Rules changedapi/beta/organization/federation/rules
Nearest release: v2.1.283, published 3 hours after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+8added
Lines−12removed
From line
169
where the diff opens
First seen
26 Aug 2026
this site's first read of the page
Recorded edits6to this page, all time
The whole hunk
from line 169, old and new numbered
/
from line 169
169169
170170 Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.
171171
172 maxLength: 255, minLength: 1
172 minLength: 1, maxLength: 255
173173
174174- `oauth_scope: string`
175175
from line 209
209209
210210 Lifetime in seconds for access tokens minted via this rule (60-86400). Defaults to 3600 (1h). Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
211211
212 maximum: 86400, minimum: 60
212 minimum: 60, maximum: 86400
213213
214214- `workspace_id: optional string or null`
215215
from line 436
436436
437437 Number of results per page.
438438
439 default: 20, maximum: 100, minimum: 1
439 default: 20, minimum: 1, maximum: 100
440440
441441- `page: optional string`
442442
from line 1186
11861186
11871187- `match: optional BetaFederationRuleMatch or null`
11881188
1189 Does the incoming JWT qualify?
1189 Replaces the entire match object. All populated matcher fields must pass.
11901190
1191 All populated fields must pass; omitted fields are skipped. At least one
1192 of `subject_prefix` (other than a wildcard-only value like `*`), `claims`,
1193 or `condition` is required; `audience` alone is not sufficient.
1194
11951191 - `audience: optional string or null`
11961192
11971193 Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default.
from line 1214
12181214
12191215 Replaces the slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.
12201216
1221 maxLength: 255, minLength: 1
1217 minLength: 1, maxLength: 255
12221218
12231219- `oauth_scope: optional string or null`
12241220
from line 1224
12281224
12291225- `target: optional BetaServiceAccountTarget or null`
12301226
1231 Bind to a fixed service account by ID.
1227 Replaces the entire target object. Currently always a `service_account` target.
12321228
12331229 - `type: "service_account"`
12341230
from line 1240
12441240
12451241 Replaces the lifetime in seconds for access tokens minted via this rule (60-86400). Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
12461242
1247 maximum: 86400, minimum: 60
1243 minimum: 60, maximum: 86400
12481244
12491245- `workspace_id: optional string or null`
12501246
from line 2174
21782174
21792175 Number of results per page.
21802176
2181 default: 20, maximum: 100, minimum: 1
2177 default: 20, minimum: 1, maximum: 100
21822178
21832179- `page: optional string`
21842180
No line in this hunk matches that.