The whole hunk
from line 4, old and new numbered
/
lines
from line 4
44
55**POST** `/v1/organizations/service_accounts`
66
7**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
8
79Create a service account.
810
911A service account is a named workload identity that federation rules
1012target. `organization_role` is `developer` (default) or `admin`; a rule
1113may only be created or retargeted to grant `org:admin` scope when the
12target's `organization_role` is `admin`. Requires an OAuth bearer (user
13or WIF-minted service account token) or a Console session; Admin API
14keys are not accepted. Creating an `admin`-role service account requires
15an interactive credential (a user OAuth token or a Console session) — a
16workload may only create `developer`-role service accounts.
14target's `organization_role` is `admin`. Creating an `admin`-role service
15account requires an interactive credential (a user OAuth token or a
16Console session) — a workload may only create `developer`-role service
17accounts.
1718
1819### Headers
1920
from line 115
114115curl https://api.anthropic.com/v1/organizations/service_accounts \
115116 -H 'Content-Type: application/json' \
116117 -H 'anthropic-version: 2023-06-01' \
117 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN" \
118 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN" \
118119 -d '{
119120 "name": "ci-deploy-bot"
120121 }'
from line 143
142143
143144**GET** `/v1/organizations/service_accounts/{service_account_id}`
144145
146**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
147
145148Retrieve a service account by its ID (`svac_...`).
146149
147150### Path parameters
from line 229
226229```bash
227230curl https://api.anthropic.com/v1/organizations/service_accounts/$SERVICE_ACCOUNT_ID \
228231 -H 'anthropic-version: 2023-06-01' \
229 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
232 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN"
230233```
231234
232235#### Response (200)
from line 254
251254
252255**GET** `/v1/organizations/service_accounts`
253256
257**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
258
254259List service accounts in the caller's organization.
255260
256261Results are ordered by creation time, newest first. Use `limit` and the
from line 355
350355```bash
351356curl https://api.anthropic.com/v1/organizations/service_accounts \
352357 -H 'anthropic-version: 2023-06-01' \
353 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
358 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN"
354359```
355360
356361#### Response (200)
from line 385
380385
381386**POST** `/v1/organizations/service_accounts/{service_account_id}`
382387
388**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
389
383390Update a service account.
384391
385392Only `description` and `organization_role` are mutable; `name` cannot be
386393changed. Archived service accounts cannot be updated; this returns 400.
387394Setting `organization_role` to `admin` (even when unchanged) requires an
388interactive credential (a user OAuth token or a Console session). Admin
389API keys are not accepted.
395interactive credential (a user OAuth token or a Console session).
390396
391397### Path parameters
392398
from line 493
487493curl https://api.anthropic.com/v1/organizations/service_accounts/$SERVICE_ACCOUNT_ID \
488494 -H 'Content-Type: application/json' \
489495 -H 'anthropic-version: 2023-06-01' \
490 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN" \
496 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN" \
491497 -d '{}'
492498```
493499
from line 519
513519
514520**POST** `/v1/organizations/service_accounts/{service_account_id}/archive`
515521
522**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
523
516524Archive a service account.
517525
518526Idempotent; re-archiving returns the service account with its original
from line 528
520528rule still targets this service account, same as issuer archival; archive
521529those rules first or change their target to another service account.
522530
523Requires an OAuth bearer or Console session; Admin API keys are not
524accepted.
525
526531### Path parameters
527532
528533- `service_account_id: string`
from line 611
606611curl https://api.anthropic.com/v1/organizations/service_accounts/$SERVICE_ACCOUNT_ID/archive \
607612 -X POST \
608613 -H 'anthropic-version: 2023-06-01' \
609 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
614 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN"
610615```
611616
612617#### Response (200)
from line 703
698703
699704**POST** `/v1/organizations/service_accounts/{service_account_id}/workspaces`
700705
706**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
707
701708Add a service account to a workspace with the given `workspace_role`.
702709
703710Mirror of `POST /workspaces/{workspace_id}/service_accounts`, addressed
from line 712
705712service account is already an explicit member of the workspace, its
706713`workspace_role` is replaced with the value supplied here. Archived
707714workspaces return 400. Archived service accounts cannot be added and are
708rejected. Requires an OAuth bearer or Console session; Admin API keys
709are not accepted.
715rejected.
710716
711717#### Path parameters
712718
from line 788
782788curl https://api.anthropic.com/v1/organizations/service_accounts/$SERVICE_ACCOUNT_ID/workspaces \
783789 -H 'Content-Type: application/json' \
784790 -H 'anthropic-version: 2023-06-01' \
785 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN" \
791 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN" \
786792 -d '{
787793 "workspace_id": "workspace_id",
788794 "workspace_role": "workspace_admin"
from line 812
806812
807813**GET** `/v1/organizations/service_accounts/{service_account_id}/workspaces`
808814
815**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
816
809817List the workspaces a service account is a member of.
810818
811819Each entry includes the service account's `workspace_role` in that
from line 823
815823the first page; with `limit=1` the first page may return up to 2 entries
816824(the implicit entry plus one explicit membership) so a pagination cursor
817825can be derived. Memberships are returned only while
818the service account is active; an archived service account returns an
819empty list.
826the service account is active. Without a `page` cursor, an archived
827service account returns an empty list. A `page` cursor that does not
828match an active membership returns a 400 invalid-request error. A cursor
829stops matching when the membership is removed, the workspace is deleted,
830or the service account is archived. Restart pagination from the first
831page to recover.
820832
821833#### Path parameters
822834
from line 903
891903```bash
892904curl https://api.anthropic.com/v1/organizations/service_accounts/$SERVICE_ACCOUNT_ID/workspaces \
893905 -H 'anthropic-version: 2023-06-01' \
894 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
906 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN"
895907```
896908
897909##### Response (200)
from line 928
916928
917929**DELETE** `/v1/organizations/service_accounts/{service_account_id}/workspaces/{workspace_id}`
918930
931**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
932
919933Remove a service account from a workspace.
920934
921935Mirror of `DELETE /workspaces/{workspace_id}/service_accounts/{service_account_id}`,
from line 938
924938implicit default-workspace membership returns 200 but is a no-op and the
925939membership persists; deleting an explicit default-workspace row reverts
926940to the implicit `workspace_user` membership. Archived workspaces return
927400. Requires an OAuth bearer or Console session; Admin API keys are not
928accepted.
941400.
929942
930943#### Path parameters
931944
from line 978
965978curl https://api.anthropic.com/v1/organizations/service_accounts/$SERVICE_ACCOUNT_ID/workspaces/$WORKSPACE_ID \
966979 -X DELETE \
967980 -H 'anthropic-version: 2023-06-01' \
968 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
981 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN"
969982```
970983
971984##### Response (200)