Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial
One change · api

Create Session changedapi/beta/sessions/create

Nearest release: v2.1.239, published 2 hours before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.

Recorded here
Lines+1,140added
Lines−678removed
From line 345 where the diff opens
First seen 14 Aug 2026 this site's first read of the page
Recorded edits23to this page, all time

The whole hunk

from line 345, old and new numbered
/
lines

The two sides of this change are more than 400 edits apart, too far apart to line up, so this is the differ's own diff of it and the words inside a line are not marked.

from line 345
345345 
346346 Per-tool configuration overrides.
347347 
348 - `name: "bash" or "edit" or "read" or 5 more`
349 
350 Built-in agent tool identifier.
351 
352 - `"bash"`
353 
354 - `"edit"`
355 
356 - `"read"`
357 
358 - `"write"`
359 
360 - `"glob"`
361 
362 - `"grep"`
363 
364 - `"web_fetch"`
365 
366 - `"web_search"`
348 - `BetaManagedAgentsBashToolConfigParams object { name, enabled, permission_policy, type }`
349 
350 Configuration override for the bash tool.
351 
352 - `name: "bash"`
353 
354 Must be "bash".
355 
356 - `"bash"`
357 
358 - `enabled: optional boolean or null`
359 
360 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
361 
362 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
363 
364 Permission policy for tool execution.
365 
366 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
367 
368 Tool calls are automatically approved without user confirmation.
369 
370 - `type: "always_allow"`
371 
372 - `"always_allow"`
373 
374 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
375 
376 Tool calls require user confirmation before execution.
377 
378 - `type: "always_ask"`
379 
380 - `"always_ask"`
381 
382 - `type: optional "bash"`
383 
384 - `"bash"`
385 
386 - `BetaManagedAgentsEditToolConfigParams object { name, enabled, permission_policy, type }`
387 
388 Configuration override for the edit tool.
389 
390 - `name: "edit"`
391 
392 Must be "edit".
393 
394 - `"edit"`
395 
396 - `enabled: optional boolean or null`
397 
398 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
399 
400 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
401 
402 Permission policy for tool execution.
403 
404 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
405 
406 Tool calls are automatically approved without user confirmation.
407 
408 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
409 
410 Tool calls require user confirmation before execution.
411 
412 - `type: optional "edit"`
413 
414 - `"edit"`
415 
416 - `BetaManagedAgentsReadToolConfigParams object { name, enabled, permission_policy, type }`
417 
418 Configuration override for the read tool.
419 
420 - `name: "read"`
421 
422 Must be "read".
423 
424 - `"read"`
425 
426 - `enabled: optional boolean or null`
427 
428 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
429 
430 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
431 
432 Permission policy for tool execution.
433 
434 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
435 
436 Tool calls are automatically approved without user confirmation.
437 
438 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
439 
440 Tool calls require user confirmation before execution.
441 
442 - `type: optional "read"`
443 
444 - `"read"`
445 
446 - `BetaManagedAgentsWriteToolConfigParams object { name, enabled, permission_policy, type }`
447 
448 Configuration override for the write tool.
449 
450 - `name: "write"`
451 
452 Must be "write".
453 
454 - `"write"`
455 
456 - `enabled: optional boolean or null`
457 
458 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
459 
460 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
461 
462 Permission policy for tool execution.
463 
464 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
465 
466 Tool calls are automatically approved without user confirmation.
467 
468 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
469 
470 Tool calls require user confirmation before execution.
471 
472 - `type: optional "write"`
473 
474 - `"write"`
475 
476 - `BetaManagedAgentsGlobToolConfigParams object { name, enabled, permission_policy, type }`
477 
478 Configuration override for the glob tool.
479 
480 - `name: "glob"`
481 
482 Must be "glob".
483 
484 - `"glob"`
485 
486 - `enabled: optional boolean or null`
487 
488 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
489 
490 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
491 
492 Permission policy for tool execution.
493 
494 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
495 
496 Tool calls are automatically approved without user confirmation.
497 
498 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
499 
500 Tool calls require user confirmation before execution.
501 
502 - `type: optional "glob"`
503 
504 - `"glob"`
505 
506 - `BetaManagedAgentsGrepToolConfigParams object { name, enabled, permission_policy, type }`
507 
508 Configuration override for the grep tool.
509 
510 - `name: "grep"`
511 
512 Must be "grep".
513 
514 - `"grep"`
515 
516 - `enabled: optional boolean or null`
517 
518 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
519 
520 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
521 
522 Permission policy for tool execution.
523 
524 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
525 
526 Tool calls are automatically approved without user confirmation.
527 
528 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
529 
530 Tool calls require user confirmation before execution.
531 
532 - `type: optional "grep"`
533 
534 - `"grep"`
535 
536 - `BetaManagedAgentsWebFetchToolConfigParams object { name, allowed_domains, blocked_domains, 4 more }`
537 
538 Configuration override for the web_fetch tool.
539 
540 - `name: "web_fetch"`
541 
542 Must be "web_fetch".
543 
544 - `"web_fetch"`
545 
546 - `allowed_domains: optional array of string`
547 
548 Only fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains.
549 
550 - `blocked_domains: optional array of string`
551 
552 Never fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains.
553 
554 - `enabled: optional boolean or null`
555 
556 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
557 
558 - `max_content_tokens: optional number or null`
559 
560 Maximum number of tokens of fetched text content to include in context per call. Does not apply to binary content such as PDFs.
561 
562 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
563 
564 Permission policy for tool execution.
565 
566 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
567 
568 Tool calls are automatically approved without user confirmation.
569 
570 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
571 
572 Tool calls require user confirmation before execution.
573 
574 - `type: optional "web_fetch"`
575 
576 - `"web_fetch"`
577 
578 - `BetaManagedAgentsWebSearchToolConfigParams object { name, allowed_domains, blocked_domains, 4 more }`
579 
580 Configuration override for the web_search tool.
581 
582 - `name: "web_search"`
583 
584 Must be "web_search".
585 
586 - `"web_search"`
587 
588 - `allowed_domains: optional array of string`
589 
590 Only return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains.
591 
592 - `blocked_domains: optional array of string`
593 
594 Never return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains.
595 
596 - `enabled: optional boolean or null`
597 
598 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
599 
600 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
601 
602 Permission policy for tool execution.
603 
604 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
605 
606 Tool calls are automatically approved without user confirmation.
607 
608 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
609 
610 Tool calls require user confirmation before execution.
611 
612 - `type: optional "web_search"`
613 
614 - `"web_search"`
615 
616 - `user_location: optional BetaManagedAgentsUserLocation or null`
617 
618 Approximate user location for search result localization.
619 
620 - `type: "approximate"`
621 
622 Location precision. Only "approximate" is supported.
623 
624 - `"approximate"`
625 
626 - `city: optional string or null`
627 
628 City name.
629 
630 - `country: optional string or null`
631 
632 Two-letter ISO 3166-1 country code, uppercase.
633 
634 - `region: optional string or null`
635 
636 Region or state name.
637 
638 - `timezone: optional string or null`
639 
640 IANA timezone identifier, e.g. "America/Los_Angeles".
641 
642 - `default_config: optional BetaManagedAgentsAgentToolsetDefaultConfigParams or null`
643 
644 Default configuration for all tools in a toolset.
367645 
368646 - `enabled: optional boolean or null`
369647 
370 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
648 Whether tools are enabled and available to Claude by default. Defaults to true if not specified.
371649 
372650 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
373651 
from line 655
377655 
378656 Tool calls are automatically approved without user confirmation.
379657 
380 - `type: "always_allow"`
381 
382 - `"always_allow"`
383 
384658 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
385659 
386660 Tool calls require user confirmation before execution.
387661 
388 - `type: "always_ask"`
389 
390 - `"always_ask"`
391 
392 - `default_config: optional BetaManagedAgentsAgentToolsetDefaultConfigParams or null`
393 
394 Default configuration for all tools in a toolset.
662 - `BetaManagedAgentsMCPToolsetParams object { mcp_server_name, type, configs, default_config }`
663 
664 Configuration for tools from an MCP server defined in `mcp_servers`.
665 
666 - `mcp_server_name: string`
667 
668 Name of the MCP server. Must match a server name from the mcp_servers array. 1-255 characters.
669 
670 - `type: "mcp_toolset"`
671 
672 - `"mcp_toolset"`
673 
674 - `configs: optional array of BetaManagedAgentsMCPToolConfigParams`
675 
676 Per-tool configuration overrides.
677 
678 - `name: string`
679 
680 Name of the MCP tool to configure. 1-128 characters.
395681 
396682 - `enabled: optional boolean or null`
397683 
398 Whether tools are enabled and available to Claude by default. Defaults to true if not specified.
684 Whether this tool is enabled. Overrides the `default_config` setting.
399685 
400686 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
401687 
from line 695
409695 
410696 Tool calls require user confirmation before execution.
411697 
412 - `BetaManagedAgentsMCPToolsetParams object { mcp_server_name, type, configs, default_config }`
413 
414 Configuration for tools from an MCP server defined in `mcp_servers`.
415 
416 - `mcp_server_name: string`
417 
418 Name of the MCP server. Must match a server name from the mcp_servers array. 1-255 characters.
419 
420 - `type: "mcp_toolset"`
421 
422 - `"mcp_toolset"`
423 
424 - `configs: optional array of BetaManagedAgentsMCPToolConfigParams`
425 
426 Per-tool configuration overrides.
698 - `default_config: optional BetaManagedAgentsMCPToolsetDefaultConfigParams or null`
699 
700 Default configuration for all tools from an MCP server.
701 
702 - `enabled: optional boolean or null`
703 
704 Whether tools are enabled by default. Defaults to true if not specified.
705 
706 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
707 
708 Permission policy for tool execution.
709 
710 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
711 
712 Tool calls are automatically approved without user confirmation.
713 
714 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
715 
716 Tool calls require user confirmation before execution.
717 
718 - `BetaManagedAgentsCustomToolParams object { description, input_schema, name, type }`
719 
720 A custom tool that is executed by the API client rather than the agent. When the agent calls this tool, an `agent.custom_tool_use` event is emitted and the session goes idle, waiting for the client to provide the result via a `user.custom_tool_result` event.
721 
722 - `description: string`
723 
724 Description of what the tool does, shown to the agent to help it decide when to use the tool.
725 
726 - `input_schema: BetaManagedAgentsCustomToolInputSchema`
727 
728 JSON Schema for custom tool input parameters.
729 
730 - `type: "object"`
731 
732 - `"object"`
733 
734 - `properties: optional map[unknown] or null`
735 
736 - `required: optional array of string or null`
737 
738 - `name: string`
739 
740 Unique name for the tool. 1-128 characters; letters, digits, underscores, and hyphens.
741 
742 - `type: "custom"`
743 
744 - `"custom"`
745 
746 - `version: optional number`
747 
748 The specific `agent` version to use. Omit to use the latest version.
749 
750- `environment_id: string`
751 
752 ID of the `environment` defining the container configuration for this session.
753 
754- `budget: optional BetaManagedAgentsBudgetLimit`
755 
756 A hard spend ceiling. The session stops issuing new model requests once the tracked list cost reaches `max_list_cost`.
757 
758 - `max_list_cost: BetaMonetaryAmount`
759 
760 A monetary amount in a specific currency.
761 
762 - `amount: string`
763 
764 Amount in minor units of the currency, as an integer decimal string with no leading zeros: "2500" is $25.00 and "50" is fifty cents. A string rather than a number so no float rounding is ever applied.
765 
766 - `currency: BetaCurrency`
767 
768 Uppercase ISO-4217 currency code. `USD` is the only currency currently supported; the accepted set is closed and grows only when a new currency is priced.
769 
770 - `"USD"`
771 
772 - `type: "limit"`
773 
774 - `"limit"`
775 
776- `initial_events: optional array of BetaManagedAgentsUserMessageEventParams or BetaManagedAgentsUserDefineOutcomeEventParams`
777 
778 Initial events to send to the `session` at creation, processed in order. Supports `user.message` and `user.define_outcome` events. Maximum 50 events.
779 
780 - `BetaManagedAgentsUserMessageEventParams object { content, type }`
781 
782 Parameters for sending a user message to the session.
783 
784 - `content: array of BetaManagedAgentsTextBlock or BetaManagedAgentsImageBlock or BetaManagedAgentsDocumentBlock or BetaManagedAgentsRedactedBlock`
785 
786 Array of content blocks for the user message.
787 
788 - `BetaManagedAgentsTextBlock object { text, type }`
789 
790 Regular text content.
791 
792 - `text: string`
793 
794 The text content.
795 
796 - `type: "text"`
797 
798 - `"text"`
799 
800 - `BetaManagedAgentsImageBlock object { source, type }`
801 
802 Image content specified directly as base64 data or as a reference via a URL.
803 
804 - `source: BetaManagedAgentsBase64ImageSource or BetaManagedAgentsURLImageSource or BetaManagedAgentsFileImageSource`
805 
806 Union type for image source variants.
807 
808 - `BetaManagedAgentsBase64ImageSource object { data, media_type, type }`
809 
810 Base64-encoded image data.
811 
812 - `data: string`
813 
814 Base64-encoded image data.
815 
816 - `media_type: string`
817 
818 MIME type of the image (e.g., "image/png", "image/jpeg", "image/gif", "image/webp").
819 
820 - `type: "base64"`
821 
822 - `"base64"`
823 
824 - `BetaManagedAgentsURLImageSource object { type, url }`
825 
826 Image referenced by URL.
827 
828 - `type: "url"`
829 
830 - `"url"`
831 
832 - `url: string`
833 
834 URL of the image to fetch.
835 
836 - `BetaManagedAgentsFileImageSource object { file_id, type }`
837 
838 Image referenced by file ID.
839 
840 - `file_id: string`
841 
842 ID of a previously uploaded file.
843 
844 - `type: "file"`
845 
846 - `"file"`
847 
848 - `type: "image"`
849 
850 - `"image"`
851 
852 - `BetaManagedAgentsDocumentBlock object { source, type, context, title }`
853 
854 Document content, either specified directly as base64 data, as text, or as a reference via a URL.
855 
856 - `source: BetaManagedAgentsBase64DocumentSource or BetaManagedAgentsPlainTextDocumentSource or BetaManagedAgentsURLDocumentSource or BetaManagedAgentsFileDocumentSource`
857 
858 Union type for document source variants.
859 
860 - `BetaManagedAgentsBase64DocumentSource object { data, media_type, type }`
861 
862 Base64-encoded document data.
863 
864 - `data: string`
865 
866 Base64-encoded document data.
867 
868 - `media_type: string`
869 
870 MIME type of the document (e.g., "application/pdf").
871 
872 - `type: "base64"`
873 
874 - `"base64"`
875 
876 - `BetaManagedAgentsPlainTextDocumentSource object { data, media_type, type }`
877 
878 Plain text document content.
879 
880 - `data: string`
881 
882 The plain text content.
883 
884 - `media_type: "text/plain"`
885 
886 MIME type of the text content. Must be "text/plain".
887 
888 - `"text/plain"`
889 
890 - `type: "text"`
891 
892 - `"text"`
893 
894 - `BetaManagedAgentsURLDocumentSource object { type, url }`
895 
896 Document referenced by URL.
897 
898 - `type: "url"`
899 
900 - `"url"`
901 
902 - `url: string`
903 
904 URL of the document to fetch.
905 
906 - `BetaManagedAgentsFileDocumentSource object { file_id, type }`
907 
908 Document referenced by file ID.
909 
910 - `file_id: string`
911 
912 ID of a previously uploaded file.
913 
914 - `type: "file"`
915 
916 - `"file"`
917 
918 - `type: "document"`
919 
920 - `"document"`
921 
922 - `context: optional string or null`
923 
924 Additional context about the document for the model.
925 
926 - `title: optional string or null`
927 
928 The title of the document.
929 
930 - `BetaManagedAgentsRedactedBlock object { type }`
931 
932 Placeholder for content withheld by Anthropic model policy.
933 
934 - `type: "redacted"`
935 
936 - `"redacted"`
937 
938 - `type: "user.message"`
939 
940 - `"user.message"`
941 
942 - `BetaManagedAgentsUserDefineOutcomeEventParams object { description, rubric, type, max_iterations }`
943 
944 Parameters for defining an outcome the agent should work toward. The agent begins work on receipt.
945 
946 - `description: string`
947 
948 What the agent should produce. This is the task specification.
949 
950 - `rubric: BetaManagedAgentsFileRubricParams or BetaManagedAgentsTextRubricParams`
951 
952 Rubric for grading the quality of an outcome.
953 
954 - `BetaManagedAgentsFileRubricParams object { file_id, type }`
955 
956 Rubric referenced by a file uploaded via the Files API.
957 
958 - `file_id: string`
959 
960 ID of the rubric file.
961 
962 - `type: "file"`
963 
964 - `"file"`
965 
966 - `BetaManagedAgentsTextRubricParams object { content, type }`
967 
968 Rubric content provided inline as text.
969 
970 - `content: string`
971 
972 Rubric content. Plain text or markdown — the grader treats it as freeform text. Maximum 262144 characters.
973 
974 - `type: "text"`
975 
976 - `"text"`
977 
978 - `type: "user.define_outcome"`
979 
980 - `"user.define_outcome"`
981 
982 - `max_iterations: optional number or null`
983 
984 Eval→revision cycles before giving up. Default 3, max 20.
985 
986- `metadata: optional map[string]`
987 
988 Arbitrary key-value metadata attached to the session. Maximum 16 pairs, keys up to 64 chars, values up to 512 chars.
989 
990- `resources: optional array of BetaManagedAgentsGitHubRepositoryResourceParams or BetaManagedAgentsFileResourceParams or BetaManagedAgentsMemoryStoreResourceParam`
991 
992 Resources (e.g. repositories, files) to mount into the session's container.
993 
994 - `BetaManagedAgentsGitHubRepositoryResourceParams object { authorization_token, type, url, 2 more }`
995 
996 Mount a GitHub repository into the session's container.
997 
998 - `authorization_token: string`
999 
1000 GitHub authorization token used to clone the repository.
1001 
1002 - `type: "github_repository"`
1003 
1004 - `"github_repository"`
1005 
1006 - `url: string`
1007 
1008 Github URL of the repository
1009 
1010 - `checkout: optional BetaManagedAgentsBranchCheckout or BetaManagedAgentsCommitCheckout or null`
1011 
1012 Branch or commit to check out. Defaults to the repository's default branch.
1013 
1014 - `BetaManagedAgentsBranchCheckout object { name, type }`
1015 
1016 - `name: string`
1017 
1018 Branch name to check out.
1019 
1020 - `type: "branch"`
1021 
1022 - `"branch"`
1023 
1024 - `BetaManagedAgentsCommitCheckout object { sha, type }`
1025 
1026 - `sha: string`
1027 
1028 Full commit SHA to check out.
1029 
1030 - `type: "commit"`
1031 
1032 - `"commit"`
1033 
1034 - `mount_path: optional string or null`
1035 
1036 Mount path in the container. Defaults to `/workspace/<repo-name>`.
1037 
1038 - `BetaManagedAgentsFileResourceParams object { file_id, type, mount_path }`
1039 
1040 Mount a file uploaded via the Files API into the session.
1041 
1042 - `file_id: string`
1043 
1044 ID of a previously uploaded file.
1045 
1046 - `type: "file"`
1047 
1048 - `"file"`
1049 
1050 - `mount_path: optional string or null`
1051 
1052 Mount path in the container. Defaults to `/mnt/session/uploads/<file_id>`.
1053 
1054 - `BetaManagedAgentsMemoryStoreResourceParam object { memory_store_id, type, access, instructions }`
1055 
1056 Parameters for attaching a memory store to an agent session.
1057 
1058 - `memory_store_id: string`
1059 
1060 The memory store ID (memstore_...). Must belong to the caller's organization and workspace.
1061 
1062 - `type: "memory_store"`
1063 
1064 - `"memory_store"`
1065 
1066 - `access: optional "read_write" or "read_only" or null`
1067 
1068 Access mode for an attached memory store.
1069 
1070 - `"read_write"`
1071 
1072 - `"read_only"`
1073 
1074 - `instructions: optional string or null`
1075 
1076 Per-attachment guidance for the agent on how to use this store. Rendered into the memory section of the system prompt. Max 4096 chars.
1077 
1078- `title: optional string or null`
1079 
1080 Human-readable session title.
1081 
1082- `vault_ids: optional array of string`
1083 
1084 Vault IDs for stored credentials the agent can use during the session.
1085 
1086### Returns
1087 
1088- `BetaManagedAgentsSession object { id, agent, archived_at, 14 more }`
1089 
1090 A Managed Agents `session`.
1091 
1092 - `id: string`
1093 
1094 - `agent: BetaManagedAgentsSessionAgent`
1095 
1096 Resolved `agent` definition for a `session`. Snapshot of the `agent` at `session` creation time.
1097 
1098 - `id: string`
1099 
1100 - `description: string or null`
1101 
1102 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
1103 
1104 - `name: string`
1105 
1106 - `type: "url"`
1107 
1108 - `"url"`
1109 
1110 - `url: string`
1111 
1112 - `model: BetaManagedAgentsModelConfig`
1113 
1114 Model identifier and configuration.
1115 
1116 - `id: BetaManagedAgentsModel`
1117 
1118 The model that will power your agent.
1119 
1120 See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options.
1121 
1122 - `"claude-sonnet-5" or "claude-fable-5" or "claude-opus-5" or 10 more`
1123 
1124 The model that will power your agent.
1125 
1126 See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options.
1127 
1128 - `"claude-sonnet-5"`
1129 
1130 High-performance model for coding and agents
1131 
1132 - `"claude-fable-5"`
1133 
1134 Next generation of intelligence for the hardest knowledge work and coding problems
1135 
1136 - `"claude-opus-5"`
1137 
1138 Powerful intelligence for long-running agents and coding
1139 
1140 - `"claude-opus-4-8"`
1141 
1142 Powerful intelligence for long-running agents and coding
1143 
1144 - `"claude-opus-4-7"`
1145 
1146 Powerful intelligence for long-running agents and coding
1147 
1148 - `"claude-opus-4-6"`
1149 
1150 Powerful intelligence for long-running agents and coding
1151 
1152 - `"claude-sonnet-4-6"`
1153 
1154 Best combination of speed and intelligence
1155 
1156 - `"claude-haiku-4-5"`
1157 
1158 Fastest model with near-frontier intelligence
1159 
1160 - `"claude-haiku-4-5-20251001"`
1161 
1162 Fastest model with near-frontier intelligence
1163 
1164 - `"claude-opus-4-5"`
1165 
1166 Powerful intelligence for long-running agents and coding
1167 
1168 - `"claude-opus-4-5-20251101"`
1169 
1170 Powerful intelligence for long-running agents and coding
1171 
1172 - `"claude-sonnet-4-5"`
1173 
1174 High-performance model for agents and coding
1175 
1176 - `"claude-sonnet-4-5-20250929"`
1177 
1178 High-performance model for agents and coding
1179 
1180 - `string`
1181 
1182 - `effort: optional BetaManagedAgentsEffortLow or BetaManagedAgentsEffortMedium or BetaManagedAgentsEffortHigh or 2 more`
1183 
1184 How hard Claude works on each turn. Sets `output_config.effort` on every Messages call the session makes.
1185 
1186 - `BetaManagedAgentsEffortLow object { type }`
1187 
1188 Low effort. Favors latency over reasoning depth.
1189 
1190 - `type: "low"`
1191 
1192 - `"low"`
1193 
1194 - `BetaManagedAgentsEffortMedium object { type }`
1195 
1196 Medium effort. Balances latency and reasoning depth.
1197 
1198 - `type: "medium"`
1199 
1200 - `"medium"`
1201 
1202 - `BetaManagedAgentsEffortHigh object { type }`
1203 
1204 High effort. Favors reasoning depth.
1205 
1206 - `type: "high"`
1207 
1208 - `"high"`
1209 
1210 - `BetaManagedAgentsEffortXhigh object { type }`
1211 
1212 Extra-high effort. Not all models accept this level.
1213 
1214 - `type: "xhigh"`
1215 
1216 - `"xhigh"`
1217 
1218 - `BetaManagedAgentsEffortMax object { type }`
1219 
1220 Maximum effort. Favors reasoning depth over latency.
1221 
1222 - `type: "max"`
1223 
1224 - `"max"`
1225 
1226 - `inference_geo: optional string`
1227 
1228 Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo.
1229 
1230 - `speed: optional "standard" or "fast"`
1231 
1232 Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Not all models support `fast`; invalid combinations are rejected at create time.
1233 
1234 - `"standard"`
1235 
1236 - `"fast"`
1237 
1238 - `multiagent: BetaManagedAgentsSessionMultiagentCoordinator or null`
1239 
1240 Resolved coordinator topology with full agent definitions for each roster member.
1241 
1242 - `agents: array of BetaManagedAgentsSessionThreadAgent or BetaManagedAgentsAdvisor`
1243 
1244 Full `agent` definitions the coordinator may spawn as session threads.
1245 
1246 - `BetaManagedAgentsSessionThreadAgent object { id, description, mcp_servers, 7 more }`
1247 
1248 Resolved `agent` definition for a single `session_thread`. Snapshot of the agent at thread creation time. The multiagent roster is not repeated here; read it from `Session.agent`.
1249 
1250 - `id: string`
1251 
1252 - `description: string or null`
1253 
1254 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
1255 
1256 - `name: string`
1257 
1258 - `type: "url"`
1259 
1260 - `url: string`
1261 
1262 - `model: BetaManagedAgentsModelConfig`
1263 
1264 Model identifier and configuration.
4271265 
4281266 - `name: string`
4291267 
430 Name of the MCP tool to configure. 1-128 characters.
431 
432 - `enabled: optional boolean or null`
433 
434 Whether this tool is enabled. Overrides the `default_config` setting.
435 
436 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
437 
438 Permission policy for tool execution.
439 
440 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
441 
442 Tool calls are automatically approved without user confirmation.
443 
444 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
445 
446 Tool calls require user confirmation before execution.
447 
448 - `default_config: optional BetaManagedAgentsMCPToolsetDefaultConfigParams or null`
449 
450 Default configuration for all tools from an MCP server.
451 
452 - `enabled: optional boolean or null`
453 
454 Whether tools are enabled by default. Defaults to true if not specified.
455 
456 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
457 
458 Permission policy for tool execution.
459 
460 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
461 
462 Tool calls are automatically approved without user confirmation.
463 
464 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
465 
466 Tool calls require user confirmation before execution.
467 
468 - `BetaManagedAgentsCustomToolParams object { description, input_schema, name, type }`
469 
470 A custom tool that is executed by the API client rather than the agent. When the agent calls this tool, an `agent.custom_tool_use` event is emitted and the session goes idle, waiting for the client to provide the result via a `user.custom_tool_result` event.
471 
472 - `description: string`
473 
474 Description of what the tool does, shown to the agent to help it decide when to use the tool.
475 
476 - `input_schema: BetaManagedAgentsCustomToolInputSchema`
477 
478 JSON Schema for custom tool input parameters.
479 
480 - `type: "object"`
481 
482 - `"object"`
483 
484 - `properties: optional map[unknown] or null`
485 
486 - `required: optional array of string or null`
487 
488 - `name: string`
489 
490 Unique name for the tool. 1-128 characters; letters, digits, underscores, and hyphens.
491 
492 - `type: "custom"`
493 
494 - `"custom"`
495 
496 - `version: optional number`
497 
498 The specific `agent` version to use. Omit to use the latest version.
499 
500- `environment_id: string`
501 
502 ID of the `environment` defining the container configuration for this session.
503 
504- `budget: optional BetaManagedAgentsBudgetLimit`
505 
506 A hard spend ceiling. The session stops issuing new model requests once the tracked list cost reaches `max_list_cost`.
507 
508 - `max_list_cost: BetaMonetaryAmount`
509 
510 A monetary amount in a specific currency.
511 
512 - `amount: string`
513 
514 Amount in minor units of the currency, as an integer decimal string with no leading zeros: "2500" is $25.00 and "50" is fifty cents. A string rather than a number so no float rounding is ever applied.
515 
516 - `currency: BetaCurrency`
517 
518 Uppercase ISO-4217 currency code. `USD` is the only currency currently supported; the accepted set is closed and grows only when a new currency is priced.
519 
520 - `"USD"`
521 
522 - `type: "limit"`
523 
524 - `"limit"`
525 
526- `initial_events: optional array of BetaManagedAgentsUserMessageEventParams or BetaManagedAgentsUserDefineOutcomeEventParams`
527 
528 Initial events to send to the `session` at creation, processed in order. Supports `user.message` and `user.define_outcome` events. Maximum 50 events.
529 
530 - `BetaManagedAgentsUserMessageEventParams object { content, type }`
531 
532 Parameters for sending a user message to the session.
533 
534 - `content: array of BetaManagedAgentsTextBlock or BetaManagedAgentsImageBlock or BetaManagedAgentsDocumentBlock or BetaManagedAgentsRedactedBlock`
535 
536 Array of content blocks for the user message.
537 
538 - `BetaManagedAgentsTextBlock object { text, type }`
539 
540 Regular text content.
541 
542 - `text: string`
543 
544 The text content.
545 
546 - `type: "text"`
547 
548 - `"text"`
549 
550 - `BetaManagedAgentsImageBlock object { source, type }`
551 
552 Image content specified directly as base64 data or as a reference via a URL.
553 
554 - `source: BetaManagedAgentsBase64ImageSource or BetaManagedAgentsURLImageSource or BetaManagedAgentsFileImageSource`
555 
556 Union type for image source variants.
557 
558 - `BetaManagedAgentsBase64ImageSource object { data, media_type, type }`
559 
560 Base64-encoded image data.
561 
562 - `data: string`
563 
564 Base64-encoded image data.
565 
566 - `media_type: string`
567 
568 MIME type of the image (e.g., "image/png", "image/jpeg", "image/gif", "image/webp").
569 
570 - `type: "base64"`
571 
572 - `"base64"`
573 
574 - `BetaManagedAgentsURLImageSource object { type, url }`
575 
576 Image referenced by URL.
577 
578 - `type: "url"`
579 
580 - `"url"`
581 
582 - `url: string`
583 
584 URL of the image to fetch.
585 
586 - `BetaManagedAgentsFileImageSource object { file_id, type }`
587 
588 Image referenced by file ID.
589 
590 - `file_id: string`
591 
592 ID of a previously uploaded file.
593 
594 - `type: "file"`
595 
596 - `"file"`
597 
598 - `type: "image"`
599 
600 - `"image"`
601 
602 - `BetaManagedAgentsDocumentBlock object { source, type, context, title }`
603 
604 Document content, either specified directly as base64 data, as text, or as a reference via a URL.
605 
606 - `source: BetaManagedAgentsBase64DocumentSource or BetaManagedAgentsPlainTextDocumentSource or BetaManagedAgentsURLDocumentSource or BetaManagedAgentsFileDocumentSource`
607 
608 Union type for document source variants.
609 
610 - `BetaManagedAgentsBase64DocumentSource object { data, media_type, type }`
611 
612 Base64-encoded document data.
613 
614 - `data: string`
615 
616 Base64-encoded document data.
617 
618 - `media_type: string`
619 
620 MIME type of the document (e.g., "application/pdf").
621 
622 - `type: "base64"`
623 
624 - `"base64"`
625 
626 - `BetaManagedAgentsPlainTextDocumentSource object { data, media_type, type }`
627 
628 Plain text document content.
629 
630 - `data: string`
631 
632 The plain text content.
633 
634 - `media_type: "text/plain"`
635 
636 MIME type of the text content. Must be "text/plain".
637 
638 - `"text/plain"`
639 
640 - `type: "text"`
641 
642 - `"text"`
643 
644 - `BetaManagedAgentsURLDocumentSource object { type, url }`
645 
646 Document referenced by URL.
647 
648 - `type: "url"`
649 
650 - `"url"`
651 
652 - `url: string`
653 
654 URL of the document to fetch.
655 
656 - `BetaManagedAgentsFileDocumentSource object { file_id, type }`
657 
658 Document referenced by file ID.
659 
660 - `file_id: string`
661 
662 ID of a previously uploaded file.
663 
664 - `type: "file"`
665 
666 - `"file"`
667 
668 - `type: "document"`
669 
670 - `"document"`
671 
672 - `context: optional string or null`
673 
674 Additional context about the document for the model.
675 
676 - `title: optional string or null`
677 
678 The title of the document.
679 
680 - `BetaManagedAgentsRedactedBlock object { type }`
681 
682 Placeholder for content withheld by Anthropic model policy.
683 
684 - `type: "redacted"`
685 
686 - `"redacted"`
687 
688 - `type: "user.message"`
689 
690 - `"user.message"`
691 
692 - `BetaManagedAgentsUserDefineOutcomeEventParams object { description, rubric, type, max_iterations }`
693 
694 Parameters for defining an outcome the agent should work toward. The agent begins work on receipt.
695 
696 - `description: string`
697 
698 What the agent should produce. This is the task specification.
699 
700 - `rubric: BetaManagedAgentsFileRubricParams or BetaManagedAgentsTextRubricParams`
701 
702 Rubric for grading the quality of an outcome.
703 
704 - `BetaManagedAgentsFileRubricParams object { file_id, type }`
705 
706 Rubric referenced by a file uploaded via the Files API.
707 
708 - `file_id: string`
709 
710 ID of the rubric file.
711 
712 - `type: "file"`
713 
714 - `"file"`
715 
716 - `BetaManagedAgentsTextRubricParams object { content, type }`
717 
718 Rubric content provided inline as text.
719 
720 - `content: string`
721 
722 Rubric content. Plain text or markdown — the grader treats it as freeform text. Maximum 262144 characters.
723 
724 - `type: "text"`
725 
726 - `"text"`
727 
728 - `type: "user.define_outcome"`
729 
730 - `"user.define_outcome"`
731 
732 - `max_iterations: optional number or null`
733 
734 Eval→revision cycles before giving up. Default 3, max 20.
735 
736- `metadata: optional map[string]`
737 
738 Arbitrary key-value metadata attached to the session. Maximum 16 pairs, keys up to 64 chars, values up to 512 chars.
739 
740- `resources: optional array of BetaManagedAgentsGitHubRepositoryResourceParams or BetaManagedAgentsFileResourceParams or BetaManagedAgentsMemoryStoreResourceParam`
741 
742 Resources (e.g. repositories, files) to mount into the session's container.
743 
744 - `BetaManagedAgentsGitHubRepositoryResourceParams object { authorization_token, type, url, 2 more }`
745 
746 Mount a GitHub repository into the session's container.
747 
748 - `authorization_token: string`
749 
750 GitHub authorization token used to clone the repository.
751 
752 - `type: "github_repository"`
753 
754 - `"github_repository"`
755 
756 - `url: string`
757 
758 Github URL of the repository
759 
760 - `checkout: optional BetaManagedAgentsBranchCheckout or BetaManagedAgentsCommitCheckout or null`
761 
762 Branch or commit to check out. Defaults to the repository's default branch.
763 
764 - `BetaManagedAgentsBranchCheckout object { name, type }`
765 
766 - `name: string`
767 
768 Branch name to check out.
769 
770 - `type: "branch"`
771 
772 - `"branch"`
773 
774 - `BetaManagedAgentsCommitCheckout object { sha, type }`
775 
776 - `sha: string`
777 
778 Full commit SHA to check out.
779 
780 - `type: "commit"`
781 
782 - `"commit"`
783 
784 - `mount_path: optional string or null`
785 
786 Mount path in the container. Defaults to `/workspace/<repo-name>`.
787 
788 - `BetaManagedAgentsFileResourceParams object { file_id, type, mount_path }`
789 
790 Mount a file uploaded via the Files API into the session.
791 
792 - `file_id: string`
793 
794 ID of a previously uploaded file.
795 
796 - `type: "file"`
797 
798 - `"file"`
799 
800 - `mount_path: optional string or null`
801 
802 Mount path in the container. Defaults to `/mnt/session/uploads/<file_id>`.
803 
804 - `BetaManagedAgentsMemoryStoreResourceParam object { memory_store_id, type, access, instructions }`
805 
806 Parameters for attaching a memory store to an agent session.
807 
808 - `memory_store_id: string`
809 
810 The memory store ID (memstore_...). Must belong to the caller's organization and workspace.
811 
812 - `type: "memory_store"`
813 
814 - `"memory_store"`
815 
816 - `access: optional "read_write" or "read_only" or null`
817 
818 Access mode for an attached memory store.
819 
820 - `"read_write"`
821 
822 - `"read_only"`
823 
824 - `instructions: optional string or null`
825 
826 Per-attachment guidance for the agent on how to use this store. Rendered into the memory section of the system prompt. Max 4096 chars.
827 
828- `title: optional string or null`
829 
830 Human-readable session title.
831 
832- `vault_ids: optional array of string`
833 
834 Vault IDs for stored credentials the agent can use during the session.
835 
836### Returns
837 
838- `BetaManagedAgentsSession object { id, agent, archived_at, 14 more }`
839 
840 A Managed Agents `session`.
841 
842 - `id: string`
843 
844 - `agent: BetaManagedAgentsSessionAgent`
845 
846 Resolved `agent` definition for a `session`. Snapshot of the `agent` at `session` creation time.
847 
848 - `id: string`
849 
850 - `description: string or null`
851 
852 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
853 
854 - `name: string`
855 
856 - `type: "url"`
857 
858 - `"url"`
859 
860 - `url: string`
861 
862 - `model: BetaManagedAgentsModelConfig`
863 
864 Model identifier and configuration.
865 
866 - `id: BetaManagedAgentsModel`
867 
868 The model that will power your agent.
869 
870 See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options.
871 
872 - `"claude-sonnet-5" or "claude-fable-5" or "claude-opus-5" or 10 more`
873 
874 The model that will power your agent.
875 
876 See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options.
877 
878 - `"claude-sonnet-5"`
879 
880 High-performance model for coding and agents
881 
882 - `"claude-fable-5"`
883 
884 Next generation of intelligence for the hardest knowledge work and coding problems
885 
886 - `"claude-opus-5"`
887 
888 Powerful intelligence for long-running agents and coding
889 
890 - `"claude-opus-4-8"`
891 
892 Powerful intelligence for long-running agents and coding
893 
894 - `"claude-opus-4-7"`
895 
896 Powerful intelligence for long-running agents and coding
897 
898 - `"claude-opus-4-6"`
899 
900 Powerful intelligence for long-running agents and coding
901 
902 - `"claude-sonnet-4-6"`
903 
904 Best combination of speed and intelligence
905 
906 - `"claude-haiku-4-5"`
907 
908 Fastest model with near-frontier intelligence
909 
910 - `"claude-haiku-4-5-20251001"`
911 
912 Fastest model with near-frontier intelligence
913 
914 - `"claude-opus-4-5"`
915 
916 Powerful intelligence for long-running agents and coding
917 
918 - `"claude-opus-4-5-20251101"`
919 
920 Powerful intelligence for long-running agents and coding
921 
922 - `"claude-sonnet-4-5"`
923 
924 High-performance model for agents and coding
925 
926 - `"claude-sonnet-4-5-20250929"`
927 
928 High-performance model for agents and coding
929 
930 - `string`
931 
932 - `effort: optional BetaManagedAgentsEffortLow or BetaManagedAgentsEffortMedium or BetaManagedAgentsEffortHigh or 2 more`
933 
934 How hard Claude works on each turn. Sets `output_config.effort` on every Messages call the session makes.
935 
936 - `BetaManagedAgentsEffortLow object { type }`
937 
938 Low effort. Favors latency over reasoning depth.
939 
940 - `type: "low"`
941 
942 - `"low"`
943 
944 - `BetaManagedAgentsEffortMedium object { type }`
945 
946 Medium effort. Balances latency and reasoning depth.
947 
948 - `type: "medium"`
949 
950 - `"medium"`
951 
952 - `BetaManagedAgentsEffortHigh object { type }`
953 
954 High effort. Favors reasoning depth.
955 
956 - `type: "high"`
957 
958 - `"high"`
959 
960 - `BetaManagedAgentsEffortXhigh object { type }`
961 
962 Extra-high effort. Not all models accept this level.
963 
964 - `type: "xhigh"`
965 
966 - `"xhigh"`
967 
968 - `BetaManagedAgentsEffortMax object { type }`
969 
970 Maximum effort. Favors reasoning depth over latency.
971 
972 - `type: "max"`
973 
974 - `"max"`
975 
976 - `inference_geo: optional string`
977 
978 Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo.
979 
980 - `speed: optional "standard" or "fast"`
981 
982 Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Not all models support `fast`; invalid combinations are rejected at create time.
983 
984 - `"standard"`
985 
986 - `"fast"`
987 
988 - `multiagent: BetaManagedAgentsSessionMultiagentCoordinator or null`
989 
990 Resolved coordinator topology with full agent definitions for each roster member.
991 
992 - `agents: array of BetaManagedAgentsSessionThreadAgent or BetaManagedAgentsAdvisor`
993 
994 Full `agent` definitions the coordinator may spawn as session threads.
995 
996 - `BetaManagedAgentsSessionThreadAgent object { id, description, mcp_servers, 7 more }`
997 
998 Resolved `agent` definition for a single `session_thread`. Snapshot of the agent at thread creation time. The multiagent roster is not repeated here; read it from `Session.agent`.
999 
1000 - `id: string`
1001 
1002 - `description: string or null`
1003 
1004 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
1005 
1006 - `name: string`
1007 
1008 - `type: "url"`
1009 
1010 - `url: string`
1011 
1012 - `model: BetaManagedAgentsModelConfig`
1013 
1014 Model identifier and configuration.
1015 
1016 - `name: string`
1017 
10181268 - `skills: array of BetaManagedAgentsAnthropicSkill or BetaManagedAgentsCustomSkill`
10191269 
10201270 - `BetaManagedAgentsAnthropicSkill object { skill_id, type, version }`
from line 1299
10491299 
10501300 - `configs: array of BetaManagedAgentsAgentToolConfig`
10511301 
1052 - `enabled: boolean`
1053 
1054 - `name: "bash" or "edit" or "read" or 5 more`
1055 
1056 Built-in agent tool identifier.
1057 
1058 - `"bash"`
1059 
1060 - `"edit"`
1061 
1062 - `"read"`
1063 
1064 - `"write"`
1065 
1066 - `"glob"`
1067 
1068 - `"grep"`
1069 
1070 - `"web_fetch"`
1071 
1072 - `"web_search"`
1073 
1074 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1075 
1076 Permission policy for tool execution.
1077 
1078 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1079 
1080 Tool calls are automatically approved without user confirmation.
1081 
1082 - `type: "always_allow"`
1083 
1084 - `"always_allow"`
1085 
1086 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1087 
1088 Tool calls require user confirmation before execution.
1089 
1090 - `type: "always_ask"`
1091 
1092 - `"always_ask"`
1302 - `BetaManagedAgentsBashToolConfig object { enabled, name, permission_policy, type }`
1303 
1304 Configuration for the bash tool.
1305 
1306 - `enabled: boolean`
1307 
1308 - `name: "bash"`
1309 
1310 - `"bash"`
1311 
1312 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1313 
1314 Permission policy for tool execution.
1315 
1316 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1317 
1318 Tool calls are automatically approved without user confirmation.
1319 
1320 - `type: "always_allow"`
1321 
1322 - `"always_allow"`
1323 
1324 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1325 
1326 Tool calls require user confirmation before execution.
1327 
1328 - `type: "always_ask"`
1329 
1330 - `"always_ask"`
1331 
1332 - `type: "bash"`
1333 
1334 - `"bash"`
1335 
1336 - `BetaManagedAgentsEditToolConfig object { enabled, name, permission_policy, type }`
1337 
1338 Configuration for the edit tool.
1339 
1340 - `enabled: boolean`
1341 
1342 - `name: "edit"`
1343 
1344 - `"edit"`
1345 
1346 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1347 
1348 Permission policy for tool execution.
1349 
1350 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1351 
1352 Tool calls are automatically approved without user confirmation.
1353 
1354 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1355 
1356 Tool calls require user confirmation before execution.
1357 
1358 - `type: "edit"`
1359 
1360 - `"edit"`
1361 
1362 - `BetaManagedAgentsReadToolConfig object { enabled, name, permission_policy, type }`
1363 
1364 Configuration for the read tool.
1365 
1366 - `enabled: boolean`
1367 
1368 - `name: "read"`
1369 
1370 - `"read"`
1371 
1372 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1373 
1374 Permission policy for tool execution.
1375 
1376 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1377 
1378 Tool calls are automatically approved without user confirmation.
1379 
1380 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1381 
1382 Tool calls require user confirmation before execution.
1383 
1384 - `type: "read"`
1385 
1386 - `"read"`
1387 
1388 - `BetaManagedAgentsWriteToolConfig object { enabled, name, permission_policy, type }`
1389 
1390 Configuration for the write tool.
1391 
1392 - `enabled: boolean`
1393 
1394 - `name: "write"`
1395 
1396 - `"write"`
1397 
1398 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1399 
1400 Permission policy for tool execution.
1401 
1402 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1403 
1404 Tool calls are automatically approved without user confirmation.
1405 
1406 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1407 
1408 Tool calls require user confirmation before execution.
1409 
1410 - `type: "write"`
1411 
1412 - `"write"`
1413 
1414 - `BetaManagedAgentsGlobToolConfig object { enabled, name, permission_policy, type }`
1415 
1416 Configuration for the glob tool.
1417 
1418 - `enabled: boolean`
1419 
1420 - `name: "glob"`
1421 
1422 - `"glob"`
1423 
1424 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1425 
1426 Permission policy for tool execution.
1427 
1428 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1429 
1430 Tool calls are automatically approved without user confirmation.
1431 
1432 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1433 
1434 Tool calls require user confirmation before execution.
1435 
1436 - `type: "glob"`
1437 
1438 - `"glob"`
1439 
1440 - `BetaManagedAgentsGrepToolConfig object { enabled, name, permission_policy, type }`
1441 
1442 Configuration for the grep tool.
1443 
1444 - `enabled: boolean`
1445 
1446 - `name: "grep"`
1447 
1448 - `"grep"`
1449 
1450 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1451 
1452 Permission policy for tool execution.
1453 
1454 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1455 
1456 Tool calls are automatically approved without user confirmation.
1457 
1458 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1459 
1460 Tool calls require user confirmation before execution.
1461 
1462 - `type: "grep"`
1463 
1464 - `"grep"`
1465 
1466 - `BetaManagedAgentsWebFetchToolConfig object { enabled, name, permission_policy, 4 more }`
1467 
1468 Configuration for the web_fetch tool.
1469 
1470 - `enabled: boolean`
1471 
1472 - `name: "web_fetch"`
1473 
1474 - `"web_fetch"`
1475 
1476 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1477 
1478 Permission policy for tool execution.
1479 
1480 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1481 
1482 Tool calls are automatically approved without user confirmation.
1483 
1484 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1485 
1486 Tool calls require user confirmation before execution.
1487 
1488 - `type: "web_fetch"`
1489 
1490 - `"web_fetch"`
1491 
1492 - `allowed_domains: optional array of string`
1493 
1494 - `blocked_domains: optional array of string`
1495 
1496 - `max_content_tokens: optional number or null`
1497 
1498 - `BetaManagedAgentsWebSearchToolConfig object { enabled, name, permission_policy, 4 more }`
1499 
1500 Configuration for the web_search tool.
1501 
1502 - `enabled: boolean`
1503 
1504 - `name: "web_search"`
1505 
1506 - `"web_search"`
1507 
1508 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1509 
1510 Permission policy for tool execution.
1511 
1512 - `BetaManagedAgentsAlwaysAllowPolicy object { type }`
1513 
1514 Tool calls are automatically approved without user confirmation.
1515 
1516 - `BetaManagedAgentsAlwaysAskPolicy object { type }`
1517 
1518 Tool calls require user confirmation before execution.
1519 
1520 - `type: "web_search"`
1521 
1522 - `"web_search"`
1523 
1524 - `allowed_domains: optional array of string`
1525 
1526 - `blocked_domains: optional array of string`
1527 
1528 - `user_location: optional BetaManagedAgentsUserLocation or null`
1529 
1530 Approximate user location for search result localization.
1531 
1532 - `type: "approximate"`
1533 
1534 Location precision. Only "approximate" is supported.
1535 
1536 - `"approximate"`
1537 
1538 - `city: optional string or null`
1539 
1540 City name.
1541 
1542 - `country: optional string or null`
1543 
1544 Two-letter ISO 3166-1 country code, uppercase.
1545 
1546 - `region: optional string or null`
1547 
1548 Region or state name.
1549 
1550 - `timezone: optional string or null`
1551 
1552 IANA timezone identifier, e.g. "America/Los_Angeles".
10931553 
10941554 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig`
10951555 
from line 2024
15642024 "name": "bash",
15652025 "permission_policy": {
15662026 "type": "always_allow"
1567 }
2027 },
2028 "type": "bash"
15682029 }
15692030 ],
15702031 "default_config": {
from line 2065
16042065 "name": "bash",
16052066 "permission_policy": {
16062067 "type": "always_allow"
1607 }
2068 },
2069 "type": "bash"
16082070 }
16092071 ],
16102072 "default_config": {
16112073 
Feedback