The whole hunk
from line 1, old and new numbered
/
lines
from line 1
1---
2title: Update Session
3url: https://platform.claude.com/docs/en/api/beta/sessions/update
4---
5
16# Update Session
27
38**POST** `/v1/sessions/{session_id}`
from line 21
1621
1722 - `string`
1823
19 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
24 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2025
2126 - `"message-batches-2024-09-24"`
2227
from line 69
6469
6570 - `"user-profiles-2026-08-18"`
6671
72 - `"user-profiles-2026-09-04"`
73
6774 - `"advisor-tool-2026-03-01"`
6875
6976 - `"managed-agents-2026-04-01"`
from line 113
106113
107114 - `"mid-conversation-system-clear-at-2026-08-21"`
108115
116- `"anthropic-workspace-id": optional string`
117
109118## Body parameters
110119
111120- `agent: optional BetaManagedAgentsSessionAgentUpdate`
from line 125
116125
117126 Replacement MCP server list. Full replacement: the provided array becomes the new value. Send an empty array to clear; omit to preserve.
118127
128 - `type: "url"`
129
119130 - `name: string`
120131
121132 Unique name for this server, referenced by mcp_toolset configurations. 1-255 characters.
from line 133
122133
123134 minLength: 1, maxLength: 255
124135
125 - `type: "url"`
126
127136 - `url: string`
128137
129138 Endpoint URL for the MCP server.
from line 157
148157
149158 Configuration override for the bash tool.
150159
160 - `type: optional "bash"`
161
151162 - `name: "bash"`
152163
153164 Must be "bash".
from line 167
156167
157168 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
158169
159 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
170 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
160171
161172 Permission policy for tool execution.
162173
from line 183
172183
173184 - `type: "always_ask"`
174185
175 - `type: optional "bash"`
186 - `BetaManagedAgentsAutoPolicy object`
176187
188 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
189
190 - `type: "auto"`
191
177192 - `BetaManagedAgentsEditToolConfigParams object`
178193
179194 Configuration override for the edit tool.
180195
196 - `type: optional "edit"`
197
181198 - `name: "edit"`
182199
183200 Must be "edit".
from line 203
186203
187204 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
188205
189 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
206 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
190207
191208 Permission policy for tool execution.
192209
from line 215
198215
199216 Tool calls require user confirmation before execution.
200217
201 - `type: optional "edit"`
218 - `BetaManagedAgentsAutoPolicy object`
202219
220 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
221
203222 - `BetaManagedAgentsReadToolConfigParams object`
204223
205224 Configuration override for the read tool.
206225
226 - `type: optional "read"`
227
207228 - `name: "read"`
208229
209230 Must be "read".
from line 233
212233
213234 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
214235
215 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
236 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
216237
217238 Permission policy for tool execution.
218239
from line 245
224245
225246 Tool calls require user confirmation before execution.
226247
227 - `type: optional "read"`
248 - `BetaManagedAgentsAutoPolicy object`
228249
250 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
251
229252 - `BetaManagedAgentsWriteToolConfigParams object`
230253
231254 Configuration override for the write tool.
232255
256 - `type: optional "write"`
257
233258 - `name: "write"`
234259
235260 Must be "write".
from line 263
238263
239264 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
240265
241 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
266 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
242267
243268 Permission policy for tool execution.
244269
from line 275
250275
251276 Tool calls require user confirmation before execution.
252277
253 - `type: optional "write"`
278 - `BetaManagedAgentsAutoPolicy object`
254279
280 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
281
255282 - `BetaManagedAgentsGlobToolConfigParams object`
256283
257284 Configuration override for the glob tool.
258285
286 - `type: optional "glob"`
287
259288 - `name: "glob"`
260289
261290 Must be "glob".
from line 293
264293
265294 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
266295
267 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
296 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
268297
269298 Permission policy for tool execution.
270299
from line 305
276305
277306 Tool calls require user confirmation before execution.
278307
279 - `type: optional "glob"`
308 - `BetaManagedAgentsAutoPolicy object`
280309
310 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
311
281312 - `BetaManagedAgentsGrepToolConfigParams object`
282313
283314 Configuration override for the grep tool.
284315
316 - `type: optional "grep"`
317
285318 - `name: "grep"`
286319
287320 Must be "grep".
from line 323
290323
291324 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
292325
293 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
326 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
294327
295328 Permission policy for tool execution.
296329
from line 335
302335
303336 Tool calls require user confirmation before execution.
304337
305 - `type: optional "grep"`
338 - `BetaManagedAgentsAutoPolicy object`
306339
340 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
341
307342 - `BetaManagedAgentsWebFetchToolConfigParams object`
308343
309344 Configuration override for the web_fetch tool.
310345
346 - `type: optional "web_fetch"`
347
311348 - `name: "web_fetch"`
312349
313350 Must be "web_fetch".
from line 367
330367
331368 format: int32
332369
333 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
370 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
334371
335372 Permission policy for tool execution.
336373
from line 379
342379
343380 Tool calls require user confirmation before execution.
344381
345 - `type: optional "web_fetch"`
382 - `BetaManagedAgentsAutoPolicy object`
346383
384 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
385
347386 - `BetaManagedAgentsWebSearchToolConfigParams object`
348387
349388 Configuration override for the web_search tool.
350389
390 - `type: optional "web_search"`
391
351392 - `name: "web_search"`
352393
353394 Must be "web_search".
from line 405
364405
365406 Whether this tool is enabled and available to Claude. Overrides the default_config setting.
366407
367 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
408 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
368409
369410 Permission policy for tool execution.
370411
from line 417
376417
377418 Tool calls require user confirmation before execution.
378419
379 - `type: optional "web_search"`
420 - `BetaManagedAgentsAutoPolicy object`
380421
422 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
423
381424 - `user_location: optional BetaManagedAgentsUserLocation or null`
382425
383426 Approximate user location for search result localization.
from line 459
416459
417460 Whether tools are enabled and available to Claude by default. Defaults to true if not specified.
418461
419 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
462 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
420463
421464 Permission policy for tool execution.
422465
from line 471
428471
429472 Tool calls require user confirmation before execution.
430473
474 - `BetaManagedAgentsAutoPolicy object`
475
476 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
477
431478 - `BetaManagedAgentsMCPToolsetParams object`
432479
433480 Configuration for tools from an MCP server defined in `mcp_servers`.
434481
482 - `type: "mcp_toolset"`
483
435484 - `mcp_server_name: string`
436485
437486 Name of the MCP server. Must match a server name from the mcp_servers array. 1-255 characters.
from line 487
438487
439488 minLength: 1, maxLength: 255
440489
441 - `type: "mcp_toolset"`
442
443490 - `configs: optional array of BetaManagedAgentsMCPToolConfigParams`
444491
445492 Per-tool configuration overrides.
from line 501
454501
455502 Whether this tool is enabled. Overrides the `default_config` setting.
456503
457 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
504 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
458505
459506 Permission policy for tool execution.
460507
from line 513
466513
467514 Tool calls require user confirmation before execution.
468515
516 - `BetaManagedAgentsAutoPolicy object`
517
518 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
519
469520 - `default_config: optional BetaManagedAgentsMCPToolsetDefaultConfigParams or null`
470521
471522 Default configuration for all tools from an MCP server.
from line 525
474525
475526 Whether tools are enabled by default. Defaults to true if not specified.
476527
477 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or null`
528 - `permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or null`
478529
479530 Permission policy for tool execution.
480531
from line 537
486537
487538 Tool calls require user confirmation before execution.
488539
540 - `BetaManagedAgentsAutoPolicy object`
541
542 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
543
489544 - `BetaManagedAgentsCustomToolParams object`
490545
491546 A custom tool that is executed by the API client rather than the agent. When the agent calls this tool, an `agent.custom_tool_use` event is emitted and the session goes idle, waiting for the client to provide the result via a `user.custom_tool_result` event.
492547
548 - `type: "custom"`
549
493550 - `description: string`
494551
495552 Description of what the tool does, shown to the agent to help it decide when to use the tool.
from line 569
512569
513570 minLength: 1, maxLength: 128
514571
515 - `type: "custom"`
516
517572- `budget: optional BetaManagedAgentsBudgetLimit or null`
518573
519574 A hard spend ceiling. The session stops issuing new model requests once the tracked list cost reaches `max_list_cost`.
520575
576 - `type: "limit"`
577
521578 - `max_list_cost: BetaMonetaryAmount`
522579
523580 A monetary amount in a specific currency.
from line 587
530587
531588 Uppercase ISO-4217 currency code. `USD` is the only currency currently supported; the accepted set is closed and grows only when a new currency is priced.
532589
533 - `type: "limit"`
534
535590- `metadata: optional map[string] or null`
536591
537592 Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omit the field to preserve.
from line 607
552607
553608 A Managed Agents `session`.
554609
610 - `type: "session"`
611
555612 - `id: string`
556613
557614 - `agent: BetaManagedAgentsSessionAgent`
from line 615
558615
559616 Resolved `agent` definition for a `session`. Snapshot of the `agent` at `session` creation time.
560617
618 - `type: "agent"`
619
561620 - `id: string`
562621
563622 - `description: string or null`
from line 623
564623
565624 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
566625
567 - `name: string`
568
569626 - `type: "url"`
570627
628 - `name: string`
629
571630 - `url: string`
572631
573632 - `model: BetaManagedAgentsModelConfig`
from line 753
694753
695754 Resolved coordinator topology with full agent definitions for each roster member.
696755
756 - `type: "coordinator"`
757
697758 - `agents: array of BetaManagedAgentsSessionThreadAgent or BetaManagedAgentsAdvisor`
698759
699760 Full `agent` definitions the coordinator may spawn as session threads.
from line 763
702763
703764 Resolved `agent` definition for a single `session_thread`. Snapshot of the agent at thread creation time. The multiagent roster is not repeated here; read it from `Session.agent`.
704765
766 - `type: "agent"`
767
705768 - `id: string`
706769
707770 - `description: string or null`
from line 771
708771
709772 - `mcp_servers: array of BetaManagedAgentsMCPServerURLDefinition`
710773
711 - `name: string`
712
713774 - `type: "url"`
714775
776 - `name: string`
777
715778 - `url: string`
716779
717780 - `model: BetaManagedAgentsModelConfig`
from line 789
726789
727790 A resolved Anthropic-managed skill.
728791
729 - `skill_id: string`
730
731792 - `type: "anthropic"`
732793
794 - `skill_id: string`
795
733796 - `version: string`
734797
735798 - `BetaManagedAgentsCustomSkill object`
from line 799
736799
737800 A resolved user-created custom skill.
738801
739 - `skill_id: string`
740
741802 - `type: "custom"`
742803
804 - `skill_id: string`
805
743806 - `version: string`
744807
745808 - `system: string or null`
from line 811
748811
749812 - `BetaManagedAgentsAgentToolset20260401 object`
750813
814 - `type: "agent_toolset_20260401"`
815
751816 - `configs: array of BetaManagedAgentsAgentToolConfig`
752817
753818 - `BetaManagedAgentsBashToolConfig object`
from line 819
754819
755820 Configuration for the bash tool.
756821
822 - `type: "bash"`
823
757824 - `enabled: boolean`
758825
759826 - `name: "bash"`
760827
761 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
828 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
762829
763830 Permission policy for tool execution.
764831
from line 841
774841
775842 - `type: "always_ask"`
776843
777 - `type: "bash"`
844 - `BetaManagedAgentsAutoPolicy object`
778845
846 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
847
848 - `type: "auto"`
849
779850 - `BetaManagedAgentsEditToolConfig object`
780851
781852 Configuration for the edit tool.
782853
854 - `type: "edit"`
855
783856 - `enabled: boolean`
784857
785858 - `name: "edit"`
786859
787 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
860 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
788861
789862 Permission policy for tool execution.
790863
from line 869
796869
797870 Tool calls require user confirmation before execution.
798871
799 - `type: "edit"`
872 - `BetaManagedAgentsAutoPolicy object`
800873
874 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
875
801876 - `BetaManagedAgentsReadToolConfig object`
802877
803878 Configuration for the read tool.
804879
880 - `type: "read"`
881
805882 - `enabled: boolean`
806883
807884 - `name: "read"`
808885
809 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
886 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
810887
811888 Permission policy for tool execution.
812889
from line 895
818895
819896 Tool calls require user confirmation before execution.
820897
821 - `type: "read"`
898 - `BetaManagedAgentsAutoPolicy object`
822899
900 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
901
823902 - `BetaManagedAgentsWriteToolConfig object`
824903
825904 Configuration for the write tool.
826905
906 - `type: "write"`
907
827908 - `enabled: boolean`
828909
829910 - `name: "write"`
830911
831 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
912 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
832913
833914 Permission policy for tool execution.
834915
from line 921
840921
841922 Tool calls require user confirmation before execution.
842923
843 - `type: "write"`
924 - `BetaManagedAgentsAutoPolicy object`
844925
926 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
927
845928 - `BetaManagedAgentsGlobToolConfig object`
846929
847930 Configuration for the glob tool.
848931
932 - `type: "glob"`
933
849934 - `enabled: boolean`
850935
851936 - `name: "glob"`
852937
853 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
938 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
854939
855940 Permission policy for tool execution.
856941
from line 947
862947
863948 Tool calls require user confirmation before execution.
864949
865 - `type: "glob"`
950 - `BetaManagedAgentsAutoPolicy object`
866951
952 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
953
867954 - `BetaManagedAgentsGrepToolConfig object`
868955
869956 Configuration for the grep tool.
870957
958 - `type: "grep"`
959
871960 - `enabled: boolean`
872961
873962 - `name: "grep"`
874963
875 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
964 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
876965
877966 Permission policy for tool execution.
878967
from line 973
884973
885974 Tool calls require user confirmation before execution.
886975
887 - `type: "grep"`
976 - `BetaManagedAgentsAutoPolicy object`
888977
978 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
979
889980 - `BetaManagedAgentsWebFetchToolConfig object`
890981
891982 Configuration for the web_fetch tool.
892983
984 - `type: "web_fetch"`
985
893986 - `enabled: boolean`
894987
895988 - `name: "web_fetch"`
896989
897 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
990 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
898991
899992 Permission policy for tool execution.
900993
from line 999
906999
9071000 Tool calls require user confirmation before execution.
9081001
909 - `type: "web_fetch"`
1002 - `BetaManagedAgentsAutoPolicy object`
9101003
1004 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
1005
9111006 - `allowed_domains: optional array of string`
9121007
9131008 - `blocked_domains: optional array of string`
from line 1015
9201015
9211016 Configuration for the web_search tool.
9221017
1018 - `type: "web_search"`
1019
9231020 - `enabled: boolean`
9241021
9251022 - `name: "web_search"`
9261023
927 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1024 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
9281025
9291026 Permission policy for tool execution.
9301027
from line 1033
9361033
9371034 Tool calls require user confirmation before execution.
9381035
939 - `type: "web_search"`
1036 - `BetaManagedAgentsAutoPolicy object`
9401037
1038 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
1039
9411040 - `allowed_domains: optional array of string`
9421041
9431042 - `blocked_domains: optional array of string`
from line 1077
9781077
9791078 - `enabled: boolean`
9801079
981 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1080 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
9821081
9831082 Permission policy for tool execution.
9841083
from line 1089
9901089
9911090 Tool calls require user confirmation before execution.
9921091
993 - `type: "agent_toolset_20260401"`
1092 - `BetaManagedAgentsAutoPolicy object`
9941093
1094 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
1095
9951096 - `BetaManagedAgentsMCPToolset object`
9961097
1098 - `type: "mcp_toolset"`
1099
9971100 - `configs: array of BetaManagedAgentsMCPToolConfig`
9981101
9991102 - `enabled: boolean`
from line 1103
10001103
10011104 - `name: string`
10021105
1003 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1106 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
10041107
10051108 Permission policy for tool execution.
10061109
from line 1115
10121115
10131116 Tool calls require user confirmation before execution.
10141117
1118 - `BetaManagedAgentsAutoPolicy object`
1119
1120 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
1121
10151122 - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig`
10161123
10171124 Resolved default configuration for all tools from an MCP server.
from line 1125
10181125
10191126 - `enabled: boolean`
10201127
1021 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy`
1128 - `permission_policy: BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy`
10221129
10231130 Permission policy for tool execution.
10241131
from line 1137
10301137
10311138 Tool calls require user confirmation before execution.
10321139
1033 - `mcp_server_name: string`
1140 - `BetaManagedAgentsAutoPolicy object`
10341141
1035 - `type: "mcp_toolset"`
1142 The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
10361143
1144 - `mcp_server_name: string`
1145
10371146 - `BetaManagedAgentsCustomTool object`
10381147
10391148 A custom tool as returned in API responses.
10401149
1150 - `type: "custom"`
1151
10411152 - `description: string`
10421153
10431154 - `input_schema: BetaManagedAgentsCustomToolInputSchema`
from line 1163
10521163
10531164 - `name: string`
10541165
1055 - `type: "custom"`
1056
1057 - `type: "agent"`
1058
10591166 - `version: number`
10601167
10611168 format: int32
from line 1171
10641171
10651172 Platform advisor roster entry: a model the session's primary thread may consult mid-turn.
10661173
1174 - `type: "advisor"`
1175
10671176 - `model: string`
10681177
10691178 The advisor model id.
10701179
1071 - `type: "advisor"`
1072
1073 - `type: "coordinator"`
1074
10751180 - `name: string`
10761181
10771182 - `skills: array of BetaManagedAgentsAnthropicSkill or BetaManagedAgentsCustomSkill`
from line 1201
10961201
10971202 A custom tool as returned in API responses.
10981203
1099 - `type: "agent"`
1100
11011204 - `version: number`
11021205
11031206 format: int32
from line 1215
11121215
11131216 A hard spend ceiling. The session stops issuing new model requests once the tracked list cost reaches `max_list_cost`.
11141217
1218 - `type: "limit"`
1219
11151220 - `max_list_cost: BetaMonetaryAmount`
11161221
11171222 A monetary amount in a specific currency.
from line 1229
11241229
11251230 Uppercase ISO-4217 currency code. `USD` is the only currency currently supported; the accepted set is closed and grows only when a new currency is priced.
11261231
1127 - `type: "limit"`
1128
11291232 - `created_at: string`
11301233
11311234 A timestamp in RFC 3339 format
from line 1243
11401243
11411244 Per-outcome evaluation state. One entry per `define_outcome` event sent to the session.
11421245
1246 - `type: "outcome_evaluation"`
1247
11431248 - `completed_at: string or null`
11441249
11451250 A timestamp in RFC 3339 format
from line 1273
11681273
11691274 Current evaluation state. `pending` before the agent begins work; `running` while producing or revising; `evaluating` while the grader scores; `satisfied`/`max_iterations_reached`/`failed`/`interrupted` are terminal.
11701275
1171 - `type: "outcome_evaluation"`
1172
11731276 - `resources: array of BetaManagedAgentsSessionResource`
11741277
11751278 - `BetaManagedAgentsGitHubRepositoryResource object`
11761279
1280 - `type: "github_repository"`
1281
11771282 - `id: string`
11781283
11791284 - `created_at: string`
from line 1289
11841289
11851290 - `mount_path: string`
11861291
1187 - `type: "github_repository"`
1188
11891292 - `updated_at: string`
11901293
11911294 A timestamp in RFC 3339 format
from line 1301
11981301
11991302 - `BetaManagedAgentsBranchCheckout object`
12001303
1304 - `type: "branch"`
1305
12011306 - `name: string`
12021307
12031308 Branch name to check out.
from line 1309
12041309
12051310 minLength: 1, maxLength: 255
12061311
1207 - `type: "branch"`
1208
12091312 - `BetaManagedAgentsCommitCheckout object`
12101313
1314 - `type: "commit"`
1315
12111316 - `sha: string`
12121317
12131318 Full commit SHA to check out.
from line 1319
12141319
12151320 minLength: 7, maxLength: 64
12161321
1217 - `type: "commit"`
1218
12191322 - `BetaManagedAgentsFileResource object`
12201323
1324 - `type: "file"`
1325
12211326 - `id: string`
12221327
12231328 - `created_at: string`
from line 1335
12301335
12311336 - `mount_path: string`
12321337
1233 - `type: "file"`
1234
12351338 - `updated_at: string`
12361339
12371340 A timestamp in RFC 3339 format
from line 1345
12421345
12431346 A memory store attached to an agent session.
12441347
1348 - `type: "memory_store"`
1349
12451350 - `memory_store_id: string`
12461351
12471352 The memory store ID (memstore_...). Must belong to the caller's organization and workspace.
12481353
1249 - `type: "memory_store"`
1250
12511354 - `access: optional "read_write" or "read_only" or null`
12521355
12531356 Access mode for an attached memory store.
from line 1406
13031406 - `"terminated"`
13041407
13051408 - `title: string or null`
1306
1307 - `type: "session"`
13081409
13091410 - `updated_at: string`
13101411