The whole hunk
from line 1, old and new numbered
/
lines
from line 1
1---
2title: Create Credential
3url: https://platform.claude.com/docs/en/api/beta/vaults/credentials/create
4---
5
16# Create Credential
27
38**POST** `/v1/vaults/{vault_id}/credentials`
from line 21
1621
1722 - `string`
1823
19 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
24 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2025
2126 - `"message-batches-2024-09-24"`
2227
from line 69
6469
6570 - `"user-profiles-2026-08-18"`
6671
72 - `"user-profiles-2026-09-04"`
73
6774 - `"advisor-tool-2026-03-01"`
6875
6976 - `"managed-agents-2026-04-01"`
from line 113
106113
107114 - `"mid-conversation-system-clear-at-2026-08-21"`
108115
116- `"anthropic-workspace-id": optional string`
117
109118## Body parameters
110119
111120- `auth: BetaManagedAgentsMCPOAuthCreateParams or BetaManagedAgentsStaticBearerCreateParams or BetaManagedAgentsEnvironmentVariableCreateParams`
from line 125
116125
117126 Parameters for creating an MCP OAuth credential.
118127
128 - `type: "mcp_oauth"`
129
119130 - `access_token: string`
120131
121132 OAuth access token.
from line 139
128139
129140 minLength: 1, maxLength: 2047
130141
131 - `type: "mcp_oauth"`
132
133142 - `expires_at: optional string or null`
134143
135144 A timestamp in RFC 3339 format
from line 159
150159
151160 OAuth refresh token.
152161
153 minLength: 1, maxLength: 4096
162 minLength: 1, maxLength: 8192
154163
155164 - `token_endpoint: string`
156165
from line 181
172181
173182 Token endpoint uses HTTP Basic authentication with client credentials.
174183
184 - `type: "client_secret_basic"`
185
175186 - `client_secret: string`
176187
177188 OAuth client secret.
from line 189
178189
179190 minLength: 1, maxLength: 512
180191
181 - `type: "client_secret_basic"`
182
183192 - `BetaManagedAgentsTokenEndpointAuthPostParam object`
184193
185194 Token endpoint uses POST body authentication with client credentials.
186195
196 - `type: "client_secret_post"`
197
187198 - `client_secret: string`
188199
189200 OAuth client secret.
from line 201
190201
191202 minLength: 1, maxLength: 512
192203
193 - `type: "client_secret_post"`
194
195204 - `resource: optional string or null`
196205
197206 OAuth resource indicator.
from line 217
208217
209218 Parameters for creating a static bearer token credential.
210219
220 - `type: "static_bearer"`
221
211222 - `token: string`
212223
213224 Static bearer token value.
from line 231
220231
221232 minLength: 1, maxLength: 2047
222233
223 - `type: "static_bearer"`
224
225234 - `BetaManagedAgentsEnvironmentVariableCreateParams object`
226235
227236 Parameters for creating an environment variable credential.
228237
238 - `type: "environment_variable"`
239
229240 - `networking: BetaManagedAgentsCredentialNetworkingParams`
230241
231242 Outbound hosts the secret value is substituted on.
from line 251
240251
241252 Substitute the secret only on requests to the listed hosts.
242253
254 - `type: "limited"`
255
243256 - `allowed_hosts: array of string`
244257
245258 Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries.
246259
247 - `type: "limited"`
248
249260 - `secret_name: string`
250261
251262 Name of the environment variable. Immutable after create.
from line 269
258269
259270 minLength: 1, maxLength: 4096
260271
261 - `type: "environment_variable"`
262
263272 - `injection_location: optional BetaManagedAgentsInjectionLocationParams`
264273
265274 Where in the outbound request the secret value may be substituted.
from line 297
288297
289298 A credential stored in a vault. Sensitive fields are never returned in responses.
290299
300 - `type: "vault_credential"`
301
291302 - `id: string`
292303
293304 Unique identifier for the credential.
from line 317
306317
307318 OAuth credential details for an MCP server.
308319
320 - `type: "mcp_oauth"`
321
309322 - `mcp_server_url: string`
310323
311324 URL of the MCP server this credential authenticates against.
312325
313 - `type: "mcp_oauth"`
314
315326 - `expires_at: optional string or null`
316327
317328 A timestamp in RFC 3339 format
from line 375
364375
365376 Static bearer token credential details for an MCP server.
366377
378 - `type: "static_bearer"`
379
367380 - `mcp_server_url: string`
368381
369382 URL of the MCP server this credential authenticates against.
370383
371 - `type: "static_bearer"`
372
373384 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
374385
375386 Environment variable credential details. The secret value is never returned.
376387
388 - `type: "environment_variable"`
389
377390 - `injection_location: BetaManagedAgentsInjectionLocationResponse`
378391
379392 Where in the outbound request the secret value is substituted.
from line 413
400413
401414 The secret is substituted only on requests to the listed hosts.
402415
416 - `type: "limited"`
417
403418 - `allowed_hosts: array of string`
404419
405420 Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself.
406421
407 - `type: "limited"`
408
409422 - `secret_name: string`
410423
411424 Name of the environment variable.
412425
413 - `type: "environment_variable"`
414
415426 - `created_at: string`
416427
417428 A timestamp in RFC 3339 format
from line 432
421432 - `metadata: map[string]`
422433
423434 Arbitrary key-value metadata attached to the credential.
424
425 - `type: "vault_credential"`
426435
427436 - `updated_at: string`
428437