Compliance API changedapi/compliance
Recorded here
Lines+1,515added
Lines−3removed
From line
19
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits33to this page, all time
The whole hunk
from line 19, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 19
1919
2020#### Query parameters
2121
22- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 516 more`
22- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 522 more`
2323
2424 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2525
from line 271
271271
272272 A new version of an artifact was published — for an artifact created in a chat this is the action that made it publicly viewable; for an artifact created outside a chat it is recorded when the artifact is saved, including saves of private artifacts, except that automatic saves made while a person keeps editing may be recorded periodically for that person rather than once per save; changes to who can access the artifact are recorded separately as claude_artifact_sharing_updated.
273273
274 - `"claude_artifact_sent_to_partner"`
275
276 A member sent an export of an artifact to a partner application ("Send to …" on the artifact; a partner is a third-party application listed in Claude's connector directory): a file exported from the artifact was made available over a temporary link for the chosen partner to fetch. One activity is recorded per send, in the artifact owner's organization with the sending member as actor, whether or not the partner then retrieved the file; the partner's own import of the file is not part of this record. The file's name and contents are not recorded.
277
274278 - `"claude_artifact_sharing_updated"`
275279
276280 An artifact's sharing settings were updated.
from line 691
687691
688692 A security scan of a skill completed and produced a verdict.
689693
694 - `"claude_survey_closed"`
695
696 An organization admin closed an in-app survey before its end date, ending the collection of responses; a survey that reaches its end date records no event.
697
698 - `"claude_survey_created"`
699
700 An organization admin launched an in-app survey to its chosen audience, opening it immediately or at a scheduled start time.
701
702 - `"claude_survey_deleted"`
703
704 An organization admin permanently deleted a closed in-app survey together with every response collected for it.
705
706 - `"claude_survey_response_submitted"`
707
708 A member submitted their response to an in-app survey run by their organization; the record omits the response content, and a retried submission can produce more than one record for the same response.
709
710 - `"claude_survey_responses_exported"`
711
712 An organization admin downloaded a survey's responses as a CSV file, one row per response with the member's email address (blank if it is no longer available, for example because they left the organization), the groups, department and cost center they were invited through, the product they answered in, the submission time, and their answers.
713
690714 - `"claude_user_role_updated"`
691715
692716 A user's role within the organization was changed, or the user was added to or removed from the organization.
from line 2178
21542178
21552179 format: date-time
21562180
2157- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 516 more`
2181- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 522 more`
21582182
21592183 Exclude activities of these types. Cannot be combined with `activity_types[]`.
21602184
from line 2430
24062430
24072431 A new version of an artifact was published — for an artifact created in a chat this is the action that made it publicly viewable; for an artifact created outside a chat it is recorded when the artifact is saved, including saves of private artifacts, except that automatic saves made while a person keeps editing may be recorded periodically for that person rather than once per save; changes to who can access the artifact are recorded separately as claude_artifact_sharing_updated.
24082432
2433 - `"claude_artifact_sent_to_partner"`
2434
2435 A member sent an export of an artifact to a partner application ("Send to …" on the artifact; a partner is a third-party application listed in Claude's connector directory): a file exported from the artifact was made available over a temporary link for the chosen partner to fetch. One activity is recorded per send, in the artifact owner's organization with the sending member as actor, whether or not the partner then retrieved the file; the partner's own import of the file is not part of this record. The file's name and contents are not recorded.
2436
24092437 - `"claude_artifact_sharing_updated"`
24102438
24112439 An artifact's sharing settings were updated.
from line 2850
28222850
28232851 A security scan of a skill completed and produced a verdict.
28242852
2853 - `"claude_survey_closed"`
2854
2855 An organization admin closed an in-app survey before its end date, ending the collection of responses; a survey that reaches its end date records no event.
2856
2857 - `"claude_survey_created"`
2858
2859 An organization admin launched an in-app survey to its chosen audience, opening it immediately or at a scheduled start time.
2860
2861 - `"claude_survey_deleted"`
2862
2863 An organization admin permanently deleted a closed in-app survey together with every response collected for it.
2864
2865 - `"claude_survey_response_submitted"`
2866
2867 A member submitted their response to an in-app survey run by their organization; the record omits the response content, and a retried submission can produce more than one record for the same response.
2868
2869 - `"claude_survey_responses_exported"`
2870
2871 An organization admin downloaded a survey's responses as a CSV file, one row per response with the member's email address (blank if it is no longer available, for example because they left the organization), the groups, department and cost center they were invited through, the product they answered in, the submission time, and their answers.
2872
28252873 - `"claude_user_role_updated"`
28262874
28272875 A user's role within the organization was changed, or the user was added to or removed from the organization.
from line 4335
42874335
42884336#### Returns
42894337
4290- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 516 more`
4338- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 522 more`
42914339
42924340 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
42934341
from line 9549
95019549
95029550 format: email
95039551
9504 - `SystemActor object`
9505
9506 Automated background processing performed by Anthropic systems, acting
9507 without a user or customer credential.
9508
9509 - `type: optional "system_actor"`
9510
9511 default: system_actor
9512
9513 - `service: optional string or null`
9514
9515 Name of the automated process that performed the action, when known.
9516
9517 - `AdminAPIKeyActor object`
9518
9519 - `type: optional "admin_api_key_actor"`
9520
9521 default: admin_api_key_actor
9522
9523 - `admin_api_key_id: string`
9524
9525 - `ip_address: string`
9526
9527 - `user_agent: string`
9528
9529 - `ServiceAccountActor object`
9530
9531 - `type: optional "service_account_actor"`
9532
9533 default: service_account_actor
9534
9535 - `ip_address: string`
9536
9537 - `service_account_id: string`
9538
9539 - `user_agent: string`
9540
9541 - `ScimDirectorySyncActor object`
9542
9543 - `type: optional "scim_directory_sync_actor"`
9544
9545 default: scim_directory_sync_actor
9546
9547 - `directory_id: string`
9548
9549 - `workos_event_id: string`
9550
9551 - `idp_connection_type: optional string or null`
9552
9553 - `FederatedIdentityActor object`
9554
9555 A federated external workload authenticated via a verified OIDC token.
9556
9557 Carries the verified issuer, subject, and audience claims from the
9558 presented JWT.
9559
9560 - `type: optional "federated_identity_actor"`
9561
9562 default: federated_identity_actor
9563
9564 - `issuer: string`
9565
9566 - `subject: string`
9567
9568 - `audience: optional array of string`
9569
9570 - `ip_address: optional string or null`
9571
9572 - `user_agent: optional string or null`
9573
9574 - `FederatedActor object`
9575
9576 An external identity asserted by a trusted provider — a cloud-provider
9577 gateway or a customer-registered federation issuer — acting without an
9578 Anthropic-provisioned account or service account.
9579
9580 - `type: optional "federated_actor"`
9581
9582 default: federated_actor
9583
9584 - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
9585
9586 - `FederatedActorAwsProvider object`
9587
9588 Asserting party: the AWS account the organization is bound to.
9589
9590 - `type: optional "aws"`
9591
9592 default: aws
9593
9594 - `account_id: string`
9595
9596 - `signed_principal: string`
9597
9598 The AWS-signed ARN of the IAM principal that requested the token.
9599
9600 - `FederatedActorAzureProvider object`
9601
9602 Asserting party: the Azure subscription the organization is bound to.
9603
9604 - `type: optional "azure"`
9605
9606 default: azure
9607
9608 - `subscription_id: string`
9609
9610 - `FederatedActorGcpProvider object`
9611
9612 Asserting party: the GCP project the organization is bound to.
9613
9614 - `type: optional "gcp"`
9615
9616 default: gcp
9617
9618 - `project_number: string`
9619
9620 - `FederatedActorOidcProvider object`
9621
9622 Asserting party: a customer-registered OIDC federation issuer.
9623
9624 - `type: optional "oidc"`
9625
9626 default: oidc
9627
9628 - `issuer: optional string or null`
9629
9630 The federation issuer's URL. Null when the presented credential failed verification.
9631
9632 - `ip_address: optional string or null`
9633
9634 - `subject: optional string or null`
9635
9636 The provider's verified identifier for the caller; its form depends on the provider.
9637
9638 - `user_agent: optional string
9552 - `
No line in this hunk matches that.