Credentials changedapi/beta/vaults/credentials
Nearest release: v2.1.245, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+353added
Lines−406removed
From line
1
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits21to this page, all time
### Path parameters ### Headers ### Body parameters #### Response (200) ### Path parameters ### Query parameters ### Headers #### Response (200) ### Path parameters ### Headers #### Response (200) ### Path parameters ### Headers ### Body parameters #### Response (200) ### Path parameters ### Headers #### Response (200) ### Path parameters ### Headers #### Response (200) ### Path parameters ### Headers #### Response (200) ## Domain types ### Path Parameters ### Header Parameters ### Body Parameters #### Response ### Path Parameters ### Query Parameters ### Header Parameters #### Response ### Path Parameters ### Header Parameters #### Response ### Path Parameters ### Header Parameters ### Body Parameters #### Response ### Path Parameters ### Header Parameters #### Response ### Path Parameters ### Header Parameters #### Response ### Path Parameters ### Header Parameters #### Response ## Domain Types
The whole hunk
from line 1, old and new numbered
/
The two sides of this change are more than 400 edits apart, too far apart to line up, so this is the differ's own diff of it and the words inside a line are not marked.
from line 1
1---
2title: Credentials
3url: https://platform.claude.com/docs/en/api/beta/vaults/credentials
4---
5
61# Credentials
72
83## Create Credential
94
10**post** `/v1/vaults/{vault_id}/credentials`
5**POST** `/v1/vaults/{vault_id}/credentials`
116
127Create Credential
138
14### Path Parameters
9### Path parameters
1510
1611- `vault_id: string`
1712
18### Header Parameters
13### Headers
1914
2015- `"anthropic-beta": optional array of AnthropicBeta`
2116
from line 88
9388
9489 - `"mid-conversation-tool-changes-2026-07-01"`
9590
96### Body Parameters
91### Body parameters
9792
9893- `auth: BetaManagedAgentsMCPOAuthCreateParams or BetaManagedAgentsStaticBearerCreateParams or BetaManagedAgentsEnvironmentVariableCreateParams`
9994
10095 Authentication details for creating a credential.
10196
102 - `BetaManagedAgentsMCPOAuthCreateParams object { access_token, mcp_server_url, type, 2 more }`
97 - `BetaManagedAgentsMCPOAuthCreateParams object`
10398
10499 Parameters for creating an MCP OAuth credential.
105100
from line 102
107102
108103 OAuth access token.
109104
105 minLength: 1, maxLength: 8192
106
110107 - `mcp_server_url: string`
111108
112109 URL of the MCP server this credential authenticates against.
113110
111 minLength: 1, maxLength: 2047
112
114113 - `type: "mcp_oauth"`
115114
116 - `"mcp_oauth"`
117
118115 - `expires_at: optional string or null`
119116
120117 A timestamp in RFC 3339 format
121118
119 format: date-time
120
122121 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshParams or null`
123122
124123 OAuth refresh token parameters for creating a credential with refresh support.
from line 126
127126
128127 OAuth client ID.
129128
129 minLength: 1, maxLength: 1024
130
130131 - `refresh_token: string`
131132
132133 OAuth refresh token.
133134
135 minLength: 1, maxLength: 4096
136
134137 - `token_endpoint: string`
135138
136139 Token endpoint URL used to refresh the access token.
137140
141 minLength: 1, maxLength: 2047
142
138143 - `token_endpoint_auth: BetaManagedAgentsTokenEndpointAuthNoneParam or BetaManagedAgentsTokenEndpointAuthBasicParam or BetaManagedAgentsTokenEndpointAuthPostParam`
139144
140145 Token endpoint requires no client authentication.
141146
142 - `BetaManagedAgentsTokenEndpointAuthNoneParam object { type }`
147 - `BetaManagedAgentsTokenEndpointAuthNoneParam object`
143148
144149 Token endpoint requires no client authentication.
145150
146151 - `type: "none"`
147152
148 - `"none"`
149
150 - `BetaManagedAgentsTokenEndpointAuthBasicParam object { client_secret, type }`
153 - `BetaManagedAgentsTokenEndpointAuthBasicParam object`
151154
152155 Token endpoint uses HTTP Basic authentication with client credentials.
153156
from line 158
155158
156159 OAuth client secret.
157160
161 minLength: 1, maxLength: 512
162
158163 - `type: "client_secret_basic"`
159164
160 - `"client_secret_basic"`
161
162 - `BetaManagedAgentsTokenEndpointAuthPostParam object { client_secret, type }`
165 - `BetaManagedAgentsTokenEndpointAuthPostParam object`
163166
164167 Token endpoint uses POST body authentication with client credentials.
165168
from line 170
167170
168171 OAuth client secret.
169172
173 minLength: 1, maxLength: 512
174
170175 - `type: "client_secret_post"`
171176
172 - `"client_secret_post"`
173
174177 - `resource: optional string or null`
175178
176179 OAuth resource indicator.
177180
181 minLength: 1, maxLength: 2047
182
178183 - `scope: optional string or null`
179184
180185 OAuth scope for the refresh request.
181186
182 - `BetaManagedAgentsStaticBearerCreateParams object { token, mcp_server_url, type }`
187 minLength: 1, maxLength: 8192
188
189 - `BetaManagedAgentsStaticBearerCreateParams object`
183190
184191 Parameters for creating a static bearer token credential.
185192
from line 194
187194
188195 Static bearer token value.
189196
197 minLength: 1, maxLength: 8192
198
190199 - `mcp_server_url: string`
191200
192201 URL of the MCP server this credential authenticates against.
193202
203 minLength: 1, maxLength: 2047
204
194205 - `type: "static_bearer"`
195206
196 - `"static_bearer"`
197
198 - `BetaManagedAgentsEnvironmentVariableCreateParams object { networking, secret_name, secret_value, 2 more }`
207 - `BetaManagedAgentsEnvironmentVariableCreateParams object`
199208
200209 Parameters for creating an environment variable credential.
201210
from line 212
203212
204213 Outbound hosts the secret value is substituted on.
205214
206 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object { type }`
215 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object`
207216
208217 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
209218
210219 - `type: "unrestricted"`
211220
212 - `"unrestricted"`
213
214 - `BetaManagedAgentsLimitedCredentialNetworkingParams object { allowed_hosts, type }`
221 - `BetaManagedAgentsLimitedCredentialNetworkingParams object`
215222
216223 Substitute the secret only on requests to the listed hosts.
217224
from line 228
221228
222229 - `type: "limited"`
223230
224 - `"limited"`
225
226231 - `secret_name: string`
227232
228233 Name of the environment variable. Immutable after create.
229234
235 minLength: 1, maxLength: 255
236
230237 - `secret_value: string`
231238
232239 Secret value. Write-only; never returned in responses.
233240
241 minLength: 1, maxLength: 4096
242
234243 - `type: "environment_variable"`
235244
236 - `"environment_variable"`
237
238245 - `injection_location: optional BetaManagedAgentsInjectionLocationParams`
239246
240247 Where in the outbound request the secret value may be substituted.
from line 258
251258
252259 Human-readable name for the credential. Up to 255 characters.
253260
261 maxLength: 255
262
254263- `metadata: optional map[string]`
255264
256265 Arbitrary key-value metadata to attach to the credential. Maximum 16 pairs, keys up to 64 chars, values up to 512 chars.
257266
258267### Returns
259268
260- `BetaManagedAgentsCredential object { id, archived_at, auth, 6 more }`
269- `BetaManagedAgentsCredential object`
261270
262271 A credential stored in a vault. Sensitive fields are never returned in responses.
263272
from line 278
269278
270279 A timestamp in RFC 3339 format
271280
281 format: date-time
282
272283 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
273284
274285 Authentication details for a credential.
275286
276 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
287 - `BetaManagedAgentsMCPOAuthAuthResponse object`
277288
278289 OAuth credential details for an MCP server.
279290
from line 294
283294
284295 - `type: "mcp_oauth"`
285296
286 - `"mcp_oauth"`
287
288297 - `expires_at: optional string or null`
289298
290299 A timestamp in RFC 3339 format
291300
301 format: date-time
302
292303 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
293304
294305 OAuth refresh token configuration returned in credential responses.
from line 316
305316
306317 Token endpoint requires no client authentication.
307318
308 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
319 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
309320
310321 Token endpoint requires no client authentication.
311322
312323 - `type: "none"`
313324
314 - `"none"`
315
316 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
325 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
317326
318327 Token endpoint uses HTTP Basic authentication with client credentials.
319328
320329 - `type: "client_secret_basic"`
321330
322 - `"client_secret_basic"`
323
324 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
331 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
325332
326333 Token endpoint uses POST body authentication with client credentials.
327334
328335 - `type: "client_secret_post"`
329336
330 - `"client_secret_post"`
331
332337 - `resource: optional string or null`
333338
334339 OAuth resource indicator.
from line 342
337342
338343 OAuth scope for the refresh request.
339344
340 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
345 - `BetaManagedAgentsStaticBearerAuthResponse object`
341346
342347 Static bearer token credential details for an MCP server.
343348
from line 352
347352
348353 - `type: "static_bearer"`
349354
350 - `"static_bearer"`
351
352 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
355 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
353356
354357 Environment variable credential details. The secret value is never returned.
355358
from line 372
369372
370373 Outbound hosts the secret value is substituted on.
371374
372 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
375 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
373376
374377 The secret is substituted on any host the session's Environment network policy permits egress to.
375378
376379 - `type: "unrestricted"`
377380
378 - `"unrestricted"`
379
380 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
381 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
381382
382383 The secret is substituted only on requests to the listed hosts.
383384
from line 388
387388
388389 - `type: "limited"`
389390
390 - `"limited"`
391
392391 - `secret_name: string`
393392
394393 Name of the environment variable.
395394
396395 - `type: "environment_variable"`
397396
398 - `"environment_variable"`
399
400397 - `created_at: string`
401398
402399 A timestamp in RFC 3339 format
403400
401 format: date-time
402
404403 - `metadata: map[string]`
405404
406405 Arbitrary key-value metadata attached to the credential.
407406
408407 - `type: "vault_credential"`
409408
410 - `"vault_credential"`
411
412409 - `updated_at: string`
413410
414411 A timestamp in RFC 3339 format
415412
413 format: date-time
414
416415 - `vault_id: string`
417416
418417 Identifier of the vault this credential belongs to.
from line 422
423422
424423### Example
425424
426```http
425```bash
427426curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials \
428427 -H 'Content-Type: application/json' \
429428 -H 'anthropic-version: 2023-06-01' \
from line 441
442441 }'
443442```
444443
445#### Response
444#### Response (200)
446445
447446```json
448447{
from line 464
465464
466465## List Credentials
467466
468**get** `/v1/vaults/{vault_id}/credentials`
467**GET** `/v1/vaults/{vault_id}/credentials`
469468
470469List Credentials
471470
472### Path Parameters
471### Path parameters
473472
474473- `vault_id: string`
475474
476### Query Parameters
475### Query parameters
477476
478477- `include_archived: optional boolean`
479478
from line 482
483482
484483 Maximum number of credentials to return per page. Defaults to 20, maximum 100.
485484
485 format: int32
486
486487- `page: optional string`
487488
488489 Opaque pagination token from a previous `list_credentials` response.
489490
490### Header Parameters
491### Headers
491492
492493- `"anthropic-beta": optional array of AnthropicBeta`
493494
from line 580
579580
580581 A timestamp in RFC 3339 format
581582
583 format: date-time
584
582585 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
583586
584587 Authentication details for a credential.
585588
586 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
589 - `BetaManagedAgentsMCPOAuthAuthResponse object`
587590
588591 OAuth credential details for an MCP server.
589592
from line 596
593596
594597 - `type: "mcp_oauth"`
595598
596 - `"mcp_oauth"`
597
598599 - `expires_at: optional string or null`
599600
600601 A timestamp in RFC 3339 format
601602
603 format: date-time
604
602605 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
603606
604607 OAuth refresh token configuration returned in credential responses.
from line 618
615618
616619 Token endpoint requires no client authentication.
617620
618 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
621 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
619622
620623 Token endpoint requires no client authentication.
621624
622625 - `type: "none"`
623626
624 - `"none"`
625
626 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
627 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
627628
628629 Token endpoint uses HTTP Basic authentication with client credentials.
629630
630631 - `type: "client_secret_basic"`
631632
632 - `"client_secret_basic"`
633
634 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
633 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
635634
636635 Token endpoint uses POST body authentication with client credentials.
637636
638637 - `type: "client_secret_post"`
639638
640 - `"client_secret_post"`
641
642639 - `resource: optional string or null`
643640
644641 OAuth resource indicator.
from line 644
647644
648645 OAuth scope for the refresh request.
649646
650 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
647 - `BetaManagedAgentsStaticBearerAuthResponse object`
651648
652649 Static bearer token credential details for an MCP server.
653650
from line 654
657654
658655 - `type: "static_bearer"`
659656
660 - `"static_bearer"`
661
662 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
657 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
663658
664659 Environment variable credential details. The secret value is never returned.
665660
from line 674
679674
680675 Outbound hosts the secret value is substituted on.
681676
682 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
677 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
683678
684679 The secret is substituted on any host the session's Environment network policy permits egress to.
685680
686681 - `type: "unrestricted"`
687682
688 - `"unrestricted"`
689
690 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
683 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
691684
692685 The secret is substituted only on requests to the listed hosts.
693686
from line 690
697690
698691 - `type: "limited"`
699692
700 - `"limited"`
701
702693 - `secret_name: string`
703694
704695 Name of the environment variable.
705696
706697 - `type: "environment_variable"`
707698
708 - `"environment_variable"`
709
710699 - `created_at: string`
711700
712701 A timestamp in RFC 3339 format
713702
703 format: date-time
704
714705 - `metadata: map[string]`
715706
716707 Arbitrary key-value metadata attached to the credential.
717708
718709 - `type: "vault_credential"`
719710
720 - `"vault_credential"`
721
722711 - `updated_at: string`
723712
724713 A timestamp in RFC 3339 format
725714
715 format: date-time
716
726717 - `vault_id: string`
727718
728719 Identifier of the vault this credential belongs to.
from line 728
737728
738729### Example
739730
740```http
731```bash
741732curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials \
742733 -H 'anthropic-version: 2023-06-01' \
743734 -H 'anthropic-beta: managed-agents-2026-04-01' \
744735 -H "X-Api-Key: $ANTHROPIC_API_KEY"
745736```
746737
747#### Response
738#### Response (200)
748739
749740```json
750741{
from line 763
772763
773764## Get Credential
774765
775**get** `/v1/vaults/{vault_id}/credentials/{credential_id}`
766**GET** `/v1/vaults/{vault_id}/credentials/{credential_id}`
776767
777768Get Credential
778769
779### Path Parameters
770### Path parameters
780771
781772- `vault_id: string`
782773
783774- `credential_id: string`
784775
785### Header Parameters
776### Headers
786777
787778- `"anthropic-beta": optional array of AnthropicBeta`
788779
from line 853
862853
863854### Returns
864855
865- `BetaManagedAgentsCredential object { id, archived_at, auth, 6 more }`
856- `BetaManagedAgentsCredential object`
866857
867858 A credential stored in a vault. Sensitive fields are never returned in responses.
868859
from line 865
874865
875866 A timestamp in RFC 3339 format
876867
868 format: date-time
869
877870 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
878871
879872 Authentication details for a credential.
880873
881 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
874 - `BetaManagedAgentsMCPOAuthAuthResponse object`
882875
883876 OAuth credential details for an MCP server.
884877
from line 881
888881
889882 - `type: "mcp_oauth"`
890883
891 - `"mcp_oauth"`
892
893884 - `expires_at: optional string or null`
894885
895886 A timestamp in RFC 3339 format
896887
888 format: date-time
889
897890 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
898891
899892 OAuth refresh token configuration returned in credential responses.
from line 903
910903
911904 Token endpoint requires no client authentication.
912905
913 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
906 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
914907
915908 Token endpoint requires no client authentication.
916909
917910 - `type: "none"`
918911
919 - `"none"`
920
921 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
912 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
922913
923914 Token endpoint uses HTTP Basic authentication with client credentials.
924915
925916 - `type: "client_secret_basic"`
926917
927 - `"client_secret_basic"`
928
929 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
918 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
930919
931920 Token endpoint uses POST body authentication with client credentials.
932921
933922 - `type: "client_secret_post"`
934923
935 - `"client_secret_post"`
936
937924 - `resource: optional string or null`
938925
939926 OAuth resource indicator.
from line 929
942929
943930 OAuth scope for the refresh request.
944931
945 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
932 - `BetaManagedAgentsStaticBearerAuthResponse object`
946933
947934 Static bearer token credential details for an MCP server.
948935
from line 939
952939
953940 - `type: "static_bearer"`
954941
955 - `"static_bearer"`
956
957 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
942 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
958943
959944 Environment variable credential details. The secret value is never returned.
960945
from line 959
974959
975960 Outbound hosts the secret value is substituted on.
976961
977 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
962 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
978963
979964 The secret is substituted on any host the session's Environment network policy permits egress to.
980965
981966 - `type: "unrestricted"`
982967
983 - `"unrestricted"`
984
985 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
968 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
986969
987970 The secret is substituted only on requests to the listed hosts.
988971
from line 975
992975
993976 - `type: "limited"`
994977
995 - `"limited"`
996
997978 - `secret_name: string`
998979
999980 Name of the environment variable.
1000981
1001982 - `type: "environment_variable"`
1002983
1003 - `"environment_variable"`
1004
1005984 - `created_at: string`
1006985
1007986 A timestamp in RFC 3339 format
1008987
988 format: date-time
989
1009990 - `metadata: map[string]`
1010991
1011992 Arbitrary key-value metadata attached to the credential.
1012993
1013994 - `type: "vault_credential"`
1014995
1015 - `"vault_credential"`
1016
1017996 - `updated_at: string`
1018997
1019998 A timestamp in RFC 3339 format
1020999
1000 format: date-time
1001
10211002 - `vault_id: string`
10221003
10231004 Identifier of the vault this credential belongs to.
from line 1009
10281009
10291010### Example
10301011
1031```http
1012```bash
10321013curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials/$CREDENTIAL_ID \
10331014 -H 'anthropic-version: 2023-06-01' \
10341015 -H 'anthropic-beta: managed-agents-2026-04-01' \
10351016 -H "X-Api-Key: $ANTHROPIC_API_KEY"
10361017```
10371018
1038#### Response
1019#### Response (200)
10391020
10401021```json
10411022{
from line 1039
10581039
10591040## Update Credential
10601041
1061**post** `/v1/vaults/{vault_id}/credentials/{credential_id}`
1042**POST** `/v1/vaults/{vault_id}/credentials/{credential_id}`
10621043
10631044Update Credential
10641045
1065### Path Parameters
1046### Path parameters
10661047
10671048- `vault_id: string`
10681049
10691050- `credential_id: string`
10701051
1071### Header Parameters
1052### Headers
10721053
10731054- `"anthropic-beta": optional array of AnthropicBeta`
10741055
from line 1127
11461127
11471128 - `"mid-conversation-tool-changes-2026-07-01"`
11481129
1149### Body Parameters
1130### Body parameters
11501131
11511132- `auth: optional BetaManagedAgentsMCPOAuthUpdateParams or BetaManagedAgentsStaticBearerUpdateParams or BetaManagedAgentsEnvironmentVariableUpdateParams`
11521133
11531134 Updated authentication details for a credential.
11541135
1155 - `BetaManagedAgentsMCPOAuthUpdateParams object { type, access_token, expires_at, refresh }`
1136 - `BetaManagedAgentsMCPOAuthUpdateParams object`
11561137
11571138 Parameters for updating an MCP OAuth credential. The `mcp_server_url` is immutable.
11581139
11591140 - `type: "mcp_oauth"`
11601141
1161 - `"mcp_oauth"`
1162
11631142 - `access_token: optional string or null`
11641143
11651144 Updated OAuth access token.
11661145
1146 minLength: 1, maxLength: 8192
1147
11671148 - `expires_at: optional string or null`
11681149
11691150 A timestamp in RFC 3339 format
11701151
1152 format: date-time
1153
11711154 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshUpdateParams or null`
11721155
11731156 Parameters for updating OAuth refresh token configuration.
from line 1159
11761159
11771160 Updated OAuth refresh token.
11781161
1162 minLength: 1, maxLength: 4096
1163
11791164 - `scope: optional string or null`
11801165
11811166 Updated OAuth scope for the refresh request.
11821167
1168 maxLength: 8192
1169
11831170 - `token_endpoint_auth: optional BetaManagedAgentsTokenEndpointAuthBasicUpdateParam or BetaManagedAgentsTokenEndpointAuthPostUpdateParam`
11841171
11851172 Updated HTTP Basic authentication parameters for the token endpoint.
11861173
1187 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object { type, client_secret }`
1174 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object`
11881175
11891176 Updated HTTP Basic authentication parameters for the token endpoint.
11901177
11911178 - `type: "client_secret_basic"`
11921179
1193 - `"client_secret_basic"`
1194
11951180 - `client_secret: optional string or null`
11961181
11971182 Updated OAuth client secret.
11981183
1199 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object { type, client_secret }`
1184 minLength: 1, maxLength: 512
1185
1186 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object`
12001187
12011188 Updated POST body authentication parameters for the token endpoint.
12021189
12031190 - `type: "client_secret_post"`
12041191
1205 - `"client_secret_post"`
1206
12071192 - `client_secret: optional string or null`
12081193
12091194 Updated OAuth client secret.
12101195
1211 - `BetaManagedAgentsStaticBearerUpdateParams object { type, token }`
1196 minLength: 1, maxLength: 512
1197
1198 - `BetaManagedAgentsStaticBearerUpdateParams object`
12121199
12131200 Parameters for updating a static bearer token credential. The `mcp_server_url` is immutable.
12141201
12151202 - `type: "static_bearer"`
12161203
1217 - `"static_bearer"`
1218
12191204 - `token: optional string or null`
12201205
12211206 Updated static bearer token value.
12221207
1223 - `BetaManagedAgentsEnvironmentVariableUpdateParams object { type, injection_location, networking, secret_value }`
1208 minLength: 1, maxLength: 8192
1209
1210 - `BetaManagedAgentsEnvironmentVariableUpdateParams object`
12241211
12251212 Parameters for updating an environment variable credential. `secret_name` is immutable.
12261213
12271214 - `type: "environment_variable"`
12281215
1229 - `"environment_variable"`
1230
12311216 - `injection_location: optional BetaManagedAgentsInjectionLocationUpdateParams`
12321217
12331218 Updated injection location.
from line 1229
12441229
12451230 Updated networking scope. Full replacement.
12461231
1247 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object { type }`
1232 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object`
12481233
12491234 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
12501235
12511236 - `type: "unrestricted"`
12521237
1253 - `"unrestricted"`
1254
1255 - `BetaManagedAgentsLimitedCredentialNetworkingParams object { allowed_hosts, type }`
1238 - `BetaManagedAgentsLimitedCredentialNetworkingParams object`
12561239
12571240 Substitute the secret only on requests to the listed hosts.
12581241
from line 1245
12621245
12631246 - `type: "limited"`
12641247
1265 - `"limited"`
1266
12671248 - `secret_value: optional string or null`
12681249
12691250 Updated secret value.
12701251
1252 minLength: 1, maxLength: 4096
1253
12711254- `display_name: optional string or null`
12721255
12731256 Updated human-readable name for the credential. 1-255 characters.
12741257
1258 minLength: 1, maxLength: 255
1259
12751260- `metadata: optional map[string] or null`
12761261
12771262 Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omitted keys are preserved.
12781263
12791264### Returns
12801265
1281- `BetaManagedAgentsCredential object { id, archived_at, auth, 6 more }`
1266- `BetaManagedAgentsCredential object`
12821267
12831268 A credential stored in a vault. Sensitive fields are never returned in responses.
12841269
from line 1275
12901275
12911276 A timestamp in RFC 3339 format
12921277
1278 format: date-time
1279
12931280 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
12941281
12951282 Authentication details for a credential.
12961283
1297 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
1284 - `BetaManagedAgentsMCPOAuthAuthResponse object`
12981285
12991286 OAuth credential details for an MCP server.
13001287
from line 1291
13041291
13051292 - `type: "mcp_oauth"`
13061293
1307 - `"mcp_oauth"`
1308
13091294 - `expires_at: optional string or null`
13101295
13111296 A timestamp in RFC 3339 format
13121297
1298 format: date-time
1299
13131300 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
13141301
13151302 OAuth refresh token configuration returned in credential responses.
from line 1313
13261313
13271314 Token endpoint requires no client authentication.
13281315
1329 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
1316 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
13301317
13311318 Token endpoint requires no client authentication.
13321319
13331320 - `type: "none"`
13341321
1335 - `"none"`
1336
1337 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
1322 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
13381323
13391324 Token endpoint uses HTTP Basic authentication with client credentials.
13401325
13411326 - `type: "client_secret_basic"`
13421327
1343 - `"client_secret_basic"`
1344
1345 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
1328 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
13461329
13471330 Token endpoint uses POST body authentication with client credentials.
13481331
13491332 - `type: "client_secret_post"`
13501333
1351 - `"client_secret_post"`
1352
13531334 - `resource: optional string or null`
13541335
13551336 OAuth resource indicator.
from line 1339
13581339
13591340 OAuth scope for the refresh request.
13601341
1361 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
1342 - `BetaManagedAgentsStaticBearerAuthResponse object`
13621343
13631344 Static bearer token credential details for an MCP server.
13641345
from line 1349
13681349
13691350 - `type: "static_bearer"`
13701351
1371 - `"static_bearer"`
1372
1373 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
1352 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
13741353
13751354 Environment variable credential details. The secret value is never returned.
13761355
from line 1369
13901369
13911370 Outbound hosts the secret value is substituted on.
13921371
1393 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
1372 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
13941373
13951374 The secret is substituted on any host the session's Environment network policy permits egress to.
13961375
13971376 - `type: "unrestricted"`
13981377
1399 - `"unrestricted"`
1400
1401 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
1378 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
14021379
14031380 The secret is substituted only on requests to the listed hosts.
14041381
from line 1385
14081385
14091386 - `type: "limited"`
14101387
1411 - `"limited"`
1412
14131388 - `secret_name: string`
14141389
14151390 Name of the environment variable.
14161391
14171392 - `type: "environment_variable"`
14181393
1419 - `"environment_variable"`
1420
14211394 - `created_at: string`
14221395
14231396 A timestamp in RFC 3339 format
14241397
1398 format: date-time
1399
14251400 - `metadata: map[string]`
14261401
14271402 Arbitrary key-value metadata attached to the credential.
14281403
14291404 - `type: "vault_credential"`
14301405
1431 - `"vault_credential"`
1432
14331406 - `updated_at: string`
14341407
14351408 A timestamp in RFC 3339 format
14361409
1410 format: date-time
1411
14371412 - `vault_id: string`
14381413
14391414 Identifier of the vault this credential belongs to.
from line 1419
14441419
14451420### Example
14461421
1447```http
1422```bash
14481423curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials/$CREDENTIAL_ID \
14491424 -H 'Content-Type: application/json' \
14501425 -H 'anthropic-version: 2023-06-01' \
from line 1433
14581433 }'
14591434```
14601435
1461#### Response
1436#### Response (200)
14621437
14631438```json
14641439{
from line 1456
14811456
14821457## Delete Credential
14831458
1484**delete** `/v1/vaults/{vault_id}/credentials/{credential_id}`
1459**DELETE** `/v1/vaults/{vault_id}/credentials/{credential_id}`
14851460
14861461Delete Credential
14871462
1488### Path Parameters
1463### Path parameters
14891464
14901465- `vault_id: string`
14911466
14921467- `credential_id: string`
14931468
1494### Header Parameters
1469### Headers
14951470
14961471- `"anthropic-beta": optional array of AnthropicBeta`
14971472
from line 1546
15711546
15721547### Returns
15731548
1574- `BetaManagedAgentsDeletedCredential object { id, type }`
1549- `BetaManagedAgentsDeletedCredential object`
15751550
15761551 Confirmation of a deleted credential.
15771552
from line 1556
15811556
15821557 - `type: "vault_credential_deleted"`
15831558
1584 - `"vault_credential_deleted"`
1585
15861559### Example
15871560
1588```http
1561```bash
15891562curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials/$CREDENTIAL_ID \
15901563 -X DELETE \
15911564 -H 'anthropic-version: 2023-06-01' \
from line 1566
15931566 -H "X-Api-Key: $ANTHROPIC_API_KEY"
15941567```
15951568
1596#### Response
1569#### Response (200)
15971570
15981571```json
15991572{
from line 1577
16041577
16051578## Archive Credential
16061579
1607**post** `/v1/vaults/{vault_id}/credentials/{credential_id}/archive`
1580**POST** `/v1/vaults/{vault_id}/credentials/{credential_id}/archive`
16081581
16091582Archive Credential
16101583
1611### Path Parameters
1584### Path parameters
16121585
16131586- `vault_id: string`
16141587
16151588- `credential_id: string`
16161589
1617### Header Parameters
1590### Headers
16181591
16191592- `"anthropic-beta": optional array of AnthropicBeta`
16201593
from line 1667
16941667
16951668### Returns
16961669
1697- `BetaManagedAgentsCredential object { id, archived_at, auth, 6 more }`
1670- `BetaManagedAgentsCredential object`
16981671
16991672 A credential stored in a vault. Sensitive fields are never returned in responses.
17001673
from line 1679
17061679
17071680 A timestamp in RFC 3339 format
17081681
1682 format: date-time
1683
17091684 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
17101685
17111686 Authentication details for a credential.
17121687
1713 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
1688 - `BetaManagedAgentsMCPOAuthAuthResponse object`
17141689
17151690 OAuth credential details for an MCP server.
17161691
from line 1695
17201695
17211696 - `type: "mcp_oauth"`
17221697
1723 - `"mcp_oauth"`
1724
17251698 - `expires_at: optional string or null`
17261699
17271700 A timestamp in RFC 3339 format
17281701
1702 format: date-time
1703
17291704 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
17301705
17311706 OAuth refresh token configuration returned in credential responses.
from line 1717
17421717
17431718 Token endpoint requires no client authentication.
17441719
1745 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
1720 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
17461721
17471722 Token endpoint requires no client authentication.
17481723
17491724 - `type: "none"`
17501725
1751 - `"none"`
1752
1753 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
1726 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
17541727
17551728 Token endpoint uses HTTP Basic authentication with client credentials.
17561729
17571730 - `type: "client_secret_basic"`
17581731
1759 - `"client_secret_basic"`
1760
1761 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
1732 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
17621733
17631734 Token endpoint uses POST body authentication with client credentials.
17641735
17651736 - `type: "client_secret_post"`
17661737
1767 - `"client_secret_post"`
1768
17691738 - `resource: optional string or null`
17701739
17711740 OAuth resource indicator.
from line 1743
17741743
17751744 OAuth scope for the refresh request.
17761745
1777 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
1746 - `BetaManagedAgentsStaticBearerAuthResponse object`
17781747
17791748 Static bearer token credential details for an MCP server.
17801749
from line 1753
17841753
17851754 - `type: "static_bearer"`
17861755
1787 - `"static_bearer"`
1788
1789 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
1756 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
17901757
17911758 Environment variable credential details. The secret value is never returned.
17921759
from line 1773
18061773
18071774 Outbound hosts the secret value is substituted on.
18081775
1809 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
1776 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
18101777
18111778 The secret is substituted on any host the session's Environment network policy permits egress to.
18121779
18131780 - `type: "unrestricted"`
18141781
1815 - `"unrestricted"`
1816
1817 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
1782 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
18181783
18191784 The secret is substituted only on requests to the listed hosts.
18201785
from line 1789
18241789
18251790 - `type: "limited"`
18261791
1827 - `"limited"`
1828
18291792 - `secret_name: string`
18301793
18311794 Name of the environment variable.
18321795
18331796 - `type: "environment_variable"`
18341797
1835 - `"environment_variable"`
1836
18371798 - `created_at: string`
18381799
18391800 A timestamp in RFC 3339 format
18401801
1802 format: date-time
1803
18411804 - `metadata: map[string]`
18421805
18431806 Arbitrary key-value metadata attached to the credential.
18441807
18451808 - `type: "vault_credential"`
18461809
1847 - `"vault_credential"`
1848
18491810 - `updated_at: string`
18501811
18511812 A timestamp in RFC 3339 format
18521813
1814 format: date-time
1815
18531816 - `vault_id: string`
18541817
18551818 Identifier of the vault this credential belongs to.
from line 1823
18601823
18611824### Example
18621825
1863```http
1826```bash
18641827curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials/$CREDENTIAL_ID/archive \
18651828 -X POST \
18661829 -H 'anthropic-version: 2023-06-01' \
from line 1831
18681831 -H "X-Api-Key: $ANTHROPIC_API_KEY"
18691832```
18701833
1871#### Response
1834#### Response (200)
18721835
18731836```json
18741837{
from line 1854
18911854
18921855## Validate Credential
18931856
1894**post** `/v1/vaults/{vault_id}/credentials/{credential_id}/mcp_oauth_validate`
1857**POST** `/v1/vaults/{vault_id}/credentials/{credential_id}/mcp_oauth_validate`
18951858
18961859Validate Credential
18971860
1898### Path Parameters
1861### Path parameters
18991862
19001863- `vault_id: string`
19011864
19021865- `credential_id: string`
19031866
1904### Header Parameters
1867### Headers
19051868
19061869- `"anthropic-beta": optional array of AnthropicBeta`
19071870
from line 1944
19811944
19821945### Returns
19831946
1984- `BetaManagedAgentsCredentialValidation object { credential_id, has_refresh_token, mcp_probe, 5 more }`
1947- `BetaManagedAgentsCredentialValidation object`
19851948
19861949 Result of live-probing a credential against its configured MCP server.
19871950
from line 1980
20171980
20181981 HTTP status code.
20191982
1983 format: int32
1984
20201985 - `method: string`
20211986
20221987 The MCP method that failed (for example `initialize` or `tools/list`).
from line 2018
20532018
20542019 - `type: "vault_credential_validation"`
20552020
2056 - `"vault_credential_validation"`
2057
20582021 - `validated_at: string`
20592022
20602023 A timestamp in RFC 3339 format
20612024
2025 format: date-time
2026
20622027 - `vault_id: string`
20632028
20642029 Identifier of the vault containing the credential.
20652030
20662031### Example
20672032
2068```http
2033```bash
20692034curl https://api.anthropic.com/v1/vaults/$VAULT_ID/credentials/$CREDENTIAL_ID/mcp_oauth_validate \
20702035 -X POST \
20712036 -H 'anthropic-version: 2023-06-01' \
from line 2038
20732038 -H "X-Api-Key: $ANTHROPIC_API_KEY"
20742039```
20752040
2076#### Response
2041#### Response (200)
20772042
20782043```json
20792044{
from line 2069
21042069}
21052070```
21062071
2107## Domain Types
2072## Domain types
21082073
21092074### Beta Managed Agents Credential
21102075
2111- `BetaManagedAgentsCredential object { id, archived_at, auth, 6 more }`
2076- `BetaManagedAgentsCredential object`
21122077
21132078 A credential stored in a vault. Sensitive fields are never returned in responses.
21142079
from line 2085
21202085
21212086 A timestamp in RFC 3339 format
21222087
2088 format: date-time
2089
21232090 - `auth: BetaManagedAgentsMCPOAuthAuthResponse or BetaManagedAgentsStaticBearerAuthResponse or BetaManagedAgentsEnvironmentVariableAuthResponse`
21242091
21252092 Authentication details for a credential.
21262093
2127 - `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
2094 - `BetaManagedAgentsMCPOAuthAuthResponse object`
21282095
21292096 OAuth credential details for an MCP server.
21302097
from line 2101
21342101
21352102 - `type: "mcp_oauth"`
21362103
2137 - `"mcp_oauth"`
2138
21392104 - `expires_at: optional string or null`
21402105
21412106 A timestamp in RFC 3339 format
21422107
2108 format: date-time
2109
21432110 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
21442111
21452112 OAuth refresh token configuration returned in credential responses.
from line 2123
21562123
21572124 Token endpoint requires no client authentication.
21582125
2159 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
2126 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
21602127
21612128 Token endpoint requires no client authentication.
21622129
21632130 - `type: "none"`
21642131
2165 - `"none"`
2166
2167 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
2132 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
21682133
21692134 Token endpoint uses HTTP Basic authentication with client credentials.
21702135
21712136 - `type: "client_secret_basic"`
21722137
2173 - `"client_secret_basic"`
2174
2175 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
2138 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
21762139
21772140 Token endpoint uses POST body authentication with client credentials.
21782141
21792142 - `type: "client_secret_post"`
21802143
2181 - `"client_secret_post"`
2182
21832144 - `resource: optional string or null`
21842145
21852146 OAuth resource indicator.
from line 2149
21882149
21892150 OAuth scope for the refresh request.
21902151
2191 - `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
2152 - `BetaManagedAgentsStaticBearerAuthResponse object`
21922153
21932154 Static bearer token credential details for an MCP server.
21942155
from line 2159
21982159
21992160 - `type: "static_bearer"`
22002161
2201 - `"static_bearer"`
2202
2203 - `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
2162 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
22042163
22052164 Environment variable credential details. The secret value is never returned.
22062165
from line 2179
22202179
22212180 Outbound hosts the secret value is substituted on.
22222181
2223 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
2182 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
22242183
22252184 The secret is substituted on any host the session's Environment network policy permits egress to.
22262185
22272186 - `type: "unrestricted"`
22282187
2229 - `"unrestricted"`
2230
2231 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
2188 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
22322189
22332190 The secret is substituted only on requests to the listed hosts.
22342191
from line 2195
22382195
22392196 - `type: "limited"`
22402197
2241 - `"limited"`
2242
22432198 - `secret_name: string`
22442199
22452200 Name of the environment variable.
22462201
22472202 - `type: "environment_variable"`
22482203
2249 - `"environment_variable"`
2250
22512204 - `created_at: string`
22522205
22532206 A timestamp in RFC 3339 format
22542207
2208 format: date-time
2209
22552210 - `metadata: map[string]`
22562211
22572212 Arbitrary key-value metadata attached to the credential.
22582213
22592214 - `type: "vault_credential"`
22602215
2261 - `"vault_credential"`
2262
22632216 - `updated_at: string`
22642217
22652218 A timestamp in RFC 3339 format
22662219
2220 format: date-time
2221
22672222 - `vault_id: string`
22682223
22692224 Identifier of the vault this credential belongs to.
from line 2233
22782233
22792234 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
22802235
2281 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object { type }`
2236 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object`
22822237
22832238 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
22842239
22852240 - `type: "unrestricted"`
22862241
2287 - `"unrestricted"`
2288
2289 - `BetaManagedAgentsLimitedCredentialNetworkingParams object { allowed_hosts, type }`
2242 - `BetaManagedAgentsLimitedCredentialNetworkingParams object`
22902243
22912244 Substitute the secret only on requests to the listed hosts.
22922245
from line 2249
22962249
22972250 - `type: "limited"`
22982251
2299 - `"limited"`
2300
23012252### Beta Managed Agents Credential Validation
23022253
2303- `BetaManagedAgentsCredentialValidation object { credential_id, has_refresh_token, mcp_probe, 5 more }`
2254- `BetaManagedAgentsCredentialValidation object`
23042255
23052256 Result of live-probing a credential against its configured MCP server.
23062257
from line 2287
23362287
23372288 HTTP status code.
23382289
2290 format: int32
2291
23392292 - `method: string`
23402293
23412294 The MCP method that failed (for example `initialize` or `tools/list`).
from line 2325
23722325
23732326 - `type: "vault_credential_validation"`
23742327
2375 - `"vault_credential_validation"`
2376
23772328 - `validated_at: string`
23782329
23792330 A timestamp in RFC 3339 format
23802331
2332 format: date-time
2333
23812334 - `vault_id: string`
23822335
23832336 Identifier of the vault containing the credential.
from line 2349
23962349
23972350### Beta Managed Agents Deleted Credential
23982351
2399- `BetaManagedAgentsDeletedCredential object { id, type }`
2352- `BetaManagedAgentsDeletedCredential object`
24002353
24012354 Confirmation of a deleted credential.
24022355
from line 2359
24062359
24072360 - `type: "vault_credential_deleted"`
24082361
2409 - `"vault_credential_deleted"`
2410
24112362### Beta Managed Agents Environment Variable Auth Response
24122363
2413- `BetaManagedAgentsEnvironmentVariableAuthResponse object { injection_location, networking, secret_name, type }`
2364- `BetaManagedAgentsEnvironmentVariableAuthResponse object`
24142365
24152366 Environment variable credential details. The secret value is never returned.
24162367
from line 2381
24302381
24312382 Outbound hosts the secret value is substituted on.
24322383
2433 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
2384 - `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
24342385
24352386 The secret is substituted on any host the session's Environment network policy permits egress to.
24362387
24372388 - `type: "unrestricted"`
24382389
2439 - `"unrestricted"`
2440
2441 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
2390 - `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
24422391
24432392 The secret is substituted only on requests to the listed hosts.
24442393
from line 2397
24482397
24492398 - `type: "limited"`
24502399
2451 - `"limited"`
2452
24532400 - `secret_name: string`
24542401
24552402 Name of the environment variable.
24562403
24572404 - `type: "environment_variable"`
24582405
2459 - `"environment_variable"`
2460
24612406### Beta Managed Agents Environment Variable Create Params
24622407
2463- `BetaManagedAgentsEnvironmentVariableCreateParams object { networking, secret_name, secret_value, 2 more }`
2408- `BetaManagedAgentsEnvironmentVariableCreateParams object`
24642409
24652410 Parameters for creating an environment variable credential.
24662411
from line 2413
24682413
24692414 Outbound hosts the secret value is substituted on.
24702415
2471 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object { type }`
2416 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object`
24722417
24732418 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
24742419
24752420 - `type: "unrestricted"`
24762421
2477 - `"unrestricted"`
2478
2479 - `BetaManagedAgentsLimitedCredentialNetworkingParams object { allowed_hosts, type }`
2422 - `BetaManagedAgentsLimitedCredentialNetworkingParams object`
24802423
24812424 Substitute the secret only on requests to the listed hosts.
24822425
from line 2429
24862429
24872430 - `type: "limited"`
24882431
2489 - `"limited"`
2490
24912432 - `secret_name: string`
24922433
24932434 Name of the environment variable. Immutable after create.
24942435
2436 minLength: 1, maxLength: 255
2437
24952438 - `secret_value: string`
24962439
24972440 Secret value. Write-only; never returned in responses.
24982441
2442 minLength: 1, maxLength: 4096
2443
24992444 - `type: "environment_variable"`
25002445
2501 - `"environment_variable"`
2502
25032446 - `injection_location: optional BetaManagedAgentsInjectionLocationParams`
25042447
25052448 Where in the outbound request the secret value may be substituted.
from line 2457
25142457
25152458### Beta Managed Agents Environment Variable Update Params
25162459
2517- `BetaManagedAgentsEnvironmentVariableUpdateParams object { type, injection_location, networking, secret_value }`
2460- `BetaManagedAgentsEnvironmentVariableUpdateParams object`
25182461
25192462 Parameters for updating an environment variable credential. `secret_name` is immutable.
25202463
25212464 - `type: "environment_variable"`
25222465
2523 - `"environment_variable"`
2524
25252466 - `injection_location: optional BetaManagedAgentsInjectionLocationUpdateParams`
25262467
25272468 Updated injection location.
from line 2479
25382479
25392480 Updated networking scope. Full replacement.
25402481
2541 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object { type }`
2482 - `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object`
25422483
25432484 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
25442485
25452486 - `type: "unrestricted"`
25462487
2547 - `"unrestricted"`
2548
2549 - `BetaManagedAgentsLimitedCredentialNetworkingParams object { allowed_hosts, type }`
2488 - `BetaManagedAgentsLimitedCredentialNetworkingParams object`
25502489
25512490 Substitute the secret only on requests to the listed hosts.
25522491
from line 2495
25562495
25572496 - `type: "limited"`
25582497
2559 - `"limited"`
2560
25612498 - `secret_value: optional string or null`
25622499
25632500 Updated secret value.
25642501
2502 minLength: 1, maxLength: 4096
2503
25652504### Beta Managed Agents Injection Location Params
25662505
2567- `BetaManagedAgentsInjectionLocationParams object { body, header }`
2506- `BetaManagedAgentsInjectionLocationParams object`
25682507
25692508 Where in the outbound request the secret value may be substituted.
25702509
from line 2517
25782517
25792518### Beta Managed Agents Injection Location Response
25802519
2581- `BetaManagedAgentsInjectionLocationResponse object { body, header }`
2520- `BetaManagedAgentsInjectionLocationResponse object`
25822521
25832522 Where in the outbound request the secret value is substituted.
25842523
from line 2531
25922531
25932532### Beta Managed Agents Injection Location Update Params
25942533
2595- `BetaManagedAgentsInjectionLocationUpdateParams object { body, header }`
2534- `BetaManagedAgentsInjectionLocationUpdateParams object`
25962535
25972536 Updated injection location.
25982537
from line 2545
26062545
26072546### Beta Managed Agents Limited Credential Networking Params
26082547
2609- `BetaManagedAgentsLimitedCredentialNetworkingParams object { allowed_hosts, type }`
2548- `BetaManagedAgentsLimitedCredentialNetworkingParams object`
26102549
26112550 Substitute the secret only on requests to the listed hosts.
26122551
from line 2555
26162555
26172556 - `type: "limited"`
26182557
2619 - `"limited"`
2620
26212558### Beta Managed Agents Limited Credential Networking Response
26222559
2623- `BetaManagedAgentsLimitedCredentialNetworkingResponse object { allowed_hosts, type }`
2560- `BetaManagedAgentsLimitedCredentialNetworkingResponse object`
26242561
26252562 The secret is substituted only on requests to the listed hosts.
26262563
from line 2567
26302567
26312568 - `type: "limited"`
26322569
2633 - `"limited"`
2634
26352570### Beta Managed Agents MCP OAuth Auth Response
26362571
2637- `BetaManagedAgentsMCPOAuthAuthResponse object { mcp_server_url, type, expires_at, refresh }`
2572- `BetaManagedAgentsMCPOAuthAuthResponse object`
26382573
26392574 OAuth credential details for an MCP server.
26402575
from line 2579
26442579
26452580 - `type: "mcp_oauth"`
26462581
2647 - `"mcp_oauth"`
2648
26492582 - `expires_at: optional string or null`
26502583
26512584 A timestamp in RFC 3339 format
26522585
2586 format: date-time
2587
26532588 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshResponse or null`
26542589
26552590 OAuth refresh token configuration returned in credential responses.
from line 2601
26662601
26672602 Token endpoint requires no client authentication.
26682603
2669 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
2604 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
26702605
26712606 Token endpoint requires no client authentication.
26722607
26732608 - `type: "none"`
26742609
2675 - `"none"`
2676
2677 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
2610 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
26782611
26792612 Token endpoint uses HTTP Basic authentication with client credentials.
26802613
26812614 - `type: "client_secret_basic"`
26822615
2683 - `"client_secret_basic"`
2684
2685 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
2616 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
26862617
26872618 Token endpoint uses POST body authentication with client credentials.
26882619
26892620 - `type: "client_secret_post"`
26902621
2691 - `"client_secret_post"`
2692
26932622 - `resource: optional string or null`
26942623
26952624 OAuth resource indicator.
from line 2629
27002629
27012630### Beta Managed Agents MCP OAuth Create Params
27022631
2703- `BetaManagedAgentsMCPOAuthCreateParams object { access_token, mcp_server_url, type, 2 more }`
2632- `BetaManagedAgentsMCPOAuthCreateParams object`
27042633
27052634 Parameters for creating an MCP OAuth credential.
27062635
from line 2637
27082637
27092638 OAuth access token.
27102639
2640 minLength: 1, maxLength: 8192
2641
27112642 - `mcp_server_url: string`
27122643
27132644 URL of the MCP server this credential authenticates against.
27142645
2646 minLength: 1, maxLength: 2047
2647
27152648 - `type: "mcp_oauth"`
27162649
2717 - `"mcp_oauth"`
2718
27192650 - `expires_at: optional string or null`
27202651
27212652 A timestamp in RFC 3339 format
27222653
2654 format: date-time
2655
27232656 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshParams or null`
27242657
27252658 OAuth refresh token parameters for creating a credential with refresh support.
from line 2661
27282661
27292662 OAuth client ID.
27302663
2664 minLength: 1, maxLength: 1024
2665
27312666 - `refresh_token: string`
27322667
27332668 OAuth refresh token.
27342669
2670 minLength: 1, maxLength: 4096
2671
27352672 - `token_endpoint: string`
27362673
27372674 Token endpoint URL used to refresh the access token.
27382675
2676 minLength: 1, maxLength: 2047
2677
27392678 - `token_endpoint_auth: BetaManagedAgentsTokenEndpointAuthNoneParam or BetaManagedAgentsTokenEndpointAuthBasicParam or BetaManagedAgentsTokenEndpointAuthPostParam`
27402679
27412680 Token endpoint requires no client authentication.
27422681
2743 - `BetaManagedAgentsTokenEndpointAuthNoneParam object { type }`
2682 - `BetaManagedAgentsTokenEndpointAuthNoneParam object`
27442683
27452684 Token endpoint requires no client authentication.
27462685
27472686 - `type: "none"`
27482687
2749 - `"none"`
2750
2751 - `BetaManagedAgentsTokenEndpointAuthBasicParam object { client_secret, type }`
2688 - `BetaManagedAgentsTokenEndpointAuthBasicParam object`
27522689
27532690 Token endpoint uses HTTP Basic authentication with client credentials.
27542691
from line 2693
27562693
27572694 OAuth client secret.
27582695
2696 minLength: 1, maxLength: 512
2697
27592698 - `type: "client_secret_basic"`
27602699
2761 - `"client_secret_basic"`
2762
2763 - `BetaManagedAgentsTokenEndpointAuthPostParam object { client_secret, type }`
2700 - `BetaManagedAgentsTokenEndpointAuthPostParam object`
27642701
27652702 Token endpoint uses POST body authentication with client credentials.
27662703
from line 2705
27682705
27692706 OAuth client secret.
27702707
2708 minLength: 1, maxLength: 512
2709
27712710 - `type: "client_secret_post"`
27722711
2773 - `"client_secret_post"`
2774
27752712 - `resource: optional string or null`
27762713
27772714 OAuth resource indicator.
27782715
2716 minLength: 1, maxLength: 2047
2717
27792718 - `scope: optional string or null`
27802719
27812720 OAuth scope for the refresh request.
27822721
2722 minLength: 1, maxLength: 8192
2723
27832724### Beta Managed Agents MCP OAuth Refresh Params
27842725
2785- `BetaManagedAgentsMCPOAuthRefreshParams object { client_id, refresh_token, token_endpoint, 3 more }`
2726- `BetaManagedAgentsMCPOAuthRefreshParams object`
27862727
27872728 OAuth refresh token parameters for creating a credential with refresh support.
27882729
from line 2731
27902731
27912732 OAuth client ID.
27922733
2734 minLength: 1, maxLength: 1024
2735
27932736 - `refresh_token: string`
27942737
27952738 OAuth refresh token.
27962739
2740 minLength: 1, maxLength: 4096
2741
27972742 - `token_endpoint: string`
27982743
27992744 Token endpoint URL used to refresh the access token.
28002745
2746 minLength: 1, maxLength: 2047
2747
28012748 - `token_endpoint_auth: BetaManagedAgentsTokenEndpointAuthNoneParam or BetaManagedAgentsTokenEndpointAuthBasicParam or BetaManagedAgentsTokenEndpointAuthPostParam`
28022749
28032750 Token endpoint requires no client authentication.
28042751
2805 - `BetaManagedAgentsTokenEndpointAuthNoneParam object { type }`
2752 - `BetaManagedAgentsTokenEndpointAuthNoneParam object`
28062753
28072754 Token endpoint requires no client authentication.
28082755
28092756 - `type: "none"`
28102757
2811 - `"none"`
2812
2813 - `BetaManagedAgentsTokenEndpointAuthBasicParam object { client_secret, type }`
2758 - `BetaManagedAgentsTokenEndpointAuthBasicParam object`
28142759
28152760 Token endpoint uses HTTP Basic authentication with client credentials.
28162761
from line 2763
28182763
28192764 OAuth client secret.
28202765
2766 minLength: 1, maxLength: 512
2767
28212768 - `type: "client_secret_basic"`
28222769
2823 - `"client_secret_basic"`
2824
2825 - `BetaManagedAgentsTokenEndpointAuthPostParam object { client_secret, type }`
2770 - `BetaManagedAgentsTokenEndpointAuthPostParam object`
28262771
28272772 Token endpoint uses POST body authentication with client credentials.
28282773
from line 2775
28302775
28312776 OAuth client secret.
28322777
2778 minLength: 1, maxLength: 512
2779
28332780 - `type: "client_secret_post"`
28342781
2835 - `"client_secret_post"`
2836
28372782 - `resource: optional string or null`
28382783
28392784 OAuth resource indicator.
28402785
2786 minLength: 1, maxLength: 2047
2787
28412788 - `scope: optional string or null`
28422789
28432790 OAuth scope for the refresh request.
28442791
2792 minLength: 1, maxLength: 8192
2793
28452794### Beta Managed Agents MCP OAuth Refresh Response
28462795
2847- `BetaManagedAgentsMCPOAuthRefreshResponse object { client_id, token_endpoint, token_endpoint_auth, 2 more }`
2796- `BetaManagedAgentsMCPOAuthRefreshResponse object`
28482797
28492798 OAuth refresh token configuration returned in credential responses.
28502799
from line 2809
28602809
28612810 Token endpoint requires no client authentication.
28622811
2863 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
2812 - `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
28642813
28652814 Token endpoint requires no client authentication.
28662815
28672816 - `type: "none"`
28682817
2869 - `"none"`
2870
2871 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
2818 - `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
28722819
28732820 Token endpoint uses HTTP Basic authentication with client credentials.
28742821
28752822 - `type: "client_secret_basic"`
28762823
2877 - `"client_secret_basic"`
2878
2879 - `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
2824 - `BetaManagedAgentsTokenEndpointAuthPostResponse object`
28802825
28812826 Token endpoint uses POST body authentication with client credentials.
28822827
28832828 - `type: "client_secret_post"`
28842829
2885 - `"client_secret_post"`
2886
28872830 - `resource: optional string or null`
28882831
28892832 OAuth resource indicator.
from line 2837
28942837
28952838### Beta Managed Agents MCP OAuth Refresh Update Params
28962839
2897- `BetaManagedAgentsMCPOAuthRefreshUpdateParams object { refresh_token, scope, token_endpoint_auth }`
2840- `BetaManagedAgentsMCPOAuthRefreshUpdateParams object`
28982841
28992842 Parameters for updating OAuth refresh token configuration.
29002843
from line 2845
29022845
29032846 Updated OAuth refresh token.
29042847
2848 minLength: 1, maxLength: 4096
2849
29052850 - `scope: optional string or null`
29062851
29072852 Updated OAuth scope for the refresh request.
29082853
2854 maxLength: 8192
2855
29092856 - `token_endpoint_auth: optional BetaManagedAgentsTokenEndpointAuthBasicUpdateParam or BetaManagedAgentsTokenEndpointAuthPostUpdateParam`
29102857
29112858 Updated HTTP Basic authentication parameters for the token endpoint.
29122859
2913 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object { type, client_secret }`
2860 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object`
29142861
29152862 Updated HTTP Basic authentication parameters for the token endpoint.
29162863
29172864 - `type: "client_secret_basic"`
29182865
2919 - `"client_secret_basic"`
2920
29212866 - `client_secret: optional string or null`
29222867
29232868 Updated OAuth client secret.
29242869
2925 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object { type, client_secret }`
2870 minLength: 1, maxLength: 512
2871
2872 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object`
29262873
29272874 Updated POST body authentication parameters for the token endpoint.
29282875
29292876 - `type: "client_secret_post"`
29302877
2931 - `"client_secret_post"`
2932
29332878 - `client_secret: optional string or null`
29342879
29352880 Updated OAuth client secret.
29362881
2882 minLength: 1, maxLength: 512
2883
29372884### Beta Managed Agents MCP OAuth Update Params
29382885
2939- `BetaManagedAgentsMCPOAuthUpdateParams object { type, access_token, expires_at, refresh }`
2886- `BetaManagedAgentsMCPOAuthUpdateParams object`
29402887
29412888 Parameters for updating an MCP OAuth credential. The `mcp_server_url` is immutable.
29422889
29432890 - `type: "mcp_oauth"`
29442891
2945 - `"mcp_oauth"`
2946
29472892 - `access_token: optional string or null`
29482893
29492894 Updated OAuth access token.
29502895
2896 minLength: 1, maxLength: 8192
2897
29512898 - `expires_at: optional string or null`
29522899
29532900 A timestamp in RFC 3339 format
29542901
2902 format: date-time
2903
29552904 - `refresh: optional BetaManagedAgentsMCPOAuthRefreshUpdateParams or null`
29562905
29572906 Parameters for updating OAuth refresh token configuration.
from line 2909
29602909
29612910 Updated OAuth refresh token.
29622911
2912 minLength: 1, maxLength: 4096
2913
29632914 - `scope: optional string or null`
29642915
29652916 Updated OAuth scope for the refresh request.
29662917
2918 maxLength: 8192
2919
29672920 - `token_endpoint_auth: optional BetaManagedAgentsTokenEndpointAuthBasicUpdateParam or BetaManagedAgentsTokenEndpointAuthPostUpdateParam`
29682921
29692922 Updated HTTP Basic authentication parameters for the token endpoint.
29702923
2971 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object { type, client_secret }`
2924 - `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object`
29722925
29732926 Updated HTTP Basic authentication parameters for the token endpoint.
29742927
29752928 - `type: "client_secret_basic"`
29762929
2977 - `"client_secret_basic"`
2978
29792930 - `client_secret: optional string or null`
29802931
29812932 Updated OAuth client secret.
29822933
2983 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object { type, client_secret }`
2934 minLength: 1, maxLength: 512
2935
2936 - `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object`
29842937
29852938 Updated POST body authentication parameters for the token endpoint.
29862939
29872940 - `type: "client_secret_post"`
29882941
2989 - `"client_secret_post"`
2990
29912942 - `client_secret: optional string or null`
29922943
29932944 Updated OAuth client secret.
29942945
2946 minLength: 1, maxLength: 512
2947
29952948### Beta Managed Agents MCP Probe
29962949
2997- `BetaManagedAgentsMCPProbe object { http_response, method }`
2950- `BetaManagedAgentsMCPProbe object`
29982951
29992952 The failing step of an MCP validation probe.
30002953
from line 2971
30182971
30192972 HTTP status code.
30202973
2974 format: int32
2975
30212976 - `method: string`
30222977
30232978 The MCP method that failed (for example `initialize` or `tools/list`).
30242979
30252980### Beta Managed Agents Refresh HTTP Response
30262981
3027- `BetaManagedAgentsRefreshHTTPResponse object { body, body_truncated, content_type, status_code }`
2982- `BetaManagedAgentsRefreshHTTPResponse object`
30282983
30292984 An HTTP response captured during a credential validation probe.
30302985
from line 2999
30442999
30453000 HTTP status code.
30463001
3002 format: int32
3003
30473004### Beta Managed Agents Refresh Object
30483005
3049- `BetaManagedAgentsRefreshObject object { http_response, status }`
3006- `BetaManagedAgentsRefreshObject object`
30503007
30513008 Outcome of a refresh-token exchange attempted during credential validation.
30523009
from line 3027
30703027
30713028 HTTP status code.
30723029
3030 format: int32
3031
30733032 - `status: "succeeded" or "failed" or "connect_error" or "no_refresh_token"`
30743033
30753034 Outcome of a refresh-token exchange attempted during credential validation.
from line 3043
30843043
30853044### Beta Managed Agents Static Bearer Auth Response
30863045
3087- `BetaManagedAgentsStaticBearerAuthResponse object { mcp_server_url, type }`
3046- `BetaManagedAgentsStaticBearerAuthResponse object`
30883047
30893048 Static bearer token credential details for an MCP server.
30903049
from line 3053
30943053
30953054 - `type: "static_bearer"`
30963055
3097 - `"static_bearer"`
3098
30993056### Beta Managed Agents Static Bearer Create Params
31003057
3101- `BetaManagedAgentsStaticBearerCreateParams object { token, mcp_server_url, type }`
3058- `BetaManagedAgentsStaticBearerCreateParams object`
31023059
31033060 Parameters for creating a static bearer token credential.
31043061
from line 3063
31063063
31073064 Static bearer token value.
31083065
3066 minLength: 1, maxLength: 8192
3067
31093068 - `mcp_server_url: string`
31103069
31113070 URL of the MCP server this credential authenticates against.
31123071
3072 minLength: 1, maxLength: 2047
3073
31133074 - `type: "static_bearer"`
31143075
3115 - `"static_bearer"`
3116
31173076### Beta Managed Agents Static Bearer Update Params
31183077
3119- `BetaManagedAgentsStaticBearerUpdateParams object { type, token }`
3078- `BetaManagedAgentsStaticBearerUpdateParams object`
31203079
31213080 Parameters for updating a static bearer token credential. The `mcp_server_url` is immutable.
31223081
31233082 - `type: "static_bearer"`
31243083
3125 - `"static_bearer"`
3126
31273084 - `token: optional string or null`
31283085
31293086 Updated static bearer token value.
31303087
3088 minLength: 1, maxLength: 8192
3089
31313090### Beta Managed Agents Token Endpoint Auth Basic Param
31323091
3133- `BetaManagedAgentsTokenEndpointAuthBasicParam object { client_secret, type }`
3092- `BetaManagedAgentsTokenEndpointAuthBasicParam object`
31343093
31353094 Token endpoint uses HTTP Basic authentication with client credentials.
31363095
from line 3097
31383097
31393098 OAuth client secret.
31403099
3100 minLength: 1, maxLength: 512
3101
31413102 - `type: "client_secret_basic"`
31423103
3143 - `"client_secret_basic"`
3144
31453104### Beta Managed Agents Token Endpoint Auth Basic Response
31463105
3147- `BetaManagedAgentsTokenEndpointAuthBasicResponse object { type }`
3106- `BetaManagedAgentsTokenEndpointAuthBasicResponse object`
31483107
31493108 Token endpoint uses HTTP Basic authentication with client credentials.
31503109
31513110 - `type: "client_secret_basic"`
31523111
3153 - `"client_secret_basic"`
3154
31553112### Beta Managed Agents Token Endpoint Auth Basic Update Param
31563113
3157- `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object { type, client_secret }`
3114- `BetaManagedAgentsTokenEndpointAuthBasicUpdateParam object`
31583115
31593116 Updated HTTP Basic authentication parameters for the token endpoint.
31603117
31613118 - `type: "client_secret_basic"`
31623119
3163 - `"client_secret_basic"`
3164
31653120 - `client_secret: optional string or null`
31663121
31673122 Updated OAuth client secret.
31683123
3124 minLength: 1, maxLength: 512
3125
31693126### Beta Managed Agents Token Endpoint Auth None Param
31703127
3171- `BetaManagedAgentsTokenEndpointAuthNoneParam object { type }`
3128- `BetaManagedAgentsTokenEndpointAuthNoneParam object`
31723129
31733130 Token endpoint requires no client authentication.
31743131
31753132 - `type: "none"`
31763133
3177 - `"none"`
3178
31793134### Beta Managed Agents Token Endpoint Auth None Response
31803135
3181- `BetaManagedAgentsTokenEndpointAuthNoneResponse object { type }`
3136- `BetaManagedAgentsTokenEndpointAuthNoneResponse object`
31823137
31833138 Token endpoint requires no client authentication.
31843139
31853140 - `type: "none"`
31863141
3187 - `"none"`
3188
31893142### Beta Managed Agents Token Endpoint Auth Post Param
31903143
3191- `BetaManagedAgentsTokenEndpointAuthPostParam object { client_secret, type }`
3144- `BetaManagedAgentsTokenEndpointAuthPostParam object`
31923145
31933146 Token endpoint uses POST body authentication with client credentials.
31943147
from line 3149
31963149
31973150 OAuth client secret.
31983151
3152 minLength: 1, maxLength: 512
3153
31993154 - `type: "client_secret_post"`
32003155
3201 - `"client_secret_post"`
3202
32033156### Beta Managed Agents Token Endpoint Auth Post Response
32043157
3205- `BetaManagedAgentsTokenEndpointAuthPostResponse object { type }`
3158- `BetaManagedAgentsTokenEndpointAuthPostResponse object`
32063159
32073160 Token endpoint uses POST body authentication with client credentials.
32083161
32093162 - `type: "client_secret_post"`
32103163
3211 - `"client_secret_post"`
3212
32133164### Beta Managed Agents Token Endpoint Auth Post Update Param
32143165
3215- `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object { type, client_secret }`
3166- `BetaManagedAgentsTokenEndpointAuthPostUpdateParam object`
32163167
32173168 Updated POST body authentication parameters for the token endpoint.
32183169
32193170 - `type: "client_secret_post"`
32203171
3221 - `"client_secret_post"`
3222
32233172 - `client_secret: optional string or null`
32243173
32253174 Updated OAuth client secret.
32263175
3176 minLength: 1, maxLength: 512
3177
32273178### Beta Managed Agents Unrestricted Credential Networking Params
32283179
3229- `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object { type }`
3180- `BetaManagedAgentsUnrestrictedCredentialNetworkingParams object`
32303181
32313182 Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach.
32323183
32333184 - `type: "unrestricted"`
32343185
3235 - `"unrestricted"`
3236
32373186### Beta Managed Agents Unrestricted Credential Networking Response
32383187
3239- `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object { type }`
3188- `BetaManagedAgentsUnrestrictedCredentialNetworkingResponse object`
32403189
32413190 The secret is substituted on any host the session's Environment network policy permits egress to.
32423191
32433192 - `type: "unrestricted"`
3244
3245 - `"unrestricted"`
32463193
No line in this hunk matches that.