One read of Claude Developer Platformapi-20261029T173726Z
320 pages moved out of 826 read.
Pages moved
320
significant first
Pages read
826
in this capture
Captured
17:37 UTC
Corpus hash
1b6c4dd3baa9
corpus-hash
What this read moved
51-75 of 320, page 3 of 13This capture is too large to show at once. Changes 51-75 of 320 are below, significant first; the rest are on the following screens.
api/beta/organization/telemetry_destinations/workspaces Changed · +12 / -0 lines
from line 151
151151
152152 - `"webhooks-2026-10-07"`
153153
154 - `"message-threads-2026-08-12"`
155
156 - `"analytics-usage-cost-2026-08-24"`
157
154158### Returns
155159
156160- `data: array of BetaTelemetryDestinationWorkspace`
from line 346
342346
343347 - `"webhooks-2026-10-07"`
344348
349 - `"message-threads-2026-08-12"`
350
351 - `"analytics-usage-cost-2026-08-24"`
352
345353### Returns
346354
347355- `BetaTelemetryDestinationWorkspace object`
from line 534
526534 - `"telemetry-destinations-2026-08-11"`
527535
528536 - `"webhooks-2026-10-07"`
537
538 - `"message-threads-2026-08-12"`
539
540 - `"analytics-usage-cost-2026-08-24"`
529541
530542### Returns
531543
api/beta/organization/usage_report Changed · +10 / -4 lines
from line 9
99
1010**GET** `/v1/organizations/usage_report/messages`
1111
12Get Messages Usage Report
12[Legacy] Get a report of your organization's Messages API usage, aggregated into time buckets.
1313
14This endpoint is part of the legacy Usage and Cost API. For new integrations, use [`GET /v1/organizations/analytics/usage`](https://platform.claude.com/docs/en/api/beta/organization/analytics/usage/list?sdk_languages=http) in the Usage and Cost Analytics API instead. To move an existing integration, see [Migrate from the Usage and Cost API](https://platform.claude.com/docs/en/manage-claude/usage-cost-analytics-api?sdk_languages=http#migrate-from-usage-cost-api).
15
1416### Query parameters
1517
1618- `starting_at: string`
from line 109
107109
108110 Restrict usage returned to the specified service account ID(s).
109111
110- `service_tiers: optional array of "batch" or "flex" or "flex_discount" or 3 more`
112- `service_tiers: optional array of BetaAnalyticsServiceTier`
111113
112114 Restrict usage returned to the specified service tier(s).
113115
from line 255
253255
254256 - `"webhooks-2026-10-07"`
255257
258 - `"message-threads-2026-08-12"`
259
260 - `"analytics-usage-cost-2026-08-24"`
261
256262### Returns
257263
258264- `BetaMessagesUsageReport object`
from line 344
338344
339345 ID of the service account that made the request. `null` if not grouping by service account or for non-OIDC-federation requests.
340346
341 - `service_tier: "batch" or "flex" or "flex_discount" or 3 more or null`
347 - `service_tier: BetaAnalyticsServiceTier or null`
342348
343349 Service tier used. `null` if not grouping by service tier.
344350
from line 954
948954
949955 ID of the service account that made the request. `null` if not grouping by service account or for non-OIDC-federation requests.
950956
951 - `service_tier: "batch" or "flex" or "flex_discount" or 3 more or null`
957 - `service_tier: BetaAnalyticsServiceTier or null`
952958
953959 Service tier used. `null` if not grouping by service tier.
954960
api/beta/organization/usage_report/retrieve_messages Changed · +9 / -3 lines
from line 7
77
88**GET** `/v1/organizations/usage_report/messages`
99
10Get Messages Usage Report
10[Legacy] Get a report of your organization's Messages API usage, aggregated into time buckets.
1111
12This endpoint is part of the legacy Usage and Cost API. For new integrations, use [`GET /v1/organizations/analytics/usage`](https://platform.claude.com/docs/en/api/beta/organization/analytics/usage/list?sdk_languages=http) in the Usage and Cost Analytics API instead. To move an existing integration, see [Migrate from the Usage and Cost API](https://platform.claude.com/docs/en/manage-claude/usage-cost-analytics-api?sdk_languages=http#migrate-from-usage-cost-api).
13
1214## Query parameters
1315
1416- `starting_at: string`
from line 107
105107
106108 Restrict usage returned to the specified service account ID(s).
107109
108- `service_tiers: optional array of "batch" or "flex" or "flex_discount" or 3 more`
110- `service_tiers: optional array of BetaAnalyticsServiceTier`
109111
110112 Restrict usage returned to the specified service tier(s).
111113
from line 253
251253
252254 - `"webhooks-2026-10-07"`
253255
256 - `"message-threads-2026-08-12"`
257
258 - `"analytics-usage-cost-2026-08-24"`
259
254260## Returns
255261
256262- `BetaMessagesUsageReport object`
from line 342
336342
337343 ID of the service account that made the request. `null` if not grouping by service account or for non-OIDC-federation requests.
338344
339 - `service_tier: "batch" or "flex" or "flex_discount" or 3 more or null`
345 - `service_tier: BetaAnalyticsServiceTier or null`
340346
341347 Service tier used. `null` if not grouping by service tier.
342348
api/beta/organization/webhooks Changed · +24 / -0 lines
from line 137
137137
138138 - `"webhooks-2026-10-07"`
139139
140 - `"message-threads-2026-08-12"`
141
142 - `"analytics-usage-cost-2026-08-24"`
143
140144### Body parameters
141145
142146- `enabled_events: array of "user_profile.enforcement_action_opened" or "user_profile.enforcement_action_resolved"`
from line 411
407411
408412 - `"webhooks-2026-10-07"`
409413
414 - `"message-threads-2026-08-12"`
415
416 - `"analytics-usage-cost-2026-08-24"`
417
410418### Returns
411419
412420- `data: array of BetaOrganizationWebhookEndpoint`
from line 649
641649
642650 - `"webhooks-2026-10-07"`
643651
652 - `"message-threads-2026-08-12"`
653
654 - `"analytics-usage-cost-2026-08-24"`
655
644656### Returns
645657
646658- `BetaOrganizationWebhookEndpoint object`
from line 869
857869
858870 - `"webhooks-2026-10-07"`
859871
872 - `"message-threads-2026-08-12"`
873
874 - `"analytics-usage-cost-2026-08-24"`
875
860876### Body parameters
861877
862878- `description: optional string`
from line 1123
11071123
11081124 - `"webhooks-2026-10-07"`
11091125
1126 - `"message-threads-2026-08-12"`
1127
1128 - `"analytics-usage-cost-2026-08-24"`
1129
11101130### Returns
11111131
11121132- `BetaDeletedOrganizationWebhookEndpoint object`
from line 1296
12761296 - `"telemetry-destinations-2026-08-11"`
12771297
12781298 - `"webhooks-2026-10-07"`
1299
1300 - `"message-threads-2026-08-12"`
1301
1302 - `"analytics-usage-cost-2026-08-24"`
12791303
12801304### Returns
12811305
api/beta/organization/workspaces Changed · +24 / -0 lines
from line 320
320320
321321 - `"webhooks-2026-10-07"`
322322
323 - `"message-threads-2026-08-12"`
324
325 - `"analytics-usage-cost-2026-08-24"`
326
323327### Body parameters
324328
325329- `name: string`
from line 2376
23722376
23732377 - `"webhooks-2026-10-07"`
23742378
2379 - `"message-threads-2026-08-12"`
2380
2381 - `"analytics-usage-cost-2026-08-24"`
2382
23752383#### Returns
23762384
23772385- `data: array of BetaServiceAccountWorkspaceMember`
from line 2589
25812589
25822590 - `"webhooks-2026-10-07"`
25832591
2592 - `"message-threads-2026-08-12"`
2593
2594 - `"analytics-usage-cost-2026-08-24"`
2595
25842596#### Body parameters
25852597
25862598- `service_account_id: string`
from line 2818
28062818
28072819 - `"webhooks-2026-10-07"`
28082820
2821 - `"message-threads-2026-08-12"`
2822
2823 - `"analytics-usage-cost-2026-08-24"`
2824
28092825#### Returns
28102826
28112827- `BetaServiceAccountWorkspaceMember object`
from line 3024
30083024
30093025 - `"webhooks-2026-10-07"`
30103026
3027 - `"message-threads-2026-08-12"`
3028
3029 - `"analytics-usage-cost-2026-08-24"`
3030
30113031#### Body parameters
30123032
30133033- `workspace_role: BetaNoBillingWorkspaceRole`
from line 3246
32263246 - `"telemetry-destinations-2026-08-11"`
32273247
32283248 - `"webhooks-2026-10-07"`
3249
3250 - `"message-threads-2026-08-12"`
3251
3252 - `"analytics-usage-cost-2026-08-24"`
32293253
32303254#### Returns
32313255
api/beta/organization/workspaces/service_accounts Changed · +20 / -0 lines
from line 156
156156
157157 - `"webhooks-2026-10-07"`
158158
159 - `"message-threads-2026-08-12"`
160
161 - `"analytics-usage-cost-2026-08-24"`
162
159163### Returns
160164
161165- `data: array of BetaServiceAccountWorkspaceMember`
from line 369
365369
366370 - `"webhooks-2026-10-07"`
367371
372 - `"message-threads-2026-08-12"`
373
374 - `"analytics-usage-cost-2026-08-24"`
375
368376### Body parameters
369377
370378- `service_account_id: string`
from line 598
590598
591599 - `"webhooks-2026-10-07"`
592600
601 - `"message-threads-2026-08-12"`
602
603 - `"analytics-usage-cost-2026-08-24"`
604
593605### Returns
594606
595607- `BetaServiceAccountWorkspaceMember object`
from line 804
792804
793805 - `"webhooks-2026-10-07"`
794806
807 - `"message-threads-2026-08-12"`
808
809 - `"analytics-usage-cost-2026-08-24"`
810
795811### Body parameters
796812
797813- `workspace_role: BetaNoBillingWorkspaceRole`
from line 1026
10101026 - `"telemetry-destinations-2026-08-11"`
10111027
10121028 - `"webhooks-2026-10-07"`
1029
1030 - `"message-threads-2026-08-12"`
1031
1032 - `"analytics-usage-cost-2026-08-24"`
10131033
10141034### Returns
10151035
api/beta/sessions Changed · +76 / -0 lines
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 129
129129
130130 - `"webhooks-2026-10-07"`
131131
132 - `"message-threads-2026-08-12"`
133
134 - `"analytics-usage-cost-2026-08-24"`
135
132136- `"anthropic-workspace-id": optional string`
133137
134138 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2841
28372841
28382842 - `"webhooks-2026-10-07"`
28392843
2844 - `"message-threads-2026-08-12"`
2845
2846 - `"analytics-usage-cost-2026-08-24"`
2847
28402848- `"anthropic-workspace-id": optional string`
28412849
28422850 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 4344
43364344
43374345 - `"webhooks-2026-10-07"`
43384346
4347 - `"message-threads-2026-08-12"`
4348
4349 - `"analytics-usage-cost-2026-08-24"`
4350
43394351- `"anthropic-workspace-id": optional string`
43404352
43414353 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 5833
58215833
58225834 - `"webhooks-2026-10-07"`
58235835
5836 - `"message-threads-2026-08-12"`
5837
5838 - `"analytics-usage-cost-2026-08-24"`
5839
58245840- `"anthropic-workspace-id": optional string`
58255841
58265842 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 7908
78927908
78937909 - `"webhooks-2026-10-07"`
78947910
7911 - `"message-threads-2026-08-12"`
7912
7913 - `"analytics-usage-cost-2026-08-24"`
7914
78957915- `"anthropic-workspace-id": optional string`
78967916
78977917 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 8075
80558075
80568076 - `"webhooks-2026-10-07"`
80578077
8078 - `"message-threads-2026-08-12"`
8079
8080 - `"analytics-usage-cost-2026-08-24"`
8081
80588082- `"anthropic-workspace-id": optional string`
80598083
80608084 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 8141
81178141
81188142 The model that will power your agent.
81198143
8120 See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options.
8121
8122 - `"claude-haiku-5-5"`
8123
8124 Fastest model for high-volume, real-time tasks
8125
8126 - `"claude-sonnet-5-5"`
8127
8128 Efficient model for coding and agents
8129
8130 - `"claude-opus-5-5"`
8131
8132 Powerful intelligence for coding, knowledge work, and long-running agents
8133
8134 - `"claude-fable-5-1"`
8135
8136 Frontier intelligence for ambitious tasks across coding, scientific discovery, an
8144 See [models](https://docs.anthropic.com/en/docs/mod
api/beta/sessions/events Changed · +12 / -0 lines
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 261
261261
262262 - `"webhooks-2026-10-07"`
263263
264 - `"message-threads-2026-08-12"`
265
266 - `"analytics-usage-cost-2026-08-24"`
267
264268- `"anthropic-workspace-id": optional string`
265269
266270 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 3370
33663370
33673371 - `"webhooks-2026-10-07"`
33683372
3373 - `"message-threads-2026-08-12"`
3374
3375 - `"analytics-usage-cost-2026-08-24"`
3376
33693377- `"anthropic-workspace-id": optional string`
33703378
33713379 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 4371
43634371
43644372 - `"webhooks-2026-10-07"`
43654373
4374 - `"message-threads-2026-08-12"`
4375
4376 - `"analytics-usage-cost-2026-08-24"`
4377
43664378- `"anthropic-workspace-id": optional string`
43674379
43684380 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 8594
85828594
85838595 - `evaluation: optional BetaManagedAgentsAgentToolEvaluation`
85848596
8585 Which resolved permission_policy produced evaluated_permission: always_allow, always_ask, or auto (with the server's per-invocation judgement). Absent only when the server refused the call before any policy applied (for example, the named tool is not enabled in the session); such a refusal has evaluated_permission deny. An event recorded before this field existed reads as the arm its evaluated_permission implies (always_allow for allow, always_ask for ask).
8586
8587 - `BetaManagedAgentsAgentToolEvaluationAlwaysAllow object`
8588
8589 The resolved permission_policy was always_allow;
8597 Which resolved permission_policy produced evaluated_permission: always_allow, always_ask, or auto (with the server's per-invocation judgement). Absent only when the server refused the call before any policy applied (for example, the named tool is not enabled in the session); such a refusal has evaluated_permission deny. An event recorded before thi
api/beta/sessions/resources Changed · +20 / -0 lines
from line 133
133133
134134 - `"webhooks-2026-10-07"`
135135
136 - `"message-threads-2026-08-12"`
137
138 - `"analytics-usage-cost-2026-08-24"`
139
136140- `"anthropic-workspace-id": optional string`
137141
138142 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 351
347351
348352 - `"webhooks-2026-10-07"`
349353
354 - `"message-threads-2026-08-12"`
355
356 - `"analytics-usage-cost-2026-08-24"`
357
350358- `"anthropic-workspace-id": optional string`
351359
352360 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 642
634642
635643 - `"webhooks-2026-10-07"`
636644
645 - `"message-threads-2026-08-12"`
646
647 - `"analytics-usage-cost-2026-08-24"`
648
637649- `"anthropic-workspace-id": optional string`
638650
639651 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 912
900912
901913 - `"webhooks-2026-10-07"`
902914
915 - `"message-threads-2026-08-12"`
916
917 - `"analytics-usage-cost-2026-08-24"`
918
903919- `"anthropic-workspace-id": optional string`
904920
905921 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1193
11771193 - `"telemetry-destinations-2026-08-11"`
11781194
11791195 - `"webhooks-2026-10-07"`
1196
1197 - `"message-threads-2026-08-12"`
1198
1199 - `"analytics-usage-cost-2026-08-24"`
11801200
11811201- `"anthropic-workspace-id": optional string`
11821202
api/beta/sessions/threads Changed · +20 / -0 lines
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 159
159159
160160 - `"webhooks-2026-10-07"`
161161
162 - `"message-threads-2026-08-12"`
163
164 - `"analytics-usage-cost-2026-08-24"`
165
162166- `"anthropic-workspace-id": optional string`
163167
164168 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1248
12441248
12451249 - `"webhooks-2026-10-07"`
12461250
1251 - `"message-threads-2026-08-12"`
1252
1253 - `"analytics-usage-cost-2026-08-24"`
1254
12471255- `"anthropic-workspace-id": optional string`
12481256
12491257 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2328
23202328
23212329 - `"webhooks-2026-10-07"`
23222330
2331 - `"message-threads-2026-08-12"`
2332
2333 - `"analytics-usage-cost-2026-08-24"`
2334
23232335- `"anthropic-workspace-id": optional string`
23242336
23252337 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 7969
79577969
79587970 - `"webhooks-2026-10-07"`
79597971
7972 - `"message-threads-2026-08-12"`
7973
7974 - `"analytics-usage-cost-2026-08-24"`
7975
79607976- `"anthropic-workspace-id": optional string`
79617977
79627978 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 8191
81758191
81768192 - `tool_use_id: string`
81778193
8178 The id of the `agent.tool_use` or `agent.mcp_tool_use` event this result corresponds to, which can be found in the last `session.status_idle` [event's](https://platform.claude.com/docs/en/api/beta/sessions/events/list?sdk_languages=http#beta_managed_agents_session_requires_action.event_ids) `stop_reason.event_ids` field.
8179
8180 - `deny_message: optional string or null`
8181
8182 Optional message providing context for a 'deny' decision. Only allowed when result is 'deny'.
8183
8184 maxLength: 10000
8185
8186 - `processed_at: optiona
8194 The id of the `agent.tool_use` or `agent.mcp_tool_use` event this result corresponds to, which can be found in the last `session.status_idle` [event's](https://platform.claude.com/docs/en/api/beta/sessions/events/lis
api/beta/sessions/threads/events Changed · +8 / -0 lines
from line 143
143143
144144 - `"webhooks-2026-10-07"`
145145
146 - `"message-threads-2026-08-12"`
147
148 - `"analytics-usage-cost-2026-08-24"`
149
146150- `"anthropic-workspace-id": optional string`
147151
148152 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 3263
32593263 - `"telemetry-destinations-2026-08-11"`
32603264
32613265 - `"webhooks-2026-10-07"`
3266
3267 - `"message-threads-2026-08-12"`
3268
3269 - `"analytics-usage-cost-2026-08-24"`
32623270
32633271- `"anthropic-workspace-id": optional string`
32643272
api/beta/skills Changed · +36 / -0 lines
from line 129
129129
130130 - `"webhooks-2026-10-07"`
131131
132 - `"message-threads-2026-08-12"`
133
134 - `"analytics-usage-cost-2026-08-24"`
135
132136- `"anthropic-workspace-id": optional string`
133137
134138 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 398
394398
395399 - `"webhooks-2026-10-07"`
396400
401 - `"message-threads-2026-08-12"`
402
403 - `"analytics-usage-cost-2026-08-24"`
404
397405- `"anthropic-workspace-id": optional string`
398406
399407 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 647
639647
640648 - `"webhooks-2026-10-07"`
641649
650 - `"message-threads-2026-08-12"`
651
652 - `"analytics-usage-cost-2026-08-24"`
653
642654- `"anthropic-workspace-id": optional string`
643655
644656 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 883
871883
872884 - `"webhooks-2026-10-07"`
873885
886 - `"message-threads-2026-08-12"`
887
888 - `"analytics-usage-cost-2026-08-24"`
889
874890- `"anthropic-workspace-id": optional string`
875891
876892 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1176
11601176
11611177 - `"webhooks-2026-10-07"`
11621178
1179 - `"message-threads-2026-08-12"`
1180
1181 - `"analytics-usage-cost-2026-08-24"`
1182
11631183- `"anthropic-workspace-id": optional string`
11641184
11651185 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1405
13851405
13861406 - `"webhooks-2026-10-07"`
13871407
1408 - `"message-threads-2026-08-12"`
1409
1410 - `"analytics-usage-cost-2026-08-24"`
1411
13881412- `"anthropic-workspace-id": optional string`
13891413
13901414 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1629
16051629
16061630 - `"webhooks-2026-10-07"`
16071631
1632 - `"message-threads-2026-08-12"`
1633
1634 - `"analytics-usage-cost-2026-08-24"`
1635
16081636- `"anthropic-workspace-id": optional string`
16091637
16101638 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1785
17571785
17581786 - `"webhooks-2026-10-07"`
17591787
1788 - `"message-threads-2026-08-12"`
1789
1790 - `"analytics-usage-cost-2026-08-24"`
1791
17601792- `"anthropic-workspace-id": optional string`
17611793
17621794 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1995
19631995 - `"telemetry-destinations-2026-08-11"`
19641996
19651997 - `"webhooks-2026-10-07"`
1998
1999 - `"message-threads-2026-08-12"`
2000
2001 - `"analytics-usage-cost-2026-08-24"`
19662002
19672003- `"anthropic-workspace-id": optional string`
19682004
api/beta/skills/versions Changed · +20 / -0 lines
from line 137
137137
138138 - `"webhooks-2026-10-07"`
139139
140 - `"message-threads-2026-08-12"`
141
142 - `"analytics-usage-cost-2026-08-24"`
143
140144- `"anthropic-workspace-id": optional string`
141145
142146 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 366
362366
363367 - `"webhooks-2026-10-07"`
364368
369 - `"message-threads-2026-08-12"`
370
371 - `"analytics-usage-cost-2026-08-24"`
372
365373- `"anthropic-workspace-id": optional string`
366374
367375 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 590
582590
583591 - `"webhooks-2026-10-07"`
584592
593 - `"message-threads-2026-08-12"`
594
595 - `"analytics-usage-cost-2026-08-24"`
596
585597- `"anthropic-workspace-id": optional string`
586598
587599 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 746
734746
735747 - `"webhooks-2026-10-07"`
736748
749 - `"message-threads-2026-08-12"`
750
751 - `"analytics-usage-cost-2026-08-24"`
752
737753- `"anthropic-workspace-id": optional string`
738754
739755 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 956
940956 - `"telemetry-destinations-2026-08-11"`
941957
942958 - `"webhooks-2026-10-07"`
959
960 - `"message-threads-2026-08-12"`
961
962 - `"analytics-usage-cost-2026-08-24"`
943963
944964- `"anthropic-workspace-id": optional string`
945965
api/beta/tunnels Changed · +40 / -0 lines
from line 131
131131
132132 - `"webhooks-2026-10-07"`
133133
134 - `"message-threads-2026-08-12"`
135
136 - `"analytics-usage-cost-2026-08-24"`
137
134138- `"anthropic-workspace-id": optional string`
135139
136140 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 337
333337
334338 - `"webhooks-2026-10-07"`
335339
340 - `"message-threads-2026-08-12"`
341
342 - `"analytics-usage-cost-2026-08-24"`
343
336344- `"anthropic-workspace-id": optional string`
337345
338346 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 543
535543
536544 - `"webhooks-2026-10-07"`
537545
546 - `"message-threads-2026-08-12"`
547
548 - `"analytics-usage-cost-2026-08-24"`
549
538550- `"anthropic-workspace-id": optional string`
539551
540552 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 748
736748
737749 - `"webhooks-2026-10-07"`
738750
751 - `"message-threads-2026-08-12"`
752
753 - `"analytics-usage-cost-2026-08-24"`
754
739755- `"anthropic-workspace-id": optional string`
740756
741757 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 945
929945
930946 - `"webhooks-2026-10-07"`
931947
948 - `"message-threads-2026-08-12"`
949
950 - `"analytics-usage-cost-2026-08-24"`
951
932952- `"anthropic-workspace-id": optional string`
933953
934954 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1123
11031123
11041124 - `"webhooks-2026-10-07"`
11051125
1126 - `"message-threads-2026-08-12"`
1127
1128 - `"analytics-usage-cost-2026-08-24"`
1129
11061130- `"anthropic-workspace-id": optional string`
11071131
11081132 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1362
13381362
13391363 - `"webhooks-2026-10-07"`
13401364
1365 - `"message-threads-2026-08-12"`
1366
1367 - `"analytics-usage-cost-2026-08-24"`
1368
13411369- `"anthropic-workspace-id": optional string`
13421370
13431371 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1581
15531581
15541582 - `"webhooks-2026-10-07"`
15551583
1584 - `"message-threads-2026-08-12"`
1585
1586 - `"analytics-usage-cost-2026-08-24"`
1587
15561588- `"anthropic-workspace-id": optional string`
15571589
15581590 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1800
17681800
17691801 - `"webhooks-2026-10-07"`
17701802
1803 - `"message-threads-2026-08-12"`
1804
1805 - `"analytics-usage-cost-2026-08-24"`
1806
17711807- `"anthropic-workspace-id": optional string`
17721808
17731809 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2015
19792015 - `"telemetry-destinations-2026-08-11"`
19802016
19812017 - `"webhooks-2026-10-07"`
2018
2019 - `"message-threads-2026-08-12"`
2020
2021 - `"analytics-usage-cost-2026-08-24"`
19822022
19832023- `"anthropic-workspace-id": optional string`
19842024
api/beta/tunnels/certificates Changed · +16 / -0 lines
from line 137
137137
138138 - `"webhooks-2026-10-07"`
139139
140 - `"message-threads-2026-08-12"`
141
142 - `"analytics-usage-cost-2026-08-24"`
143
140144- `"anthropic-workspace-id": optional string`
141145
142146 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 356
352356
353357 - `"webhooks-2026-10-07"`
354358
359 - `"message-threads-2026-08-12"`
360
361 - `"analytics-usage-cost-2026-08-24"`
362
355363- `"anthropic-workspace-id": optional string`
356364
357365 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 575
567575
568576 - `"webhooks-2026-10-07"`
569577
578 - `"message-threads-2026-08-12"`
579
580 - `"analytics-usage-cost-2026-08-24"`
581
570582- `"anthropic-workspace-id": optional string`
571583
572584 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 790
778790 - `"telemetry-destinations-2026-08-11"`
779791
780792 - `"webhooks-2026-10-07"`
793
794 - `"message-threads-2026-08-12"`
795
796 - `"analytics-usage-cost-2026-08-24"`
781797
782798- `"anthropic-workspace-id": optional string`
783799
api/beta/user_profiles Changed · +28 / -0 lines
from line 129
129129
130130 - `"webhooks-2026-10-07"`
131131
132 - `"message-threads-2026-08-12"`
133
134 - `"analytics-usage-cost-2026-08-24"`
135
132136- `"anthropic-workspace-id": optional string`
133137
134138 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 574
570574
571575 - `"webhooks-2026-10-07"`
572576
577 - `"message-threads-2026-08-12"`
578
579 - `"analytics-usage-cost-2026-08-24"`
580
573581- `"anthropic-workspace-id": optional string`
574582
575583 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 886
878886
879887 - `"webhooks-2026-10-07"`
880888
889 - `"message-threads-2026-08-12"`
890
891 - `"analytics-usage-cost-2026-08-24"`
892
881893- `"anthropic-workspace-id": optional string`
882894
883895 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1191
11791191
11801192 - `"webhooks-2026-10-07"`
11811193
1194 - `"message-threads-2026-08-12"`
1195
1196 - `"analytics-usage-cost-2026-08-24"`
1197
11821198- `"anthropic-workspace-id": optional string`
11831199
11841200 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1598
15821598
15831599 - `"webhooks-2026-10-07"`
15841600
1601 - `"message-threads-2026-08-12"`
1602
1603 - `"analytics-usage-cost-2026-08-24"`
1604
15851605- `"anthropic-workspace-id": optional string`
15861606
15871607 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1769
17491769
17501770 - `"webhooks-2026-10-07"`
17511771
1772 - `"message-threads-2026-08-12"`
1773
1774 - `"analytics-usage-cost-2026-08-24"`
1775
17521776- `"anthropic-workspace-id": optional string`
17531777
17541778 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2242
22182242 - `"telemetry-destinations-2026-08-11"`
22192243
22202244 - `"webhooks-2026-10-07"`
2245
2246 - `"message-threads-2026-08-12"`
2247
2248 - `"analytics-usage-cost-2026-08-24"`
22212249
22222250- `"anthropic-workspace-id": optional string`
22232251
api/beta/vaults Changed · +52 / -0 lines
from line 129
129129
130130 - `"webhooks-2026-10-07"`
131131
132 - `"message-threads-2026-08-12"`
133
134 - `"analytics-usage-cost-2026-08-24"`
135
132136- `"anthropic-workspace-id": optional string`
133137
134138 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 361
357361
358362 - `"webhooks-2026-10-07"`
359363
364 - `"message-threads-2026-08-12"`
365
366 - `"analytics-usage-cost-2026-08-24"`
367
360368- `"anthropic-workspace-id": optional string`
361369
362370 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 573
565573
566574 - `"webhooks-2026-10-07"`
567575
576 - `"message-threads-2026-08-12"`
577
578 - `"analytics-usage-cost-2026-08-24"`
579
568580- `"anthropic-workspace-id": optional string`
569581
570582 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 776
764776
765777 - `"webhooks-2026-10-07"`
766778
779 - `"message-threads-2026-08-12"`
780
781 - `"analytics-usage-cost-2026-08-24"`
782
767783- `"anthropic-workspace-id": optional string`
768784
769785 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 998
982998
983999 - `"webhooks-2026-10-07"`
9841000
1001 - `"message-threads-2026-08-12"`
1002
1003 - `"analytics-usage-cost-2026-08-24"`
1004
9851005- `"anthropic-workspace-id": optional string`
9861006
9871007 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1169
11491169
11501170 - `"webhooks-2026-10-07"`
11511171
1172 - `"message-threads-2026-08-12"`
1173
1174 - `"analytics-usage-cost-2026-08-24"`
1175
11521176- `"anthropic-workspace-id": optional string`
11531177
11541178 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1427
14031427
14041428 - `"webhooks-2026-10-07"`
14051429
1430 - `"message-threads-2026-08-12"`
1431
1432 - `"analytics-usage-cost-2026-08-24"`
1433
14061434- `"anthropic-workspace-id": optional string`
14071435
14081436 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1959
19311959
19321960 - `"webhooks-2026-10-07"`
19331961
1962 - `"message-threads-2026-08-12"`
1963
1964 - `"analytics-usage-cost-2026-08-24"`
1965
19341966- `"anthropic-workspace-id": optional string`
19351967
19361968 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2298
22662298
22672299 - `"webhooks-2026-10-07"`
22682300
2301 - `"message-threads-2026-08-12"`
2302
2303 - `"analytics-usage-cost-2026-08-24"`
2304
22692305- `"anthropic-workspace-id": optional string`
22702306
22712307 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2628
25922628
25932629 - `"webhooks-2026-10-07"`
25942630
2631 - `"message-threads-2026-08-12"`
2632
2633 - `"analytics-usage-cost-2026-08-24"`
2634
25952635- `"anthropic-workspace-id": optional string`
25962636
25972637 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 3107
30673107
30683108 - `"webhooks-2026-10-07"`
30693109
3110 - `"message-threads-2026-08-12"`
3111
3112 - `"analytics-usage-cost-2026-08-24"`
3113
30703114- `"anthropic-workspace-id": optional string`
30713115
30723116 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 3282
32383282
32393283 - `"webhooks-2026-10-07"`
32403284
3285 - `"message-threads-2026-08-12"`
3286
3287 - `"analytics-usage-cost-2026-08-24"`
3288
32413289- `"anthropic-workspace-id": optional string`
32423290
32433291 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 3612
35643612 - `"telemetry-destinations-2026-08-11"`
35653613
35663614 - `"webhooks-2026-10-07"`
3615
3616 - `"message-threads-2026-08-12"`
3617
3618 - `"analytics-usage-cost-2026-08-24"`
35673619
35683620- `"anthropic-workspace-id": optional string`
35693621
api/beta/vaults/credentials Changed · +28 / -0 lines
from line 135
135135
136136 - `"webhooks-2026-10-07"`
137137
138 - `"message-threads-2026-08-12"`
139
140 - `"analytics-usage-cost-2026-08-24"`
141
138142- `"anthropic-workspace-id": optional string`
139143
140144 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 667
663667
664668 - `"webhooks-2026-10-07"`
665669
670 - `"message-threads-2026-08-12"`
671
672 - `"analytics-usage-cost-2026-08-24"`
673
666674- `"anthropic-workspace-id": optional string`
667675
668676 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1006
9981006
9991007 - `"webhooks-2026-10-07"`
10001008
1009 - `"message-threads-2026-08-12"`
1010
1011 - `"analytics-usage-cost-2026-08-24"`
1012
10011013- `"anthropic-workspace-id": optional string`
10021014
10031015 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1336
13241336
13251337 - `"webhooks-2026-10-07"`
13261338
1339 - `"message-threads-2026-08-12"`
1340
1341 - `"analytics-usage-cost-2026-08-24"`
1342
13271343- `"anthropic-workspace-id": optional string`
13281344
13291345 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1815
17991815
18001816 - `"webhooks-2026-10-07"`
18011817
1818 - `"message-threads-2026-08-12"`
1819
1820 - `"analytics-usage-cost-2026-08-24"`
1821
18021822- `"anthropic-workspace-id": optional string`
18031823
18041824 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 1990
19701990
19711991 - `"webhooks-2026-10-07"`
19721992
1993 - `"message-threads-2026-08-12"`
1994
1995 - `"analytics-usage-cost-2026-08-24"`
1996
19731997- `"anthropic-workspace-id": optional string`
19741998
19751999 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2320
22962320 - `"telemetry-destinations-2026-08-11"`
22972321
22982322 - `"webhooks-2026-10-07"`
2323
2324 - `"message-threads-2026-08-12"`
2325
2326 - `"analytics-usage-cost-2026-08-24"`
22992327
23002328- `"anthropic-workspace-id": optional string`
23012329
api/claude-models-on-google-cloud-anthropic-managed-iam-permissions Changed · +7 / -6 lines
from line 34
3434
3535## Permissions
3636
37The following tables list 68 permissions across 111 routes.
37The following tables list 69 permissions across 113 routes.
3838
3939The `get` and `list` permissions are the read-only ones.
4040
from line 231
231231
232232### Usage reports
233233
234| Permission | Roles | Routes authorized |
235| --------------------- | ----- | --------------------------------------------- |
236| `usageAnalytics.list` | Admin | `GET /v1/organizations/usage_report/messages` |
234| Permission | Roles | Routes authorized |
235| --------------------- | ----- | ------------------------------------------------------------------------------------------ |
236| `usageAnalytics.list` | Admin | `GET /v1/organizations/usage_report/messages`<br />`GET /v1/organizations/analytics/usage` |
237| `costAnalytics.list` | Admin | `GET /v1/organizations/analytics/cost` |
237238
238Of the three predefined roles, only `roles/claude.admin` includes `usageAnalytics.list`.
239Of the three predefined roles, only `roles/claude.admin` includes `usageAnalytics.list` and `costAnalytics.list`.
239240
240241## See also
241242
api/claude-platform-on-aws-iam-actions Changed · +23 / -7 lines
### Usage and cost
from line 273
273273 `AddTelemetryDestinationWorkspace` and `RemoveTelemetryDestinationWorkspace` apply to the workspace in the route, and only on a destination whose **Workspaces** option is **Selected**. To change an **All except** list, use `UpdateAccountTelemetryDestination`. A policy that denies `aws-external-anthropic:Create*`, `Update*`, or `Delete*` still allows adding and removing workspaces. To block every change to destinations, also deny `AddTelemetryDestinationWorkspace` and `RemoveTelemetryDestinationWorkspace`.
274274</Note>
275275
276### Usage and cost
277
278| Action | Routes authorized |
279| ------------------ | --------------------------------------- |
280| `ListAccountUsage` | `GET /v1/organizations/analytics/usage` |
281| `ListAccountCost` | `GET /v1/organizations/analytics/cost` |
282
283<Note>
284 These actions authorize the [Usage and Cost Analytics API](https://platform.claude.com/docs/en/manage-claude/usage-cost-analytics-api). Both are account-scoped. Specifying a workspace ARN on these actions has no effect; use `Resource: "*"`.
285</Note>
286
276287### Authentication
277288
278289| Action | Routes authorized |
from line 302
291302
292303## Route-to-action mapping
293304
294The following table lists every route on Claude Platform on AWS and the IAM action required to call it. Each IAM action also authorizes requests that use the `anthropic-beta` header; beta variants of a route do not require a separate IAM action. CloudTrail classifies each action as either a Data event (high-volume, data-plane operations) or a Management event (control-plane operations). Vault and webhook actions are classified as Management events because they hold secrets (vault credentials and webhook signing secrets) and benefit from default-on audit logging. Workspace, external key, telemetry destination, and compliance actions are also classified as Management events because they are organization-scoped control-plane operations. All other actions, including inference, batch, model, file, skill, user profile, and the remaining Claude Managed Agents actions, are classified as Data events.
305The following tables list every route on Claude Platform on AWS and the IAM action required to call it. Each IAM action also authorizes requests that use the `anthropic-beta` header; beta variants of a route do not require a separate IAM action. CloudTrail classifies each action as either a Data event (high-volume, data-plane operations) or a Management event (control-plane operations). Vault and webhook actions are classified as Management events because they hold secrets (vault credentials and webhook signing secrets) and benefit from default-on audit logging. Workspace, external key, telemetry destination, and compliance actions are also classified as Management events because they are organization-scoped control-plane operations. All other actions, including inference, batch, model, file, skill, user profile, usage and cost, and the remaining Claude Managed Agents actions, are classified as Data events.
295306
296307| Method | Route | IAM action | CloudTrail event type |
297308| -------- | ------------------------------------------------------------------------- | ------------------------------------------- | --------------------- |
from line 423
412423| `DELETE` | `/v1/webhooks/{id}` | `DeleteWebhook` | Management |
413424| `POST` | `/v1/webhooks/{id}/regenerate_signing_secret` | `RotateWebhookSecret` | Management |
414425
415Routes not in this table are not available on Claude Platform on AWS. The gateway denies any route not listed here by default.
426| Method | Route | IAM action | CloudTrail event type |
427| ------ | ----------------------------------- | ------------------ | --------------------- |
428| `GET` | `/v1/organizations/analytics/usage` | `ListAccountUsage` | Data |
429| `GET` | `/v1/organizations/analytics/cost` | `ListAccountCost` | Data |
416430
431Routes not in these tables are not available on Claude Platform on AWS. The gateway denies any route not listed here by default.
432
417433<Note>
418 Workspace, external key, and telemetry destination routes are the only Admin API routes available on Claude Platform on AWS. You can also create, update, or archive workspaces in the AWS Console or, with the Admin role, in the Claude Console. Encryption keys can also be registered and attached in the Claude Console.
434 Workspace, external key, telemetry destination, and Usage and Cost Analytics API routes are the only Admin API routes available on Claude Platform on AWS. You can also create, update, or archive workspaces in the AWS Console or, with the Admin role, in the Claude Console. Encryption keys can also be registered and attached in the Claude Console.
419435</Note>
420436
421437## Managed policies
from line 449
433449`AnthropicInferenceAccess` is the narrowest managed policy sufficient to run inference. It covers both synchronous and batch inference and, through the `Get*` and `List*` wildcards, grants read access to every API resource in the namespace, including Claude Managed Agents (CMA) resources (agents, sessions, environments, vaults, memory stores, and webhooks). This includes file content download through `GetFile` (see the [Files](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#files) note), skill content download through `GetSkill` (see the [Skills](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#skills) note), and memory contents through `GetMemoryStore`. Vault credential secrets and webhook signing secrets are not exposed: those fields are write-only and are never returned by `GetVault` or `GetWebhook` (see [Authenticate with vaults](https://platform.claude.com/docs/en/managed-agents/vaults)). `AnthropicInferenceAccess` does not grant file creation or deletion, skill management, user profile management, workspace mutation, encryption key management, telemetry destination management, or any Claude Managed Agents write action (create, update, archive, delete, process, or rotate). To exclude CMA reads, replace `AnthropicInferenceAccess` with a custom policy that enumerates only the specific non-CMA actions you need.
434450
435451<Note>
436 `AnthropicReadOnlyAccess`, `AnthropicInferenceAccess`, and `AnthropicLimitedAccess` all carry the `Get*` and `List*` wildcards, which grant read access to all content in the workspace: file bytes, skill content, batch results, session conversation history, and memory contents. The wildcards also grant `GetKey` and `ListKeys`, which read the organization’s registered encryption key configurations (key ARNs and metadata, never key material). They also grant the account-scoped `GetUserProfile` and `ListUserProfiles`, which read user profiles. The `List*` wildcard also grants `ListComplianceActivities`, which reads the organization’s compliance [Activity Feed](https://platform.claude.com/docs/en/manage-claude/compliance-activity-feed) once the Compliance API is enabled for the organization (see [Compliance](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#compliance)). The wildcards also grant `GetAccountTelemetryDestination`, `ListAccountTelemetryDestinations`, and `ListAccountTelemetryDestinationWorkspaces`, which read the organization’s telemetry destinations but never their header values. Vault credential secrets and webhook signing secrets are not exposed; those fields are write-only and are never returned by `GetVault` or `GetWebhook`. If your principal should not read existing content, use a custom policy that enumerates only the actions you need.
452 `AnthropicReadOnlyAccess`, `AnthropicInferenceAccess`, and `AnthropicLimitedAccess` all carry the `Get*` and `List*` wildcards, which grant read access to all content in the workspace: file bytes, skill content, batch results, session conversation history, and memory contents. The wildcards also grant `GetKey` and `ListKeys`, which read the organization’s registered encryption key configurations (key ARNs and metadata, never key material). They also grant the account-scoped `GetUserProfile` and `ListUserProfiles`, which read user profiles. The `List*` wildcard also grants `ListComplianceActivities`, which reads the organization’s compliance [Activity Feed](https://platform.claude.com/docs/en/manage-claude/compliance-activity-feed) once the Compliance API is enabled for the organization (see [Compliance](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#compliance)). It also grants `ListAccountUsage` and `ListAccountCost`, which read the organization’s usage and cost data (see [Usage and cost](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#usage-and-cost)). The wildcards also grant `GetAccountTelemetryDestination`, `ListAccountTelemetryDestinations`, and `ListAccountTelemetryDestinationWorkspaces`, which read the organization’s telemetry destinations but never their header values. Vault credential secrets and webhook signing secrets are not exposed; those fields are write-only and are never returned by `GetVault` or `GetWebhook`. If your principal should not read existing content, use a custom policy that enumerates only the actions you need.
437453</Note>
438454
439455`AnthropicLimitedAccess` includes all Claude Managed Agents actions in addition to inference actions.
from line 519
503519```
504520
505521<Note>
506 The `aws-external-anthropic:*` wildcard in the first statement includes account-scoped actions (`CreateWorkspace`, `ListWorkspaces`, `ListComplianceActivities`, the external key actions, the account-scoped telemetry destination actions, and the user profile actions) that the workspace ARN constraint silently filters out. This is consistent with the “isolation” intent (the role cannot create workspaces, enumerate workspaces, manage encryption key registrations, read the compliance Activity Feed, or read or manage user profiles, and it cannot create, read, or change telemetry destinations; it can still attach an already-registered key to its own workspace through `UpdateWorkspace`, and add its own workspace to a destination, or remove it from one, given the destination’s ID), but the policy contains permissions that have no effect. If the role needs user profiles, add a separate `Allow` statement for the user profile actions with `Resource: "*"`. See [Provisioning automation](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#provisioning-automation) for the account-scoped pattern.
522 The `aws-external-anthropic:*` wildcard in the first statement includes account-scoped actions (`CreateWorkspace`, `ListWorkspaces`, `ListComplianceActivities`, the external key actions, the account-scoped telemetry destination actions, the user profile actions, and the usage and cost actions) that the workspace ARN constraint silently filters out. This is consistent with the “isolation” intent (the role cannot create workspaces, enumerate workspaces, manage encryption key registrations, read the compliance Activity Feed, read usage or cost reports, or read or manage user profiles, and it cannot create, read, or change telemetry destinations; it can still attach an already-registered key to its own workspace through `UpdateWorkspace`, and add its own workspace to a destination, or remove it from one, given the destination’s ID), but the policy contains permissions that have no effect. If the role needs user profiles or usage and cost reports, add a separate `Allow` statement for those actions with `Resource: "*"`. See [Provisioning automation](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#provisioning-automation) for the account-scoped pattern.
507523
508524 `CallWithBearerToken` and `AssumeConsole` are route-less actions that do not bind to a workspace ARN. The second statement grants them on `Resource: "*"` so the role can authenticate with an API key and open the Claude Console. Omit this statement if the role uses SigV4 only and does not need Claude Console access.
509525</Note>
api/compliance Changed · +2192 / -6 lines
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 19
1919
2020#### Query parameters
2121
22- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
22- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
2323
2424 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2525
from line 739
739739
740740 SAML IdP configuration updated for a public sector organization.
741741
742 - `"claude_security_finding_deleted"`
743
744 A Claude Security finding was permanently deleted by a user.
745
746 - `"claude_security_finding_updated"`
747
748 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
749
750 - `"claude_security_knowledge_document_created"`
751
752 A knowledge document was created in a Claude Security scan project.
753
754 - `"claude_security_knowledge_document_updated"`
755
756 A Claude Security scan project's knowledge document, such as its threat model, was changed.
757
758 - `"claude_security_knowledge_document_version_restored"`
759
760 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
761
762 - `"claude_security_scan_project_asset_added"`
763
764 A repository was added to a Claude Security scan project.
765
766 - `"claude_security_scan_project_asset_removed"`
767
768 A repository was removed from a Claude Security scan project.
769
770 - `"claude_security_scan_project_asset_updated"`
771
772 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
773
742774 - `"claude_skill_auto_disabled"`
743775
744776 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 2354
23222354
23232355 format: date-time
23242356
2325- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
2357- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
23262358
23272359 Exclude activities of these types. Cannot be combined with `activity_types[]`.
23282360
from line 3074
30423074
30433075 SAML IdP configuration updated for a public sector organization.
30443076
3077 - `"claude_security_finding_deleted"`
3078
3079 A Claude Security finding was permanently deleted by a user.
3080
3081 - `"claude_security_finding_updated"`
3082
3083 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
3084
3085 - `"claude_security_knowledge_document_created"`
3086
3087 A knowledge document was created in a Claude Security scan project.
3088
3089 - `"claude_security_knowledge_document_updated"`
3090
3091 A Claude Security scan project's knowledge document, such as its threat model, was changed.
3092
3093 - `"claude_security_knowledge_document_version_restored"`
3094
3095 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
3096
3097 - `"claude_security_scan_project_asset_added"`
3098
3099 A repository was added to a Claude Security scan project.
3100
3101 - `"claude_security_scan_project_asset_removed"`
3102
3103 A repository was removed from a Claude Security scan project.
3104
3105 - `"claude_security_scan_project_asset_updated"`
3106
3107 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
3108
30453109 - `"claude_skill_auto_disabled"`
30463110
30473111 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 4687
46234687
46244688#### Returns
46254689
4626- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 558 more`
4690- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 566 more`
46274691
46284692 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
46294693
from line 9039
89759039
89769040 - `FederatedActorOidcProvider object`
89779041
8978 Asserting party: a customer-registered OIDC federation issuer.
8979
8980 - `type: optional "oidc"`
8981
8982 default: oidc
8983
8984 - `issuer: optional string or null`
8985
8986 The federation issuer's URL. Null when the presented credential failed verification.
8987
8988 - `ip_address: optional string or null`
8989
8990 - `subject: optional string or null`
8991
8992 The provider's verified identifier for the caller; its form depends on the provider.
8993
8994 - `user_agent: optional string or null`
8995
8996 - `AttestedDeviceActor object`
8997
8998 An attested mobile device authenticated via Apple App Attest.
8999
9000 - `type: optional "attested_device_actor"`
9001
9002 default: attested_device_actor
9003
9004 - `external_client_id: string`
9005
9006 - `kid_hash: string`
9007
9008 - `ip_address: optional string or null`
9009
9010 - `user_agent: optional string or null`
9011
9012 - `claude_artifact_id: string`
9013
9014 The artifact's identifier.
9015
9016 - `id: optional string`
9017
9018 Unique identifier for the activity e.g. 'activity_abcd1234'
9019
9020 - `claude_artifact_version_id: optional string or null`
9021
9022 The version of the artifact whose comments were served, when known.
9023
9024 - `created_at: optional string`
9025
9026 When this activity occurred.
9027
9028 format: date-time
9029
9030 - `organization_id: optional string or null`
9031
9032 Organization ID this activity is associated with
9033
9034 - `organization_uuid: optional string or null`
9035
9036 Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
9037
9038 - `ClaudeArtifactCreated object`
9039
9040 An artifact was created.
9041
9042 - `type: optional "claude_artifact_created"`
9043
9044 default: claude_artifact_created
9045
9046 - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
9047
9048 - `APIActor object`
9049
9050 - `type: optional "api_actor"`
9051
9052 default: api_actor
9053
9054 - `api_key_id: string`
9055
9056 - `ip_address: string`
9057
9058 - `user_agent: string`
9059
9060 - `UserActor object`
9061
9062 - `type: optional "user_actor"`
9063
9064 default: user_actor
9065
9066 - `email_address: string`
9067
9068 format: email
9069
9070 - `ip_address: string`
9071
9072 - `user_agent: string`
9073
9074 - `user_id: string`
9075
9076 - `UnauthenticatedUserActor object`
9077
9078 - `type: optional "unauthenticated_user_actor"`
9079
9080 default: unauthentic
9042 Asserting party: a cu
api/compliance/activities Changed · +4316 / -8 lines
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 17
1717
1818### Query parameters
1919
20- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
20- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
2121
2222 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2323
from line 737
737737
738738 SAML IdP configuration updated for a public sector organization.
739739
740 - `"claude_security_finding_deleted"`
741
742 A Claude Security finding was permanently deleted by a user.
743
744 - `"claude_security_finding_updated"`
745
746 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
747
748 - `"claude_security_knowledge_document_created"`
749
750 A knowledge document was created in a Claude Security scan project.
751
752 - `"claude_security_knowledge_document_updated"`
753
754 A Claude Security scan project's knowledge document, such as its threat model, was changed.
755
756 - `"claude_security_knowledge_document_version_restored"`
757
758 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
759
760 - `"claude_security_scan_project_asset_added"`
761
762 A repository was added to a Claude Security scan project.
763
764 - `"claude_security_scan_project_asset_removed"`
765
766 A repository was removed from a Claude Security scan project.
767
768 - `"claude_security_scan_project_asset_updated"`
769
770 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
771
740772 - `"claude_skill_auto_disabled"`
741773
742774 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 2352
23202352
23212353 format: date-time
23222354
2323- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
2355- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
23242356
23252357 Exclude activities of these types. Cannot be combined with `activity_types[]`.
23262358
from line 3072
30403072
30413073 SAML IdP configuration updated for a public sector organization.
30423074
3075 - `"claude_security_finding_deleted"`
3076
3077 A Claude Security finding was permanently deleted by a user.
3078
3079 - `"claude_security_finding_updated"`
3080
3081 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
3082
3083 - `"claude_security_knowledge_document_created"`
3084
3085 A knowledge document was created in a Claude Security scan project.
3086
3087 - `"claude_security_knowledge_document_updated"`
3088
3089 A Claude Security scan project's knowledge document, such as its threat model, was changed.
3090
3091 - `"claude_security_knowledge_document_version_restored"`
3092
3093 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
3094
3095 - `"claude_security_scan_project_asset_added"`
3096
3097 A repository was added to a Claude Security scan project.
3098
3099 - `"claude_security_scan_project_asset_removed"`
3100
3101 A repository was removed from a Claude Security scan project.
3102
3103 - `"claude_security_scan_project_asset_updated"`
3104
3105 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
3106
30433107 - `"claude_skill_auto_disabled"`
30443108
30453109 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 4685
46214685
46224686### Returns
46234687
4624- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 558 more`
4688- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 566 more`
46254689
46264690 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
46274691
from line 9037
89739037
89749038 - `FederatedActorOidcProvider object`
89759039
8976 Asserting party: a customer-registered OIDC federation issuer.
8977
8978 - `type: optional "oidc"`
8979
8980 default: oidc
8981
8982 - `issuer: optional string or null`
8983
8984 The federation issuer's URL. Null when the presented credential failed verification.
8985
8986 - `ip_address: optional string or null`
8987
8988 - `subject: optional string or null`
8989
8990 The provider's verified identifier for the caller; its form depends on the provider.
8991
8992 - `user_agent: optional string or null`
8993
8994 - `AttestedDeviceActor object`
8995
8996 An attested mobile device authenticated via Apple App Attest.
8997
8998 - `type: optional "attested_device_actor"`
8999
9000 default: attested_device_actor
9001
9002 - `external_client_id: string`
9003
9004 - `kid_hash: string`
9005
9006 - `ip_address: optional string or null`
9007
9008 - `user_agent: optional string or null`
9009
9010 - `claude_artifact_id: string`
9011
9012 The artifact's identifier.
9013
9014 - `id: optional string`
9015
9016 Unique identifier for the activity e.g. 'activity_abcd1234'
9017
9018 - `claude_artifact_version_id: optional string or null`
9019
9020 The version of the artifact whose comments were served, when known.
9021
9022 - `created_at: optional string`
9023
9024 When this activity occurred.
9025
9026 format: date-time
9027
9028 - `organization_id: optional string or null`
9029
9030 Organization ID this activity is associated with
9031
9032 - `organization_uuid: optional string or null`
9033
9034 Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
9035
9036 - `ClaudeArtifactCreated object`
9037
9038 An artifact was created.
9039
9040 - `type: optional "claude_artifact_created"`
9041
9042 default: claude_artifact_created
9043
9044 - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
9045
9046 - `APIActor object`
9047
9048 - `type: optional "api_actor"`
9049
9050 default: api_actor
9051
9052 - `api_key_id: string`
9053
9054 - `ip_address: string`
9055
9056 - `user_agent: string`
9057
9058 - `UserActor object`
9059
9060 - `type: optional "user_actor"`
9061
9062 default: user_actor
9063
9064 - `email_address: string`
9065
9066 format: email
9067
9068 - `ip_address: string`
9069
9070 - `user_agent: string`
9071
9072 - `user_id: string`
9073
9074 - `UnauthenticatedUserActor object`
9075
9076 - `type: optional "unauthenticated_user_actor"`
9077
9078 default: unauthenticated_user_actor
9079
9080 - `ip_addr
9040 Asserting party: a customer-registered OIDC federation i
api/compliance/activities/list Changed · +2191 / -5 lines
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 15
1515
1616## Query parameters
1717
18- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
18- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
1919
2020 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2121
from line 735
735735
736736 SAML IdP configuration updated for a public sector organization.
737737
738 - `"claude_security_finding_deleted"`
739
740 A Claude Security finding was permanently deleted by a user.
741
742 - `"claude_security_finding_updated"`
743
744 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
745
746 - `"claude_security_knowledge_document_created"`
747
748 A knowledge document was created in a Claude Security scan project.
749
750 - `"claude_security_knowledge_document_updated"`
751
752 A Claude Security scan project's knowledge document, such as its threat model, was changed.
753
754 - `"claude_security_knowledge_document_version_restored"`
755
756 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
757
758 - `"claude_security_scan_project_asset_added"`
759
760 A repository was added to a Claude Security scan project.
761
762 - `"claude_security_scan_project_asset_removed"`
763
764 A repository was removed from a Claude Security scan project.
765
766 - `"claude_security_scan_project_asset_updated"`
767
768 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
769
738770 - `"claude_skill_auto_disabled"`
739771
740772 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 2350
23182350
23192351 format: date-time
23202352
2321- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
2353- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
23222354
23232355 Exclude activities of these types. Cannot be combined with `activity_types[]`.
23242356
from line 3070
30383070
30393071 SAML IdP configuration updated for a public sector organization.
30403072
3073 - `"claude_security_finding_deleted"`
3074
3075 A Claude Security finding was permanently deleted by a user.
3076
3077 - `"claude_security_finding_updated"`
3078
3079 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
3080
3081 - `"claude_security_knowledge_document_created"`
3082
3083 A knowledge document was created in a Claude Security scan project.
3084
3085 - `"claude_security_knowledge_document_updated"`
3086
3087 A Claude Security scan project's knowledge document, such as its threat model, was changed.
3088
3089 - `"claude_security_knowledge_document_version_restored"`
3090
3091 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
3092
3093 - `"claude_security_scan_project_asset_added"`
3094
3095 A repository was added to a Claude Security scan project.
3096
3097 - `"claude_security_scan_project_asset_removed"`
3098
3099 A repository was removed from a Claude Security scan project.
3100
3101 - `"claude_security_scan_project_asset_updated"`
3102
3103 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
3104
30413105 - `"claude_skill_auto_disabled"`
30423106
30433107 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 4683
46194683
46204684## Returns
46214685
4622- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 558 more`
4686- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 566 more`
46234687
46244688 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
46254689
from line 9035
89719035
89729036 - `FederatedActorOidcProvider object`
89739037
8974 Asserting party: a customer-registered OIDC federation issuer.
8975
8976 - `type: optional "oidc"`
8977
8978 default: oidc
8979
8980 - `issuer: optional string or null`
8981
8982 The federation issuer's URL. Null when the presented credential failed verification.
8983
8984 - `ip_address: optional string or null`
8985
8986 - `subject: optional string or null`
8987
8988 The provider's verified identifier for the caller; its form depends on the provider.
8989
8990 - `user_agent: optional string or null`
8991
8992 - `AttestedDeviceActor object`
8993
8994 An attested mobile device authenticated via Apple App Attest.
8995
8996 - `type: optional "attested_device_actor"`
8997
8998 default: attested_device_actor
8999
9000 - `external_client_id: string`
9001
9002 - `kid_hash: string`
9003
9004 - `ip_address: optional string or null`
9005
9006 - `user_agent: optional string or null`
9007
9008 - `claude_artifact_id: string`
9009
9010 The artifact's identifier.
9011
9012 - `id: optional string`
9013
9014 Unique identifier for the activity e.g. 'activity_abcd1234'
9015
9016 - `claude_artifact_version_id: optional string or null`
9017
9018 The version of the artifact whose comments were served, when known.
9019
9020 - `created_at: optional string`
9021
9022 When this activity occurred.
9023
9024 format: date-time
9025
9026 - `organization_id: optional string or null`
9027
9028 Organization ID this activity is associated with
9029
9030 - `organization_uuid: optional string or null`
9031
9032 Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
9033
9034 - `ClaudeArtifactCreated object`
9035
9036 An artifact was created.
9037
9038 - `type: optional "claude_artifact_created"`
9039
9040 default: claude_artifact_created
9041
9042 - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
9043
9044 - `APIActor object`
9045
9046 - `type: optional "api_actor"`
9047
9048 default: api_actor
9049
9050 - `api_key_id: string`
9051
9052 - `ip_address: string`
9053
9054 - `user_agent: string`
9055
9056 - `UserActor object`
9057
9058 - `type: optional "user_actor"`
9059
9060 default: user_actor
9061
9062 - `email_address: string`
9063
9064 format: email
9065
9066 - `ip_address: string`
9067
9068 - `user_agent: string`
9069
9070 - `user_id: string`
9071
9072 - `UnauthenticatedUserActor object`
9073
9074 - `type: optional "unauthenticated_user_actor"`
9075
9076 default: unauthenticated_user_actor
9077
9078 - `ip_
9038 Asserting party: a customer-registered OIDC federati
api/errors Changed · +4 / -4 lines
### Thinking block bound to a different conversation ### Thinking block no longer matches the conversation
from line 538
538538
539539The API returns the same message for any Anthropic-defined tool type that the requested model doesn’t support. Declare `{"type": "computer_toolset_20260801"}` without the beta header and update your agent loop as described in [Migrate from `computer_20251124`](https://platform.claude.com/docs/en/agents-and-tools/tool-use/computer-use-tool#migrate-from-computer-20251124). To move from `computer_20250124`, see [Move computer use to the toolset](https://platform.claude.com/docs/en/models/haiku-5-5/migration-guide#computer-use-toolset) in the Claude Haiku 5.5 migration guide. Earlier models that support the toolset keep accepting `computer_20251124`, as do Claude Opus 5.5, Claude Sonnet 5.5, and Claude Haiku 5.5 on Amazon Bedrock.
540540
541### Thinking block no longer matches the conversation
541### Thinking block bound to a different conversation
542542
543On Claude Fable 5.1, Claude Opus 5.5, Claude Sonnet 5.5, and Claude Haiku 5.5, the API accepts a replayed thinking block only while the `system` prompt, `tools`, and messages that preceded it are unchanged. For new accounts created on or after August 31, 2026, and for any request that sets `thinking.block_binding.prefix_mismatch_behavior` to `"error"`, a replayed block whose earlier history changed is rejected with a 400 `invalid_request_error` (with `"drop_block"`, the API drops the block and the request succeeds). The message starts with the position of the first failing block:
543This 400 `invalid_request_error` usually means a thinking block you sent back failed the prefix check: something before the block changed after the block was produced, such as the `system` prompt, `tools`, or an earlier message. Claude Fable 5.1, Claude Mythos 5.1, Claude Opus 5.5, Claude Sonnet 5.5, and Claude Haiku 5.5 run this check. For requests that don’t set `prefix_mismatch_behavior`, [When `prefix_mismatch_behavior` is unset](https://platform.claude.com/docs/en/build-with-claude/preserved-thinking#enforcement) shows which ones get this error. The message starts with the position of the first failing block:
544544
545545```text wrap
546546messages.{i}.content.{j}: Invalid `signature` in `thinking` block. The block is bound to a different conversation. Remove the block, or set `thinking.block_binding.prefix_mismatch_behavior` to "drop_block".
547547```
548548
549Without the `thinking-binding-controls-2026-08-01` beta header, the message also names that header. Keep the conversation history append-only, or send the beta header with `prefix_mismatch_behavior: "drop_block"` to drop the block and continue. On Claude Sonnet 5.5 and Claude Haiku 5.5, `block_binding` works only with `thinking: {"type": "adaptive"}`. With `between_tools` on Claude Sonnet 5.5, or `thinking: {"type": "disabled"}` on Claude Haiku 5.5, keep the history append-only, or strip the thinking blocks from the edited turn on. A block from a model the target model can’t read is dropped rather than rejected. See [Keeping the prefix unchanged](https://platform.claude.com/docs/en/build-with-claude/preserved-thinking#prefix-check) and the [fix for an invalid thinking block signature](https://platform.claude.com/docs/en/build-with-claude/thinking-troubleshooting#error-thinking-block-signature) in Troubleshooting thinking.
549Without the `thinking-binding-controls-2026-08-01` beta header, the message also names that header. Resending the same history fails the same way, even after you fix the code that made the edit. To continue the conversation, send the beta header with `prefix_mismatch_behavior: "drop_block"` on the retry and on every later request. Alternatively, strip the block the error names and every later `thinking` and `redacted_thinking` block, then retry once. On Claude Sonnet 5.5 and Claude Haiku 5.5, `block_binding` works only with `thinking: {"type": "adaptive"}`, so with any other thinking setting, strip the blocks. To stop new conversations from failing, keep the history append-only. A block from a model the target model can’t read is dropped rather than rejected. See [Keeping the prefix unchanged](https://platform.claude.com/docs/en/build-with-claude/preserved-thinking#prefix-check) and the [fix for an invalid thinking block signature](https://platform.claude.com/docs/en/build-with-claude/thinking-troubleshooting#error-thinking-block-signature) in Troubleshooting thinking.
550550
551551Sending `thinking.block_binding` without the `thinking-binding-controls-2026-08-01` [beta header](https://platform.claude.com/docs/en/api/beta-headers) returns a 400 `invalid_request_error` whose message ends in:
552552
api/opentelemetry/spans Changed · +9 / -7 lines
from line 120
120120
121121### Token usage
122122
123The following spans have token usage attributes: [`anthropic.messages.create`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-messages-create), [`anthropic.model_request`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-model-request), [`anthropic.compaction`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-compaction), and [`anthropic.session.outcome_evaluation`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-session-outcome-evaluation). The values are for each span’s step, for example the request, the model request, or the compaction. To count each token once, see [how to count tokens in the guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry#count-tokens).
123The following spans have token usage attributes: [`anthropic.messages.create`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-messages-create), [`anthropic.model_request`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-model-request), [`anthropic.compaction`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-compaction), and [`anthropic.session.outcome_evaluation`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-session-outcome-evaluation). The values are for each span’s step, for example the request, the model request, or the compaction. On the API spans for a Messages API request, the token counts are the tokens that your organization is billed for, even when the request fails or the application cancels it. The SDK’s `anthropic.messages.create` span has the counts that the response reports instead, so for a failed or canceled request they can be lower than on the API span, or absent. To count each token once, see [how to count tokens in the guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry#count-tokens).
124124
125125| Attribute | Type | Description |
126126| ---------------------------------------------------------- | ----- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
from line 162
162162| `anthropic.response.service_tier` | `string` | The service tier that served the request: the response’s [`usage.service_tier`](https://platform.claude.com/docs/en/api/messages#usage). See [how requests get assigned tiers](https://platform.claude.com/docs/en/api/service-tiers#how-requests-get-assigned-tiers). |
163163| `error.type` | `string` | A failed request’s [error type](https://platform.claude.com/docs/en/api/errors#http-errors), for example `rate_limit_error`.<br />**SDK:** Also the other values in [SDK spans for requests](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-resources-method).<br />**API:** `api_error` when the API ends the request without an error response. |
164164| `gen_ai.response.time_to_first_chunk` | `double` | Only on a streaming response’s spans. The seconds to the stream’s first `content_block_delta` event, if it has one. |
165| `gen_ai.usage.reasoning.output_tokens` | `int` | The response’s thinking tokens. They are part of the output tokens. Absent when the response’s usage doesn’t have details for the output tokens. |
166| `anthropic.usage.compaction.input_tokens` | `int` | Input tokens of the request’s [compactions](https://platform.claude.com/docs/en/build-with-claude/compaction), including cache reads and writes. Not part of `gen_ai.usage.input_tokens`. Absent when the response has no compaction. |
167| `anthropic.usage.compaction.output_tokens` | `int` | Output tokens of the request’s compactions. Not part of `gen_ai.usage.output_tokens`. Absent when the response has no compaction. |
165| `gen_ai.usage.reasoning.output_tokens` | `int` | The thinking tokens, which are part of the output tokens. Absent when the thinking tokens aren’t counted separately from the other output tokens, for example on a model whose responses don’t have details for the output tokens. |
166| `anthropic.usage.compaction.input_tokens` | `int` | Input tokens of the request’s [compactions](https://platform.claude.com/docs/en/build-with-claude/compaction), including cache reads and writes. Not part of `gen_ai.usage.input_tokens`. Absent when the request has no compaction. |
167| `anthropic.usage.compaction.output_tokens` | `int` | Output tokens of the request’s compactions. Not part of `gen_ai.usage.output_tokens`. Absent when the request has no compaction. |
168168| `gen_ai.request.max_tokens` | `int` | The request’s [`max_tokens`](https://platform.claude.com/docs/en/api/messages/create#create.max_tokens). |
169169| `gen_ai.request.temperature` | `double` | The request’s [`temperature`](https://platform.claude.com/docs/en/api/messages/create?version=2023-06-01#create.temperature). Absent when the request doesn’t set it. |
170170| `gen_ai.request.top_p` | `double` | The request’s [`top_p`](https://platform.claude.com/docs/en/api/messages/create?version=2023-06-01#create.top_p). Absent when the request doesn’t set it. |
from line 342
342342
343343The span has the compaction’s [token usage attributes](https://platform.claude.com/docs/en/api/opentelemetry/spans#token-usage). On [`anthropic.messages.create`](https://platform.claude.com/docs/en/api/opentelemetry/spans#anthropic-messages-create), a compaction’s usage is in the `anthropic.usage.compaction.*` attributes instead of the `gen_ai.usage.*` totals.
344344
345| Attribute | Type | Description |
346| ------------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------ |
347| `error.type` | `string` | The request’s [error type](https://platform.claude.com/docs/en/api/errors#http-errors), if the request failed during the compaction. |
345| Attribute | Type | Description |
346| ----------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
347| `gen_ai.request.model` | `string` | The model requested for the compaction, which is the request’s [`model`](https://platform.claude.com/docs/en/api/messages/create#create.model). |
348| `gen_ai.response.model` | `string` | The model that ran the compaction. It differs from `gen_ai.request.model` when the request uses a model alias, or when a [fallback model](https://platform.claude.com/docs/en/build-with-claude/refusals-and-fallback) served the request. |
349| `error.type` | `string` | The request’s [error type](https://platform.claude.com/docs/en/api/errors#http-errors), if the request failed during the compaction. |
348350
349351### `anthropic.session.outcome_evaluation`
350352