581 pages for credentials.

php Claude Developer Platform · in the page cli-sdks-libraries/sdks/php …y):** `Anthropic\Bedrock\Client`. Use `::fromEnvironment()` or `::withCredentials()`. * **Claude Platform on AWS:** `Anthropic\Aws\Client` (requires `aws/aws-sdk-php` as a soft dependency). Use `new A… typescript Claude Developer Platform · in the page cli-sdks-libraries/sdks/typescript …* Web browsers: disabled by default to avoid exposing your secret API credentials (see [API key best practices](https://support.claude.com/en/articles/9767949-api-key-best-practices-keeping-your-keys-… get-api-key Claude Developer Platform · in the page get-api-key …ge-claude/authentication) for complete details, including short-lived credentials with Workload Identity Federation. ## API keys and the Admin API The [Admin API](https://platform.claude.com/docs/en… get-started Claude Developer Platform · in the page get-started …``` Once login is completed, the SDKs and CLI will pick up your credentials automatically. </Step> </Steps> **API key** <Steps continued> <Step title="Create an API key" stepNumber={3}>… intro Claude Developer Platform · in the page intro …claude.com/docs/en/get-started) </Step> <Step title="Secure your credentials"> Set an expiration when you create your API key. Keep the key out of source control, client-side code, and prompt… access-transparency Claude Developer Platform · in the page manage-claude/access-transparency ….claude.com/docs/en/manage-claude/compliance-activity-feed). Existing credentials, audit, export, and SIEM integrations for the Compliance API still apply. * **Events are tamper-evident.** Each event… admin-api Claude Developer Platform · in the page manage-claude/admin-api …on AWS. ## Authentication The Admin API accepts any of these three credentials: * An **Admin API key** (starting with `sk-ant-admin...`) sent in the `x-api-key` header. Only organization members w… First request Claude Developer Platform · in the page manage-claude/claude-code-analytics-api …ify and expand Claude Code adoption internally <Check> **Admin API credentials required.** These endpoints are part of the Admin API. You can access them using an [Admin API key](https://platform.c… claude-tag-api Claude Developer Platform · in the page manage-claude/claude-tag-api …ctions): a named set of access, such as connectors, repositories, and credentials, that Claude can use in a channel or workspace. Organization owners create, edit, and delete Bundles in claude.ai. Thi… compliance-api-access Claude Developer Platform · in the page manage-claude/compliance-api-access …, and projects. Treat Compliance Access Keys like production database credentials: store them in a secrets manager, never in source control or SIEM forwarder configuration. </Warning> <Steps> <Step… compliance-sessions Claude Developer Platform · in the page manage-claude/compliance-sessions …ned as they were sent apart from size truncation. Nothing masks URLs, credentials, or personal data in that content, so treat transcripts as sensitive. The transcript omits or replaces the following:… inference-hooks-configuration Claude Developer Platform · in the page manage-claude/inference-hooks-configuration …ue. Changing the endpoint URL clears all stored header values so your credentials are never sent to a new destination; re-enter them after a URL change. Header names must use standard HTTP token chara… api Claude Developer Platform · in the page manage-claude/opentelemetry/api …r put a load balancer or reverse proxy in front of the Collector. * **Credentials for the endpoint**, such as an API key. ## 1. Add a destination <Info> When you add a telemetry destination, Anthr… organization-webhooks Claude Developer Platform · in the page manage-claude/organization-webhooks …request access, contact your Anthropic account team. * One of these credentials: * An [Admin API key](https://platform.claude.com/docs/en/manage-claude/admin-api-keys). * An [OAuth bearer token… plugins-api Claude Developer Platform · in the page manage-claude/plugins-api …is installed. | | `credential-exposure` | Contains live credentials, or collects credentials or tokens from the member’s environment. | | `guardrail-t… rate-limits-api Claude Developer Platform · in the page manage-claude/rate-limits-api …mation instead of editing them in the Console. <Check> **Admin API credentials required.** These endpoints are part of the Admin API. You can access them using an [Admin API key](https://platform.c… usage-cost-analytics-api Claude Developer Platform · in the page manage-claude/usage-cost-analytics-api …-on-google-cloud/anthropic-managed#making-requests) with Google Cloud credentials instead of an Admin API key. The `/usage` endpoint needs the `usageAnalytics.list` [IAM permission](https://platform.c… First request Claude Developer Platform · in the page manage-claude/usage-cost-api …data analysis than what’s available in Console <Check> **Admin API credentials required.** These endpoints are part of the Admin API. You can access them using an [Admin API key](https://platform.c… user-management Claude Developer Platform · in the page manage-claude/user-management …e request, or started soon after, can fail. The session then gets new credentials without the person signing in again, and continues. The person’s [routines](https://code.claude.com/docs/en/routines)… user-profiles Claude Developer Platform · in the page manage-claude/user-profiles …-cloud/anthropic-managed#making-requests) directly, with Google Cloud credentials instead of an API key. Claude Models on Google Cloud (Google managed) and Amazon Bedrock don’t have the `/v1/user_pro… wif-admin-api Claude Developer Platform · in the page manage-claude/wif-admin-api …dmin --scope "org:admin" export ANTHROPIC_AUTH_TOKEN=$(ant auth print-credentials --profile admin --access-token) ``` Interactive tokens are short-lived. If requests start returning 401, rerun the `e… aws Claude Developer Platform · in the page manage-claude/wif-providers/aws …WebIdentityToken.html) API, which works anywhere the workload has AWS credentials: Lambda, EC2, ECS, and EKS. EKS workloads can alternatively use the [Kubernetes projected-token path](https://platform… Create the app registration that represents the Claude API audience. Claude Developer Platform · in the page manage-claude/wif-providers/azure …t anthropic import requests from anthropic import WorkloadIdentityCredentials # The audience app registration's identifier URI (see Register the token audience). AUDIENCE = "api://<APP_ID>"… gcp Claude Developer Platform · in the page manage-claude/wif-providers/gcp …import google.oauth2.id_token from anthropic import WorkloadIdentityCredentials AUDIENCE = "https://api.anthropic.com" def fetch_google_identity_token() -> str: request = google.auth.tr… okta Claude Developer Platform · in the page manage-claude/wif-providers/okta …ess tokens to a **service application** through the OAuth 2.0 `client_credentials` grant. Your workload authenticates to Okta (typically with `private_key_jwt`, so no shared secret is stored), receive… Replace NODE_UID with the node's UID: Claude Developer Platform · in the page manage-claude/wif-providers/spiffe …os import anthropic from anthropic import WorkloadIdentityCredentials from spiffe import JwtSource AUDIENCE = "https://api.anthropic.com" # Connects to the SPIRE Agent… wif-reference Claude Developer Platform · in the page manage-claude/wif-reference …lanking them. </Warning> ### Credential precedence The SDK resolves credentials in this order. The first source that yields a credential wins. | Order | Source… workload-identity-federation Claude Developer Platform · in the page manage-claude/workload-identity-federation …workspace API key *is* a credential, whereas a service account *has* credentials. You can more easily audit which workloads acted as which service account. ### Federation issuers A **federation iss… choosing-an-environment Claude Developer Platform · in the page managed-agents/choosing-an-environment …skills#load-skills-from-a-github-repository). * [Environment variable credentials](https://platform.claude.com/docs/en/managed-agents/vaults#add-a-credential) in vaults. * The [preinstalled runtimes a… DCF Model Rubric Claude Developer Platform · in the page managed-agents/define-outcomes …form.claude.com/docs/en/managed-agents/vaults"> Register per-user credentials when creating sessions. </Card> <Card title="Session event stream" icon="lightning" href="https://platform.claude… environments Claude Developer Platform · in the page managed-agents/environments …he sandbox can leave it:** This includes files, tool outputs, and any credentials or secrets you put in the sandbox. * **Fetched content can steer the agent:** Webpages, API responses, and other conte… mcp-connector Claude Developer Platform · in the page managed-agents/mcp-connector …gent definitions while letting each session authenticate with its own credentials. ## Declare MCP servers on the agent Specify MCP servers in the `mcp_servers` (java, php: `mcpServers`; csharp: `Mcp… migration Claude Developer Platform · in the page managed-agents/migration …ticated in one place | Declare servers on the Agent; provide credentials through a [Vault](https://platform.claude.com/docs/en/managed-agents/vaults) on the Session.… multiagent-orchestration Claude Developer Platform · in the page managed-agents/multiagent-orchestration …w it works All agents share the same sandbox, filesystem, and [vault credentials](https://platform.claude.com/docs/en/managed-agents/vaults), but each agent runs in its own **session thread**, a cont… quickstart Claude Developer Platform · in the page managed-agents/quickstart …``` Once login is completed, the SDKs and CLI will pick up your credentials automatically. </Step> </Steps> **API key** <Steps continued> <Step title="Create an API key" stepNumber={3}>… secure-deployment Claude Developer Platform · in the page managed-agents/secure-deployment …| | [Keep credentials in vaults](https://platform.claude.com/docs/en/managed-agents/secure-deployment#keep-credentials-in-vaults)… secure-deployment-monitoring Claude Developer Platform · in the page managed-agents/secure-deployment-monitoring …| | MCP OAuth credentials that cannot refresh | The `vault_credential.refresh_failed` webhook… secure-deployment-risks Claude Developer Platform · in the page managed-agents/secure-deployment-risks …key to an outside host, or uses it to read every customer’s orders | [Credentials in vaults](https://platform.claude.com/docs/en/managed-agents/secure-deployment#keep-credentials-in-vaults), [limited… spawn.sh: called once per claimed work item Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes …n Anthropic SDK** (Python, TypeScript, or Go) on the worker host. * **Credentials:** an environment key (generated in the Console in the steps that follow) authenticates the worker to its queue; your… self-hosted-sandboxes-custom-tools Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes-custom-tools …it runs inside your sandbox, the tool reaches the internal services, credentials, and network egress you configured for the sandbox, and nothing more. The environment key authorizes posting custom t… self-hosted-sandboxes-security Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes-security …to a single user’s sessions instead of a shared pool. * **Per-session credentials.** Each work item your worker claims can carry a per-session `secret` (csharp, go: `Secret`), which the worker uses in… sessions Claude Developer Platform · in the page managed-agents/sessions …Ds`) at session creation to reference a vault containing stored OAuth credentials. Anthropic manages token refresh on your behalf. See [Authenticate with vaults](https://platform.claude.com/docs/en/ma… tools-web-restrictions Claude Developer Platform · in the page managed-agents/tools-web-restrictions …Punycode) form | A domain is also rejected if it contains credentials or whitespace, or if one of its labels starts or ends with a hyphen. `localhost` and hosts ending in `.localhost`, `.l… vaults Claude Developer Platform · in the page managed-agents/vaults …aude.com/docs/en/managed-agents/vaults description: Register per-user credentials when creating sessions. featureMetadata: topic: title: Managed Agents url: https://platform.claude.com/docs/… workflow-runs Claude Developer Platform · in the page managed-agents/workflow-runs …thing the session depends on fails, such as the model, an MCP server, credentials, or billing, the failing thread’s stream gets a `session.error`. That doesn’t end a run by itself. But if it makes one… whats-new-fable-5-1 Claude Developer Platform · in the page models/fable-5-1/whats-new-fable-5-1 …on-tool), for example) carry signed [C2PA](https://c2pa.org/) Content Credentials when you retrieve them through the [Files API](https://platform.claude.com/docs/en/build-with-claude/files) on the Cla… overview Claude Developer Platform · in the page release-notes/overview …/en/agents-and-tools/tool-use/code-execution-tool) carry C2PA Content Credentials when you retrieve them through the [Files API](https://platform.claude.com/docs/en/build-with-claude/files) on the Cla… increase-consistency Claude Developer Platform · in the page test-and-evaluate/strengthen-guardrails/increase-consistency …enter 2. Open GlobalProtect, enter "vpn.ourcompany.com" 3. Use AD credentials to log in</content> </entry> </kb> When helping users, always check the knowledge base first. Respond in this… Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …hrome.md) aren't available through Console API keys or cloud-provider credentials alone. If you deploy through Amazon Bedrock, Google Cloud's Agent Platform, or Microsoft Foundry, plan whether develop… Use Claude Code features in the SDK Claude Code CLI · in the page agent-sdk/claude-code-features …laude.com/docs/en/authentication.md#anthropic-profiles-and-federation-credentials) | Endpoint policy: remove the managed settings file, plist, or registry policy from the host. Server-managed settings…