Sweep 22 Sep 2026 · 17:19Z Build v2.1.280 501 read Stable v2.1.267 Latest v2.1.280 Next v2.1.280 Feeds RSS JSON llms.txt Unofficial
One capture · api

One read of Claude Developer Platform

519 pages moved out of 628 read.

api-20260910T183729Z

Pages moved 519 significant first
Pages read 628 in this capture
Captured 18:37 UTC
Corpus hash 29858da7c2f1 corpus-hash

What this read moved

251–275 of 519

This capture is too large to show at once. Changes 251-275 of 519 are below, significant first; the rest are on the following screens.

api/beta/organization/federation/issuers Changed · +62 / -47 lines

from line 1
1---
2title: Issuers
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/issuers
4---
5 
16# Issuers
27 
38## Create Federation Issuer
from line 31
2631 
2732 - `string`
2833 
29 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
34 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3035 
3136 - `"message-batches-2024-09-24"`
3237 
from line 79
7479 
7580 - `"user-profiles-2026-08-18"`
7681 
82 - `"user-profiles-2026-09-04"`
83 
7784 - `"advisor-tool-2026-03-01"`
7885 
7986 - `"managed-agents-2026-04-01"`
from line 183
176183 
177184 JWKS supplied directly; no network fetch.
178185 
186 - `type: "inline"`
187 
179188 - `keys: array of map[unknown]`
180189 
181190 Inline JWK objects.
from line 191
182191 
183192 minItems: 1
184193 
185 - `type: "inline"`
186 
187194- `max_jwt_lifetime_seconds: optional number or null`
188195 
189196 Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Defaults to 3600 (1h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected.
from line 206
199206 Records an external IdP the organization trusts for the RFC 7523
200207 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
201208 
209 - `type: "federation_issuer"`
210 
211 default: federation_issuer
212 
202213 - `id: string`
203214 
204215 Tagged ID of the federation issuer.
from line 284
273284 
274285 JWKS supplied directly; no network fetch.
275286 
287 - `type: "inline"`
288 
276289 - `keys: array of map[unknown]`
277290 
278291 Inline JWK objects.
from line 292
279292 
280293 minItems: 1
281294 
282 - `type: "inline"`
283 
284295 - `jwks_polling_disabled_at: string or null`
285296 
286297 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 330
319330 
320331 format: date-time
321332 
322 - `type: "federation_issuer"`
323 
324 default: federation_issuer
325 
326333 - `updated_at: string`
327334 
328335 When this issuer was last updated.
from line 419
412419 
413420 - `string`
414421 
415 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
422 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
416423 
417424 - `"message-batches-2024-09-24"`
418425 
from line 467
460467 
461468 - `"user-profiles-2026-08-18"`
462469 
470 - `"user-profiles-2026-09-04"`
471 
463472 - `"advisor-tool-2026-03-01"`
464473 
465474 - `"managed-agents-2026-04-01"`
from line 515
506515 
507516- `data: array of BetaFederationIssuer`
508517 
518 - `type: "federation_issuer"`
519 
520 default: federation_issuer
521 
509522 - `id: string`
510523 
511524 Tagged ID of the federation issuer.
from line 593
580593 
581594 JWKS supplied directly; no network fetch.
582595 
596 - `type: "inline"`
597 
583598 - `keys: array of map[unknown]`
584599 
585600 Inline JWK objects.
from line 601
586601 
587602 minItems: 1
588603 
589 - `type: "inline"`
590 
591604 - `jwks_polling_disabled_at: string or null`
592605 
593606 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 639
626639 
627640 format: date-time
628641 
629 - `type: "federation_issuer"`
630 
631 default: federation_issuer
632 
633642 - `updated_at: string`
634643 
635644 When this issuer was last updated.
from line 718
709718 
710719 - `string`
711720 
712 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
721 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
713722 
714723 - `"message-batches-2024-09-24"`
715724 
from line 766
757766 
758767 - `"user-profiles-2026-08-18"`
759768 
769 - `"user-profiles-2026-09-04"`
770 
760771 - `"advisor-tool-2026-03-01"`
761772 
762773 - `"managed-agents-2026-04-01"`
from line 819
808819 Records an external IdP the organization trusts for the RFC 7523
809820 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
810821 
822 - `type: "federation_issuer"`
823 
824 default: federation_issuer
825 
811826 - `id: string`
812827 
813828 Tagged ID of the federation issuer.
from line 897
882897 
883898 JWKS supplied directly; no network fetch.
884899 
900 - `type: "inline"`
901 
885902 - `keys: array of map[unknown]`
886903 
887904 Inline JWK objects.
from line 905
888905 
889906 minItems: 1
890907 
891 - `type: "inline"`
892 
893908 - `jwks_polling_disabled_at: string or null`
894909 
895910 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 943
928943 
929944 format: date-time
930945 
931 - `type: "federation_issuer"`
932 
933 default: federation_issuer
934 
935946 - `updated_at: string`
936947 
937948 When this issuer was last updated.
from line 1020
10091020 
10101021 - `string`
10111022 
1012 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
1023 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
10131024 
10141025 - `"message-batches-2024-09-24"`
10151026 
from line 1068
10571068 
10581069 - `"user-profiles-2026-08-18"`
10591070 
1071 - `"user-profiles-2026-09-04"`
1072 
10601073 - `"advisor-tool-2026-03-01"`
10611074 
10621075 - `"managed-agents-2026-04-01"`
from line 1166
11531166 
11541167 JWKS supplied directly; no network fetch.
11551168 
1169 - `type: "inline"`
1170 
11561171 - `keys: array of map[unknown]`
11571172 
11581173 Inline JWK objects.
from line 1174
11591174 
11601175 minItems: 1
11611176 
1162 - `type: "inline"`
1163 
11641177- `jwks_polling_disabled: optional boolean or null`
11651178 
11661179 Only `false` is accepted, to re-enable polling after the system pauses it. Polling is paused automatically; sending `true` is rejected.
from line 1199
11861199 Records an external IdP the organization trusts for the RFC 7523
11871200 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
11881201 
1202 - `type: "federation_issuer"`
1203 
1204 default: federation_issuer
1205 
11891206 - `id: string`
11901207 
11911208 Tagged ID of the federation issuer.
from line 1277
12601277 
12611278 JWKS supplied directly; no network fetch.
12621279 
1280 - `type: "inline"`
1281 
12631282 - `keys: array of map[unknown]`
12641283 
12651284 Inline JWK objects.
from line 1285
12661285 
12671286 minItems: 1
12681287 
1269 - `type: "inline"`
1270 
12711288 - `jwks_polling_disabled_at: string or null`
12721289 
12731290 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 1323
13061323 
13071324 format: date-time
13081325 
1309 - `type: "federation_issuer"`
1310 
1311 default: federation_issuer
1312 
13131326 - `updated_at: string`
13141327 
13151328 When this issuer was last updated.
from line 1400
13871400 
13881401 - `string`
13891402 
1390 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
1403 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
13911404 
13921405 - `"message-batches-2024-09-24"`
13931406 
from line 1448
14351448 
14361449 - `"user-profiles-2026-08-18"`
14371450 
1451 - `"user-profiles-2026-09-04"`
1452 
14381453 - `"advisor-tool-2026-03-01"`
14391454 
14401455 - `"managed-agents-2026-04-01"`
from line 1501
14861501 Records an external IdP the organization trusts for the RFC 7523
14871502 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
14881503 
1504 - `type: "federation_issuer"`
1505 
1506 default: federation_issuer
1507 
14891508 - `id: string`
14901509 
14911510 Tagged ID of the federation issuer.
from line 1579
15601579 
15611580 JWKS supplied directly; no network fetch.
15621581 
1582 - `type: "inline"`
1583 
15631584 - `keys: array of map[unknown]`
15641585 
15651586 Inline JWK objects.
from line 1587
15661587 
15671588 minItems: 1
15681589 
1569 - `type: "inline"`
1570 
15711590 - `jwks_polling_disabled_at: string or null`
15721591 
15731592 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 1625
16061625 
16071626 format: date-time
16081627 
1609 - `type: "federation_issuer"`
1610 
1611 default: federation_issuer
1612 
16131628 - `updated_at: string`
16141629 
16151630 When this issuer was last updated.
from line 1685
16701685 Records an external IdP the organization trusts for the RFC 7523
16711686 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
16721687 
1688 - `type: "federation_issuer"`
1689 
1690 default: federation_issuer
1691 
16731692 - `id: string`
16741693 
16751694 Tagged ID of the federation issuer.
from line 1763
17441763 
17451764 JWKS supplied directly; no network fetch.
17461765 
1766 - `type: "inline"`
1767 
17471768 - `keys: array of map[unknown]`
17481769 
17491770 Inline JWK objects.
from line 1771
17501771 
17511772 minItems: 1
17521773 
1753 - `type: "inline"`
1754 
17551774 - `jwks_polling_disabled_at: string or null`
17561775 
17571776 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 1809
17901809 
17911810 format: date-time
17921811 
1793 - `type: "federation_issuer"`
1794 
1795 default: federation_issuer
1796 
17971812 - `updated_at: string`
17981813 
17991814 When this issuer was last updated.
from line 1889
18741889 
18751890 JWKS supplied directly; no network fetch.
18761891 
1892 - `type: "inline"`
1893 
18771894 - `keys: array of map[unknown]`
18781895 
18791896 Inline JWK objects.
18801897 
18811898 minItems: 1
1882 
1883 - `type: "inline"`
18841899 

api/beta/organization/federation/issuers/archive Changed · +14 / -7 lines

from line 1
1---
2title: Archive Federation Issuer
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/issuers/archive
4---
5 
16# Archive Federation Issuer
27 
38**POST** `/v1/organizations/federation_issuers/{federation_issuer_id}/archive`
from line 30
2530 
2631 - `string`
2732 
28 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
33 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2934 
3035 - `"message-batches-2024-09-24"`
3136 
from line 78
7378 
7479 - `"user-profiles-2026-08-18"`
7580 
81 - `"user-profiles-2026-09-04"`
82 
7683 - `"advisor-tool-2026-03-01"`
7784 
7885 - `"managed-agents-2026-04-01"`
from line 131
124131 Records an external IdP the organization trusts for the RFC 7523
125132 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
126133 
134 - `type: "federation_issuer"`
135 
136 default: federation_issuer
137 
127138 - `id: string`
128139 
129140 Tagged ID of the federation issuer.
from line 209
198209 
199210 JWKS supplied directly; no network fetch.
200211 
212 - `type: "inline"`
213 
201214 - `keys: array of map[unknown]`
202215 
203216 Inline JWK objects.
from line 217
204217 
205218 minItems: 1
206219 
207 - `type: "inline"`
208 
209220 - `jwks_polling_disabled_at: string or null`
210221 
211222 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 254
243254 When the next fetch is scheduled. Null if paused.
244255 
245256 format: date-time
246 
247 - `type: "federation_issuer"`
248 
249 default: federation_issuer
250257 
251258 - `updated_at: string`
252259 

api/beta/organization/federation/issuers/create Changed · +16 / -9 lines

from line 1
1---
2title: Create Federation Issuer
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/issuers/create
4---
5 
16# Create Federation Issuer
27 
38**POST** `/v1/organizations/federation_issuers`
from line 29
2429 
2530 - `string`
2631 
27 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
32 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2833 
2934 - `"message-batches-2024-09-24"`
3035 
from line 77
7277 
7378 - `"user-profiles-2026-08-18"`
7479 
80 - `"user-profiles-2026-09-04"`
81 
7582 - `"advisor-tool-2026-03-01"`
7683 
7784 - `"managed-agents-2026-04-01"`
from line 181
174181 
175182 JWKS supplied directly; no network fetch.
176183 
184 - `type: "inline"`
185 
177186 - `keys: array of map[unknown]`
178187 
179188 Inline JWK objects.
from line 189
180189 
181190 minItems: 1
182191 
183 - `type: "inline"`
184 
185192- `max_jwt_lifetime_seconds: optional number or null`
186193 
187194 Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Defaults to 3600 (1h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected.
from line 204
197204 Records an external IdP the organization trusts for the RFC 7523
198205 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
199206 
207 - `type: "federation_issuer"`
208 
209 default: federation_issuer
210 
200211 - `id: string`
201212 
202213 Tagged ID of the federation issuer.
from line 282
271282 
272283 JWKS supplied directly; no network fetch.
273284 
285 - `type: "inline"`
286 
274287 - `keys: array of map[unknown]`
275288 
276289 Inline JWK objects.
from line 290
277290 
278291 minItems: 1
279292 
280 - `type: "inline"`
281 
282293 - `jwks_polling_disabled_at: string or null`
283294 
284295 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 327
316327 When the next fetch is scheduled. Null if paused.
317328 
318329 format: date-time
319 
320 - `type: "federation_issuer"`
321 
322 default: federation_issuer
323330 
324331 - `updated_at: string`
325332 

api/beta/organization/federation/issuers/list Changed · +14 / -7 lines

from line 1
1---
2title: List Federation Issuers
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/issuers/list
4---
5 
16# List Federation Issuers
27 
38**GET** `/v1/organizations/federation_issuers`
from line 39
3439 
3540 - `string`
3641 
37 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
42 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3843 
3944 - `"message-batches-2024-09-24"`
4045 
from line 87
8287 
8388 - `"user-profiles-2026-08-18"`
8489 
90 - `"user-profiles-2026-09-04"`
91 
8592 - `"advisor-tool-2026-03-01"`
8693 
8794 - `"managed-agents-2026-04-01"`
from line 135
128135 
129136- `data: array of BetaFederationIssuer`
130137 
138 - `type: "federation_issuer"`
139 
140 default: federation_issuer
141 
131142 - `id: string`
132143 
133144 Tagged ID of the federation issuer.
from line 213
202213 
203214 JWKS supplied directly; no network fetch.
204215 
216 - `type: "inline"`
217 
205218 - `keys: array of map[unknown]`
206219 
207220 Inline JWK objects.
from line 221
208221 
209222 minItems: 1
210223 
211 - `type: "inline"`
212 
213224 - `jwks_polling_disabled_at: string or null`
214225 
215226 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 258
247258 When the next fetch is scheduled. Null if paused.
248259 
249260 format: date-time
250 
251 - `type: "federation_issuer"`
252 
253 default: federation_issuer
254261 
255262 - `updated_at: string`
256263 

api/beta/organization/federation/issuers/retrieve Changed · +14 / -7 lines

from line 1
1---
2title: Get Federation Issuer
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/issuers/retrieve
4---
5 
16# Get Federation Issuer
27 
38**GET** `/v1/organizations/federation_issuers/{federation_issuer_id}`
from line 25
2025 
2126 - `string`
2227 
23 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
28 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2429 
2530 - `"message-batches-2024-09-24"`
2631 
from line 73
6873 
6974 - `"user-profiles-2026-08-18"`
7075 
76 - `"user-profiles-2026-09-04"`
77 
7178 - `"advisor-tool-2026-03-01"`
7279 
7380 - `"managed-agents-2026-04-01"`
from line 126
119126 Records an external IdP the organization trusts for the RFC 7523
120127 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
121128 
129 - `type: "federation_issuer"`
130 
131 default: federation_issuer
132 
122133 - `id: string`
123134 
124135 Tagged ID of the federation issuer.
from line 204
193204 
194205 JWKS supplied directly; no network fetch.
195206 
207 - `type: "inline"`
208 
196209 - `keys: array of map[unknown]`
197210 
198211 Inline JWK objects.
from line 212
199212 
200213 minItems: 1
201214 
202 - `type: "inline"`
203 
204215 - `jwks_polling_disabled_at: string or null`
205216 
206217 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 249
238249 When the next fetch is scheduled. Null if paused.
239250 
240251 format: date-time
241 
242 - `type: "federation_issuer"`
243 
244 default: federation_issuer
245252 
246253 - `updated_at: string`
247254 

api/beta/organization/federation/issuers/update Changed · +16 / -9 lines

from line 1
1---
2title: Update Federation Issuer
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/issuers/update
4---
5 
16# Update Federation Issuer
27 
38**POST** `/v1/organizations/federation_issuers/{federation_issuer_id}`
from line 32
2732 
2833 - `string`
2934 
30 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
35 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3136 
3237 - `"message-batches-2024-09-24"`
3338 
from line 80
7580 
7681 - `"user-profiles-2026-08-18"`
7782 
83 - `"user-profiles-2026-09-04"`
84 
7885 - `"advisor-tool-2026-03-01"`
7986 
8087 - `"managed-agents-2026-04-01"`
from line 178
171178 
172179 JWKS supplied directly; no network fetch.
173180 
181 - `type: "inline"`
182 
174183 - `keys: array of map[unknown]`
175184 
176185 Inline JWK objects.
from line 186
177186 
178187 minItems: 1
179188 
180 - `type: "inline"`
181 
182189- `jwks_polling_disabled: optional boolean or null`
183190 
184191 Only `false` is accepted, to re-enable polling after the system pauses it. Polling is paused automatically; sending `true` is rejected.
from line 211
204211 Records an external IdP the organization trusts for the RFC 7523
205212 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
206213 
214 - `type: "federation_issuer"`
215 
216 default: federation_issuer
217 
207218 - `id: string`
208219 
209220 Tagged ID of the federation issuer.
from line 289
278289 
279290 JWKS supplied directly; no network fetch.
280291 
292 - `type: "inline"`
293 
281294 - `keys: array of map[unknown]`
282295 
283296 Inline JWK objects.
from line 297
284297 
285298 minItems: 1
286299 
287 - `type: "inline"`
288 
289300 - `jwks_polling_disabled_at: string or null`
290301 
291302 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 334
323334 When the next fetch is scheduled. Null if paused.
324335 
325336 format: date-time
326 
327 - `type: "federation_issuer"`
328 
329 default: federation_issuer
330337 
331338 - `updated_at: string`
332339 

api/beta/organization/federation/rules Changed · +87 / -66 lines

from line 1
1---
2title: Rules
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules
4---
5 
16# Rules
27 
38## Create Federation Rule
from line 35
3035 
3136 - `string`
3237 
33 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
38 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3439 
3540 - `"message-batches-2024-09-24"`
3641 
from line 83
7883 
7984 - `"user-profiles-2026-08-18"`
8085 
86 - `"user-profiles-2026-09-04"`
87 
8188 - `"advisor-tool-2026-03-01"`
8289 
8390 - `"managed-agents-2026-04-01"`
from line 175
168175 
169176 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
170177 
178 - `type: "service_account"`
179 
171180 - `service_account_id: string`
172181 
173182 Tagged ID of the service account to mint tokens for.
174183 
175 - `type: "service_account"`
176 
177184 - `service_account_name: optional string or null`
178185 
179186 Service account's display name at read time. Ignored on writes.
from line 224
217224 rules carrying only the legacy `workspace_id` binding do not enforce
218225 this.
219226 
227 - `type: "federation_rule"`
228 
229 default: federation_rule
230 
220231 - `id: string`
221232 
222233 Tagged ID of the federation rule.
from line 310
299310 
300311 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
301312 
313 - `type: "service_account"`
314 
302315 - `service_account_id: string`
303316 
304317 Tagged ID of the service account to mint tokens for.
305318 
306 - `type: "service_account"`
307 
308319 - `service_account_name: optional string or null`
309320 
310321 Service account's display name at read time. Ignored on writes.
from line 324
313324 
314325 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
315326 
316 - `type: "federation_rule"`
317 
318 default: federation_rule
319 
320327 - `updated_at: string`
321328 
322329 When this rule was last updated.
from line 444
437444 
438445 - `string`
439446 
440 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
447 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
441448 
442449 - `"message-batches-2024-09-24"`
443450 
from line 492
485492 
486493 - `"user-profiles-2026-08-18"`
487494 
495 - `"user-profiles-2026-09-04"`
496 
488497 - `"advisor-tool-2026-03-01"`
489498 
490499 - `"managed-agents-2026-04-01"`
from line 540
531540 
532541- `data: array of BetaFederationRule`
533542 
543 - `type: "federation_rule"`
544 
545 default: federation_rule
546 
534547 - `id: string`
535548 
536549 Tagged ID of the federation rule.
from line 626
613626 
614627 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
615628 
629 - `type: "service_account"`
630 
616631 - `service_account_id: string`
617632 
618633 Tagged ID of the service account to mint tokens for.
619634 
620 - `type: "service_account"`
621 
622635 - `service_account_name: optional string or null`
623636 
624637 Service account's display name at read time. Ignored on writes.
from line 640
627640 
628641 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
629642 
630 - `type: "federation_rule"`
631 
632 default: federation_rule
633 
634643 - `updated_at: string`
635644 
636645 When this rule was last updated.
from line 739
730739 
731740 - `string`
732741 
733 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
742 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
734743 
735744 - `"message-batches-2024-09-24"`
736745 
from line 787
778787 
779788 - `"user-profiles-2026-08-18"`
780789 
790 - `"user-profiles-2026-09-04"`
791 
781792 - `"advisor-tool-2026-03-01"`
782793 
783794 - `"managed-agents-2026-04-01"`
from line 846
835846 rules carrying only the legacy `workspace_id` binding do not enforce
836847 this.
837848 
849 - `type: "federation_rule"`
850 
851 default: federation_rule
852 
838853 - `id: string`
839854 
840855 Tagged ID of the federation rule.
from line 932
917932 
918933 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
919934 
935 - `type: "service_account"`
936 
920937 - `service_account_id: string`
921938 
922939 Tagged ID of the service account to mint tokens for.
923940 
924 - `type: "service_account"`
925 
926941 - `service_account_name: optional string or null`
927942 
928943 Service account's display name at read time. Ignored on writes.
from line 946
931946 
932947 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
933948 
934 - `type: "federation_rule"`
935 
936 default: federation_rule
937 
938949 - `updated_at: string`
939950 
940951 When this rule was last updated.
from line 1052
10411052 
10421053 - `string`
10431054 
1044 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
1055 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
10451056 
10461057 - `"message-batches-2024-09-24"`
10471058 
from line 1100
10891100 
10901101 - `"user-profiles-2026-08-18"`
10911102 
1103 - `"user-profiles-2026-09-04"`
1104 
10921105 - `"advisor-tool-2026-03-01"`
10931106 
10941107 - `"managed-agents-2026-04-01"`
from line 1206
11931206 
11941207 Bind to a fixed service account by ID.
11951208 
1209 - `type: "service_account"`
1210 
11961211 - `service_account_id: string`
11971212 
11981213 Tagged ID of the service account to mint tokens for.
11991214 
1200 - `type: "service_account"`
1201 
12021215 - `service_account_name: optional string or null`
12031216 
12041217 Service account's display name at read time. Ignored on writes.
from line 1241
12281241 rules carrying only the legacy `workspace_id` binding do not enforce
12291242 this.
12301243 
1244 - `type: "federation_rule"`
1245 
1246 default: federation_rule
1247 
12311248 - `id: string`
12321249 
12331250 Tagged ID of the federation rule.
from line 1327
13101327 
13111328 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
13121329 
1330 - `type: "service_account"`
1331 
13131332 - `service_account_id: string`
13141333 
13151334 Tagged ID of the service account to mint tokens for.
13161335 
1317 - `type: "service_account"`
1318 
13191336 - `service_account_name: optional string or null`
13201337 
13211338 Service account's display name at read time. Ignored on writes.
from line 1341
13241341 
13251342 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
13261343 
1327 - `type: "federation_rule"`
1328 
1329 default: federation_rule
1330 
13311344 - `updated_at: string`
13321345 
13331346 When this rule was last updated.
from line 1441
14281441 
14291442 - `string`
14301443 
1431 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
1444 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
14321445 
14331446 - `"message-batches-2024-09-24"`
14341447 
from line 1489
14761489 
14771490 - `"user-profiles-2026-08-18"`
14781491 
1492 - `"user-profiles-2026-09-04"`
1493 
14791494 - `"advisor-tool-2026-03-01"`
14801495 
14811496 - `"managed-agents-2026-04-01"`
from line 1548
15331548 rules carrying only the legacy `workspace_id` binding do not enforce
15341549 this.
15351550 
1551 - `type: "federation_rule"`
1552 
1553 default: federation_rule
1554 
15361555 - `id: string`
15371556 
15381557 Tagged ID of the federation rule.
from line 1634
16151634 
16161635 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
16171636 
1637 - `type: "service_account"`
1638 
16181639 - `service_account_id: string`
16191640 
16201641 Tagged ID of the service account to mint tokens for.
16211642 
1622 - `type: "service_account"`
1623 
16241643 - `service_account_name: optional string or null`
16251644 
16261645 Service account's display name at read time. Ignored on writes.
from line 1648
16291648 
16301649 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
16311650 
1632 - `type: "federation_rule"`
1633 
1634 default: federation_rule
1635 
16361651 - `updated_at: string`
16371652 
16381653 When this rule was last updated.
from line 1734
17191734 rules carrying only the legacy `workspace_id` binding do not enforce
17201735 this.
17211736 
1737 - `type: "federation_rule"`
1738 
1739 default: federation_rule
1740 
17221741 - `id: string`
17231742 
17241743 Tagged ID of the federation rule.
from line 1820
18011820 
18021821 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
18031822 
1823 - `type: "service_account"`
1824 
18041825 - `service_account_id: string`
18051826 
18061827 Tagged ID of the service account to mint tokens for.
18071828 
1808 - `type: "service_account"`
1809 
18101829 - `service_account_name: optional string or null`
18111830 
18121831 Service account's display name at read time. Ignored on writes.
from line 1834
18151834 
18161835 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
18171836 
1818 - `type: "federation_rule"`
1819 
1820 default: federation_rule
1821 
18221837 - `updated_at: string`
18231838 
18241839 When this rule was last updated.
from line 1888
18731888 
18741889- `BetaFederationRuleWorkspace object`
18751890 
1891 - `type: "federation_rule_workspace"`
1892 
1893 default: federation_rule_workspace
1894 
18761895 - `created_at: string`
18771896 
18781897 When this workspace was enabled for the rule.
from line 1906
18871906 
18881907 Tagged ID of the federation rule.
18891908 
1890 - `type: "federation_rule_workspace"`
1891 
1892 default: federation_rule_workspace
1893 
18941909 - `workspace_id: string`
18951910 
18961911 Tagged ID of the workspace this rule is enabled for.
from line 1920
19051920 
19061921 Bind to a fixed service account by ID.
19071922 
1923 - `type: "service_account"`
1924 
19081925 - `service_account_id: string`
19091926 
19101927 Tagged ID of the service account to mint tokens for.
19111928 
1912 - `type: "service_account"`
1913 
19141929 - `service_account_name: optional string or null`
19151930 
19161931 Service account's display name at read time. Ignored on writes.
from line 1963
19481963 
19491964 - `string`
19501965 
1951 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
1966 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
19521967 
19531968 - `"message-batches-2024-09-24"`
19541969 
from line 2011
19962011 
19972012 - `"user-profiles-2026-08-18"`
19982013 
2014 - `"user-profiles-2026-09-04"`
2015 
19992016 - `"advisor-tool-2026-03-01"`
20002017 
20012018 - `"managed-agents-2026-04-01"`
from line 2065
20482065 
20492066- `BetaFederationRuleWorkspace object`
20502067 
2068 - `type: "federation_rule_workspace"`
2069 
2070 default: federation_rule_workspace
2071 
20512072 - `created_at: string`
20522073 
20532074 When this workspace was enabled for the rule.
from line 2083
20622083 
20632084 Tagged ID of the federation rule.
20642085 
2065 - `type: "federation_rule_workspace"`
2066 
2067 default: federation_rule_workspace
2068 
20692086 - `workspace_id: string`
20702087 
20712088 Tagged ID of the workspace this rule is enabled for.
from line 2156
21392156 
21402157 - `string`
21412158 
2142 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
2159 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
21432160 
21442161 - `"message-batches-2024-09-24"`
21452162 
from line 2204
21872204 
21882205 - `"user-profiles-2026-08-18"`
21892206 
2207 - `"user-profiles-2026-09-04"`
2208 
21902209 - `"advisor-tool-2026-03-01"`
21912210 
21922211 - `"managed-agents-2026-04-01"`
from line 2252
22332252 
22342253- `data: array of BetaFederationRuleWorkspace`
22352254 
2255 - `type: "federation_rule_workspace"`
2256 
2257 default: federation_rule_workspace
2258 
22362259 - `created_at: string`
22372260 
22382261 When this workspace was enabled for the rule.
from line 2270
22472270 
22482271 Tagged ID of the federation rule.
22492272 
2250 - `type: "federation_rule_workspace"`
2251 
2252 default: federation_rule_workspace
2253 
22542273 - `workspace_id: string`
22552274 
22562275 Tagged ID of the workspace this rule is enabled for.
from line 2339
23202339 
23212340 - `string`
23222341 
2323 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
2342 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
23242343 
23252344 - `"message-batches-2024-09-24"`
23262345 
from line 2387
23682387 
23692388 - `"user-profiles-2026-08-18"`
23702389 
2390 - `"user-profiles-2026-09-04"`
2391 
23712392 - `"advisor-tool-2026-03-01"`
23722393 
23732394 - `"managed-agents-2026-04-01"`
from line 2433
24122433 
24132434#### Returns
24142435 
2415- `federation_rule_id: string`
2416 
2417 Tagged ID of the federation rule.
2418 
24192436- `type: "federation_rule_workspace_deleted"`
24202437 
24212438 default: federation_rule_workspace_deleted
2439 
2440- `federation_rule_id: string`
2441 
2442 Tagged ID of the federation rule.
24222443 
24232444- `workspace_id: string`
24242445 

api/beta/organization/federation/rules/archive Changed · +14 / -7 lines

from line 1
1---
2title: Archive Federation Rule
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/archive
4---
5 
16# Archive Federation Rule
27 
38**POST** `/v1/organizations/federation_rules/{federation_rule_id}/archive`
from line 33
2833 
2934 - `string`
3035 
31 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
36 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3237 
3338 - `"message-batches-2024-09-24"`
3439 
from line 81
7681 
7782 - `"user-profiles-2026-08-18"`
7883 
84 - `"user-profiles-2026-09-04"`
85 
7986 - `"advisor-tool-2026-03-01"`
8087 
8188 - `"managed-agents-2026-04-01"`
from line 140
133140 rules carrying only the legacy `workspace_id` binding do not enforce
134141 this.
135142 
143 - `type: "federation_rule"`
144 
145 default: federation_rule
146 
136147 - `id: string`
137148 
138149 Tagged ID of the federation rule.
from line 226
215226 
216227 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
217228 
229 - `type: "service_account"`
230 
218231 - `service_account_id: string`
219232 
220233 Tagged ID of the service account to mint tokens for.
221234 
222 - `type: "service_account"`
223 
224235 - `service_account_name: optional string or null`
225236 
226237 Service account's display name at read time. Ignored on writes.
from line 239
228239 - `token_lifetime_seconds: number`
229240 
230241 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
231 
232 - `type: "federation_rule"`
233 
234 default: federation_rule
235242 
236243 - `updated_at: string`
237244 

api/beta/organization/federation/rules/create Changed · +16 / -9 lines

from line 1
1---
2title: Create Federation Rule
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/create
4---
5 
16# Create Federation Rule
27 
38**POST** `/v1/organizations/federation_rules`
from line 33
2833 
2934 - `string`
3035 
31 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
36 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3237 
3338 - `"message-batches-2024-09-24"`
3439 
from line 81
7681 
7782 - `"user-profiles-2026-08-18"`
7883 
84 - `"user-profiles-2026-09-04"`
85 
7986 - `"advisor-tool-2026-03-01"`
8087 
8188 - `"managed-agents-2026-04-01"`
from line 173
166173 
167174 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
168175 
176 - `type: "service_account"`
177 
169178 - `service_account_id: string`
170179 
171180 Tagged ID of the service account to mint tokens for.
172181 
173 - `type: "service_account"`
174 
175182 - `service_account_name: optional string or null`
176183 
177184 Service account's display name at read time. Ignored on writes.
from line 222
215222 rules carrying only the legacy `workspace_id` binding do not enforce
216223 this.
217224 
225 - `type: "federation_rule"`
226 
227 default: federation_rule
228 
218229 - `id: string`
219230 
220231 Tagged ID of the federation rule.
from line 308
297308 
298309 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
299310 
311 - `type: "service_account"`
312 
300313 - `service_account_id: string`
301314 
302315 Tagged ID of the service account to mint tokens for.
303316 
304 - `type: "service_account"`
305 
306317 - `service_account_name: optional string or null`
307318 
308319 Service account's display name at read time. Ignored on writes.
from line 321
310321 - `token_lifetime_seconds: number`
311322 
312323 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
313 
314 - `type: "federation_rule"`
315 
316 default: federation_rule
317324 
318325 - `updated_at: string`
319326 

api/beta/organization/federation/rules/list Changed · +14 / -7 lines

from line 1
1---
2title: List Federation Rules
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/list
4---
5 
16# List Federation Rules
27 
38**GET** `/v1/organizations/federation_rules`
from line 44
3944 
4045 - `string`
4146 
42 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
47 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
4348 
4449 - `"message-batches-2024-09-24"`
4550 
from line 92
8792 
8893 - `"user-profiles-2026-08-18"`
8994 
95 - `"user-profiles-2026-09-04"`
96 
9097 - `"advisor-tool-2026-03-01"`
9198 
9299 - `"managed-agents-2026-04-01"`
from line 140
133140 
134141- `data: array of BetaFederationRule`
135142 
143 - `type: "federation_rule"`
144 
145 default: federation_rule
146 
136147 - `id: string`
137148 
138149 Tagged ID of the federation rule.
from line 226
215226 
216227 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
217228 
229 - `type: "service_account"`
230 
218231 - `service_account_id: string`
219232 
220233 Tagged ID of the service account to mint tokens for.
221234 
222 - `type: "service_account"`
223 
224235 - `service_account_name: optional string or null`
225236 
226237 Service account's display name at read time. Ignored on writes.
from line 239
228239 - `token_lifetime_seconds: number`
229240 
230241 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
231 
232 - `type: "federation_rule"`
233 
234 default: federation_rule
235242 
236243 - `updated_at: string`
237244 

api/beta/organization/federation/rules/retrieve Changed · +14 / -7 lines

from line 1
1---
2title: Get Federation Rule
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/retrieve
4---
5 
16# Get Federation Rule
27 
38**GET** `/v1/organizations/federation_rules/{federation_rule_id}`
from line 25
2025 
2126 - `string`
2227 
23 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
28 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2429 
2530 - `"message-batches-2024-09-24"`
2631 
from line 73
6873 
6974 - `"user-profiles-2026-08-18"`
7075 
76 - `"user-profiles-2026-09-04"`
77 
7178 - `"advisor-tool-2026-03-01"`
7279 
7380 - `"managed-agents-2026-04-01"`
from line 132
125132 rules carrying only the legacy `workspace_id` binding do not enforce
126133 this.
127134 
135 - `type: "federation_rule"`
136 
137 default: federation_rule
138 
128139 - `id: string`
129140 
130141 Tagged ID of the federation rule.
from line 218
207218 
208219 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
209220 
221 - `type: "service_account"`
222 
210223 - `service_account_id: string`
211224 
212225 Tagged ID of the service account to mint tokens for.
213226 
214 - `type: "service_account"`
215 
216227 - `service_account_name: optional string or null`
217228 
218229 Service account's display name at read time. Ignored on writes.
from line 231
220231 - `token_lifetime_seconds: number`
221232 
222233 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
223 
224 - `type: "federation_rule"`
225 
226 default: federation_rule
227234 
228235 - `updated_at: string`
229236 

api/beta/organization/federation/rules/update Changed · +16 / -9 lines

from line 1
1---
2title: Update Federation Rule
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/update
4---
5 
16# Update Federation Rule
27 
38**POST** `/v1/organizations/federation_rules/{federation_rule_id}`
from line 41
3641 
3742 - `string`
3843 
39 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
44 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
4045 
4146 - `"message-batches-2024-09-24"`
4247 
from line 89
8489 
8590 - `"user-profiles-2026-08-18"`
8691 
92 - `"user-profiles-2026-09-04"`
93 
8794 - `"advisor-tool-2026-03-01"`
8895 
8996 - `"managed-agents-2026-04-01"`
from line 195
188195 
189196 Bind to a fixed service account by ID.
190197 
198 - `type: "service_account"`
199 
191200 - `service_account_id: string`
192201 
193202 Tagged ID of the service account to mint tokens for.
194203 
195 - `type: "service_account"`
196 
197204 - `service_account_name: optional string or null`
198205 
199206 Service account's display name at read time. Ignored on writes.
from line 230
223230 rules carrying only the legacy `workspace_id` binding do not enforce
224231 this.
225232 
233 - `type: "federation_rule"`
234 
235 default: federation_rule
236 
226237 - `id: string`
227238 
228239 Tagged ID of the federation rule.
from line 316
305316 
306317 Identity that tokens minted via this rule act as. Currently always a `service_account` target.
307318 
319 - `type: "service_account"`
320 
308321 - `service_account_id: string`
309322 
310323 Tagged ID of the service account to mint tokens for.
311324 
312 - `type: "service_account"`
313 
314325 - `service_account_name: optional string or null`
315326 
316327 Service account's display name at read time. Ignored on writes.
from line 329
318329 - `token_lifetime_seconds: number`
319330 
320331 Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
321 
322 - `type: "federation_rule"`
323 
324 default: federation_rule
325332 
326333 - `updated_at: string`
327334 

api/beta/organization/federation/rules/workspaces Changed · +30 / -19 lines

from line 1
1---
2title: Workspaces
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/workspaces
4---
5 
16# Workspaces
27 
38## Add Federation Rule Workspace
from line 36
3136 
3237 - `string`
3338 
34 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
39 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3540 
3641 - `"message-batches-2024-09-24"`
3742 
from line 84
7984 
8085 - `"user-profiles-2026-08-18"`
8186 
87 - `"user-profiles-2026-09-04"`
88 
8289 - `"advisor-tool-2026-03-01"`
8390 
8491 - `"managed-agents-2026-04-01"`
from line 138
131138 
132139- `BetaFederationRuleWorkspace object`
133140 
141 - `type: "federation_rule_workspace"`
142 
143 default: federation_rule_workspace
144 
134145 - `created_at: string`
135146 
136147 When this workspace was enabled for the rule.
from line 156
145156 
146157 Tagged ID of the federation rule.
147158 
148 - `type: "federation_rule_workspace"`
149 
150 default: federation_rule_workspace
151 
152159 - `workspace_id: string`
153160 
154161 Tagged ID of the workspace this rule is enabled for.
from line 229
222229 
223230 - `string`
224231 
225 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
232 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
226233 
227234 - `"message-batches-2024-09-24"`
228235 
from line 277
270277 
271278 - `"user-profiles-2026-08-18"`
272279 
280 - `"user-profiles-2026-09-04"`
281 
273282 - `"advisor-tool-2026-03-01"`
274283 
275284 - `"managed-agents-2026-04-01"`
from line 325
316325 
317326- `data: array of BetaFederationRuleWorkspace`
318327 
328 - `type: "federation_rule_workspace"`
329 
330 default: federation_rule_workspace
331 
319332 - `created_at: string`
320333 
321334 When this workspace was enabled for the rule.
from line 343
330343 
331344 Tagged ID of the federation rule.
332345 
333 - `type: "federation_rule_workspace"`
334 
335 default: federation_rule_workspace
336 
337346 - `workspace_id: string`
338347 
339348 Tagged ID of the workspace this rule is enabled for.
from line 412
403412 
404413 - `string`
405414 
406 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
415 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
407416 
408417 - `"message-batches-2024-09-24"`
409418 
from line 460
451460 
452461 - `"user-profiles-2026-08-18"`
453462 
463 - `"user-profiles-2026-09-04"`
464 
454465 - `"advisor-tool-2026-03-01"`
455466 
456467 - `"managed-agents-2026-04-01"`
from line 506
495506 
496507### Returns
497508 
498- `federation_rule_id: string`
499 
500 Tagged ID of the federation rule.
501 
502509- `type: "federation_rule_workspace_deleted"`
503510 
504511 default: federation_rule_workspace_deleted
505512 
513- `federation_rule_id: string`
514 
515 Tagged ID of the federation rule.
516 
506517- `workspace_id: string`
507518 
508519 Tagged ID of the workspace named in the delete request. Removal is idempotent.
from line 543
532543 
533544- `WorkspaceRemoveResponse object`
534545 
535 - `federation_rule_id: string`
536 
537 Tagged ID of the federation rule.
538 
539546 - `type: "federation_rule_workspace_deleted"`
540547 
541548 default: federation_rule_workspace_deleted
549 
550 - `federation_rule_id: string`
551 
552 Tagged ID of the federation rule.
542553 
543554 - `workspace_id: string`
544555 

api/beta/organization/federation/rules/workspaces/add Changed · +12 / -5 lines

from line 1
1---
2title: Add Federation Rule Workspace
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/workspaces/add
4---
5 
16# Add Federation Rule Workspace
27 
38**POST** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces`
from line 34
2934 
3035 - `string`
3136 
32 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
37 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3338 
3439 - `"message-batches-2024-09-24"`
3540 
from line 82
7782 
7883 - `"user-profiles-2026-08-18"`
7984 
85 - `"user-profiles-2026-09-04"`
86 
8087 - `"advisor-tool-2026-03-01"`
8188 
8289 - `"managed-agents-2026-04-01"`
from line 136
129136 
130137- `BetaFederationRuleWorkspace object`
131138 
139 - `type: "federation_rule_workspace"`
140 
141 default: federation_rule_workspace
142 
132143 - `created_at: string`
133144 
134145 When this workspace was enabled for the rule.
from line 153
142153 - `federation_rule_id: string`
143154 
144155 Tagged ID of the federation rule.
145 
146 - `type: "federation_rule_workspace"`
147 
148 default: federation_rule_workspace
149156 
150157 - `workspace_id: string`
151158 

api/beta/organization/federation/rules/workspaces/list Changed · +12 / -5 lines

from line 1
1---
2title: List Federation Rule Workspaces
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/workspaces/list
4---
5 
16# List Federation Rule Workspaces
27 
38**GET** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces`
from line 43
3843 
3944 - `string`
4045 
41 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
46 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
4247 
4348 - `"message-batches-2024-09-24"`
4449 
from line 91
8691 
8792 - `"user-profiles-2026-08-18"`
8893 
94 - `"user-profiles-2026-09-04"`
95 
8996 - `"advisor-tool-2026-03-01"`
9097 
9198 - `"managed-agents-2026-04-01"`
from line 139
132139 
133140- `data: array of BetaFederationRuleWorkspace`
134141 
142 - `type: "federation_rule_workspace"`
143 
144 default: federation_rule_workspace
145 
135146 - `created_at: string`
136147 
137148 When this workspace was enabled for the rule.
from line 156
145156 - `federation_rule_id: string`
146157 
147158 Tagged ID of the federation rule.
148 
149 - `type: "federation_rule_workspace"`
150 
151 default: federation_rule_workspace
152159 
153160 - `workspace_id: string`
154161 

api/beta/organization/federation/rules/workspaces/remove Changed · +12 / -5 lines

from line 1
1---
2title: Remove Federation Rule Workspace
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/rules/workspaces/remove
4---
5 
16# Remove Federation Rule Workspace
27 
38**DELETE** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces/{workspace_id}`
from line 34
2934 
3035 - `string`
3136 
32 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
37 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
3338 
3439 - `"message-batches-2024-09-24"`
3540 
from line 82
7782 
7883 - `"user-profiles-2026-08-18"`
7984 
85 - `"user-profiles-2026-09-04"`
86 
8087 - `"advisor-tool-2026-03-01"`
8188 
8289 - `"managed-agents-2026-04-01"`
from line 128
121128 
122129## Returns
123130 
124- `federation_rule_id: string`
125 
126 Tagged ID of the federation rule.
127 
128131- `type: "federation_rule_workspace_deleted"`
129132 
130133 default: federation_rule_workspace_deleted
134 
135- `federation_rule_id: string`
136 
137 Tagged ID of the federation rule.
131138 
132139- `workspace_id: string`
133140 

api/beta/organization/invites Changed · +53 / -48 lines

from line 1
1---
2title: Invites
3url: https://platform.claude.com/docs/en/api/beta/organization/invites
4---
5 
16# Invites
27 
38## Create Invite
from line 47
4247 
4348- `BetaOrganizationInvite object`
4449 
50 - `type: "invite"`
51 
52 Object type.
53 
54 For Invites, this is always `"invite"`.
55 
56 default: invite
57 
4558 - `id: string`
4659 
4760 ID of the Invite.
from line 119
106119 
107120 - `"pending"`
108121 
109 - `type: "invite"`
110 
111 Object type.
112 
113 For Invites, this is always `"invite"`.
114 
115 default: invite
116 
117122### Example
118123 
119124```bash
from line 200
195200 
196201- `data: array of BetaOrganizationInvite`
197202 
203 - `type: "invite"`
204 
205 Object type.
206 
207 For Invites, this is always `"invite"`.
208 
209 default: invite
210 
198211 - `id: string`
199212 
200213 ID of the Invite.
from line 272
259272 
260273 - `"pending"`
261274 
262 - `type: "invite"`
263 
264 Object type.
265 
266 For Invites, this is always `"invite"`.
267 
268 default: invite
269 
270275- `first_id: string or null`
271276 
272277 First ID in the `data` list. Can be used as the `before_id` for the previous page.
from line 333
328333 
329334- `BetaOrganizationInvite object`
330335 
336 - `type: "invite"`
337 
338 Object type.
339 
340 For Invites, this is always `"invite"`.
341 
342 default: invite
343 
331344 - `id: string`
332345 
333346 ID of the Invite.
from line 405
392405 
393406 - `"pending"`
394407 
395 - `type: "invite"`
396 
397 Object type.
398 
399 For Invites, this is always `"invite"`.
400 
401 default: invite
402 
403408### Example
404409 
405410```bash
from line 445
440445 
441446### Returns
442447 
443- `id: string`
444 
445 ID of the Invite.
446 
447448- `type: "invite_deleted"`
448449 
449450 Deleted object type.
from line 453
452453 
453454 default: invite_deleted
454455 
456- `id: string`
457 
458 ID of the Invite.
459 
455460### Example
456461 
457462```bash
from line 481
476481 
477482- `BetaOrganizationInvite object`
478483 
484 - `type: "invite"`
485 
486 Object type.
487 
488 For Invites, this is always `"invite"`.
489 
490 default: invite
491 
479492 - `id: string`
480493 
481494 ID of the Invite.
from line 553
540553 
541554 - `"pending"`
542555 
543 - `type: "invite"`
544 
545 Object type.
546 
547 For Invites, this is always `"invite"`.
548 
549 default: invite
550 
551556### Invite Delete Response
552557 
553558- `InviteDeleteResponse object`
554559 
555 - `id: string`
556 
557 ID of the Invite.
558 
559560 - `type: "invite_deleted"`
560561 
561562 Deleted object type.
from line 564
563564 For Invites, this is always `"invite_deleted"`.
564565 
565566 default: invite_deleted
567 
568 - `id: string`
569 
570 ID of the Invite.
566571 

api/beta/organization/invites/create Changed · +13 / -8 lines

from line 1
1---
2title: Create Invite
3url: https://platform.claude.com/docs/en/api/beta/organization/invites/create
4---
5 
16# Create Invite
27 
38**POST** `/v1/organizations/invites`
from line 45
4045 
4146- `BetaOrganizationInvite object`
4247 
48 - `type: "invite"`
49 
50 Object type.
51 
52 For Invites, this is always `"invite"`.
53 
54 default: invite
55 
4356 - `id: string`
4457 
4558 ID of the Invite.
from line 116
103116 - `"expired"`
104117 
105118 - `"pending"`
106 
107 - `type: "invite"`
108 
109 Object type.
110 
111 For Invites, this is always `"invite"`.
112 
113 default: invite
114119 
115120## Example
116121 

api/beta/organization/invites/delete Changed · +9 / -4 lines

from line 1
1---
2title: Delete Invite
3url: https://platform.claude.com/docs/en/api/beta/organization/invites/delete
4---
5 
16# Delete Invite
27 
38**DELETE** `/v1/organizations/invites/{invite_id}`
from line 17
1217 
1318## Returns
1419 
15- `id: string`
16 
17 ID of the Invite.
18 
1920- `type: "invite_deleted"`
2021 
2122 Deleted object type.
from line 24
2324 For Invites, this is always `"invite_deleted"`.
2425 
2526 default: invite_deleted
27 
28- `id: string`
29 
30 ID of the Invite.
2631 
2732## Example
2833 

api/beta/organization/invites/list Changed · +13 / -8 lines

from line 1
1---
2title: List Invites
3url: https://platform.claude.com/docs/en/api/beta/organization/invites/list
4---
5 
16# List Invites
27 
38**GET** `/v1/organizations/invites`
from line 53
4853 
4954- `data: array of BetaOrganizationInvite`
5055 
56 - `type: "invite"`
57 
58 Object type.
59 
60 For Invites, this is always `"invite"`.
61 
62 default: invite
63 
5164 - `id: string`
5265 
5366 ID of the Invite.
from line 124
111124 - `"expired"`
112125 
113126 - `"pending"`
114 
115 - `type: "invite"`
116 
117 Object type.
118 
119 For Invites, this is always `"invite"`.
120 
121 default: invite
122127 
123128- `first_id: string or null`
124129 

api/beta/organization/invites/retrieve Changed · +13 / -8 lines

from line 1
1---
2title: Get Invite
3url: https://platform.claude.com/docs/en/api/beta/organization/invites/retrieve
4---
5 
16# Get Invite
27 
38**GET** `/v1/organizations/invites/{invite_id}`
from line 19
1419 
1520- `BetaOrganizationInvite object`
1621 
22 - `type: "invite"`
23 
24 Object type.
25 
26 For Invites, this is always `"invite"`.
27 
28 default: invite
29 
1730 - `id: string`
1831 
1932 ID of the Invite.
from line 90
7790 - `"expired"`
7891 
7992 - `"pending"`
80 
81 - `type: "invite"`
82 
83 Object type.
84 
85 For Invites, this is always `"invite"`.
86 
87 default: invite
8893 
8994## Example
9095 

api/beta/organization/mcp_tunnels New page · 1756 lines, new page

# MCP Tunnels ## List Tunnels ### Query parameters ### Headers ### Returns ### Example #### Response (200) ## Get Tunnel ### Path parameters ### Headers ### Returns ### Example #### Response (200) ## Archive Tunnel ### Path parameters ### Headers ### Returns ### Example #### Response (200) ## Reveal Tunnel Token ### Path parameters ### Headers ### Returns ### Example #### Response (200) ## Rotate Tunnel Token ### Path parameters ### Headers ### Body parameters ### Returns ### Example #### Response (200) ## Domain types ### Beta Organization Tunnel ### Beta Organization Tunnel Token ## MCP Tunnels › Tunnel Certificates ### Create Tunnel Certificate #### Path parameters #### Headers #### Body parameters #### Returns #### Example ##### Response (200) ### List Tunnel Certificates #### Path parameters #### Query parameters #### Headers #### Returns #### Example ##### Response (200) ### Get Tunnel Certificate #### Path parameters #### Headers #### Returns #### Example ##### Response (200) ### Archive Tunnel Certificate #### Path parameters #### Headers #### Returns #### Example ##### Response (200)

A whole new page. There's nothing to diff it against, so here is what it says.

---
title: MCP Tunnels
url: https://platform.claude.com/docs/en/api/beta/organization/mcp_tunnels
---

# MCP Tunnels

## List Tunnels

**GET** `/v1/organizations/tunnels`

**Deprecated**

**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.

List the organization's tunnels.

Results span the caller's organization, ordered by creation time
(newest first). Use `workspace_id` to filter to a single workspace;
archived tunnels are excluded unless `include_archived` is set.

### Query parameters

- `include_archived: optional boolean`

  Include archived tunnels in the results. Archived tunnels are excluded by
  default.

  default: false

- `limit: optional number`

  Maximum number of tunnels to return in a single page.

  default: 20, maximum: 1000, minimum: 1

- `page: optional string`

  Opaque pagination cursor from a previous response's `next_page`. Omit to
  fetch the first page.

- `workspace_id: optional string`

  Return only tunnels in this Workspace. Accepts a `wrkspc_`-prefixed
  Workspace ID; omit to list tunnels across all Workspaces.

### Headers

- `"anthropic-beta": array of AnthropicBeta`

  Optional header to specify the beta version(s) you want to use.

  - `string`

  - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`

    - `"message-batches-2024-09-24"`

    - `"prompt-caching-2024-07-31"`

    - `"computer-use-2024-10-22"`

    - `"computer-use-2025-01-24"`

    - `"pdfs-2024-09-25"`

    - `"token-counting-2024-11-01"`

    - `"token-efficient-tools-2025-02-19"`

    - `"output-128k-2025-02-19"`

    - `"files-api-2025-04-14"`

    - `"mcp-client-2025-04-04"`

    - `"mcp-client-2025-11-20"`

    - `"dev-full-thinking-2025-05-14"`

    - `"interleaved-thinking-2025-05-14"`

    - `"code-execution-2025-05-22"`

    - `"extended-cache-ttl-2025-04-11"`

    - `"context-1m-2025-08-07"`

    - `"context-management-2025-06-27"`

    - `"model-context-window-exceeded-2025-08-26"`

    - `"skills-2025-10-02"`

    - `"fast-mode-2026-02-01"`

    - `"output-300k-2026-03-24"`

    - `"user-profiles-2026-03-24"`

    - `"user-profiles-2026-08-18"`

    - `"user-profiles-2026-09-04"`

    - `"advisor-tool-2026-03-01"`

    - `"managed-agents-2026-04-01"`

    - `"cache-diagnosis-2026-04-07"`

    - `"dreaming-2026-04-21"`

    - `"thinking-token-count-2026-05-13"`

    - `"server-side-fallback-2026-06-01"`

    - `"server-side-fallback-2026-07-01"`

    - `"fallback-credit-2026-06-01"`

    - `"fallback-credit-2026-07-01"`

    - `"agent-memory-2026-07-22"`

    - `"mid-conversation-tool-changes-2026-07-01"`

    - `"compact-2026-01-12"`

    - `"computer-use-2025-11-24"`

    - `"mcp-tunnels-2026-06-22"`

    - `"structured-outputs-2025-11-13"`

    - `"task-budgets-2026-03-13"`

    - `"thinking-display-updates-2026-08-18"`

    - `"ce-user-management-2026-07-13"`

    - `"mid-conversation-output-config-2026-07-01"`

    - `"thinking-binding-controls-2026-08-01"`

    - `"mid-conversation-system-clear-at-2026-08-21"`

### Returns

- `data: array of BetaOrganizationTunnel`

  - `type: "tunnel"`

    Object type. Always `tunnel` for Tunnels.

    default: tunnel

  - `id: string`

    ID of the Tunnel.

  - `archived_at: string or null`

    RFC 3339 datetime string indicating when the Tunnel was archived, or
    `null` if it is not archived.

    format: date-time

  - `created_at: string`

    RFC 3339 datetime string indicating when the Tunnel was created.

    format: date-time

  - `display_name: string or null`

    Human-readable name for the Tunnel (1–255 characters), or `null` if unset.

  - `domain: string`

    Anthropic-assigned hostname for the Tunnel. MCP server URLs whose host is a
    subdomain of this value are routed through the Tunnel. Globally unique and
    never reused, even after the Tunnel is archived.

  - `workspace_id: string or null`

    ID of the Workspace this Tunnel belongs to, or `null` for the default
    Workspace. Immutable after creation.

- `next_page: string or null`

  Opaque cursor for the next page, or `null` if there are no more results.

### Example

```bash
curl https://api.anthropic.com/v1/organizations/tunnels \
    -H 'anthropic-version: 2023-06-01' \
    -H "X-Api-Key: $ANTHROPIC_API_KEY"
```

#### Response (200)

```json
{
  "data": [
    {
      "id": "tnl_01Hx9Kp2RtQvMn3sWbYdLcF8",
      "archived_at": "2024-11-01T23:59:27.427722Z",
      "created_at": "2024-10-30T23:58:27.427722Z",
      "display_name": "Production",
      "domain": "a1b2c3d4.tunnel.anthropic.com",
      "type": "tunnel",
      "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
    }
  ],
  "next_page": "page_MjAyNS0wNS0xNFQwMDowMDowMFo="
}
```

## Get Tunnel

**GET** `/v1/organizations/tunnels/{tunnel_id}`

**Deprecated**

**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.

Retrieve a single tunnel in the caller's organization by ID.

### Path parameters

- `tunnel_id: string`

  ID of the Tunnel.

### Headers

- `"anthropic-beta": array of AnthropicBeta`

  Optional header to specify the beta version(s) you want to use.

  - `string`

  - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`

    - `"message-batches-2024-09-24"`

    - `"prompt-caching-2024-07-31"`

    - `"computer-use-2024-10-22"`

    - `"computer-use-2025-01-24"`

    - `"pdfs-2024-09-25"`

    - `"token-counting-2024-11-01"`

    - `"token-efficient-tools-2025-02-19"`

    - `"output-128k-2025-02-19"`

    - `"files-api-2025-04-14"`

    - `"mcp-client-2025-04-04"`

    - `"mcp-client-2025-11-20"`

    - `"dev-full-thinking-2025-05-14"`

    - `"interleaved-thinking-2025-05-14"`

    - `"code-execution-2025-05-22"`

    - `"extended-cache-ttl-2025-04-11"`

    - `"context-1m-2025-08-07"`

    - `"context-management-2025-06-27"`

    - `"model-context-window-exceeded-2025-08-26"`

    - `"skills-2025-10-02"`

    - `"fast-mode-2026-02-01"`

    - `"output-300k-2026-03-24"`

    - `"user-profiles-2026-03-24"`

    - `"user-profiles-2026-08-18"`

    - `"user-profiles-2026-09-04"`

    - `"advisor-tool-2026-03-01"`

    - `"managed-agents-2026-04-01"`

    - `"cache-diagnosis-2026-04-07"`

    - `"dreaming-2026-04-21"`

Cut at 300 lines. The page has the rest.

api/beta/organization/mcp_tunnels/archive New page · 190 lines, new page

# Archive Tunnel ## Path parameters ## Headers ## Returns ## Example ### Response (200)

A whole new page. There's nothing to diff it against, so here is what it says.

---
title: Archive Tunnel
url: https://platform.claude.com/docs/en/api/beta/organization/mcp_tunnels/archive
---

# Archive Tunnel

**POST** `/v1/organizations/tunnels/{tunnel_id}/archive`

**Deprecated**

**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.

Archive a tunnel. Archival is irreversible.

Every non-archived certificate on the tunnel is archived in the same
operation, the hostname is retired and never re-allocated, and the
tunnel token is invalidated. Retrying against an already-archived
tunnel returns the existing record unchanged.

## Path parameters

- `tunnel_id: string`

  ID of the Tunnel.

## Headers

- `"anthropic-beta": array of AnthropicBeta`

  Optional header to specify the beta version(s) you want to use.

  - `string`

  - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`

    - `"message-batches-2024-09-24"`

    - `"prompt-caching-2024-07-31"`

    - `"computer-use-2024-10-22"`

    - `"computer-use-2025-01-24"`

    - `"pdfs-2024-09-25"`

    - `"token-counting-2024-11-01"`

    - `"token-efficient-tools-2025-02-19"`

    - `"output-128k-2025-02-19"`

    - `"files-api-2025-04-14"`

    - `"mcp-client-2025-04-04"`

    - `"mcp-client-2025-11-20"`

    - `"dev-full-thinking-2025-05-14"`

    - `"interleaved-thinking-2025-05-14"`

    - `"code-execution-2025-05-22"`

    - `"extended-cache-ttl-2025-04-11"`

    - `"context-1m-2025-08-07"`

    - `"context-management-2025-06-27"`

    - `"model-context-window-exceeded-2025-08-26"`

    - `"skills-2025-10-02"`

    - `"fast-mode-2026-02-01"`

    - `"output-300k-2026-03-24"`

    - `"user-profiles-2026-03-24"`

    - `"user-profiles-2026-08-18"`

    - `"user-profiles-2026-09-04"`

    - `"advisor-tool-2026-03-01"`

    - `"managed-agents-2026-04-01"`

    - `"cache-diagnosis-2026-04-07"`

    - `"dreaming-2026-04-21"`

    - `"thinking-token-count-2026-05-13"`

    - `"server-side-fallback-2026-06-01"`

    - `"server-side-fallback-2026-07-01"`

    - `"fallback-credit-2026-06-01"`

    - `"fallback-credit-2026-07-01"`

    - `"agent-memory-2026-07-22"`

    - `"mid-conversation-tool-changes-2026-07-01"`

    - `"compact-2026-01-12"`

    - `"computer-use-2025-11-24"`

    - `"mcp-tunnels-2026-06-22"`

    - `"structured-outputs-2025-11-13"`

    - `"task-budgets-2026-03-13"`

    - `"thinking-display-updates-2026-08-18"`

    - `"ce-user-management-2026-07-13"`

    - `"mid-conversation-output-config-2026-07-01"`

    - `"thinking-binding-controls-2026-08-01"`

    - `"mid-conversation-system-clear-at-2026-08-21"`

## Returns

- `BetaOrganizationTunnel object`

  - `type: "tunnel"`

    Object type. Always `tunnel` for Tunnels.

    default: tunnel

  - `id: string`

    ID of the Tunnel.

  - `archived_at: string or null`

    RFC 3339 datetime string indicating when the Tunnel was archived, or
    `null` if it is not archived.

    format: date-time

  - `created_at: string`

    RFC 3339 datetime string indicating when the Tunnel was created.

    format: date-time

  - `display_name: string or null`

    Human-readable name for the Tunnel (1–255 characters), or `null` if unset.

  - `domain: string`

    Anthropic-assigned hostname for the Tunnel. MCP server URLs whose host is a
    subdomain of this value are routed through the Tunnel. Globally unique and
    never reused, even after the Tunnel is archived.

  - `workspace_id: string or null`

    ID of the Workspace this Tunnel belongs to, or `null` for the default
    Workspace. Immutable after creation.

## Example

```bash
curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/archive \
    -X POST \
    -H 'anthropic-version: 2023-06-01' \
    -H "X-Api-Key: $ANTHROPIC_API_KEY"
```

### Response (200)

```json
{
  "id": "tnl_01Hx9Kp2RtQvMn3sWbYdLcF8",
  "archived_at": "2024-11-01T23:59:27.427722Z",
  "created_at": "2024-10-30T23:58:27.427722Z",
  "display_name": "Production",
  "domain": "a1b2c3d4.tunnel.anthropic.com",
  "type": "tunnel",
  "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
}
```

api/beta/organization/mcp_tunnels/list New page · 216 lines, new page

# List Tunnels ## Query parameters ## Headers ## Returns ## Example ### Response (200)

A whole new page. There's nothing to diff it against, so here is what it says.

---
title: List Tunnels
url: https://platform.claude.com/docs/en/api/beta/organization/mcp_tunnels/list
---

# List Tunnels

**GET** `/v1/organizations/tunnels`

**Deprecated**

**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.

List the organization's tunnels.

Results span the caller's organization, ordered by creation time
(newest first). Use `workspace_id` to filter to a single workspace;
archived tunnels are excluded unless `include_archived` is set.

## Query parameters

- `include_archived: optional boolean`

  Include archived tunnels in the results. Archived tunnels are excluded by
  default.

  default: false

- `limit: optional number`

  Maximum number of tunnels to return in a single page.

  default: 20, maximum: 1000, minimum: 1

- `page: optional string`

  Opaque pagination cursor from a previous response's `next_page`. Omit to
  fetch the first page.

- `workspace_id: optional string`

  Return only tunnels in this Workspace. Accepts a `wrkspc_`-prefixed
  Workspace ID; omit to list tunnels across all Workspaces.

## Headers

- `"anthropic-beta": array of AnthropicBeta`

  Optional header to specify the beta version(s) you want to use.

  - `string`

  - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`

    - `"message-batches-2024-09-24"`

    - `"prompt-caching-2024-07-31"`

    - `"computer-use-2024-10-22"`

    - `"computer-use-2025-01-24"`

    - `"pdfs-2024-09-25"`

    - `"token-counting-2024-11-01"`

    - `"token-efficient-tools-2025-02-19"`

    - `"output-128k-2025-02-19"`

    - `"files-api-2025-04-14"`

    - `"mcp-client-2025-04-04"`

    - `"mcp-client-2025-11-20"`

    - `"dev-full-thinking-2025-05-14"`

    - `"interleaved-thinking-2025-05-14"`

    - `"code-execution-2025-05-22"`

    - `"extended-cache-ttl-2025-04-11"`

    - `"context-1m-2025-08-07"`

    - `"context-management-2025-06-27"`

    - `"model-context-window-exceeded-2025-08-26"`

    - `"skills-2025-10-02"`

    - `"fast-mode-2026-02-01"`

    - `"output-300k-2026-03-24"`

    - `"user-profiles-2026-03-24"`

    - `"user-profiles-2026-08-18"`

    - `"user-profiles-2026-09-04"`

    - `"advisor-tool-2026-03-01"`

    - `"managed-agents-2026-04-01"`

    - `"cache-diagnosis-2026-04-07"`

    - `"dreaming-2026-04-21"`

    - `"thinking-token-count-2026-05-13"`

    - `"server-side-fallback-2026-06-01"`

    - `"server-side-fallback-2026-07-01"`

    - `"fallback-credit-2026-06-01"`

    - `"fallback-credit-2026-07-01"`

    - `"agent-memory-2026-07-22"`

    - `"mid-conversation-tool-changes-2026-07-01"`

    - `"compact-2026-01-12"`

    - `"computer-use-2025-11-24"`

    - `"mcp-tunnels-2026-06-22"`

    - `"structured-outputs-2025-11-13"`

    - `"task-budgets-2026-03-13"`

    - `"thinking-display-updates-2026-08-18"`

    - `"ce-user-management-2026-07-13"`

    - `"mid-conversation-output-config-2026-07-01"`

    - `"thinking-binding-controls-2026-08-01"`

    - `"mid-conversation-system-clear-at-2026-08-21"`

## Returns

- `data: array of BetaOrganizationTunnel`

  - `type: "tunnel"`

    Object type. Always `tunnel` for Tunnels.

    default: tunnel

  - `id: string`

    ID of the Tunnel.

  - `archived_at: string or null`

    RFC 3339 datetime string indicating when the Tunnel was archived, or
    `null` if it is not archived.

    format: date-time

  - `created_at: string`

    RFC 3339 datetime string indicating when the Tunnel was created.

    format: date-time

  - `display_name: string or null`

    Human-readable name for the Tunnel (1–255 characters), or `null` if unset.

  - `domain: string`

    Anthropic-assigned hostname for the Tunnel. MCP server URLs whose host is a
    subdomain of this value are routed through the Tunnel. Globally unique and
    never reused, even after the Tunnel is archived.

  - `workspace_id: string or null`

    ID of the Workspace this Tunnel belongs to, or `null` for the default
    Workspace. Immutable after creation.

- `next_page: string or null`

  Opaque cursor for the next page, or `null` if there are no more results.

## Example

```bash
curl https://api.anthropic.com/v1/organizations/tunnels \
    -H 'anthropic-version: 2023-06-01' \
    -H "X-Api-Key: $ANTHROPIC_API_KEY"
```

### Response (200)

```json
{
  "data": [
    {
      "id": "tnl_01Hx9Kp2RtQvMn3sWbYdLcF8",
      "archived_at": "2024-11-01T23:59:27.427722Z",
      "created_at": "2024-10-30T23:58:27.427722Z",
      "display_name": "Production",
      "domain": "a1b2c3d4.tunnel.anthropic.com",
      "type": "tunnel",
      "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
    }
  ],
  "next_page": "page_MjAyNS0wNS0xNFQwMDowMDowMFo="
}
```

api/beta/organization/mcp_tunnels/retrieve New page · 184 lines, new page

# Get Tunnel ## Path parameters ## Headers ## Returns ## Example ### Response (200)

A whole new page. There's nothing to diff it against, so here is what it says.

---
title: Get Tunnel
url: https://platform.claude.com/docs/en/api/beta/organization/mcp_tunnels/retrieve
---

# Get Tunnel

**GET** `/v1/organizations/tunnels/{tunnel_id}`

**Deprecated**

**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.

Retrieve a single tunnel in the caller's organization by ID.

## Path parameters

- `tunnel_id: string`

  ID of the Tunnel.

## Headers

- `"anthropic-beta": array of AnthropicBeta`

  Optional header to specify the beta version(s) you want to use.

  - `string`

  - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`

    - `"message-batches-2024-09-24"`

    - `"prompt-caching-2024-07-31"`

    - `"computer-use-2024-10-22"`

    - `"computer-use-2025-01-24"`

    - `"pdfs-2024-09-25"`

    - `"token-counting-2024-11-01"`

    - `"token-efficient-tools-2025-02-19"`

    - `"output-128k-2025-02-19"`

    - `"files-api-2025-04-14"`

    - `"mcp-client-2025-04-04"`

    - `"mcp-client-2025-11-20"`

    - `"dev-full-thinking-2025-05-14"`

    - `"interleaved-thinking-2025-05-14"`

    - `"code-execution-2025-05-22"`

    - `"extended-cache-ttl-2025-04-11"`

    - `"context-1m-2025-08-07"`

    - `"context-management-2025-06-27"`

    - `"model-context-window-exceeded-2025-08-26"`

    - `"skills-2025-10-02"`

    - `"fast-mode-2026-02-01"`

    - `"output-300k-2026-03-24"`

    - `"user-profiles-2026-03-24"`

    - `"user-profiles-2026-08-18"`

    - `"user-profiles-2026-09-04"`

    - `"advisor-tool-2026-03-01"`

    - `"managed-agents-2026-04-01"`

    - `"cache-diagnosis-2026-04-07"`

    - `"dreaming-2026-04-21"`

    - `"thinking-token-count-2026-05-13"`

    - `"server-side-fallback-2026-06-01"`

    - `"server-side-fallback-2026-07-01"`

    - `"fallback-credit-2026-06-01"`

    - `"fallback-credit-2026-07-01"`

    - `"agent-memory-2026-07-22"`

    - `"mid-conversation-tool-changes-2026-07-01"`

    - `"compact-2026-01-12"`

    - `"computer-use-2025-11-24"`

    - `"mcp-tunnels-2026-06-22"`

    - `"structured-outputs-2025-11-13"`

    - `"task-budgets-2026-03-13"`

    - `"thinking-display-updates-2026-08-18"`

    - `"ce-user-management-2026-07-13"`

    - `"mid-conversation-output-config-2026-07-01"`

    - `"thinking-binding-controls-2026-08-01"`

    - `"mid-conversation-system-clear-at-2026-08-21"`

## Returns

- `BetaOrganizationTunnel object`

  - `type: "tunnel"`

    Object type. Always `tunnel` for Tunnels.

    default: tunnel

  - `id: string`

    ID of the Tunnel.

  - `archived_at: string or null`

    RFC 3339 datetime string indicating when the Tunnel was archived, or
    `null` if it is not archived.

    format: date-time

  - `created_at: string`

    RFC 3339 datetime string indicating when the Tunnel was created.

    format: date-time

  - `display_name: string or null`

    Human-readable name for the Tunnel (1–255 characters), or `null` if unset.

  - `domain: string`

    Anthropic-assigned hostname for the Tunnel. MCP server URLs whose host is a
    subdomain of this value are routed through the Tunnel. Globally unique and
    never reused, even after the Tunnel is archived.

  - `workspace_id: string or null`

    ID of the Workspace this Tunnel belongs to, or `null` for the default
    Workspace. Immutable after creation.

## Example

```bash
curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID \
    -H 'anthropic-version: 2023-06-01' \
    -H "X-Api-Key: $ANTHROPIC_API_KEY"
```

### Response (200)

```json
{
  "id": "tnl_01Hx9Kp2RtQvMn3sWbYdLcF8",
  "archived_at": "2024-11-01T23:59:27.427722Z",
  "created_at": "2024-10-30T23:58:27.427722Z",
  "display_name": "Production",
  "domain": "a1b2c3d4.tunnel.anthropic.com",
  "type": "tunnel",
  "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
}
```