50 pages for audience.

Create the app registration that represents the Claude API audience. Claude Developer Platform · title manage-claude/wif-providers/azure commerce-agents Claude Developer Platform · in the page about-claude/use-case-guides/commerce-agents …s guardrails, with a margin preview. * Draft marketing campaigns with audiences, placements, and budget. Its five skills cover performance insights, inventory and operations, catalog and listings, pr… Create the full URL from the GitHub repository Claude Developer Platform · in the page about-claude/use-case-guides/legal-summarization …ability"> The text should be clear and easy to understand. If the audience is not legal experts, the summarization should not include legal jargon that could confuse the audience. </Accordion>… Edit docker-compose.yaml: increment the integer in the setup service's Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/deploy-compose …er the issuer, set the rule's subject, and mint the token; the rule's audience must match the audience you request when minting. Run the setup component: ```bash docker compo… deploy-helm Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/deploy-helm …t | `system:serviceaccount:mcp-tunnel:mcp-tunnel-setup` | | Audience | `api.anthropic.com` (the chart's default; no scheme) | | Scope | `workspace:manage_tunnels`… troubleshooting Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/troubleshooting …e Workload Identity Federation reference; the failure modes (subject, audience, issuer, JWKS, lifetime) are the same. Tunnels-specific causes: * The chart's default audience is `api.anthropic.com` (… Organization Claude Developer Platform · in the page api/beta/organization …wildcard-only value like `*`), `claims`, or `condition` is required; `audience` alone is not sufficient. - `audience: optional string or null` Exact match against the `aud` claim (any element… Federation Claude Developer Platform · in the page api/beta/organization/federation …wildcard-only value like `*`), `claims`, or `condition` is required; `audience` alone is not sufficient. - `audience: optional string or null` Exact match against the `aud` claim (any element… Rules Claude Developer Platform · in the page api/beta/organization/federation/rules …wildcard-only value like `*`), `claims`, or `condition` is required; `audience` alone is not sufficient. - `audience: optional string or null` Exact match against the `aud` claim (any element… Archive Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/archive …r this rule to apply. All populated matcher fields must pass. - `audience: optional string or null` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud… Create Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/create …wildcard-only value like `*`), `claims`, or `condition` is required; `audience` alone is not sufficient. - `audience: optional string or null` Exact match against the `aud` claim (any element… List Federation Rules Claude Developer Platform · in the page api/beta/organization/federation/rules/list …r this rule to apply. All populated matcher fields must pass. - `audience: optional string or null` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud… Get Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/retrieve …r this rule to apply. All populated matcher fields must pass. - `audience: optional string or null` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud… Update Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/update …ldcard-only value like `*`), `claims`, or `condition` is required; `audience` alone is not sufficient. - `audience: optional string or null` Exact match against the `aud` claim (any element… Compliance API Claude Developer Platform · in the page api/compliance …rified OIDC token. Carries the verified issuer, subject, and audience claims from the presented JWT. - `type: optional "federated_identity_actor"` default: federat… Activities Claude Developer Platform · in the page api/compliance/activities …rified OIDC token. Carries the verified issuer, subject, and audience claims from the presented JWT. - `type: optional "federated_identity_actor"` default: federat… Query compliance activities Claude Developer Platform · in the page api/compliance/activities/list …rified OIDC token. Carries the verified issuer, subject, and audience claims from the presented JWT. - `type: optional "federated_identity_actor"` default: federat… aws Claude Developer Platform · in the page manage-claude/wif-providers/aws …"jwks": { "type": "discovery" } } ``` **Federation rule:** Match the audience you pass to `GetWebIdentityToken` and the calling role's IAM role ARN in the `sub` claim. The `sub` value is the IAM role… gcp Claude Developer Platform · in the page manage-claude/wif-providers/gcp …erver returns a signed identity token on demand. Request it with the `audience` you intend to register on the Anthropic side, and include `format=full` so the response carries the `email` claim:… github-actions Claude Developer Platform · in the page manage-claude/wif-providers/github-actions …est URL with the request token as a bearer credential and your chosen audience as a query parameter, then write the returned JSON Web Token (JWT) to a file: ```yaml - name: Fetch GitHub OIDC token… kubernetes Claude Developer Platform · in the page manage-claude/wif-providers/kubernetes …re Kubernetes Project a service account token into your pod with the audience and lifetime that your federation rule expects. The `serviceAccountToken` projection writes a fresh JWT to the mount path… okta Claude Developer Platform · in the page manage-claude/wif-providers/okta …rization server (or create a new custom authorization server) with an audience, a scope, an access policy, and any custom claims you want to match on. The exact navigation depends on your Okta org co… Replace NODE_UID with the node's UID: Claude Developer Platform · in the page manage-claude/wif-providers/spiffe …ion rules in the Claude Console for your Anthropic organization. The audience value to request when fetching a JWT-SVID is always `https://api.anthropic.com`. Use this value in spiffe-helper's `jwt_a… wif-reference Claude Developer Platform · in the page manage-claude/wif-reference …ims`, or `condition` must be set; a `match` block that contains only `audience` (or no matchers at all) is rejected. This guards against rules that would accept every token from an issuer. | Matcher… workload-identity-federation Claude Developer Platform · in the page manage-claude/workload-identity-federation …t:prod:worker`, or with a trailing `*` for a prefix match), an exact `audience`, a map of exact claim values, a [CEL](https://cel.dev/) `condition` expression for complex logic, or any combination. At… claude-fable-5-1 Claude Developer Platform · in the page release-notes/system-prompts/claude-fable-5-1 …ze its own thoughts, assesses the most important thing to say for the audience, problem, and context, then shares that in the response. If Claude is making many tool calls, Claude can give the person… develop-tests Claude Developer Platform · in the page test-and-evaluate/develop-tests …le match expectations? How appropriate is its language for the target audience? </Accordion> <Accordion title="Privacy preservation"> What is a successful metric for how the model handles per… Share session output as artifacts Claude Code CLI · in the page artifacts …ggle, a version picker reading Sharing version 2, an Everyone at Acme audience selector, and a Copy link button. Below the header, the artifact page shows two mobile mockups side by side, a funnel cha… Configure auto mode Claude Code CLI · in the page auto-mode-config …ve rules treat as high-risk. The slots are Sensitive data locations & audiences, Sensitive remote targets, and Protected IaC scopes. Each defaults to a broad heuristic, such as treating any host or na… Claude Code changelog Claude Code CLI · in the page changelog …tten for someone other than the user: Claude now writes them for that audience and names it at the top of its reply * \[VSCode] Improved screen reader and keyboard accessibility in the slash-command… Use Claude Code GitHub Actions with cloud providers Claude Code CLI · in the page github-actions-cloud-providers …r with provider URL `https://token.actions.githubusercontent.com` and audience `sts.amazonaws.com` * Create an IAM role trusted by that provider as a web identity, and attach the scoped invoca… Claude Code GitLab CI/CD Claude Code CLI · in the page gitlab-ci-cd …okens:` block and exposes it as `GITLAB_OIDC_TOKEN`. Set `aud` to the audience value you configured on the IAM OIDC identity provider in AWS, for example your GitLab instance URL. ```yaml theme={null… Control MCP server access for your organization Claude Code CLI · in the page managed-mcp …d a header value you set here. Use a credential issued for that whole audience, or leave `headers` out and let each user sign in with OAuth. ### What an entry can contain Claude Code loads an entry… Choose a permission mode Claude Code CLI · in the page permission-modes …t of one. As of v2.1.198 this also blocks sending data from one to an audience the entry excludes * Routing a package install around your internal package registry to a public registry. As of v2.1.198… Prompt library Claude Code CLI · in the page prompt-library …log ``` **Say how you want the answer.** Name the format, length, or audience so the explanation fits how you'll use it. To make a format the default for every response, set an [output style](/docs/e… Verify session identity in self-hosted environments Claude Code CLI · in the page self-hosted-environments-identity …n if `iss` is not exactly `ccr`. </Step> <Step title="Verify the audience against your environment"> The `aud` claim is an array. Reject the token unless it contains your environment ID, whic… Extend Claude with skills Claude Code CLI · in the page skills …ills Skills can be distributed at different scopes depending on your audience: * **Project skills**: Commit `.claude/skills/` to version control * **Plugins**: Create a `skills/` directory in your [… Connect an authorization server Claude Documentation · in the page claude-tag/admins/federated-access/authorization-server …leave it empty if your server requires the token endpoint URL as the audience), and copy the **Issuer**, **JWKS URL**, **Audience**, and **Subject prefix** rows from the **Set your authorization serv… Connect an AWS role Claude Documentation · in the page claude-tag/admins/federated-access/aws …oud roles**, click **Connect an AWS role** and copy the **Issuer**, **Audience**, and **Subject prefix** rows from the **Set the role's trust policy to accept these values** card. Then click **Cancel*… Connect a gateway Claude Documentation · in the page claude-tag/admins/federated-access/connect-a-gateway …te TLS in front of it, because it listens on plain HTTP, and set its `audience` to the public address you register. * An organization can register up to 5 addresses, counting gateways and authorizatio… Connect a Google Cloud identity Claude Documentation · in the page claude-tag/admins/federated-access/gcp …| | Allowed audiences | Leave at Google's default, the provider's own resource name, which Google accepts with or without a leading `https:`… Limits for federated cloud access Claude Documentation · in the page claude-tag/admins/federated-access/limits …answers a request with 403 (current behavior, may change). | | Token audience | `sts.amazonaws.com`, the same for every organization. Condition the trust policy on the `sub` claim as well as… Federated cloud access Claude Documentation · in the page claude-tag/admins/federated-access/overview …y.anthropic.com/org/<your organization ID>/agent/<agent ID>`, and its audience names the destination. Claude reuses one token for a session's requests to the same gateway for about five minutes, or un… Identity token reference Claude Documentation · in the page claude-tag/admins/federated-access/token-reference …### Authorize on the subject A token with a valid signature, issuer, audience, and expiry can still belong to another organization, because one issuer serves every Claude Tag organization and every o… Troubleshoot federated cloud access Claude Documentation · in the page claude-tag/admins/federated-access/troubleshooting …s the token endpoint. Leave it empty to use the token endpoint as the audience." in the **Connect an authorization server** dialog… Commands Claude Tag understands Claude Documentation · in the page claude-tag/users/commands …be forked, since forking would carry the conversation to a different audience. If the fork can't be set up, Claude replies with a note only you can see, and nothing is posted in either channel. ##… Enterprise Managed Auth for connectors Claude Documentation · in the page connectors/building/enterprise-managed-auth …andling, your authorization server must verify the signature, issuer, audience, expiry, and subject on every request. Use the JWT validation built into your authorization server product. If you need t… Troubleshooting connectors Claude Documentation · in the page connectors/building/troubleshooting …metadata advertises a different issuer URL, validation can fail. * **Audience mismatch.** The [MCP authorization spec](https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#tok… Changelog Claude Documentation · in the page cowork/changelog …ration that sets `interactive` together with `inferenceVertexWorkforceAudience` and no `inferenceVertexOAuthClientId` is still read as Workforce Identity; after that it means Google sign-in, so set `w… Identity and access Claude Documentation · in the page government/tenant-admin/identity-and-access …e it's called the Assertion Consumer Service URL). * **SP Entity ID / Audience** is the unique identifier your identity provider uses to recognize this application. Providers label this field differen…