1,267 pages for auth.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
check-events-against-results
Claude Developer Platform · in the page
manage-claude/compliance-security-posture/check-events-against-results
…: `descriptive`, `attestation` `null`. Rule S4: set aside. * Run 1, `oauth_conditional_access`. Stored: nothing. Response: an `attestation` with `state` `review_due`. Row 10: Look into. On your first…
events-reference
Claude Developer Platform · in the page
manage-claude/compliance-security-posture/events-reference
…the security control that the attestation applies to, for example, `oauth_conditional_access`; treat it as an opaque string. | | `action` | string | What changed, as o…
overview
Claude Developer Platform · in the page
manage-claude/compliance-security-posture/overview
…e setting, for example when it lives in another vendor’s console. | `oauth_conditional_access` | | Information-only control | Nothing: there is no recommended value, so the control is reported and not…
results-reference
Claude Developer Platform · in the page
manage-claude/compliance-security-posture/results-reference
…ed_state": null, "attestation": null }, { "id": "oauth_conditional_access", "display_name": "OAuth conditional access on connected SaaS", "section": "connectors_integra…
compliance-sessions
Claude Developer Platform · in the page
manage-claude/compliance-sessions
…neither is available to Admin API keys (`sk-ant-admin01-...`): calls authenticated with an Admin API key return [403 Forbidden](https://platform.claude.com/docs/en/manage-claude/compliance-errors#403…
inference-hooks-configuration
Claude Developer Platform · in the page
manage-claude/inference-hooks-configuration
…eaders sent with every verdict request so your AI security server can authenticate the caller. Header values are stored encrypted and never shown again; after saving, only the header names are display…
ip-allowlist
Claude Developer Platform · in the page
manage-claude/ip-allowlist
…rt [key expiration](https://platform.claude.com/docs/en/manage-claude/authentication#key-expiration), or move to [Workload Identity Federation](https://platform.claude.com/docs/en/manage-claude/worklo…
api
Claude Developer Platform · in the page
manage-claude/opentelemetry/api
…tells the API your observability platform’s OTLP endpoint and how to authenticate with it. ## What you need * **The admin role** in a Claude Console organization, to add and change destinations. Wi…
organization-webhooks
Claude Developer Platform · in the page
manage-claude/organization-webhooks
…//platform.claude.com/docs/en/manage-claude/admin-api-keys). * An [OAuth bearer token](https://platform.claude.com/docs/en/manage-claude/admin-api#oauth-bearer-token) with the `org:admin` scope. *…
plugins-api
Claude Developer Platform · in the page
manage-claude/plugins-api
…uccess`, `in_progress`, `failed_content`, `failed_transient`, `failed_auth`, or `failed_limits`. `null` until a synchronization is first attempted, which never occurs for a marketplace whose source is…
rate-limits-api
Claude Developer Platform · in the page
manage-claude/rate-limits-api
…ttps://platform.claude.com/docs/en/manage-claude/admin-api-keys), an OAuth token with the `org:admin` scope, or a personal or service account key that isn’t scoped to a workspace; workspace API keys d…
usage-cost-analytics-api
Claude Developer Platform · in the page
manage-claude/usage-cost-analytics-api
…erve Claude Console and Claude Enterprise organizations. <Check> **Authentication** Claude Console organizations use an [Admin API key](https://platform.claude.com/docs/en/manage-claude/admin-ap…
First request
Claude Developer Platform · in the page
manage-claude/usage-cost-api
…ttps://platform.claude.com/docs/en/manage-claude/admin-api-keys), an OAuth token with the `org:admin` scope, or a personal or service account key that isn’t scoped to a workspace; workspace API keys d…
user-management
Claude Developer Platform · in the page
manage-claude/user-management
…1/organizations/`. Claude Console and Claude Enterprise organizations authenticate with different [Admin API keys](https://platform.claude.com/docs/en/manage-claude/admin-api-keys) and each have acces…
user-profiles
Claude Developer Platform · in the page
manage-claude/user-profiles
…aude/admin-api-keys). On Claude Platform on AWS, use its base URL and authentication. ## Create a profile for each end customer Create one profile for each end customer whose traffic you send to Cla…
wif-admin-api
Claude Developer Platform · in the page
manage-claude/wif-admin-api
…nage-claude/admin-api). ## Prerequisites Every request on this page authenticates with an OAuth bearer token that carries the `org:admin` scope. Anthropic grants the scope only to organization membe…
aws
Claude Developer Platform · in the page
manage-claude/wif-providers/aws
…tform.claude.com/docs/en/manage-claude/wif-providers/aws description: Authenticate AWS workloads on Lambda, EC2, ECS, or EKS to the Claude API with Workload Identity Federation and STS-issued identity…
Create the app registration that represents the Claude API audience.
Claude Developer Platform · in the page
manage-claude/wif-providers/azure
…rkloads can call Claude without static API keys. --- Azure workloads authenticate to the Claude API by presenting a JSON Web Token (JWT) issued by Microsoft Entra ID, then exchanging it for a short-l…
gcp
Claude Developer Platform · in the page
manage-claude/wif-providers/gcp
…Google ``` Or, with the gcloud CLI: ```bash gcloud auth print-identity-token \ --audiences="https://api.anthropic.com" \ --include-email ``` For the SDK equival…
github-actions
Claude Developer Platform · in the page
manage-claude/wif-providers/github-actions
…e.com/docs/en/manage-claude/wif-providers/github-actions description: Authenticate GitHub Actions workflows to the Claude API with short-lived identity tokens instead of long-lived API keys. --- Ever…
kubernetes
Claude Developer Platform · in the page
manage-claude/wif-providers/kubernetes
…laude.com/docs/en/manage-claude/wif-providers/kubernetes description: Authenticate to the Claude API from self-managed Kubernetes clusters using projected service account tokens. --- Self-managed Kub…
okta
Claude Developer Platform · in the page
manage-claude/wif-providers/okta
…issuing OIDC access tokens to a **service application** through the OAuth 2.0 `client_credentials` grant. Your workload authenticates to Okta (typically with `private_key_jwt`, so you store no shared…
Replace NODE_UID with the node's UID:
Claude Developer Platform · in the page
manage-claude/wif-providers/spiffe
…rm.claude.com/docs/en/manage-claude/wif-providers/spiffe description: Authenticate SPIFFE workloads to the Claude API using JWT-SVIDs from SPIRE or any other SPIFFE-conformant issuer. --- [SPIFFE](ht…
wif-reference
Claude Developer Platform · in the page
manage-claude/wif-reference
…ederation#identity-providers). ## Token exchange request `POST /v1/oauth/token` accepts a JSON body using the [RFC 7523](https://www.rfc-editor.org/rfc/rfc7523) `jwt-bearer` grant. The SDK builds th…
workload-identity-federation
Claude Developer Platform · in the page
manage-claude/workload-identity-federation
…e.com/docs/en/manage-claude/workload-identity-federation description: Authenticate workloads to the Claude API with short-lived identity tokens from your own identity provider instead of long-lived st…
workspaces
Claude Developer Platform · in the page
manage-claude/workspaces
…orkspace ID header](https://platform.claude.com/docs/en/manage-claude/authentication#select-a-workspace) on each request to choose the workspace. The key’s user or service account must have access to…
choosing-an-environment
Claude Developer Platform · in the page
managed-agents/choosing-an-environment
…hardening, their network limits, and the environment key your worker authenticates with | | Network reach | Network rules you set on the environment…
DCF Model Rubric
Claude Developer Platform · in the page
managed-agents/define-outcomes
…``` </CodeGroup> ## Next steps <CardGroup cols={3}> <Card title="Authenticate with vaults" icon="fingerprint" href="https://platform.claude.com/docs/en/managed-agents/vaults"> Register per-us…
environments
Claude Developer Platform · in the page
managed-agents/environments
…| | Containers | `registry-1.docker.io`, `auth.docker.io`, `production.cloudflare.docker.com`, `download.docker.com`, `ghcr.io`…
event-deltas
Claude Developer Platform · in the page
managed-agents/event-deltas
…st-effort display aid, and the buffered `agent.message` is always the authoritative record. A client that ignores previews still receives a complete, correct stream. ## Opt in to previews Previews a…
github
Claude Developer Platform · in the page
managed-agents/github
…e GitHub MCP server. The agent definition holds the server URL but no authentication token: <CodeGroup defaultLanguage="CLI"> ```bash cURL curl -fsS https://api.anthropic.com/v1/agents \ -H "…
mcp-connector
Claude Developer Platform · in the page
managed-agents/mcp-connector
…agent connects to, by name and URL. 2. **Session creation** supplies authentication for those servers by referencing a pre-registered vault (see [Authenticate with vaults](https://platform.claude.com…
migration
Claude Developer Platform · in the page
managed-agents/migration
…| | `mcp_servers` (typescript: `mcpServers`) configured and authenticated in one place | Declare servers on the Agent; provide credentials through a [Vault](https://platform.claude.…
multiagent-orchestration
Claude Developer Platform · in the page
managed-agents/multiagent-orchestration
…n apply to every thread. Two implications for your integration: * To authenticate MCP servers, include a vault credential for every MCP server used across all agents. * To limit an agent’s access, de…
onboarding
Claude Developer Platform · in the page
managed-agents/onboarding
…ll-width editor. * **MCP servers:** Add remote MCP servers by URL and authenticate your agent to take action on your behalf. * **Tools:** Extend your agent’s capabilities using a pre-built agent tools…
quickstart
Claude Developer Platform · in the page
managed-agents/quickstart
…sign in to the one you have. </Step> <Step title="Choose how to authenticate"> Signing in with the CLI is recommended for local development. Follow the steps for one of the following op…
secure-deployment
Claude Developer Platform · in the page
managed-agents/secure-deployment
…| How your application authenticates to the Claude API | Where you can, a Workload Identity Federation rule enabled in one works…
secure-deployment-monitoring
Claude Developer Platform · in the page
managed-agents/secure-deployment-monitoring
…| | MCP OAuth credentials that cannot refresh | The `vault_credential.refresh_failed` webhook…
spawn.sh: called once per claimed work item
Claude Developer Platform · in the page
managed-agents/self-hosted-sandboxes
…n environment key (generated in the Console in the steps that follow) authenticates the worker to its queue; your Claude API key creates sessions and reads queue stats from outside the worker host. Ke…
self-hosted-sandboxes-custom-tools
Claude Developer Platform · in the page
managed-agents/self-hosted-sandboxes-custom-tools
…ou configured for the sandbox, and nothing more. The environment key authorizes posting custom tool results, so your Claude API key stays off the worker host. <Note> Serving custom tools requires…
self-hosted-sandboxes-operations
Claude Developer Platform · in the page
managed-agents/self-hosted-sandboxes-operations
…op calls on this page run from your monitoring or operations tooling, authenticated with your organization API key. The worker helpers handle the claim and keep-alive loop, so you don’t call those end…
self-hosted-sandboxes-reference
Claude Developer Platform · in the page
managed-agents/self-hosted-sandboxes-reference
…| | `--environment-key` | Authenticates the worker with this environment. Also reads from `ANTHROPIC_ENVIRONMENT_KEY`.…
self-hosted-sandboxes-security
Claude Developer Platform · in the page
managed-agents/self-hosted-sandboxes-security
…rotation.** The environment service key (`ANTHROPIC_ENVIRONMENT_KEY`) authorizes polling your environment’s work queue and submitting results back to sessions. Store it in a secrets manager, not in en…
self-hosted-sandboxes-workers
Claude Developer Platform · in the page
managed-agents/self-hosted-sandboxes-workers
…lways-on worker Start a worker that polls the queue continuously. It authenticates with the [environment key](https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes#run-your-first-s…
session-observability
Claude Developer Platform · in the page
managed-agents/session-observability
…, php: `listCost`; csharp, go: `ListCost`). The session figure is the authoritative one. ### Read usage from the stream You don’t have to poll the session to observe these totals. The `session.usage…
sessions
Claude Developer Platform · in the page
managed-agents/sessions
…ard list cost, and how budgets behave in multiagent sessions. ## MCP authentication through vaults If your agent uses MCP tools that require authentication, pass `vault_ids` (java: `vaultIds`; php:…
skills
Claude Developer Platform · in the page
managed-agents/skills
…ling (`pptx`, `xlsx`, `docx`, `pdf`). * **Custom skills:** Skills you author and upload to your workspace. To learn how to author custom skills, see [Agent Skills](https://platform.claude.com/docs/en…
vaults
Claude Developer Platform · in the page
managed-agents/vaults
--- title: Authenticate with vaults url: https://platform.claude.com/docs/en/managed-agents/vaults description: Register per-user credentials when creating sessions. featureMetadata: topic: titl…
webhooks
Claude Developer Platform · in the page
managed-agents/webhooks
…| | `vault_credential.refresh_failed` | An `mcp_oauth` credential cannot be refreshed (invalid refresh token, or irrecoverable error from the OAuth server).…
migration-guide
Claude Developer Platform · in the page
models/fable-5-2/migration-guide
…ailable under zero data retention (ZDR) arrangements unless expressly authorized by Anthropic, and are designated Covered Models, the same as Claude Fable 5.1 and Claude Mythos 5.1. On the Claude API,…