Create Credential changedapi/beta/vaults/credentials/create
Nearest release: v2.1.268, published under an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+33added
Lines−24removed
From line
1
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits24to this page, all time
The whole hunk
from line 1, old and new numbered
/
from line 1
1---
2title: Create Credential
3url: https://platform.claude.com/docs/en/api/beta/vaults/credentials/create
4---
5
16# Create Credential
27
38**POST** `/v1/vaults/{vault_id}/credentials`
from line 21
1621
1722 - `string`
1823
19 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
24 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2025
2126 - `"message-batches-2024-09-24"`
2227
from line 69
6469
6570 - `"user-profiles-2026-08-18"`
6671
72 - `"user-profiles-2026-09-04"`
73
6774 - `"advisor-tool-2026-03-01"`
6875
6976 - `"managed-agents-2026-04-01"`
from line 113
106113
107114 - `"mid-conversation-system-clear-at-2026-08-21"`
108115
116- `"anthropic-workspace-id": optional string`
117
109118## Body parameters
110119
111120- `auth: BetaManagedAgentsMCPOAuthCreateParams or BetaManagedAgentsStaticBearerCreateParams or BetaManagedAgentsEnvironmentVariableCreateParams`
from line 125
116125
117126 Parameters for creating an MCP OAuth credential.
118127
128 - `type: "mcp_oauth"`
129
119130 - `access_token: string`
120131
121132 OAuth access token.
from line 139
128139
129140 minLength: 1, maxLength: 2047
130141
131 - `type: "mcp_oauth"`
132
133142 - `expires_at: optional string or null`
134143
135144 A timestamp in RFC 3339 format
from line 159
150159
151160 OAuth refresh token.
152161
153 minLength: 1, maxLength: 4096
162 minLength: 1, maxLength: 8192
154163
155164 - `token_endpoint: string`
156165
from line 181
172181
173182 Token endpoint uses HTTP Basic authentication with client credentials.
174183
184 - `type: "client_secret_basic"`
185
175186 - `client_secret: string`
176187
177188 OAuth client secret.
from line 189
178189
179190 minLength: 1, maxLength: 512
180191
181 - `type: "client_secret_basic"`
182
183192 - `BetaManagedAgentsTokenEndpointAuthPostParam object`
184193
185194 Token endpoint uses POST body authentication with client credentials.
186195
196 - `type: "client_secret_post"`
197
187198 - `client_secret: string`
188199
189200 OAuth client secret.
from line 201
190201
191202 minLength: 1, maxLength: 512
192203
193 - `type: "client_secret_post"`
194
195204 - `resource: optional string or null`
196205
197206 OAuth resource indicator.
from line 217
208217
209218 Parameters for creating a static bearer token credential.
210219
220 - `type: "static_bearer"`
221
211222 - `token: string`
212223
213224 Static bearer token value.
from line 231
220231
221232 minLength: 1, maxLength: 2047
222233
223 - `type: "static_bearer"`
224
225234 - `BetaManagedAgentsEnvironmentVariableCreateParams object`
226235
227236 Parameters for creating an environment variable credential.
228237
238 - `type: "environment_variable"`
239
229240 - `networking: BetaManagedAgentsCredentialNetworkingParams`
230241
231242 Outbound hosts the secret value is substituted on.
from line 251
240251
241252 Substitute the secret only on requests to the listed hosts.
242253
254 - `type: "limited"`
255
243256 - `allowed_hosts: array of string`
244257
245258 Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries.
246259
247 - `type: "limited"`
248
249260 - `secret_name: string`
250261
251262 Name of the environment variable. Immutable after create.
from line 269
258269
259270 minLength: 1, maxLength: 4096
260271
261 - `type: "environment_variable"`
262
263272 - `injection_location: optional BetaManagedAgentsInjectionLocationParams`
264273
265274 Where in the outbound request the secret value may be substituted.
from line 297
288297
289298 A credential stored in a vault. Sensitive fields are never returned in responses.
290299
300 - `type: "vault_credential"`
301
291302 - `id: string`
292303
293304 Unique identifier for the credential.
from line 317
306317
307318 OAuth credential details for an MCP server.
308319
320 - `type: "mcp_oauth"`
321
309322 - `mcp_server_url: string`
310323
311324 URL of the MCP server this credential authenticates against.
312325
313 - `type: "mcp_oauth"`
314
315326 - `expires_at: optional string or null`
316327
317328 A timestamp in RFC 3339 format
from line 375
364375
365376 Static bearer token credential details for an MCP server.
366377
378 - `type: "static_bearer"`
379
367380 - `mcp_server_url: string`
368381
369382 URL of the MCP server this credential authenticates against.
370383
371 - `type: "static_bearer"`
372
373384 - `BetaManagedAgentsEnvironmentVariableAuthResponse object`
374385
375386 Environment variable credential details. The secret value is never returned.
376387
388 - `type: "environment_variable"`
389
377390 - `injection_location: BetaManagedAgentsInjectionLocationResponse`
378391
379392 Where in the outbound request the secret value is substituted.
from line 413
400413
401414 The secret is substituted only on requests to the listed hosts.
402415
416 - `type: "limited"`
417
403418 - `allowed_hosts: array of string`
404419
405420 Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself.
406421
407 - `type: "limited"`
408
409422 - `secret_name: string`
410423
411424 Name of the environment variable.
412425
413 - `type: "environment_variable"`
414
415426 - `created_at: string`
416427
417428 A timestamp in RFC 3339 format
from line 432
421432 - `metadata: map[string]`
422433
423434 Arbitrary key-value metadata attached to the credential.
424
425 - `type: "vault_credential"`
426435
427436 - `updated_at: string`
428437
No line in this hunk matches that.