Get External Key changedapi/beta/organization/external_keys/retrieve
Nearest release: v2.1.268, published under an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+15added
Lines−10removed
From line
1
where the diff opens
First seen
26 Aug 2026
this site's first read of the page
Recorded edits8to this page, all time
The whole hunk
from line 1, old and new numbered
/
from line 1
1---
2title: Get External Key
3url: https://platform.claude.com/docs/en/api/beta/organization/external_keys/retrieve
4---
5
16# Get External Key
27
38**GET** `/v1/organizations/external_keys/{external_key_id}`
from line 27
2227 workspace references it, the provider fields become effectively immutable
2328 (existing encrypted data needs the config for decrypt).
2429
30 - `type: "external_key"`
31
32 default: external_key
33
2534 - `id: string`
2635
2736 Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN.
from line 69
6069
6170 - `BetaAWSExternalKeyConfig object`
6271
72 - `type: "aws"`
73
6374 - `kms_arn: string`
6475
6576 Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected.
from line 77
6677
6778 maxLength: 2048
6879
69 - `type: "aws"`
70
7180 - `region: optional string or null`
7281
7382 AWS region. Derived from `kms_arn` if omitted.
from line 89
8089
8190 - `BetaGCPExternalKeyConfig object`
8291
92 - `type: "gcp"`
93
8394 - `key_name: string`
8495
8596 Full resource name of the Cloud KMS key.
8697
87 - `type: "gcp"`
88
8998 - `BetaAzureExternalKeyConfig object`
9099
100 - `type: "azure"`
101
91102 - `key_name: string`
92103
93104 Name of the key within the vault.
from line 107
96107
97108 Azure AD tenant ID.
98109
99 - `type: "azure"`
100
101110 - `vault_uri: string`
102111
103112 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
from line 114
105114 - `client_id: optional string or null`
106115
107116 Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory.
108
109 - `type: "external_key"`
110
111 default: external_key
112117
113118 - `updated_at: string`
114119
No line in this hunk matches that.