Compliance API changedapi/compliance
Nearest release: v2.1.306, published 2 hours after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+2,868added
Lines−45removed
From line
19
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits31to this page, all time
The whole hunk
from line 19, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 19
1919
2020#### Query parameters
2121
22- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 533 more`
22- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 544 more`
2323
2424 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2525
from line 539
539539
540540 A GitHub integration's configuration was updated.
541541
542 - `"claude_insights_attribution_setting_updated"`
543
544 An organization admin set the organization's setting that allows Smart Reports to be opened in the rendering that attributes findings to individual, identified members (off: no member can open that rendering). Every write is recorded, so the two values are equal when the setting was written with the value it already had.
545
546 - `"claude_insights_report_archived"`
547
548 A Smart Report was archived, hiding it from the organization's default report list, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope).
549
550 - `"claude_insights_report_attribution_viewed"`
551
552 A Smart Report was viewed or downloaded with its usage findings attributed to individual, identified members of the organization (rather than in the default rendering, which identifies no member), one session it lists was inspected from that attributed rendering, or an organization admin was shown which members one of its recommendations suggests.
553
554 - `"claude_insights_report_deleted"`
555
556 An archived Smart Report was permanently deleted, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope): its document was removed; purge_confirmed says whether it was also removed from the organization's report list.
557
558 - `"claude_insights_report_feedback_submitted"`
559
560 Feedback was submitted on a Smart Report by an organization admin, by the delegate who ran it (a member the organization allowed to run reports on a limited scope), or by a member it was shared with. The event records which report was rated, not the ratings themselves or the member's written comment.
561
562 - `"claude_insights_report_renamed"`
563
564 A Smart Report was renamed, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope).
565
566 - `"claude_insights_report_sharing_updated"`
567
568 An organization admin, or the delegate who ran the report (a member the organization allowed to run reports on a limited scope), changed who a Smart Report is shared with: the organization members who may open the report by link, and whether they may open the rendering that attributes findings to individual members.
569
570 - `"claude_insights_report_triggered"`
571
572 A Smart Report was triggered by an organization admin, or by a delegate: a member the organization allowed to run reports on a limited scope. A Smart Report is an aggregate analysis of the organization's usage over a date range, optionally scoped to one or more directory groups, to a directory attribute's values, or to product surfaces.
573
574 - `"claude_insights_report_unarchived"`
575
576 An archived Smart Report was restored to the organization's default report list, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope).
577
578 - `"claude_insights_report_viewed"`
579
580 A Smart Report was viewed or downloaded in its default rendering, which identifies no member of the organization (viewing or downloading the rendering that attributes findings to individual members is recorded as a separate activity).
581
582 - `"claude_insights_resource_access_updated"`
583
584 Which directory groups, or which values of one directory attribute, a member may run Smart Reports on (the member's delegated scope) changed: an organization admin set or revoked it, or Smart Reports itself (a system actor) revoked it when the member left the organization.
585
542586 - `"claude_organization_settings_updated"`
543587
544588 Organization settings were updated.
from line 2266
22222266
22232267 format: date-time
22242268
2225- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 533 more`
2269- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 544 more`
22262270
22272271 Exclude activities of these types. Cannot be combined with `activity_types[]`.
22282272
from line 2786
27422786
27432787 A GitHub integration's configuration was updated.
27442788
2789 - `"claude_insights_attribution_setting_updated"`
2790
2791 An organization admin set the organization's setting that allows Smart Reports to be opened in the rendering that attributes findings to individual, identified members (off: no member can open that rendering). Every write is recorded, so the two values are equal when the setting was written with the value it already had.
2792
2793 - `"claude_insights_report_archived"`
2794
2795 A Smart Report was archived, hiding it from the organization's default report list, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope).
2796
2797 - `"claude_insights_report_attribution_viewed"`
2798
2799 A Smart Report was viewed or downloaded with its usage findings attributed to individual, identified members of the organization (rather than in the default rendering, which identifies no member), one session it lists was inspected from that attributed rendering, or an organization admin was shown which members one of its recommendations suggests.
2800
2801 - `"claude_insights_report_deleted"`
2802
2803 An archived Smart Report was permanently deleted, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope): its document was removed; purge_confirmed says whether it was also removed from the organization's report list.
2804
2805 - `"claude_insights_report_feedback_submitted"`
2806
2807 Feedback was submitted on a Smart Report by an organization admin, by the delegate who ran it (a member the organization allowed to run reports on a limited scope), or by a member it was shared with. The event records which report was rated, not the ratings themselves or the member's written comment.
2808
2809 - `"claude_insights_report_renamed"`
2810
2811 A Smart Report was renamed, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope).
2812
2813 - `"claude_insights_report_sharing_updated"`
2814
2815 An organization admin, or the delegate who ran the report (a member the organization allowed to run reports on a limited scope), changed who a Smart Report is shared with: the organization members who may open the report by link, and whether they may open the rendering that attributes findings to individual members.
2816
2817 - `"claude_insights_report_triggered"`
2818
2819 A Smart Report was triggered by an organization admin, or by a delegate: a member the organization allowed to run reports on a limited scope. A Smart Report is an aggregate analysis of the organization's usage over a date range, optionally scoped to one or more directory groups, to a directory attribute's values, or to product surfaces.
2820
2821 - `"claude_insights_report_unarchived"`
2822
2823 An archived Smart Report was restored to the organization's default report list, by an organization admin or by the delegate who ran it (a member the organization allowed to run reports on a limited scope).
2824
2825 - `"claude_insights_report_viewed"`
2826
2827 A Smart Report was viewed or downloaded in its default rendering, which identifies no member of the organization (viewing or downloading the rendering that attributes findings to individual members is recorded as a separate activity).
2828
2829 - `"claude_insights_resource_access_updated"`
2830
2831 Which directory groups, or which values of one directory attribute, a member may run Smart Reports on (the member's delegated scope) changed: an organization admin set or revoked it, or Smart Reports itself (a system actor) revoked it when the member left the organization.
2832
27452833 - `"claude_organization_settings_updated"`
27462834
27472835 Organization settings were updated.
from line 4511
44234511
44244512#### Returns
44254513
4426- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 533 more`
4514- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 544 more`
44274515
44284516 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
44294517
from line 9205
91179205
91189206 - `previous_write_user_count: optional number or null`
91199207
9120 The number of accounts on the explicit write allowlist before the change. Only meaningful when `previous_write_mode` is `users`.
9121
9122 - `read_agent_ids: optional array of string`
9123
9124 The Claude agents (`cagt_…` identifiers) whose channel holds view access to the artifact after the change. Reflects the standing grants, so it is populated on every sharing update for an artifact shared with agents, not only when an agent grant changed. Empty when none.
9125
9126 - `read_group_ids: optional array of string`
9127
9128 The admin-managed groups (`rbac_group_…` identifiers) whose members hold view access to the artifact after the change (including every `write_group_ids` entry). Reflects the standing grants, so it is populated on every sharing update for an artifact shared with groups, not only when a group grant changed. Empty when none.
9129
9130 - `write_agent_ids: optional array of string`
9131
9132 The Claude agents (`cagt_…` identifiers) whose channel holds edit access to the artifact after the change. Reflects the standing grants, so it is populated on every sharing update for an artifact shared with agents, not only when an agent grant changed. Empty when none.
9133
9134 - `write_group_ids: optional array of string`
9135
9136 The admin-managed groups (`rbac_group_…` identifiers) whose members hold edit access to the artifact after the change. Reflects the standing grants, like `read_group_ids`. Empty when none.
9137
9138 - `ClaudeArtifactViewed object`
9139
9140 An artifact was viewed.
9141
9142 - `type: optional "claude_artifact_viewed"`
9143
9144 default: claude_artifact_viewed
9145
9146 - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
9147
9148 - `APIActor object`
9149
9150 - `type: optional "api_actor"`
9151
9152 default: api_actor
9153
9154 - `api_key_id: string`
9155
9156 - `ip_address: string`
9157
9158 - `user_agent: string`
9159
9160 - `UserActor object`
9161
9162 - `type: optional "user_actor"`
9163
9164 default: user_actor
9165
9166 - `email_address: string`
9167
9168 format: email
9169
9170 - `ip_address: string`
9171
9172 - `user_agent: string`
9173
9174 - `user_id: string`
9175
9176 - `UnauthenticatedUserActor object`
9177
9178 - `type: optional "unauthenticated_user_actor"`
9179
9180 default: unauthenticated_user_actor
9181
9182 - `ip_address: string`
9183
9184 - `user_agent: string`
9185
9186 - `unauthenticated_email_address: optional string or null`
9187
9188 format: email
9189
9190 - `AnthropicActor object`
9191
9192 - `type: optional "anthropic_actor"`
9193
9194 default: anthropic_actor
9195
9196 - `email_address: optional string or null`
9197
9198 format: email
9199
9200 - `SystemActor object`
9201
9202 Automated background processing performed by Anthropic systems, acting
9203 without a user or customer credential.
9204
9205 - `type: optional "system_actor"`
9206
9207 default: system_actor
9208
9209 - `service: optional string or null`
9210
9211 Name of the automated process that performed the action, when known.
9212
9213 - `AdminAPIKeyActor object`
9214
9215 - `type: optional "admin_api_key_actor"`
9216
9217 default: admin_api_key_actor
9218
9219 - `admin_api_key_id: string`
9220
9221 - `ip_address: string`
9222
9223 - `user_agent: string`
9224
9225 - `ServiceAccountActor object`
9226
9227 - `type: optional "service_account_actor"`
9228
9229 default: service_account_actor
9230
9231 - `ip_address: string`
9232
9233 - `service_account_id: string`
9234
9235 - `user_agent: string`
9236
9237 - `ScimDirectorySyncActor object`
9238
9239 - `type: optional "scim_directory_sync_actor"`
9240
9241 default: scim_directory_sync_actor
9242
9243 - `directory_id: string`
9244
9245 - `workos_event_id: string`
9246
9247 - `idp_connection_type: optional string or null`
9248
9249 - `FederatedIdentityActor object`
9250
9251 A federated external workload authenticated via a verified OIDC token.
9252
9253 Carries the verified issuer, subject, and audience claims from the
9254 presented JWT.
9255
9256 - `type: optional "federated_identity_actor"`
9257
9258 default: federated_identity_actor
9259
9260 - `issuer: string`
9261
9262 - `subject: string`
9263
9264 - `audience: optional array of string`
9265
9266 - `ip_address: optional string or null`
9267
9268 - `user_agent: optional string or null`
9269
9270 - `FederatedActor object`
9271
9272 An external identity asserted by a trusted provider — a cloud-provider
9273 gateway or a customer-registered federation issuer — acting without an
9274 Anthropic-provisioned account or service account.
9275
9276 - `type: optional "federated_actor"`
9277
9278 default: federated_actor
9279
9280 - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
9281
9282 - `FederatedActorAwsProvider object`
9283
9284 Asserting party: the AWS account the organization is bound to.
9285
9286 - `type: optional "aws"`
9287
9288 default: aws
9289
9290 - `account_id: string`
9291
9292 - `signed_principal: string`
9293
9294 The AWS-signed ARN of the IAM principal that requested the token.
9295
9296 - `FederatedActorAzureProvider object`
9297
9298 Asserting party: the Azure subscription the organization is bound to.
9299
9300 - `type: optional "azure"`
9301
9302 default: azure
9303
9304 - `subscription_id: string`
9305
9306 - `FederatedActorGcpProvider object`
9307
9308 Asserting party: the GCP project the organization is bound to.
9309
9310 - `type: optional "gcp"`
9311
9312 default: gcp
9313
9314 - `project_number: string`
9315
9316 - `FederatedActorOidcProvider object`
9317
9318 Asserting party: a customer-registered OIDC federation issuer.
9319
9320 - `type: optional "oidc"`
9321
9322 default: oidc
9323
9324 - `issuer: optional string or null`
9325
9326 The federation issuer's URL. Null when the presented credential failed verification.
9327
9328 - `ip_address: optional string or null`
9329
9330 - `subject: optional string or null`
9331
9332 The provider's verified identifier for the caller; its form depends on the provider.
9333
9334 - `user_agent: optional string or null`
9335
9336 - `AttestedDeviceActor object`
9337
9338 An attested mobile device authenticated via Apple App Attest.
9339
9340 - `type: optional "attested_device_actor"`
9341
9342 default: attested_device_actor
9343
9344 - `external_client_id: string`
9345
9346 - `kid_hash: string`
9347
9348 - `ip_address: optional string or null`
9349
9350 - `user_agent: optional string or null`
9351
9352 - `claude_artifact_id: string`
9353
9354 The artifact's identifier.
9355
9356 - `id: optional string`
9357
9358 Unique identifier for the activity e.g. 'activity_abcd1234'
9359
9360 - `claude_artifact_version_id: optional string or null`
9361
9362 The version of the artifact the user was served, when known.
9363
9364 - `created_at: optional string`
9365
9366 When this activity occurred.
9367
9368 format: date-time
9369
9370 - `organization_id: optional string or null`
9371
9372 Organization ID this activity is associated with
9373
9374 - `organization_uuid: optional string or null`
9375
9376 Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for examp
9208 The number of accounts on
No line in this hunk matches that.