line 4
44
55List RBAC Roles in the organization.
66
7The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Roles API is available to Claude Enterprise organizations only.
88
99## Query parameters
1010
from line 19
1919- `page: optional string`
2020
2121 Optionally set to the `next_page` token from the previous response.
22
23## Headers
24
25- `"anthropic-beta": optional array of string`
26
27 Optional header to specify the beta version(s) you want to use.
28
29 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
3022
3123## Returns
3224
api/admin/rbac_roles/permissions Changed · +1 / -9 lines
### Headers
from line 6
66
77List the permissions an RBAC Role grants.
88
9The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
9The RBAC Roles API is available to Claude Enterprise organizations only.
1010
1111### Path parameters
1212
from line 27
2727- `page: optional string`
2828
2929 Optionally set to the `next_page` token from the previous response.
30
31### Headers
32
33- `"anthropic-beta": optional array of string`
34
35 Optional header to specify the beta version(s) you want to use.
36
37 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
3830
3931### Returns
4032
api/admin/rbac_roles/permissions/list Changed · +1 / -9 lines
## Headers
from line 4
44
55List the permissions an RBAC Role grants.
66
7The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Roles API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 25
2525- `page: optional string`
2626
2727 Optionally set to the `next_page` token from the previous response.
28
29## Headers
30
31- `"anthropic-beta": optional array of string`
32
33 Optional header to specify the beta version(s) you want to use.
34
35 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
3628
3729## Returns
3830
api/admin/rbac_roles/retrieve Changed · +1 / -9 lines
## Headers
from line 4
44
55Retrieve an RBAC Role by ID.
66
7The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
7The RBAC Roles API is available to Claude Enterprise organizations only.
88
99## Path parameters
1010
from line 11
1111- `role_id: string`
1212
1313 ID of the RBAC Role.
14
15## Headers
16
17- `"anthropic-beta": optional array of string`
18
19 Optional header to specify the beta version(s) you want to use.
20
21 To use multiple betas, use a comma separated list like `beta1,beta2` or specify the header multiple times for each beta.
2214
2315## Returns
2416
api/admin/service_accounts/workspaces Changed · +4 / -4 lines
from line 54
5454
5555- `implicit: boolean or null`
5656
57 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.
57 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.
5858
5959- `service_account_id: string`
6060
from line 160
160160
161161 - `implicit: boolean or null`
162162
163 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.
163 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.
164164
165165 - `service_account_id: string`
166166
from line 296
296296
297297 - `implicit: boolean or null`
298298
299 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.
299 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.
300300
301301 - `service_account_id: string`
302302
from line 334
334334
335335 - `implicit: boolean or null`
336336
337 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.
337 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.
338338
339339 - `service_account_id: string`
340340