Agents changedapi/beta/agents
Nearest release: v2.1.300, published 6 hours before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+322added
Lines−0removed
From line
121
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits24to this page, all time
### Beta Managed Agents AWS Role Execution Identity ### Beta Managed Agents AWS Role Execution Identity Params ### Beta Managed Agents Execution Identity ### Beta Managed Agents Execution Identity Params ### Beta Managed Agents Service Account Execution Identity ### Beta Managed Agents Service Account Execution Identity Params
The whole hunk
from line 121, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 121
121121
122122 - `"spend-limit-reads-2026-09-26"`
123123
124 - `"telemetry-destinations-2026-08-11"`
125
124126- `"anthropic-workspace-id": optional string`
125127
126128 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 299
297299
298300 maxLength: 2048
299301
302- `execution_identity: optional BetaManagedAgentsExecutionIdentityParams or null`
303
304 Execution principal for runs of this agent. Omitting it, sending null, or sending `{"type": "service_account"}` stores the default.
305
306 - `BetaManagedAgentsAWSRoleExecutionIdentityParams object`
307
308 An AWS IAM role principal.
309
310 - `type: "aws_role"`
311
312 - `role_arn: string`
313
314 The IAM role's ARN, e.g. "arn:aws:iam::123456789012:role/my-agent-runner". Maximum 2048 characters.
315
316 maxLength: 2048
317
318 - `BetaManagedAgentsServiceAccountExecutionIdentityParams object`
319
320 The Anthropic-managed service account — the default execution principal. Carries no identifier.
321
322 - `type: "service_account"`
323
300324- `mcp_servers: optional array of BetaManagedAgentsURLMCPServerParams`
301325
302326 MCP servers this agent connects to. Maximum 20. Names must be unique within the array. Every server must be referenced by an `mcp_toolset` in `tools`; unreferenced servers are rejected. See the [MCP connector guide](https://platform.claude.com/docs/en/managed-agents/mcp-connector?sdk_languages=http).
from line 1099
10751099
10761100 - `description: string or null`
10771101
1102 - `execution_identity: BetaManagedAgentsExecutionIdentity`
1103
1104 Execution principal for runs of this agent. Always present; `{"type": "service_account"}` when runs carry no customer-named principal.
1105
1106 - `BetaManagedAgentsAWSRoleExecutionIdentity object`
1107
1108 An AWS IAM role principal as returned in API responses.
1109
1110 - `type: "aws_role"`
1111
1112 - `role_arn: string`
1113
1114 The IAM role's ARN.
1115
1116 - `BetaManagedAgentsServiceAccountExecutionIdentity object`
1117
1118 The Anthropic-managed service account as returned in API responses.
1119
1120 - `type: "service_account"`
1121
10781122 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
10791123
10801124 - `type: "url"`
from line 1895
18511895 "archived_at": null,
18521896 "created_at": "2026-03-15T10:00:00Z",
18531897 "description": "A general-purpose starter agent.",
1898 "execution_identity": {
1899 "type": "service_account"
1900 },
18541901 "mcp_servers": [
18551902 {
18561903 "name": "example-mcp",
from line 2133
20862133
20872134 - `"spend-limit-reads-2026-09-26"`
20882135
2136 - `"telemetry-destinations-2026-08-11"`
2137
20892138- `"anthropic-workspace-id": optional string`
20902139
20912140 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 2165
21162165
21172166 - `description: string or null`
21182167
2168 - `execution_identity: BetaManagedAgentsExecutionIdentity`
2169
2170 Execution principal for runs of this agent. Always present; `{"type": "service_account"}` when runs carry no customer-named principal.
2171
2172 - `BetaManagedAgentsAWSRoleExecutionIdentity object`
2173
2174 An AWS IAM role principal as returned in API responses.
2175
2176 - `type: "aws_role"`
2177
2178 - `role_arn: string`
2179
2180 The IAM role's ARN.
2181
2182 - `BetaManagedAgentsServiceAccountExecutionIdentity object`
2183
2184 The Anthropic-managed service account as returned in API responses.
2185
2186 - `type: "service_account"`
2187
21192188 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
21202189
21212190 - `type: "url"`
from line 2952
28832952 "archived_at": null,
28842953 "created_at": "2026-03-15T10:00:00Z",
28852954 "description": "A general-purpose starter agent.",
2955 "execution_identity": {
2956 "type": "service_account"
2957 },
28862958 "mcp_servers": [
28872959 {
28882960 "name": "example-mcp",
from line 3179
31073179
31083180 - `"spend-limit-reads-2026-09-26"`
31093181
3182 - `"telemetry-destinations-2026-08-11"`
3183
31103184- `"anthropic-workspace-id": optional string`
31113185
31123186 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 3211
31373211
31383212 - `description: string or null`
31393213
3214 - `execution_identity: BetaManagedAgentsExecutionIdentity`
3215
3216 Execution principal for runs of this agent. Always present; `{"type": "service_account"}` when runs carry no customer-named principal.
3217
3218 - `BetaManagedAgentsAWSRoleExecutionIdentity object`
3219
3220 An AWS IAM role principal as returned in API responses.
3221
3222 - `type: "aws_role"`
3223
3224 - `role_arn: string`
3225
3226 The IAM role's ARN.
3227
3228 - `BetaManagedAgentsServiceAccountExecutionIdentity object`
3229
3230 The Anthropic-managed service account as returned in API responses.
3231
3232 - `type: "service_account"`
3233
31403234 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
31413235
31423236 - `type: "url"`
from line 3992
38983992 "archived_at": null,
38993993 "created_at": "2026-03-15T10:00:00Z",
39003994 "description": "A general-purpose starter agent.",
3995 "execution_identity": {
3996 "type": "service_account"
3997 },
39013998 "mcp_servers": [
39023999 {
39034000 "name": "example-mcp",
from line 4208
41114208
41124209 - `"spend-limit-reads-2026-09-26"`
41134210
4211 - `"telemetry-destinations-2026-08-11"`
4212
41144213- `"anthropic-workspace-id": optional string`
41154214
41164215 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 4224
41254224
41264225 maxLength: 2048
41274226
4227- `execution_identity: optional BetaManagedAgentsExecutionIdentityParams or null`
4228
4229 Execution principal for runs of this agent. Full replacement. Omit to preserve; send null or `{"type": "service_account"}` to restore the default.
4230
4231 - `BetaManagedAgentsAWSRoleExecutionIdentityParams object`
4232
4233 An AWS IAM role principal.
4234
4235 - `type: "aws_role"`
4236
4237 - `role_arn: string`
4238
4239 The IAM role's ARN, e.g. "arn:aws:iam::123456789012:role/my-agent-runner". Maximum 2048 characters.
4240
4241 maxLength: 2048
4242
4243 - `BetaManagedAgentsServiceAccountExecutionIdentityParams object`
4244
4245 The Anthropic-managed service account — the default execution principal. Carries no identifier.
4246
4247 - `type: "service_account"`
4248
41284249- `mcp_servers: optional array of BetaManagedAgentsURLMCPServerParams or null`
41294250
41304251 MCP servers. Full replacement. Omit to preserve; send empty array or `null` to clear. Names must be unique. Maximum 20. Every server must be referenced by an `mcp_toolset` in the agent's resulting `tools`; unreferenced servers are rejected. See the [MCP connector guide](https://platform.claude.com/docs/en/managed-agents/mcp-connector?sdk_languages=http).
from line 5192
50715192
50725193 - `description: string or null`
50735194
5195 - `execution_identity: BetaManagedAgentsExecutionIdentity`
5196
5197 Execution principal for runs of this agent. Always present; `{"type": "service_account"}` when runs carry no customer-named principal.
5198
5199 - `BetaManagedAgentsAWSRoleExecutionIdentity object`
5200
5201 An AWS IAM role principal as returned in API responses.
5202
5203 - `type: "aws_role"`
5204
5205 - `role_arn: string`
5206
5207 The IAM role's ARN.
5208
5209 - `BetaManagedAgentsServiceAccountExecutionIdentity object`
5210
5211 The Anthropic-managed service account as returned in API responses.
5212
5213 - `type: "service_account"`
5214
50745215 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
50755216
50765217 - `type: "url"`
from line 5979
58385979 "archived_at": null,
58395980 "created_at": "2026-03-15T10:00:00Z",
58405981 "description": "A general-purpose starter agent.",
5982 "execution_identity": {
5983 "type": "service_account"
5984 },
58415985 "mcp_servers": [
58425986 {
58435987 "name": "example-mcp",
from line 6195
60516195
60526196 - `"spend-limit-reads-2026-09-26"`
60536197
6198 - `"telemetry-destinations-2026-08-11"`
6199
60546200- `"anthropic-workspace-id": optional string`
60556201
60566202 Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
from line 6227
60816227
60826228 - `description: string or null`
60836229
6230 - `execution_identity: BetaManagedAgentsExecutionIdentity`
6231
6232 Execution principal for runs of this agent. Always present; `{"type": "service_account"}` when runs carry no customer-named principal.
6233
6234 - `BetaManagedAgentsAWSRoleExecutionIdentity object`
6235
6236 An AWS IAM role principal as returned in API responses.
6237
6238 - `type: "aws_role"`
6239
6240 - `role_arn: string`
6241
6242 The IAM role's ARN.
6243
6244 - `BetaManagedAgentsServiceAccountExecutionIdentity object`
6245
6246 The Anthropic-managed service account as returned in API responses.
6247
6248 - `type: "service_account"`
6249
60846250 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
60856251
60866252 - `type: "url"`
from line 7009
68437009 "archived_at": null,
68447010 "created_at": "2026-03-15T10:00:00Z",
68457011 "description": "A general-purpose starter agent.",
7012 "execution_identity": {
7013 "type": "service_account"
7014 },
68467015 "mcp_servers": [
68477016 {
68487017 "name": "example-mcp",
from line 7141
69727141
69737142 - `description: string or null`
69747143
7144 - `execution_identity: BetaManagedAgentsExecutionIdentity`
7145
7146 Execution principal for runs of this agent. Always present; `{"type": "service_account"}` when runs carry no customer-named principal.
7147
7148 - `BetaManagedAgentsAWSRoleExecutionIdentity object`
7149
7150 An AWS IAM role principal as returned in API responses.
7151
7152 - `type: "aws_role"`
7153
7154 - `role_arn: string`
7155
7156 The IAM role's ARN.
7157
7158 - `BetaManagedAgentsServiceAccountExecutionIdentity object`
7159
7160 The Anthropic-managed service account as returned in API responses.
7161
7162 - `type: "service_account"`
7163
69757164 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
69767165
69777166 - `type: "url"`
from line 8221
80328221
80338222 - `BetaManagedAgentsAutoPolicy object`
80348223
8035 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
8036
8037 - `allowed_domains: optional array of string`
8038
8039 - `blocked_domains: optional array of string`
8040
8041 - `user_location: optional BetaManagedAgentsUserLocation or null`
8042
8043 Approximate user location for search result localization.
8044
8045 - `type: "approximate"`
8046
8047 Location precision. Only "approximate" is supported.
8048
8049 - `city: optional string or null`
8050
8051 City name.
8052
8053 minLength: 1, maxLength: 255
8054
8055 - `country: optional string or null`
8056
8057 Two-letter ISO 3166-1 country code, uppercase.
8058
8059 - `region: optional string or null`
8060
8061 Region or state name.
8062
8063 minLength: 1, maxLength: 255
8064
8065 - `timezone: optional string or null`
8066
8067 IANA timezone identifier, e.g. "America/Los_Angeles".
8068
8069 minLength: 1, maxLength: 255
8070
8071### Beta Managed Agents Agent Tool Config Params
8072
8073- `BetaManagedAgentsAgentToolConfigParams = BetaManagedAgentsBashToolConfigParams or BetaManagedAgentsEditToolConfigParams or BetaManagedAgentsReadToolConfigParams or 5 more`
8074
8075 Configuration override for a specific tool within a toolset.
8076
8077 - `BetaManagedAgentsBashToolConfigParams object`
8078
8079 Configuration override for the bash tool.
8080
8081 - `type: optional "bash"`
8082
8083 - `name: "bash"`
8084
8085 Must be "bash".
8086
8087 - `enabled: optional boolean or null`
8088
8089 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
8090
8091 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
8092
8093 Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation.
8094
8095 - `BetaManagedAgentsAlwaysAllowPolicy object`
8096
8097 Tool calls are automatically approved without user confirmation.
8098
8099 - `type: "always_allow"`
8100
8101 - `BetaManagedAgentsAlwaysAskPolicy object`
8102
8103 Tool calls require user confirmation before execution.
8104
8105 - `type: "always_ask"`
8106
8107 - `BetaManagedAgentsAutoPolicy object`
8108
8109 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
8110
8111 - `type: "auto"`
8112
8113 - `BetaManagedAgentsEditToolConfigParams object`
8114
8115 Configuration override for the edit tool.
8116
8117 - `type: optional "edit"`
8118
8119 - `name: "edit"`
8120
8121 Must be "edit".
8122
8123 - `enabled: optional boolean or null`
8124
8125 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
8126
8127 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
8128
8129 Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation.
8130
8131 - `BetaManagedAgentsAlwaysAllowPolicy object`
8132
8133 Tool calls are automatically approved without user confirmation.
8134
8135 - `BetaManagedAgentsAlwaysAskPolicy object`
8136
8137 Tool calls require user confirmation before execution.
8138
8139 - `BetaManagedAgentsAutoPolicy object`
8140
8141 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
8142
8143 - `BetaManagedAgentsReadToolConfigParams object`
8144
8145 Configuration override for the read tool.
8146
8147 - `type: optional "read"`
8148
8149 - `name: "read"`
8150
8151 Must be "read".
8152
8153 - `enabled: optional boolean or null`
8154
8155 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
8156
8157 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
8158
8159 Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation.
8160
8161 - `BetaManagedAgentsAlwaysAllowPolicy object`
8162
8163 Tool calls are automatically approved without user confirmation.
8164
8165 - `BetaManagedAgentsAlwaysAskPolicy object`
8166
8167 Tool calls require user confirmation before execution.
8168
8169 - `BetaManagedAgentsAutoPolicy object`
8170
8171 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
8172
8173 - `BetaManagedAgentsWriteToolConfigParams object`
8174
8175 Configuration override for the write tool.
8176
8177 - `type: optional "write"`
8178
8179 - `name: "write"`
8180
8181 Must be "write".
8182
8183 - `enabled: optional boolean or null`
8184
8185 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
8186
8187 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
8188
8189 Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation.
8190
8191 - `BetaManagedAgentsAlwaysAllowPolicy object`
8192
8193 Tool calls are automatically approved without user con
8224 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach
No line in this hunk matches that.