Sweep 22 Sep 2026 · 17:19Z Build v2.1.280 501 read Stable v2.1.267 Latest v2.1.280 Next v2.1.280 Feeds RSS JSON llms.txt Unofficial
One change · api

Get External Key changed

api/beta/organization/external_keys/retrieve

Nearest release: v2.1.268, published under an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.

Recorded here
Lines+15added
Lines−10removed
From line 1 where the diff opens
First seen 26 Aug 2026 this site's first read of the page
Recorded edits3to this page, all time

The whole hunk

from line 1, old and new numbered
/
lines
from line 1
1---
2title: Get External Key
3url: https://platform.claude.com/docs/en/api/beta/organization/external_keys/retrieve
4---
5 
16# Get External Key
27 
38**GET** `/v1/organizations/external_keys/{external_key_id}`
from line 27
2227 workspace references it, the provider fields become effectively immutable
2328 (existing encrypted data needs the config for decrypt).
2429 
30 - `type: "external_key"`
31 
32 default: external_key
33 
2534 - `id: string`
2635 
2736 Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN.
from line 69
6069 
6170 - `BetaAWSExternalKeyConfig object`
6271 
72 - `type: "aws"`
73 
6374 - `kms_arn: string`
6475 
6576 Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected.
from line 77
6677 
6778 maxLength: 2048
6879 
69 - `type: "aws"`
70 
7180 - `region: optional string or null`
7281 
7382 AWS region. Derived from `kms_arn` if omitted.
from line 89
8089 
8190 - `BetaGCPExternalKeyConfig object`
8291 
92 - `type: "gcp"`
93 
8394 - `key_name: string`
8495 
8596 Full resource name of the Cloud KMS key.
8697 
87 - `type: "gcp"`
88 
8998 - `BetaAzureExternalKeyConfig object`
9099 
100 - `type: "azure"`
101 
91102 - `key_name: string`
92103 
93104 Name of the key within the vault.
from line 107
96107 
97108 Azure AD tenant ID.
98109 
99 - `type: "azure"`
100 
101110 - `vault_uri: string`
102111 
103112 Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`.
from line 114
105114 - `client_id: optional string or null`
106115 
107116 Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory.
108 
109 - `type: "external_key"`
110 
111 default: external_key
112117 
113118 - `updated_at: string`
114119