116 pages for issuer.

Issuers Claude Developer Platform · title api/beta/organization/federation/issuers Archive Federation Issuer Claude Developer Platform · title api/beta/organization/federation/issuers/archive Create Federation Issuer Claude Developer Platform · title api/beta/organization/federation/issuers/create List Federation Issuers Claude Developer Platform · title api/beta/organization/federation/issuers/list Get Federation Issuer Claude Developer Platform · title api/beta/organization/federation/issuers/retrieve Update Federation Issuer Claude Developer Platform · title api/beta/organization/federation/issuers/update Issuers Claude Developer Platform · title api/organization/federation/issuers Archive Federation Issuer Claude Developer Platform · title api/organization/federation/issuers/archive Create Federation Issuer Claude Developer Platform · title api/organization/federation/issuers/create List Federation Issuers Claude Developer Platform · title api/organization/federation/issuers/list Get Federation Issuer Claude Developer Platform · title api/organization/federation/issuers/retrieve Update Federation Issuer Claude Developer Platform · title api/organization/federation/issuers/update SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses Model Context Protocol · title seps/2468-recommend-issuer-claim-for-auth console Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/console …ly. Requires permission to manage federation rules, a registered OIDC issuer, and a federation rule with the `workspace:manage_tunnels` scope. * **[Manual](https://platform.claude.com/docs/en/agents… Edit docker-compose.yaml: increment the integer in the setup service's Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/deploy-compose …aude/workload-identity-federation#identity-providers) to register the issuer, set the rule's subject, and mint the token; the rule's audience must match the audience you request when minting.… deploy-helm Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/deploy-helm …nage-claude/wif-providers/kubernetes) to register your cluster's OIDC issuer and create a federation rule. The setup component runs under its own ServiceAccount in the release namespace; the exact nam… overview Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/overview …ly. Requires permission to manage federation rules, a registered OIDC issuer, and a federation rule with the `workspace:manage_tunnels` scope. * **[Manual](https://platform.claude.com/docs/en/agents… quickstart Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/quickstart …DOMAIN},DNS:*.${TUNNEL_DOMAIN} authorityKeyIdentifier = keyid,issuer extendedKeyUsage = serverAuth EOF openssl req -newkey rsa:2048 -nodes \ -keyout data/tls… troubleshooting Claude Developer Platform · in the page agents-and-tools/mcp-tunnels/troubleshooting …hostname and everything else at the tunnel: ```json { "issuer": "https://auth.<tunnel-domain>", "authorization_endpoint": "https://<your-allowlisted-host>/authorize", "token… code-execution-tool Claude Developer Platform · in the page agents-and-tools/tool-use/code-execution-tool …ifest embedded in the file's metadata. It identifies Anthropic as the issuer, carries a timestamp, and records the action description "Claude provided this file at the request of a user and may have c… Organization Claude Developer Platform · in the page api/beta/organization …ype": "external_key_validation" } ``` ## Organization › Federation › Issuers ### Create Federation Issuer **POST** `/v1/organizations/federation_issuers` **Requires an OAuth access token with the… Federation Claude Developer Platform · in the page api/beta/organization/federation …n/api/beta/organization/federation --- # Federation ## Federation › Issuers ### Create Federation Issuer **POST** `/v1/organizations/federation_issuers` **Requires an OAuth access token with the… Rules Claude Developer Platform · in the page api/beta/organization/federation/rules …Create a federation rule owned by your organization. The referenced issuer and the target service account must already exist in the same organization; invalid references are rejected with a 400 erro… Archive Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/archive …scription: string or null` Optional free-text description. - `issuer_id: string` Tagged ID of the issuer whose tokens this rule accepts. - `issuer_name: string or null` Issuer's d… Create Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/create …Create a federation rule owned by your organization. The referenced issuer and the target service account must already exist in the same organization; invalid references are rejected with a 400 erro… List Federation Rules Claude Developer Platform · in the page api/beta/organization/federation/rules/list …). List federation rules in your organization. Optionally filter by issuer with `issuer_id`. Archived rules are excluded unless `include_archived=true`. ## Query parameters - `include_archived: op… Get Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/retrieve …scription: string or null` Optional free-text description. - `issuer_id: string` Tagged ID of the issuer whose tokens this rule accepts. - `issuer_name: string or null` Issuer's d… Update Federation Rule Claude Developer Platform · in the page api/beta/organization/federation/rules/update …admin-api?sdk_languages=http). Partially update a federation rule. `issuer_id` is immutable. `match` and `target` are replaced as whole objects when set. Referenced service accounts and workspaces m… Service Accounts Claude Developer Platform · in the page api/beta/organization/service_accounts …archived) federation rule still targets this service account, same as issuer archival; archive those rules first or change their target to another service account. ### Path parameters - `service_acc… Archive Service Account Claude Developer Platform · in the page api/beta/organization/service_accounts/archive …archived) federation rule still targets this service account, same as issuer archival; archive those rules first or change their target to another service account. ## Path parameters - `service_acco… Compliance API Claude Developer Platform · in the page api/compliance …OIDC token for Anthropic API credentials. - `"platform_federation_issuer_archived"` An OIDC federation issuer was archived. - `"platform_federation_issuer_created"` An OIDC federation… Activities Claude Developer Platform · in the page api/compliance/activities …OIDC token for Anthropic API credentials. - `"platform_federation_issuer_archived"` An OIDC federation issuer was archived. - `"platform_federation_issuer_created"` An OIDC federation… Query compliance activities Claude Developer Platform · in the page api/compliance/activities/list …OIDC token for Anthropic API credentials. - `"platform_federation_issuer_archived"` An OIDC federation issuer was archived. - `"platform_federation_issuer_created"` An OIDC federation… Organization Claude Developer Platform · in the page api/organization …ype": "external_key_validation" } ``` ## Organization › Federation › Issuers ### Create Federation Issuer **POST** `/v1/organizations/federation_issuers` **Requires an OAuth access token with the… Federation Claude Developer Platform · in the page api/organization/federation …ocs/en/api/organization/federation --- # Federation ## Federation › Issuers ### Create Federation Issuer **POST** `/v1/organizations/federation_issuers` **Requires an OAuth access token with the… Rules Claude Developer Platform · in the page api/organization/federation/rules …Create a federation rule owned by your organization. The referenced issuer and the target service account must already exist in the same organization; invalid references are rejected with a 400 erro… Archive Federation Rule Claude Developer Platform · in the page api/organization/federation/rules/archive …scription: string or null` Optional free-text description. - `issuer_id: string` Tagged ID of the issuer whose tokens this rule accepts. - `issuer_name: string or null` Issuer's d… Create Federation Rule Claude Developer Platform · in the page api/organization/federation/rules/create …Create a federation rule owned by your organization. The referenced issuer and the target service account must already exist in the same organization; invalid references are rejected with a 400 erro… List Federation Rules Claude Developer Platform · in the page api/organization/federation/rules/list …). List federation rules in your organization. Optionally filter by issuer with `issuer_id`. Archived rules are excluded unless `include_archived=true`. ## Query parameters - `include_archived: op… Get Federation Rule Claude Developer Platform · in the page api/organization/federation/rules/retrieve …scription: string or null` Optional free-text description. - `issuer_id: string` Tagged ID of the issuer whose tokens this rule accepts. - `issuer_name: string or null` Issuer's d… Update Federation Rule Claude Developer Platform · in the page api/organization/federation/rules/update …admin-api?sdk_languages=http). Partially update a federation rule. `issuer_id` is immutable. `match` and `target` are replaced as whole objects when set. Referenced service accounts and workspaces m… Service Accounts Claude Developer Platform · in the page api/organization/service_accounts …archived) federation rule still targets this service account, same as issuer archival; archive those rules first or change their target to another service account. ### Path parameters - `service_acc… Archive Service Account Claude Developer Platform · in the page api/organization/service_accounts/archive …archived) federation rule still targets this service account, same as issuer archival; archive those rules first or change their target to another service account. ## Path parameters - `service_acco… claude-platform-on-aws Claude Developer Platform · in the page build-with-claude/claude-platform-on-aws …your account and you can move on. Verify and retrieve your account's issuer URL: ```bash CLI aws iam get-outbound-web-identity-federation-info ``` <Warning> Without this step, every request retur… admin-api Claude Developer Platform · in the page manage-claude/admin-api …Admin API key covers most endpoints. The service-account, federation-issuer, and federation-rule endpoints accept only an `org:admin` OAuth token. Send a personal key or service account key in the `x… admin-api-keys Claude Developer Platform · in the page manage-claude/admin-api-keys …API. The one exception is the Admin API's service-account, federation-issuer, and federation-rule endpoints, which accept only an OAuth bearer token with the `org:admin` scope. See [Obtain an OAuth be… authentication Claude Developer Platform · in the page manage-claude/authentication …trust, such as AWS IAM, Google Cloud, or any standards-compliant OIDC issuer (such as GitHub Actions, Kubernetes service accounts, SPIFFE, Microsoft Entra ID, or Okta). The workload exchanges its IdP-… wif-admin-api Claude Developer Platform · in the page manage-claude/wif-admin-api …ion: Create and manage Workload Identity Federation service accounts, issuers, and rules programmatically for infrastructure-as-code and CI workflows. --- The Admin API lets you create and manage [Wo… aws Claude Developer Platform · in the page manage-claude/wif-providers/aws …both paths. For the underlying concepts (service accounts, federation issuers, and federation rules), see [Workload Identity Federation](https://platform.claude.com/docs/en/manage-claude/workload-iden… Create the app registration that represents the Claude API audience. Claude Developer Platform · in the page manage-claude/wif-providers/azure …tity on AKS. 3. **Configure Anthropic:** Register your tenant's Entra issuer, create a service account, and write a federation rule that matches the token's claims. 4. **Exchange at runtime:** Your wo…