662 pages for credential.

user-profiles Claude Developer Platform · in the page manage-claude/user-profiles …th `InvokeModel` or `Converse`. You use your Anthropic organization's credentials only to create and manage profiles. Inference stays on your existing AWS or Google Cloud credentials. | Platform… wif-admin-api Claude Developer Platform · in the page manage-claude/wif-admin-api …earer token. Logging in with `--profile admin` stores the `org:admin` credential under its own profile name and also makes it the CLI's active profile. The exported variable applies to every SDK and C… aws Claude Developer Platform · in the page manage-claude/wif-providers/aws …WebIdentityToken.html) API, which works anywhere the workload has AWS credentials: Lambda, EC2, ECS, and EKS. EKS workloads can alternatively use the [Kubernetes projected-token path](https://platform… Create the app registration that represents the Claude API audience. Claude Developer Platform · in the page manage-claude/wif-providers/azure …re Identity client library, get the Entra token from it (`DefaultAzureCredential` with the scope `api://<APP_ID>/.default`) instead of calling the token endpoints directly. Supply it to `identity_toke… gcp Claude Developer Platform · in the page manage-claude/wif-providers/gcp …import google.oauth2.id_token from anthropic import WorkloadIdentityCredentials AUDIENCE = "https://api.anthropic.com" def fetch_google_identity_token() -> str: request = google.auth.tr… github-actions Claude Developer Platform · in the page manage-claude/wif-providers/github-actions …QUEST_TOKEN`. Call the request URL with the request token as a bearer credential and your chosen audience as a query parameter, then write the returned JSON Web Token (JWT) to a file: ```yaml - name:… okta Claude Developer Platform · in the page manage-claude/wif-providers/okta …ess tokens to a **service application** through the OAuth 2.0 `client_credentials` grant. Your workload authenticates to Okta (typically with `private_key_jwt`, so no shared secret is stored), receive… Replace NODE_UID with the node's UID: Claude Developer Platform · in the page manage-claude/wif-providers/spiffe …os import anthropic from anthropic import WorkloadIdentityCredentials from spiffe import JwtSource AUDIENCE = "https://api.anthropic.com" # Connects to the SPIRE Agent… wif-reference Claude Developer Platform · in the page manage-claude/wif-reference …iable that is set to an empty string can still occupy its slot in the credential precedence chain. Unset unused credential variables rather than blanking them. </Warning> ### Credential precedence T… workload-identity-federation Claude Developer Platform · in the page manage-claude/workload-identity-federation …ey distinction versus a workspace API key: a workspace API key *is* a credential, whereas a service account *has* credentials. You can more easily audit which workloads acted as which service account.… workspaces Claude Developer Platform · in the page manage-claude/workspaces …d: wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ ``` The header is absent when the credential doesn't resolve to a workspace (for example, on Admin API requests) or when the request fails before authentication com… choosing-an-environment Claude Developer Platform · in the page managed-agents/choosing-an-environment …skills#load-skills-from-a-github-repository). * [Environment variable credentials](https://platform.claude.com/docs/en/managed-agents/vaults#add-a-credential) in vaults. * The [pre-installed runtimes… DCF Model Rubric Claude Developer Platform · in the page managed-agents/define-outcomes …form.claude.com/docs/en/managed-agents/vaults"> Register per-user credentials when creating sessions. </Card> <Card title="Session event stream" icon="lightning" href="https://platform.claude… environments Claude Developer Platform · in the page managed-agents/environments …including uploads such as `git push` and package publishing, with any credential the command supplies. If the agent processes untrusted input (repository files, fetched web content, or third-party too… mcp-connector Claude Developer Platform · in the page managed-agents/mcp-connector …gent definitions while letting each session authenticate with its own credentials. ## Declare MCP servers on the agent Specify MCP servers in the `mcp_servers` (java, php: `mcpServers`; csharp: `Mcp… migration Claude Developer Platform · in the page managed-agents/migration …ticated in one place | Declare servers on the Agent; provide credentials through a [Vault](https://platform.claude.com/docs/en/managed-agents/vaults) on the Session.… multiagent-orchestration Claude Developer Platform · in the page managed-agents/multiagent-orchestration …w it works All agents share the same sandbox, filesystem, and [vault credentials](https://platform.claude.com/docs/en/managed-agents/vaults), but each agent runs in its own **session thread**, a cont… secure-deployment Claude Developer Platform · in the page managed-agents/secure-deployment …| | [Keep credentials in vaults](https://platform.claude.com/docs/en/managed-agents/secure-deployment#keep-credentials-in-vaults)… secure-deployment-monitoring Claude Developer Platform · in the page managed-agents/secure-deployment-monitoring …| | MCP OAuth credentials that cannot refresh | The `vault_credential.refresh_failed` webhook… secure-deployment-risks Claude Developer Platform · in the page managed-agents/secure-deployment-risks …to complete the task you gave it. For example, it might use a tool or credential it can reach to get past an obstacle. The same settings limit what such a step can reach, and an [offline reviewer](htt… spawn.sh: called once per claimed work item Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes …n Anthropic SDK** (Python, TypeScript, or Go) on the worker host. * **Credentials:** an environment key (generated in the Console in the steps that follow) authenticates the worker to its queue; your… self-hosted-sandboxes-custom-tools Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes-custom-tools …it runs inside your sandbox, the tool reaches the internal services, credentials, and network egress you configured for the sandbox, and nothing more. The environment key authorizes posting custom t… self-hosted-sandboxes-operations Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes-operations …`ANTHROPIC_API_KEY` on the worker host exposes an organization-scoped credential to agent tool calls. </Warning> ## Read queue depth `GET /v1/environments/{environment_id}/work/stats` (python, types… self-hosted-sandboxes-security Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes-security …to a single user's sessions instead of a shared pool. * **Per-session credentials.** Each work item your worker claims can carry a per-session `secret` (csharp, go: `Secret`), which the worker uses in… sessions Claude Developer Platform · in the page managed-agents/sessions …Ds`) at session creation to reference a vault containing stored OAuth credentials. Anthropic manages token refresh on your behalf. See [Authenticate with vaults](https://platform.claude.com/docs/en/ma… tools-web-restrictions Claude Developer Platform · in the page managed-agents/tools-web-restrictions …Punycode) form | A domain is also rejected if it contains credentials or whitespace, or if one of its labels starts or ends with a hyphen. `localhost` and hosts ending in `.localhost`, `.l… vaults Claude Developer Platform · in the page managed-agents/vaults …aude.com/docs/en/managed-agents/vaults description: Register per-user credentials when creating sessions. featureMetadata: topic: title: Managed Agents url: https://platform.claude.com/docs/… webhooks Claude Developer Platform · in the page managed-agents/webhooks …| | `vault.archived` | Vault archived. A `vault_credential.archived` event is also emitted for each underlying credential.… workflow-runs Claude Developer Platform · in the page managed-agents/workflow-runs …thing the session depends on fails, such as the model, an MCP server, credentials, or billing, the failing thread's stream gets a `session.error`. That doesn't end a run by itself. But if it makes one… whats-new-fable-5-1 Claude Developer Platform · in the page models/fable-5-1/whats-new-fable-5-1 …on-tool), for example) carry signed [C2PA](https://c2pa.org/) Content Credentials when you retrieve them through the [Files API](https://platform.claude.com/docs/en/build-with-claude/files) on the Cla… overview Claude Developer Platform · in the page release-notes/overview …/en/agents-and-tools/tool-use/code-execution-tool) carry C2PA Content Credentials when you retrieve them through the [Files API](https://platform.claude.com/docs/en/build-with-claude/files) on the Cla… increase-consistency Claude Developer Platform · in the page test-and-evaluate/strengthen-guardrails/increase-consistency …enter 2. Open GlobalProtect, enter "vpn.ourcompany.com" 3. Use AD credentials to log in</content> </entry> </kb> When helping users, always check the knowledge base first. Respond in this… Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …hrome.md) aren't available through Console API keys or cloud-provider credentials alone. If you deploy through Amazon Bedrock, Google Cloud's Agent Platform, or Microsoft Foundry, plan whether develop… Use Claude Code features in the SDK Claude Code CLI · in the page agent-sdk/claude-code-features …atform-availability) when the session authenticates with a qualifying credential, such as an organization OAuth login, a directly configured API key, or a `user_oauth` [Anthropic profile](/docs/en/aut… Track cost and usage Claude Code CLI · in the page agent-sdk/cost-tracking …k. Because it sets `CLAUDE_CODE_USE_BEDROCK`, it requires working AWS credentials for [Amazon Bedrock](/docs/en/amazon-bedrock.md); without them the query fails. ```python Python theme={null} from cl… Intercept and control agent behavior with hooks Claude Code CLI · in the page agent-sdk/hooks …analytics * **Transform inputs and outputs** to sanitize data, inject credentials, or redirect file paths * **Require human approval** for sensitive actions like database writes or API calls * **Track… Hosting the Agent SDK Claude Code CLI · in the page agent-sdk/hosting …ffic through an egress proxy that enforces domain allowlists, injects credentials, and logs requests. See [Secure Deployment](/docs/en/agent-sdk/secure-deployment.md) for the full pattern. For inboun… Connect to external tools with MCP Claude Code CLI · in the page agent-sdk/mcp …MCP servers require authentication to access external services. Pass credentials through environment variables in the server configuration. ### Pass credentials via environment variables Use the `e… Observability with OpenTelemetry Claude Code CLI · in the page agent-sdk/observability …/monitoring-usage.md#standard-attributes) to every event based on the credential it uses to call Anthropic. When you build an application that serves many end users from one deployment, these attribut… Agent SDK reference - Python Claude Code CLI · in the page agent-sdk/python …tings are fetched when the session authenticates with an organization credential on an [eligible configuration](/docs/en/server-managed-settings.md#platform-availability). For inputs read regardless o… Quickstart Claude Code CLI · in the page agent-sdk/quickstart …et `CLAUDE_CODE_USE_BEDROCK=1` environment variable and configure AWS credentials * **Claude Platform on AWS**: set `CLAUDE_CODE_USE_ANTHROPIC_AWS=1` and `ANTHROPIC_AWS_WORKSPACE_ID`, then configure A… Securely deploying AI agents Claude Code CLI · in the page agent-sdk/secure-deployment …ide to securing Claude Code and Agent SDK deployments with isolation, credential management, and network controls Claude Code and the Agent SDK can execute code, access files, and interact with exter… Persist sessions to external storage Claude Code CLI · in the page agent-sdk/session-storage …Each adapter takes a pre-configured client instance, so you control credentials, TLS, region, and pooling. The following example wires the object-store adapter into `query()` and then resumes from i… Extend agents with skills Claude Code CLI · in the page agent-sdk/skills …ties including: - SQL injection risks - XSS vulnerabilities - Exposed credentials - Insecure configurations ``` Once the file exists, the skill is available through the SDK. Claude invokes it when a… Agent SDK reference - TypeScript Claude Code CLI · in the page agent-sdk/typescript …tings are fetched when the session authenticates with an organization credential on an [eligible configuration](/docs/en/server-managed-settings.md#platform-availability). See [Use Claude Code feature… Manage multiple agents with agent view Claude Code CLI · in the page agent-view …settings-file) shows the block and which settings file to use for the credential. If you export a gateway `ANTHROPIC_BASE_URL` only in your shell instead, it reaches a background session, together wi… Claude Code on Amazon Bedrock Claude Code CLI · in the page amazon-bedrock …ptional - only needed if you don't have another mechanism for getting credentials) * Appropriate IAM permissions To sign in with your own Amazon Bedrock credentials, follow [Sign in with Amazon Bedro… Share session output as artifacts Claude Code CLI · in the page artifacts …nding on what their accounts can access. The page never sees anyone's credentials; claude.ai makes the calls on the page's behalf. * **Viewers approve access first**: claude.ai asks each viewer for pe… Authentication Claude Code CLI · in the page authentication …re your first session, or you rebuilt a dev container that keeps your credentials in a [volume](/docs/en/devcontainer.md#persist-authentication-and-settings-across-rebuilds). If you see the login prom… Auto mode classifier request charges Claude Code CLI · in the page auto-mode-classifier-billing …it. * **Server-side checks haven't reached your platform, region, or credential yet**: whether a platform or region performs them depends on that platform's rollout. If you see the notice with no gat…