List External Keys changedapi/admin/external_keys/list
Nearest release: v2.1.245, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+28added
Lines−29removed
From line
1
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits5to this page, all time
# List External Keys ## Query parameters ## Returns ## Example ### Response (200) ## List External Keys ### Query Parameters ### Returns ### Example #### Response
The whole hunk
from line 1, old and new numbered
/
from line 1
1---
2title: List External Keys
3url: https://platform.claude.com/docs/en/api/admin/external_keys/list
4---
1# List External Keys
52
6## List External Keys
3**GET** `/v1/organizations/external_keys`
74
8**get** `/v1/organizations/external_keys`
9
105List external key configs in the caller's organization.
116
127Results are ordered by creation time (newest first). Use the
138`next_page` cursor from the response to fetch subsequent pages.
149
15### Query Parameters
10## Query parameters
1611
1712- `limit: optional number`
1813
1914 Number of results per page.
2015
16 default: 20, maximum: 100, minimum: 1
17
2118- `page: optional string`
2219
2320 Opaque cursor from a previous response's `next_page`.
2421
25### Returns
22## Returns
2623
27- `data: array of object { id, attachment, created_at, 5 more }`
24- `data: array of object`
2825
2926 - `id: string`
3027
3128 Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN.
3229
33 - `attachment: object { type } or object { type }`
30 - `attachment: object or object`
3431
3532 Whether any workspace uses this config to encrypt its data — counting live and archived workspaces (an archived workspace's data remains encrypted under the config), excluding deleted ones. Only an attached config is used by the encryption path; an `unattached` config is inert and can be deleted.
3633
37 - `Attached object { type }`
34 - `Attached object`
3835
3936 - `type: "attached"`
4037
41 - `"attached"`
38 default: attached
4239
43 - `Unattached object { type }`
40 - `Unattached object`
4441
4542 - `type: "unattached"`
4643
47 - `"unattached"`
44 default: unattached
4845
4946 - `created_at: string`
5047
48 format: date-time
49
5150 - `display_name: string or null`
5251
5352 Human-friendly display name. Null if none was set.
from line 55
5655
5756 Data residency geo. Selects which regional validator handles this key's encrypt/decrypt roundtrips.
5857
59 - `provider_config: object { kms_arn, type, region, role_arn } or object { key_name, type } or object { key_name, tenant_id, type, 2 more }`
58 - `provider_config: object or object or object`
6059
6160 KMS provider identity and auth coordinates.
6261
63 - `Aws object { kms_arn, type, region, role_arn }`
62 - `Aws object`
6463
6564 - `kms_arn: string`
6665
6766 Full ARN of the AWS KMS key.
6867
68 maxLength: 2048
69
6970 - `type: "aws"`
7071
71 - `"aws"`
72
7372 - `region: optional string or null`
7473
7574 AWS region. Derived from kms_arn if omitted.
from line 75
7675
7776 - `role_arn: optional string or null`
7877
78 **Deprecated**
79
7980 IAM role ARN. Deprecated — Anthropic reaches the KMS key via a managed intermediate role; this field is ignored.
8081
81 - `Gcp object { key_name, type }`
82 - `Gcp object`
8283
8384 - `key_name: string`
8485
from line 87
8687
8788 - `type: "gcp"`
8889
89 - `"gcp"`
90 - `Azure object`
9091
91 - `Azure object { key_name, tenant_id, type, 2 more }`
92
9392 - `key_name: string`
9493
9594 Name of the key within the vault.
from line 99
10099
101100 - `type: "azure"`
102101
103 - `"azure"`
104
105102 - `vault_uri: string`
106103
107104 Key Vault data-plane URI — https://<vault-name>.vault.azure.net or https://<hsm-name>.managedhsm.azure.net.
from line 109
112109
113110 - `type: "external_key"`
114111
115 - `"external_key"`
112 default: external_key
116113
117114 - `updated_at: string`
118115
116 format: date-time
117
119118- `next_page: string or null`
120119
121120 Opaque cursor for the next page, or null if no more results. Pass as `?page=` to fetch the next page.
122121
123### Example
122## Example
124123
125```http
124```bash
126125curl https://api.anthropic.com/v1/organizations/external_keys \
127126 -H 'anthropic-version: 2023-06-01' \
128127 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
129128```
130129
131#### Response
130### Response (200)
132131
133132```json
134133{
No line in this hunk matches that.