api-20260828T000723Z / page 5 of 6 / documentation capture

api/admin/workspaces/members/create Changed · +1 / -1 lines

from line 18

1818

1919- `workspace_role: "workspace_admin" or "workspace_developer" or "workspace_restricted_developer" or "workspace_user"`

2020

21 Role of the new Workspace Member. Cannot be "workspace_billing".

21 Role of the new Workspace Member. Cannot be `workspace_billing`.

2222

2323 - `"workspace_admin"`

2424

api/admin/workspaces/service_accounts/create Changed · +1 / -1 lines

from line 54

5454

5555- `implicit: boolean or null`

5656

57 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.

57 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.

5858

5959- `service_account_id: string`

6060

api/admin/workspaces/service_accounts/list Changed · +1 / -1 lines

from line 47

4747

4848 - `implicit: boolean or null`

4949

50 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.

50 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.

5151

5252 - `service_account_id: string`

5353

api/admin/workspaces/service_accounts/retrieve Changed · +1 / -1 lines

from line 37

3737

3838- `implicit: boolean or null`

3939

40 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.

40 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.

4141

4242- `service_account_id: string`

4343

api/admin/workspaces/service_accounts/update Changed · +1 / -1 lines

from line 52

5252

5353- `implicit: boolean or null`

5454

55 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role workspace_user and cannot be removed.

55 True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed.

5656

5757- `service_account_id: string`

5858

api/admin/workspaces/update Changed · +1 / -1 lines

from line 28

2828

2929 - `default_inference_geo: optional "global" or "us" or null`

3030

31 Default inference geo applied when requests omit the parameter. Must be a member of allowed_inference_geos unless allowed_inference_geos is `"unrestricted"`.

31 Default inference geo applied when requests omit the parameter. Must be a member of `allowed_inference_geos` unless `allowed_inference_geos` is `"unrestricted"`.

3232

3333 - `"global"`

3434

build-with-claude/cache-diagnostics Changed · +1 / -1 lines

from line 1081

10811081* **Beta:** Field names and semantics may change while this feature is in beta.

10821082* **Claude API only:** Not available on Amazon Bedrock or Google Cloud.

10831083* **Limited retention:** Fingerprints for `previous_message_id` lookup expire after a short period. Run diagnostic comparisons between closely spaced requests.

1084* **Same workspace:** The previous request must have been made with an API key from the same organization and workspace. To check, compare the `anthropic-workspace-id` [response header](https://platform.claude.com/docs/en/api/overview#response-headers) on the two responses.

1084* **Same workspace:** The previous request must have run in the same organization and workspace. To check, compare the `anthropic-workspace-id` [response header](https://platform.claude.com/docs/en/api/overview#response-headers) on the two responses.

10851085* **Comparison horizon:** For very long conversations where the only change is deep in the message list, the response may be `unavailable` rather than a precise location.

10861086* **Best-effort:** Diagnostics never blocks or fails your request. If diagnostic information is not available, the response returns `unavailable`, or `cache_miss_reason: null` when the comparison was still running.

10871087

build-with-claude/claude-in-amazon-bedrock Changed · +2 / -2 lines

from line 102

102102 <Tabs>

103103 <Tab title="Gradle">

104104 ```kotlin

105 implementation("com.anthropic:anthropic-java-bedrock:2.57.0")

105 implementation("com.anthropic:anthropic-java-bedrock:2.58.0")

106106 ```

107107 </Tab>

108108

from line 111

111111 <dependency>

112112 <groupId>com.anthropic</groupId>

113113 <artifactId>anthropic-java-bedrock</artifactId>

114 <version>2.57.0</version>

114 <version>2.58.0</version>

115115 </dependency>

116116 ```

117117 </Tab>

build-with-claude/claude-in-microsoft-foundry Changed · +2 / -2 lines

from line 77

7777 <Tabs>

7878 <Tab title="Gradle">

7979 ```kotlin

80 implementation("com.anthropic:anthropic-java-foundry:2.57.0")

80 implementation("com.anthropic:anthropic-java-foundry:2.58.0")

8181

8282 // For Entra ID authentication, also add the Azure Identity library

8383 implementation("com.azure:azure-identity:1.18.3")

from line 89

8989 <dependency>

9090 <groupId>com.anthropic</groupId>

9191 <artifactId>anthropic-java-foundry</artifactId>

92 <version>2.57.0</version>

92 <version>2.58.0</version>

9393 </dependency>

9494

9595 <dependency>

build-with-claude/claude-on-amazon-bedrock-legacy Changed · +2 / -2 lines

from line 54

5454 <Tab title="Java">

5555 <CodeGroup>

5656 ```groovy Gradle

57 implementation("com.anthropic:anthropic-java-bedrock:2.57.0")

57 implementation("com.anthropic:anthropic-java-bedrock:2.58.0")

5858 ```

5959

6060 ```xml Maven

from line 61

6161 <dependency>

6262 <groupId>com.anthropic</groupId>

6363 <artifactId>anthropic-java-bedrock</artifactId>

64 <version>2.57.0</version>

64 <version>2.58.0</version>

6565 </dependency>

6666 ```

6767

build-with-claude/files Changed · +2 / -2 lines

from line 25

2525* **Manage your files** with list, retrieve, and delete operations

2626

2727<Warning id="workspace-scoped-access">

28 **Uploaded files are accessible to your entire workspace, not scoped to an end user, conversation, or session.** Any API key in the same workspace can access any file uploaded there, and all of your keys share your organization's Default Workspace unless you have assigned them to separate [workspaces](https://platform.claude.com/docs/en/manage-claude/workspaces#api-keys-and-resource-scoping). Never accept `file_id` values from end users or other untrusted sources: a user-supplied file ID would let one user of your application read content that another user uploaded. Treat file IDs as server-side references, and keep the mapping between your users and their files in your application.

28 **Uploaded files are accessible to your entire workspace, not scoped to an end user, conversation, or session.** Any API key with access to a workspace can access any files uploaded to that workspace. Every service account, and every user whose organization role allows API access, can use the Default Workspace in addition to any workspace you add them to, so keep files that must stay separate in their own [workspace](https://platform.claude.com/docs/en/manage-claude/workspaces#api-keys-and-resource-scoping) and access them only with keys scoped to that workspace. Never accept `file_id` values from end users or other untrusted sources: a user-supplied file ID would let one user of your application read content that another user uploaded. Treat file IDs as server-side references, and keep the mapping between your users and their files in your application.

2929

3030 If you are building a multi-tenant application on the Files API, create a separate [workspace](https://platform.claude.com/docs/en/manage-claude/workspaces) for each tenant. The workspace is the isolation boundary for files, so a workspace per tenant gives each tenant's data hard isolation from every other tenant. Each organization can have up to 100 workspaces; contact your account team if you need more.

3131</Warning>

from line 949

949949

950950### File lifecycle

951951

952* Files are scoped to the workspace of the API key that uploaded them. Any API key in the same workspace can reference them; never accept file IDs from untrusted sources (see the [workspace access warning](https://platform.claude.com/docs/en/build-with-claude/files#workspace-scoped-access))

952* Files are scoped to the workspace they were uploaded in. Any request in the same workspace can reference them; never accept file IDs from untrusted sources (see the [workspace access warning](https://platform.claude.com/docs/en/build-with-claude/files#workspace-scoped-access))

953953* Files cannot be modified or renamed after upload. To change a file's content, upload a new file and delete the old one

954954* Files persist until you delete them with the `DELETE /v1/files/{file_id}` endpoint or they reach their `expires_at`

955955* Deleted files cannot be recovered

build-with-claude/skills-guide Changed · +1 / -1 lines

from line 2153

21532153## Managing custom Skills

21542154

21552155<Warning id="workspace-scoped-access">

2156 **Custom Skills are accessible to your entire workspace, not scoped to an end user, conversation, or session.** Any API key in the same workspace can read, invoke, and delete every custom Skill uploaded there, and all of your keys share your organization's Default Workspace unless you have assigned them to separate [workspaces](https://platform.claude.com/docs/en/manage-claude/workspaces#api-keys-and-resource-scoping).

2156 **Custom Skills are accessible to your entire workspace, not scoped to an end user, conversation, or session.** Any API key with access to a workspace can read, invoke, and delete every custom Skill uploaded to that workspace. Every service account, and every user whose organization role allows API access, can use the Default Workspace in addition to any workspace you add them to, so keep Skills that must stay separate in their own [workspace](https://platform.claude.com/docs/en/manage-claude/workspaces#api-keys-and-resource-scoping) and access them only with keys scoped to that workspace.

21572157

21582158 If you are building a multi-tenant platform on the Skills API, create a separate [workspace](https://platform.claude.com/docs/en/manage-claude/workspaces) for each tenant. The workspace is the isolation boundary for custom Skills, so a workspace per tenant gives each tenant's Skills hard isolation from every other tenant. Each organization can have up to 100 workspaces by default (see [How workspaces work](https://platform.claude.com/docs/en/manage-claude/workspaces#how-workspaces-work)); if you need more for tenant isolation, contact your account team.

21592159</Warning>

cli-sdks-libraries/cli/quickstart Changed · +1 / -1 lines

from line 29

2929 For Linux environments, download the release binary directly.

3030

3131 ```bash

32 VERSION=1.26.1

32 VERSION=1.27.0

3333 OS=$(uname -s | tr '[:upper:]' '[:lower:]')

3434 case $(uname -m) in

3535 x86_64) ARCH=amd64 ;;

cli-sdks-libraries/libraries/openai-sdk Changed · +1 / -0 lines

from line 26

2626

2727 * Update your base URL to point to the Claude API

2828 * Replace your API key with a [Claude API key](https://platform.claude.com/settings/keys)

29 * If your key is a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types) with access to multiple workspaces, also send the `anthropic-workspace-id` header on every request (for example, `default_headers` in the Python SDK or `defaultHeaders` in TypeScript); see [Select a workspace](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace)

2930 * Update your model name to use a [Claude model](https://platform.claude.com/docs/en/models/overview)

3031

31323. Review the following sections for what features are supported

cli-sdks-libraries/sdks/csharp Changed · +1 / -1 lines

from line 64

6464}

6565```

6666

67For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication).

67For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types) with access to multiple workspaces, set the workspace ID in the `anthropic-workspace-id` request header; [Select a workspace](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace) shows the per-request option for this SDK.

6868

6969## Client configuration

7070

cli-sdks-libraries/sdks/go Changed · +1 / -1 lines

from line 63

6363}

6464```

6565

66For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication).

66For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types) with access to multiple workspaces, set the workspace ID in the `anthropic-workspace-id` request header; [Select a workspace](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace) shows the per-request option for this SDK.

6767

6868<AccordionGroup>

6969 <Accordion title="Conversations">

cli-sdks-libraries/sdks/php Changed · +1 / -1 lines

from line 43

4343echo $textBlock->text;

4444```

4545

46For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication).

46For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types) with access to multiple workspaces, set the workspace ID in the `anthropic-workspace-id` request header; [Select a workspace](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace) shows the per-request option for this SDK.

4747

4848## Value objects

4949

cli-sdks-libraries/sdks/python Changed · +1 / -1 lines

from line 69

6969 Consider using [python-dotenv](https://pypi.org/project/python-dotenv/) to add `ANTHROPIC_API_KEY="my-anthropic-api-key"` to your `.env` file so that your API key isn't stored in source control.

7070</Tip>

7171

72For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication).

72For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types) with access to multiple workspaces, set the workspace ID in the `anthropic-workspace-id` request header; [Select a workspace](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace) shows the per-request option for this SDK.

7373

7474## Async usage

7575

cli-sdks-libraries/sdks/ruby Changed · +1 / -1 lines

from line 40

4040end

4141```

4242

43For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication).

43For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types) with access to multiple workspaces, set the workspace ID in the `anthropic-workspace-id` request header; [Select a workspace](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace) shows the per-request option for this SDK.

4444

4545## Streaming

4646

cli-sdks-libraries/sdks/typescript Changed · +1 / -1 lines

from line 55

5555}

5656```

5757

58For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication).

58For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types) with access to multiple workspaces, set the workspace ID in the `anthropic-workspace-id` request header; [Select a workspace](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace) shows the per-request option for this SDK.

5959

6060## Request and response types

6161

get-started Changed · +2 / -2 lines

from line 436

436436 }

437437

438438 dependencies {

439 implementation("com.anthropic:anthropic-java:2.57.0")

439 implementation("com.anthropic:anthropic-java:2.58.0")

440440 }

441441

442442 application {

from line 462

462462 <dependency>

463463 <groupId>com.anthropic</groupId>

464464 <artifactId>anthropic-java</artifactId>

465 <version>2.57.0</version>

465 <version>2.58.0</version>

466466 </dependency>

467467 </dependencies>

468468 </project>

manage-claude/claude-code-analytics-api Changed · +1 / -1 lines

from line 19

1919* **Usage justification:** Provide metrics to justify and expand Claude Code adoption internally

2020

2121<Check>

22 **Admin API key required.** These endpoints require an Admin API key, which is different from a standard Claude API key. See [Create an Admin API key](https://platform.claude.com/docs/en/manage-claude/admin-api-keys) to find where to create one for your organization type and which scopes to select.

22 **Admin API credentials required.** These endpoints are part of the Admin API. You can access them using an [Admin API key](https://platform.claude.com/docs/en/manage-claude/admin-api-keys), an OAuth token with the `org:admin` scope, or a personal or service account key that isn't scoped to a workspace; workspace API keys don't work. See [Authentication](https://platform.claude.com/docs/en/manage-claude/admin-api#authentication) for details.

2323</Check>

2424

2525<Note>

manage-claude/rate-limits-api Changed · +1 / -1 lines

from line 17

1717* **Audit workspace configuration:** Verify that workspace overrides match what your provisioning automation expects.

1818

1919<Check>

20 **Admin API key required.** These endpoints require an Admin API key, which is different from a standard Claude API key. See [Create an Admin API key](https://platform.claude.com/docs/en/manage-claude/admin-api-keys) to find where to create one for your organization type and which scopes to select.

20 **Admin API credentials required.** These endpoints are part of the Admin API. You can access them using an [Admin API key](https://platform.claude.com/docs/en/manage-claude/admin-api-keys), an OAuth token with the `org:admin` scope, or a personal or service account key that isn't scoped to a workspace; workspace API keys don't work. See [Authentication](https://platform.claude.com/docs/en/manage-claude/admin-api#authentication) for details.

2121</Check>

2222

2323The SDK and CLI examples on this page construct the default client, which reads the Admin API key from the `ANTHROPIC_API_KEY` environment variable. The SDKs expose these endpoints as `client.beta.organization.rate_limits` and `client.beta.organization.workspaces.rate_limits`; the Python, TypeScript, C#, Go, and Java list methods return an iterator that follows `next_page` for you, while the PHP, Ruby, and curl examples read one page.

manage-claude/user-management Changed · +2 / -0 lines

from line 517

517517

5185183. Remove members who should no longer be in the group with `DELETE /v1/organizations/rbac_groups/{group_id}/members/{user_id}`. For `scim` groups, make the change in your identity provider instead.

519519

520For a workflow that combines group membership with a temporary spend limit raise, see [Temporarily raise a member's spend limit during an incident](https://platform.claude.com/docs/en/manage-claude/spend-limits-api#temporarily-raise-a-members-spend-limit-during-an-incident) on the Spend Limits API page.

521

520522## Frequently asked questions

521523

522524### Is this a different API from the Admin API?

managed-agents/quickstart Changed · +2 / -2 lines

from line 37

3737 For Linux environments, download the release binary directly.

3838

3939 ```bash

40 VERSION=1.26.1

40 VERSION=1.27.0

4141 OS=$(uname -s | tr '[:upper:]' '[:lower:]')

4242 case $(uname -m) in

4343 x86_64) ARCH=amd64 ;;

from line 88

8888

8989 <Tab title="Java">

9090 ```groovy Gradle

91 implementation("com.anthropic:anthropic-java:2.57.0")

91 implementation("com.anthropic:anthropic-java:2.58.0")

9292 ```

9393 </Tab>

9494

One read of Claude Developer Platformapi-20260828T000723Z

What this read moved