HomeDocs changes
Documentation changes
What the docs quietly changed.
Anthropic's published documentation, fetched on a schedule and diffed against the last copy. Every edit dated, including the ones that never made a release note.
Last poll read all 4 cleanly: Claude Code CLI, Claude Developer Platform, Claude Documentation, Model Context Protocol. A date here is when this site noticed, not when Anthropic edited.
Claude Developer Platform
808pages tracked
768 changed this week · last read 22 Oct 2026
Claude Code CLI
228pages tracked
152 changed this week · last read 22 Oct 2026
Claude Documentation
280pages tracked
85 changed this week · last read 22 Oct 2026
Model Context Protocol
357pages tracked
171 changed this week · last read 22 Oct 2026
100 on this page
ReadSourcePageWhatLines
21 Oct 2026
617 pages
+38537 −9704 lines
api
managed-agents/tools
±changed
+14−14
apichanged
managed-agents/tools
Claude Managed Agents also supports custom, user-defined tools. Your application executes these tools separately and returns the results to Claude, which uses them to continue the
Claude Managed Agents also supports custom, user-defined tools. Your application runs these tools separately and returns the results to Claude, which uses them to continue the task
| Tool | Name | Description |
| ---------- | ------------ | ---------------------------------------------- |
| Bash | `bash` | Execute bash commands in a shell session |
+14 −14 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/skills
±changed
+3−3
apichanged
managed-agents/skills
Skills reach your agent in two ways: attach them through the agent's `skills` (csharp, go: `Skills`) array, or [load them from a GitHub repository](https://platform.claude.com/docs
Skills reach your agent in two ways: attach them through the agent's `skills` (csharp, go: `Skills`) array, or [load them from a GitHub repository](https://platform.claude.com/docs
To list, retrieve, delete, and version custom skills, see [Managing custom skills](https://platform.claude.com/docs/en/build-with-claude/skills-guide#managing-custom-skills). For t
To list, retrieve, delete, and version custom skills, see [Managing custom skills](https://platform.claude.com/docs/en/build-with-claude/skills-guide#managing-custom-skills). For t
Skills can also live in your codebase. When a session mounts a repository through the [`github_repository` resource](https://platform.claude.com/docs/en/managed-agents/github), the
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/sessions
±changed
+5−5
apichanged
managed-agents/sessions
description: Create a session to run your agent and begin executing tasks.
description: Create a session to run your agent and start running tasks.
To cap what a session can spend, pass the optional `budget` (csharp, go: `Budget`) object when you create it. A budget is a hard ceiling on the session's list cost: the platform pr
The following example creates a session with a $1.25 budget:
+5 −5 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/session-threads
±changed
+1−1
apichanged
managed-agents/session-threads
**Session threads** are where you drill into a specific agent's activity.
**Session threads** are where you examine a specific agent's activity.
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/session-operations
±changed
+2−2
apichanged
managed-agents/session-operations
| `terminated` | Session has ended, either because of an unrecoverable error or because it was archived. A session that finishes its work goes `idle`, not `terminated`.
| `terminated` | Session has ended, either because of an unrecoverable error or because it was archived. A session that completes its work goes `idle`, not `terminated`.
You can update a session's `agent.tools` (csharp, go: `Agent.Tools`) and `agent.mcp_servers` (java, php: `agent.mcpServers`; csharp: `Agent.McpServers`; go: `Agent.MCPServers`), in
You can update a session's `agent.tools` (csharp, go: `Agent.Tools`) and `agent.mcp_servers` (java, php: `agent.mcpServers`; csharp: `Agent.McpServers`; go: `Agent.MCPServers`), in
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/session-observability
±changed
+3−3
apichanged
managed-agents/session-observability
* **Timeline minimap:** A zoomable overview of the session's activity over time, with one lane per thread in [multiagent](https://platform.claude.com/docs/en/managed-agents/multiag
* **Timeline minimap:** A zoomable overview of the session's activity over time, with one lane for each thread in [multiagent](https://platform.claude.com/docs/en/managed-agents/mu
* **Review tool results:** Tool execution failures often explain unexpected agent behavior. The Inspector's **Tools** tab shows each tool's failures.
* **Review tool results:** Tool failures often explain unexpected agent behavior. The Inspector's **Tools** tab shows each tool's failures.
Send events, stream responses, and interrupt or redirect your session mid-execution.
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/self-hosted-sandboxes-workers
±changed
+6−6
apichanged
managed-agents/self-hosted-sandboxes-workers
The [quickstart](https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes#quickstart) runs one `ant` CLI worker that polls continuously and runs every session in on
The [quickstart](https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes#quickstart) runs one `ant` CLI worker that polls continuously and runs every session in on
Along with the environment ID and key from the [quickstart](https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes#run-your-first-session), export the webhook
Along with the environment ID and key from [Run your first session](https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes#run-your-first-session), export the
Invoke the worker when `session.status_run_started` fires. The handler drains the queue and hands each claimed work item to `handle_item()` (typescript: `handleItem()`; go: `Ha
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/self-hosted-sandboxes-security
±changed
+2−2
apichanged
managed-agents/self-hosted-sandboxes-security
* **Tool-execution blast radius.** Tools run inside your sandbox with whatever permissions your process has. Apply least privilege to the process user and mount only the directorie
* **Tool permissions.** Tools run inside your sandbox with whatever permissions your process has. Apply least privilege to the process user and mount only the directories your tool
* **Memory store contents.** [Memory stores](https://platform.claude.com/docs/en/managed-agents/memory) remain hosted by Anthropic, including their version history. When a session
* **Memory store contents.** [Memory stores](https://platform.claude.com/docs/en/managed-agents/memory) remain hosted by Anthropic, including their version history. When a session
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/self-hosted-sandboxes-reference
±changed
+1−1
apichanged
managed-agents/self-hosted-sandboxes-reference
| `block_ms` (typescript: `blockMs`; go: `BlockMs`) | How long each poll waits for work to arrive before returning, in milliseconds. Must be betw
| `block_ms` (typescript: `blockMs`; go: `BlockMs`) | How long each poll waits for work to arrive before returning, in milliseconds. Must be betw
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/self-hosted-sandboxes-operations
±changed
+7−7
apichanged
managed-agents/self-hosted-sandboxes-operations
By default the work item moves to `stopping`. The worker notices on its next lease heartbeat, cancels the session's in-flight tool call, and confirms the shutdown. The work item th
By default the work item moves to `stopping`. The worker detects this on its next lease heartbeat, cancels the session's in-flight tool call, and confirms the shutdown. The work it
A worker that is cancelled while a session runs stops its in-flight work before it exits. If the session has [memory stores](https://platform.claude.com/docs/en/managed-agents/self
A worker that is canceled while a session runs stops its in-flight work before it exits. If the session has [memory stores](https://platform.claude.com/docs/en/managed-agents/self-
| SDK | Backstop | Fires after |
+7 −7 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/self-hosted-sandboxes-memory
±changed
+2−2
apichanged
managed-agents/self-hosted-sandboxes-memory
Two sessions cannot mount the same store on one host at the same time, because both need the same path. If your sessions attach the same store, run one session per filesystem. Givi
Two sessions cannot mount the same store on one host at the same time, because both need the same path. If your sessions attach the same store, run one session for each filesystem.
The memory store on Anthropic's side remains the source of truth. [Memory versions](https://platform.claude.com/docs/en/managed-agents/memory#audit-memory-changes), redaction, and
The memory store on Anthropic's side remains the source of truth. [Memory versions](https://platform.claude.com/docs/en/managed-agents/memory#audit-memory-changes), redaction, and
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/self-hosted-sandboxes-custom-tools
±changed
+4−4
apichanged
managed-agents/self-hosted-sandboxes-custom-tools
[Custom tools](https://platform.claude.com/docs/en/managed-agents/tools#custom-tools) are tools your own code executes: the agent emits an `agent.custom_tool_use` event and waits f
[Custom tools](https://platform.claude.com/docs/en/managed-agents/tools#custom-tools) are tools your own code runs: the agent emits an `agent.custom_tool_use` event and waits for a
* **A generator such as pydantic factors schemas into `$defs`:** Inline those schemas before you declare the tool.
* **A generator such as Pydantic factors schemas into `$defs`:** Inline those schemas before you declare the tool.
Set a timeout on the MCP client for a faster and clearer failure, as the Python worker example does with `read_timeout_seconds`. See [A wrapped MCP tool call hangs](https://platfor
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/secure-deployment-risks
±changed
+1−1
apichanged
managed-agents/secure-deployment-risks
Claude can also take a step you did not expect while it keeps working to finish the task you gave it. For example, it might use a tool or credential it can reach to get past an obs
Claude can also take a step you did not expect while it keeps working to complete the task you gave it. For example, it might use a tool or credential it can reach to get past an o
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/secure-deployment
±changed
+62−62
apichanged
managed-agents/secure-deployment
Where the agent's tools run decides who secures the sandbox: Anthropic, with a cloud environment, or you, with a self-hosted sandbox. To choose between them and learn what reaches
Where the agent's tools run determines who secures the sandbox: Anthropic, with a cloud environment, or you, with a self-hosted sandbox. To choose between them and learn what reach
Set `networking.type` to `limited` and list only the hosts the agent needs in `allowed_hosts`. An environment create request that omits `networking` might get `unrestricted`, so se
Files, memory stores, and GitHub repositories that you attach stay available to the agent regardless of `allowed_hosts`.
+62 −62 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/scheduled-deployments
±changed
+16−16
apichanged
managed-agents/scheduled-deployments
A **scheduled deployment** allows an [agent](https://platform.claude.com/docs/en/managed-agents/agent-setup) to start [sessions](https://platform.claude.com/docs/en/managed-agents/
A **scheduled deployment** allows an [agent](https://platform.claude.com/docs/en/managed-agents/agent-setup) to start [sessions](https://platform.claude.com/docs/en/managed-agents/
* Deployments require [agent configuration](https://platform.claude.com/docs/en/managed-agents/agent-setup) and [environment configuration](https://platform.claude.com/docs/en/mana
* Deployments require [agent configuration](https://platform.claude.com/docs/en/managed-agents/agent-setup) and [environment configuration](https://platform.claude.com/docs/en/mana
The upcoming run timestamps reflect the exact schedule configured. However, to distribute load, actual execution applies jitter of up to 15% of the interval between runs, with a mi
+16 −16 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/reference
±changed
+17−17
apichanged
managed-agents/reference
Persisted event type strings follow a `{domain}.{action}` naming convention; the stream-only event deltas (see the Event deltas tab) are the exception. See [Session event stream](h
Persisted event type strings follow a `{domain}.{action}` naming convention; the stream-only event deltas (see the **Event deltas** tab) are the exception. See [Session event strea
| `user.interrupt` | Stop the agent mid-execution. It ends no [workflow run](https://platform.claude.com/docs/en/managed-agents/workflow-runs#interrupt-a-session-with-
| `user.interrupt` | Stop the agent while it runs. It ends no [workflow run](https://platform.claude.com/docs/en/managed-agents/workflow-runs#interrupt-a-session-with-
| Type | Description
+17 −17 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/quickstart
±changed
+1−1
apichanged
managed-agents/quickstart
Handle events and steer the agent mid-execution
Handle events and steer the agent while it runs
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/permission-policies
±changed
+7−7
apichanged
managed-agents/permission-policies
description: Control when agent and MCP tools execute.
description: Control when agent and MCP tools run.
Permission policies control whether server-executed tools (the pre-built agent toolset and MCP toolset) run automatically, wait for your approval, or have each call evaluated by th
Permission policies control whether server-executed tools (the pre-built agent toolset and MCP toolset) run automatically, wait for your approval, or have each call evaluated by th
MCP toolsets default to `always_ask`. This ensures that new tools added to an MCP server do not execute in your application without approval. To auto-approve tools from a trusted M
+7 −7 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/overview
±changed
+1−1
apichanged
managed-agents/overview
Send additional user events to guide the agent mid-execution, or interrupt it to change direction.
Send additional user events to guide the agent while it runs, or interrupt it to change direction.
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/onboarding
±changed
+3−3
apichanged
managed-agents/onboarding
description: Create, test, and iterate on agents visually in Console, then run them from your code with the API.
description: Create, test, and iterate on agents visually in the Claude Console, then run them from your code with the API.
[Console](https://platform.claude.com/workspaces/default/agent-quickstart/) provides a visual interface for creating and configuring agents. It lets you iterate on configuration in
The [Claude Console](https://platform.claude.com/workspaces/default/agent-quickstart/) provides a visual interface for creating and configuring agents. It lets you iterate on confi
## From Console to your codebase
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/multiagent-orchestration
±changed
+11−11
apichanged
managed-agents/multiagent-orchestration
| Approach | What happens
| -------------------------------------------------------------------------------------------------------------------------------------- | -----------------------------------------
| [Subagents](https://platform.claude.com/docs/en/managed-agents/multiagent-orchestration#delegate-to-subagents) | The agent delegates tasks to its subagent
| [Dynamic workflows](https://platform.claude.com/docs/en/managed-agents/multiagent-orchestration#dynamic-workflows) | The agent writes a workflow: a program th
| [Give the session an advisor](https://platform.claude.com/docs/en/managed-agents/multiagent-orchestration#give-the-session-an-advisor) | The session's [primary thread](https://pl
+11 −11 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/migration
±changed
+3−3
apichanged
managed-agents/migration
| You maintain the conversation history array and pass it back on every turn. | The session stores history server-side. Send events, receive events.
| You maintain the conversation history array and pass it back on every turn. | The session stores history server-side. You send events and receive events.
If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-sdk/overview), you're already working with agents, tools, and sessions as concepts. The difference is
If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-sdk/overview), you're already working with agents, tools, and sessions as concepts. The difference is
When a new Claude model is released, migrating a Claude Managed Agents integration is typically a one-field change: update `model` (csharp, go: `Model`) on your [agent definition](
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/memory
±changed
+29−29
apichanged
managed-agents/memory
Individual memories within the store are capped at 100 kB (\~25k tokens). A store holds a maximum of 10,000 memories. Structure memory as many small focused files, not a few larg
Individual memories within the store are capped at 100 kB (\~25k tokens). A store holds a maximum of 10,000 memories. Structure memory as many small focused files, not a few larg
--data '{
-d '{
A maximum of **8 memory stores** are supported per session. Attach multiple stores when different parts of memory have different owners or access rules. Common reasons:
+29 −29 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/mcp-connector
±changed
+6−6
apichanged
managed-agents/mcp-connector
The MCP toolset defaults to a permission policy of `always_ask`, which requires user approval before each tool call. See [permission policies](https://platform.claude.com/docs/en
The MCP toolset defaults to a permission policy of `always_ask`, which requires user approval before each tool call. See [Permission policies](https://platform.claude.com/docs/en
| Error type | Meaning
| --------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------
| `mcp_connection_failed_error` | The MCP server could not be reached (network error, timeout, or non-authentication HTTP failure).
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/github
±changed
+1−1
apichanged
managed-agents/github
Mounting a repository also loads any skills stored in its root `.claude/skills` directory. Skills are discovered once per session, from the repository state checked out at session
Mounting a repository also loads any skills stored in its root `.claude/skills` directory. Skills are discovered once for each session, from the repository state checked out at ses
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/files
±changed
+6−6
apichanged
managed-agents/files
A maximum of 500 files is supported per session.
A maximum of 500 files is supported for each session.
* The path you specify is rooted under the session's uploads directory: a `mount_path` (java, php: `mountPath`; csharp, go: `MountPath`) of `/data.csv` places the file at `/mnt/ses
* If you omit `mount_path` (java, php: `mountPath`; csharp, go: `MountPath`), the file is placed at `/mnt/session/uploads/<file_id>`
* Parent directories are created automatically
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/events-and-streaming
±changed
+8−8
apichanged
managed-agents/events-and-streaming
description: Send events, stream responses, and interrupt or redirect your session mid-execution.
description: Send events, stream responses, and interrupt or redirect your session while it runs.
The agent's response text arrives as buffered `agent.message` events, each emitted only after the model request that produced it finishes. To render the text while the model is sti
The agent's response text arrives as buffered `agent.message` events, each emitted only after the model request that produced it completes. To render the text while the model is st
# Tail live events, skipping anything already seen — Set#add? returns nil for duplicates
+8 −8 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/event-deltas
±changed
+10−10
apichanged
managed-agents/event-deltas
By default, the agent's response text reaches the [session event stream](https://platform.claude.com/docs/en/managed-agents/events-and-streaming) as buffered `agent.message` events
By default, the agent's response text reaches the [session event stream](https://platform.claude.com/docs/en/managed-agents/events-and-streaming) as buffered `agent.message` events
Previews are opt-in per stream connection. Add the `event_deltas[]` query parameter to the stream you're reading, and repeat it once for each event type you want previewed. The acc
Previews are opt-in for each stream connection. Add the `event_deltas[]` query parameter to the stream you're reading, and repeat it once for each event type you want previewed. Th
When a previewed event begins, the stream emits an `event_start` carrying the upcoming event's type and `id`:
+10 −10 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/environments
±changed
+5−5
apichanged
managed-agents/environments
--data '{
-d '{
[`ant apply`](https://platform.claude.com/docs/en/cli-sdks-libraries/cli/apply) creates the environment from `environment.yaml`, prints its ID, and records it in `claude-lock.j
[`ant apply`](https://platform.claude.com/docs/en/cli-sdks-libraries/cli/apply) creates the environment from `environment.yaml`, prints its ID, and records it in `claude-lock.j
--data '{
+5 −5 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/dreams
±changed
+7−7
apichanged
managed-agents/dreams
description: Let Claude reflect on past sessions to curate an agent's memory and surface new insights.
description: Let Claude review past sessions to curate an agent's memory and surface new insights.
--data '{
-d '{
Use `instructions` (csharp, go: `Instructions`) for high-level synthesis guidance such as focus areas ("focus on coding-style preferences"), content to preserve unchanged, or outpu
+7 −7 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/define-outcomes
±changed
+9−9
apichanged
managed-agents/define-outcomes
If you don't have a rubric on hand, try giving Claude an example of a known-good artifact and asking it to analyze what makes that content good, then turn that analysis into a ru
If you don't have a rubric, try giving Claude an example of a known-good artifact and asking it to analyze what makes that content good, then turn that analysis into a rubric. Th
The following examples create a [session](https://platform.claude.com/docs/en/managed-agents/sessions) for an existing [agent](https://platform.claude.com/docs/en/managed-agents/ag
The following examples create a [session](https://platform.claude.com/docs/en/managed-agents/sessions) for an existing [agent](https://platform.claude.com/docs/en/managed-agents/ag
# Define the outcome — agent starts working on receipt
+9 −9 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/cloud-sandboxes-reference
±changed
+1−1
apichanged
managed-agents/cloud-sandboxes-reference
| Go | 1.24 (default) and 1.25 | go modules |
| Go | 1.24 (default) and 1.25 | Go modules |
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/choosing-an-environment
±changed
+1−1
apichanged
managed-agents/choosing-an-environment
* **Self-hosted sandbox:** You run the sandbox on your own infrastructure. Claude still runs on Anthropic's side and decides which tool to call next. A program that you run, called
* **Self-hosted sandbox:** You run the sandbox on your own infrastructure. Claude still runs on Anthropic's side and determines which tool to call next. A program that you run, cal
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/budgets
±changed
+5−5
apichanged
managed-agents/budgets
A session budget is an optional hard spend ceiling you set when you [create a session](https://platform.claude.com/docs/en/managed-agents/sessions). The platform continuously price
A session budget is an optional hard spend ceiling you set when you [create a session](https://platform.claude.com/docs/en/managed-agents/sessions). The platform continuously price
* `max_list_cost` (java, php: `maxListCost`; csharp, go: `MaxListCost`) is the cap itself: `amount` (csharp, go: `Amount`) is a whole number of US cents written as a string with no
* `max_list_cost` (java, php: `maxListCost`; csharp, go: `MaxListCost`) is the cap itself: `amount` (csharp, go: `Amount`) is a whole number of US cents written as a string with no
If the session has open [workflow runs](https://platform.claude.com/docs/en/managed-agents/workflow-runs#interrupt-a-session-with-runs-open), the interrupt can pause them, as an in
+5 −5 lines
Recorded here 21 Oct 2026 19:37 UTC
api
managed-agents/agent-setup
±changed
+2−2
apichanged
managed-agents/agent-setup
The examples use curl, the `ant` CLI, or one of the SDKs. If you haven't set one up, the [quickstart](https://platform.claude.com/docs/en/managed-agents/quickstart#install-the-cli)
The examples use curl, the `ant` CLI, or the SDK. If you haven't set one up, the [quickstart](https://platform.claude.com/docs/en/managed-agents/quickstart#install-the-cli) covers
Create a session to run your agent and begin executing tasks.
Create a session to run your agent and start running tasks.
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/workspaces
±changed
+13−13
apichanged
manage-claude/workspaces
* **Maximum 100 workspaces** per organization by default (archived workspaces don't count); contact your account team if you need more
* **Maximum 100 workspaces** for each organization by default (archived workspaces don't count); contact your account team if you need more
* **API keys** can be scoped to a single workspace. In this case, they can only access resources within that workspace. Some API keys can be granted permissions across multiple wor
* **API keys** can be scoped to a single workspace. In this case, they can only access resources within that workspace. Other API keys aren't scoped to a workspace. With one of the
* **Organization admins** automatically receive Workspace Admin access to all workspaces
+13 −13 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/workload-identity-federation
±changed
+6−6
apichanged
manage-claude/workload-identity-federation
Workload Identity Federation strengthens your security posture by replacing static API keys with tokens that expire in minutes rather than never. It is not a complete security stor
Workload Identity Federation strengthens your security posture by replacing static API keys with tokens that expire in minutes rather than never. It is not a complete security solu
The key distinction versus a workspace API key: a workspace API key *is* a credential, while a service account *has* credentials. You can more easily audit which workloads acted as
The key distinction versus a workspace API key: a workspace API key *is* a credential, whereas a service account *has* credentials. You can more easily audit which workloads acted
You typically register one issuer per environment: your production EKS cluster, your staging cluster, and GitHub Actions are three separate issuers.
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-reference
±changed
+15−15
apichanged
manage-claude/wif-reference
| `org:admin` | Full access to the [Admin API](https://platform.claude.com/docs/en/manage-claude/admin-api) (organization members, invites, workspaces, API keys, and
| `org:admin` | Full access to the [Admin API](https://platform.claude.com/docs/en/manage-claude/admin-api) (organization members, invites, workspaces, API keys, and
| Rule `oauth_scope` | Service account `organization_role` | Effective permissions
| --------------------- | ----------------------------------- | --------------------------------------------------------------------------------------------------------------------
| `workspace:developer` | `admin` | Claude API access in the rule's workspace only. The scope caps the token below the role.
+15 −15 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-providers/spiffe
±changed
+5−5
apichanged
manage-claude/wif-providers/spiffe
--data @- <<JSON | jq -r .access_token
-d @- <<JSON | jq -r .access_token
Except in Java, workloads that link a SPIFFE Workload API client directly can skip spiffe-helper and pass the SDK a token provider that fetches a fresh JWT-SVID from the agent
Except in Java, workloads that link a SPIFFE Workload API client directly can skip spiffe-helper and pass the SDK a token provider that fetches a fresh JWT-SVID from the agent
Before wiring the SDK in, fetch a JWT-SVID directly from SPIRE Agent and confirm the claims match what your federation rule expects. If you use a different SPIFFE implementation, f
+5 −5 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-providers/okta
±changed
+3−3
apichanged
manage-claude/wif-providers/okta
2. **Configure client authentication.** For a keyless setup, choose **Public key / Private key** (`private_key_jwt`) and register your workload's public JWK. Alternatively, use a c
2. **Configure client authentication.** For a keyless setup, select **Public key / Private key** (`private_key_jwt`) and register your workload's public JWK. Alternatively, use a c
* **Use one rule per service app:** Create a separate federation rule for each service app rather than sharing one rule across apps.
* **Use one rule for each service app:** Create a separate federation rule for each service app rather than sharing one rule across apps.
* See the [WIF reference](https://platform.claude.com/docs/en/manage-claude/wif-reference#rule-matching-semantics) to match on custom Okta claims with CEL expressions.
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-providers/kubernetes
±changed
+2−2
apichanged
manage-claude/wif-providers/kubernetes
--data @- <<JSON | jq -r .access_token
-d @- <<JSON | jq -r .access_token
* **Use a separate rule per namespace:** Create a distinct rule and Anthropic service account for each namespace rather than widening one rule.
* **Use a separate rule for each namespace:** Create a distinct rule and Anthropic service account for each namespace rather than widening one rule.
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-providers/github-actions
±changed
+4−4
apichanged
manage-claude/wif-providers/github-actions
The token's `sub` claim encodes the repository and trigger context. For a push to a branch it has the form `repo:<owner>/<repo>:ref:refs/heads/<branch>`. Pull-request runs use `rep
The token's `sub` claim encodes the repository and trigger context. For a push to a branch it has the form `repo:<owner>/<repo>:ref:refs/heads/<branch>`. Pull-request runs use `rep
Be as specific as the workload allows. Loosen `subject_prefix` to `repo:your-org/your-repo:*` (paired with a `claims.ref` constraint) only if the rule must match multiple event typ
Be as specific as the workload allows. Loosen `subject_prefix` to `repo:your-org/your-repo:*` (paired with a `claims.ref` constraint) only if the rule must match multiple event typ
--data @- <<JSON | jq -r .access_token
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-providers/gcp
±changed
+6−6
apichanged
manage-claude/wif-providers/gcp
Enable [Workload Identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) on your cluster and bind your Kubernetes service account to a Google servic
Enable [GKE Workload Identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) on your cluster and bind your Kubernetes service account to a Google se
A `format=full` token from GKE additionally includes `google.compute_engine.project_id`, `google.compute_engine.zone`, and `google.compute_engine.instance_name` claims, which y
A `format=full` token from GKE additionally includes `google.compute_engine.project_id`, `google.compute_engine.zone`, and `google.compute_engine.instance_name` claims, which y
--data @- <<JSON
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-providers/azure
±changed
+53−53
apichanged
manage-claude/wif-providers/azure
2. **Set up the identity for your platform:** A managed identity on VMs, VM Scale Sets, App Service, Functions, and Container Apps, or Entra Workload Identity on AKS.
2. **Set up the identity for your platform:** Use a managed identity on VMs, VM Scale Sets, App Service, Functions, and Container Apps, or Entra Workload Identity on AKS.
On both paths the token you present to Anthropic carries your tenant-specific Entra issuer and the managed identity's object ID in the `sub` and `oid` claims; only how the workload
On both paths the token you present to Anthropic carries your tenant-specific Entra issuer and the managed identity's object ID in the `sub` and `oid` claims; only how the workload
**Federation issuer:** Choose **v2.0 (login.microsoftonline.com)** in the wizard's **Token issuer** selector. (The selector defaults to v1; that default exists for tenants reusing
+53 −53 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-providers/aws
±changed
+11−11
apichanged
manage-claude/wif-providers/aws
This is an account-level flag, off by default. In the AWS console, open **IAM**, choose **Account settings**, and enable **Outbound web identity federation**. To enable it prog
This is an account-level flag, off by default. In the AWS console, open **IAM**, select **Account settings**, and enable **Outbound web identity federation**. To enable it prog
After enabling outbound federation, the **IAM > Account settings** page shows a **Get Token Issuer URL** field with a value of the form `https://<uuid>.tokens.sts.global.api.aw
After you enable outbound federation, the **IAM > Account settings** page shows a **Get Token Issuer URL** field with a value of the form `https://<uuid>.tokens.sts.global.api.
Call `GetWebIdentityToken` with `https://api.anthropic.com` as the audience, then pass the result to the SDK's federation credentials through `identity_token_provider` (typescript:
+11 −11 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/wif-admin-api
±changed
+4−4
apichanged
manage-claude/wif-admin-api
The SDKs and the `ant` CLI read `ANTHROPIC_AUTH_TOKEN` automatically; leave `ANTHROPIC_API_KEY` unset in the same shell, because these endpoints reject API keys and every client us
The SDK and the `ant` CLI read `ANTHROPIC_AUTH_TOKEN` automatically; leave `ANTHROPIC_API_KEY` unset in the same shell, because these endpoints reject API keys and every client use
A workload that uses one of the SDKs or the `ant` CLI does not perform the exchange itself. Point the client at the rule with the federation environment variables and construct
A workload that uses the SDK or the `ant` CLI does not perform the exchange itself. Point the client at the rule with the federation environment variables and construct it with
The `ant` CLI reads the same variables, or takes `--federation-rule`, `--organization-id`, `--service-account-id`, and `--identity-token-file` flags. For a workload that runs m
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/user-profiles
±changed
+3−3
apichanged
manage-claude/user-profiles
## Before you begin
## Before you start
`enforcement_status` sums up the open actions in one value:
`enforcement_status` summarizes the open actions in one value:
The following example marks the account as suspended and removes a `trial_cohort` metadata key.
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/user-management
±changed
+4−4
apichanged
manage-claude/user-management
The Admin API is a single set of endpoints under `https://api.anthropic.com/v1/organizations/`. Claude Console and Claude Enterprise organizations authenticate with [different keys
The Admin API is a single set of endpoints under `https://api.anthropic.com/v1/organizations/`. Claude Console and Claude Enterprise organizations authenticate with different [Admi
Groups connect members to custom roles (role-based access control, the `rbac` in the endpoint paths and scope names). Groups are owned by your enterprise as a whole (the parent org
Groups connect members to custom roles (role-based access control, the `rbac` in the endpoint paths and scope names). Groups are owned by your enterprise as a whole (the parent org
Member and invite lists use ID-based pagination: pass `limit` (default 20, max 1000) plus at most one of `before_id` or `after_id`, and page using the `first_id` and `last_id` fiel
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/usage-cost-api
±changed
+6−6
apichanged
manage-claude/usage-cost-api
This API enables you to better monitor, analyze, and optimize your Claude implementations:
This API allows you to better monitor, analyze, and optimize your Claude implementations:
* **[Rate limit](https://platform.claude.com/docs/en/api/rate-limits) optimization:** Optimize features like [prompt caching](https://platform.claude.com/docs/en/build-with-claude/
* **[Rate limit](https://platform.claude.com/docs/en/api/rate-limits) optimization:** Optimize features such as [prompt caching](https://platform.claude.com/docs/en/build-with-clau
Explore detailed implementations in [Claude Cookbook](https://platform.claude.com/cookbook):
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/spend-limits-api
±changed
+17−17
apichanged
manage-claude/spend-limits-api
All monetary values are strings in **minor units of the organization's billing currency** (cents, for USD). For example, `"50000"` represents 500.00 USD. Parse as a decimal and div
All monetary values are strings in **minor units of the organization's billing currency** (cents, for USD). For example, `"50000"` represents $500.00 USD. Parse as a decimal and di
`period_to_date_spend` is the member's spend accrued since the start of the current `period`, in the same minor-unit format; it may include a fractional part (for example, `"41280.
`period_to_date_spend` is the member's spend accrued since the start of the current `period`, in the same minor-unit format; it might include a fractional part (for example, `"4128
| Status | Meaning
+17 −17 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/rate-limits-api
±changed
+3−3
apichanged
manage-claude/rate-limits-api
* **The `id` inside `group`:** A group has the same `id` in every organization and on every workspace override, and it never changes. Use it to match entries across organizations o
* **The `id` inside `group`:** A group has the same `id` in every organization and on every workspace override, and it never changes. Use it to match entries across organizations o
To retrieve your organization's workspace IDs, use the [List Workspaces](https://platform.claude.com/docs/en/api/organization/workspaces/list) endpoint, or find them in the [Clau
To retrieve your organization's workspace IDs, use the [List Workspaces](https://platform.claude.com/docs/en/api/organization/workspaces/list) endpoint, or find them on the [Work
The list covers the models your organization has access to, so it can differ between organizations.
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/plugins-api
±changed
+69−69
apichanged
manage-claude/plugins-api
Every request must include the [beta header](https://platform.claude.com/docs/en/api/beta-headers) `anthropic-beta: ce-plugins-2026-09-01` (the SDKs and the `ant` CLI send it for
Every request must include the [beta header](https://platform.claude.com/docs/en/api/beta-headers) `anthropic-beta: ce-plugins-2026-09-01` (the SDK and the `ant` CLI send it for
The Python, TypeScript, C#, Go, Java, PHP, and Ruby SDKs expose these endpoints under `client.beta.organization` (csharp, go: `client.Beta.Organization`; java: `client.beta().organ
The SDK exposes these endpoints under `client.beta.organization` (csharp, go: `client.Beta.Organization`; java: `client.beta().organization()`; php: `$client->beta->organization`),
| Component | What it is |
+69 −69 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/organization-webhooks
±changed
+1−1
apichanged
manage-claude/organization-webhooks
## Before you begin
## Before you start
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/opentelemetry/sdk
±changed
+4−4
apichanged
manage-claude/opentelemetry/sdk
includes. Otherwise, a
[bug in that package](https://github.com/open-telemetry/opentelemetry-js-contrib/issues/3711)
includes. Otherwise, an
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/opentelemetry/api
±changed
+8−8
apichanged
manage-claude/opentelemetry/api
| **Provider** | Your observability platform, or **Custom** if it isn't listed. If you choose a listed platform, the Console asks for its details, such as an A
| **Provider** | Your observability platform, or **Custom** if it isn't listed. If you select a listed platform, the Console asks for its details, such as an A
| **Maximum content size in MB** | Optional, under **Advanced settings** when the content mode is **Full content**. The most content that the API sends in each span. The Console
| **Maximum content size in MB** | Optional, under **Advanced settings** when the content mode is **Full content**. The most content that the API sends in each span. The Console
| Problem | What to check
+8 −8 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/opentelemetry
±changed
+3−3
apichanged
manage-claude/opentelemetry
| [Token usage](https://platform.claude.com/docs/en/manage-claude/opentelemetry#count-tokens) | ?
| [Token counts](https://platform.claude.com/docs/en/manage-claude/opentelemetry#count-tokens) | ?
With Full content, each span holds up to 0.75 MB of content by default. That fits a 200k-token context window of English text and stays below the 1 MB request limit of many observa
With Full content, each span holds up to 0.75 MB of content by default. That fits a 200k-token context window of English text and stays below the 1 MB request limit of many observa
 happens. Configured at the workspace level i
* **Workspace geo:** Controls where data is stored at rest and where endpoint processing (such as image transcoding and code execution) occurs. Configured at the workspace level in
* **Global routing** (`inference_geo: "global"`): Standard pricing applies.
* **Older models:** Don't support `inference_geo` (see [Model availability](https://platform.claude.com/docs/en/manage-claude/data-residency#model-availability)); standard pricing
* **Global routing (`inference_geo: "global"`):** Standard pricing applies.
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-sessions
±changed
+21−21
apichanged
manage-claude/compliance-sessions
| `product_surface` values | `cowork`, `claude_code`, `claude_science`, `claude_in_chrome`, and values beginning with `office_agents`
| `product_surface` values | `cowork`, `claude_code`, `claude_science`, `claude_in_chrome`, and values starting with `office_agents`
For local sessions, Anthropic records each conversation server-side as its requests reach the Claude API; nothing is installed on the device, and nothing is collected beyond the re
For local sessions, Anthropic records each conversation server-side as its requests reach the Claude API; nothing is installed on the device, and nothing is collected beyond the re
--header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
+21 −21 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-org-data
±changed
+1−1
apichanged
manage-claude/compliance-org-data
The `api_keys` array lists every Compliance Access Key configured for your parent organization, so the same list is returned regardless of which linked organization you query. Each
The `api_keys` array lists every Compliance Access Key configured for your parent organization, so the same list is returned regardless of which linked organization you query. Each
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-integration-patterns
±changed
+6−6
apichanged
manage-claude/compliance-integration-patterns
* Requests are limited to 600 per minute per [parent organization](https://platform.claude.com/docs/en/manage-claude/compliance-api#how-the-compliance-api-works), shared across eve
* Requests are limited to 600 per minute for each [parent organization](https://platform.claude.com/docs/en/manage-claude/compliance-api#how-the-compliance-api-works), shared acros
--header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
--header "anthropic-version: 2023-06-01" \
-H "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-faq
±changed
+3−3
apichanged
manage-claude/compliance-faq
Local and remote session transcripts both carry user prompts, assistant responses, and tool calls and results. For local sessions (on users' machines), that is what Claude was
Local and remote session transcripts both carry user prompts, assistant responses, and tool calls and results. For local sessions (on users' machines), that is what Claude was
[Cowork's OpenTelemetry logging](https://support.claude.com/en/articles/14477985-monitor-claude-cowork-activity-with-opentelemetry) and [Claude Code monitoring](https://code.cl
[Cowork's OpenTelemetry logging](https://support.claude.com/en/articles/14477985-monitor-claude-cowork-activity-with-opentelemetry) and [Claude Code monitoring](https://code.cl
Yes. A Claude Enterprise parent organization can have many linked organizations, including a mix of claude.ai organizations and Claude Console organizations (for example, separ
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-errors
±changed
+2−2
apichanged
manage-claude/compliance-errors
The following table tells you at a glance whether to retry. Each section that follows shows the verbatim error body and the fix.
The following table tells you whether to retry. Each section that follows shows the verbatim error body and the fix.
A 500 without the `x-should-retry: false` header is transient: retry with exponential backoff (start at 1 second, double up to 60 seconds). The same applies to 502, 503, 504, and 5
A 500 without the `x-should-retry: false` header is transient: retry with exponential backoff (start at 1 second, double up to 60 seconds). The same applies to 502, 503, 504, and 5
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-content-data
±changed
+13−13
apichanged
manage-claude/compliance-content-data
--header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
--header "anthropic-version: 2023-06-01" \
-H "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
-H "anthropic-version: 2023-06-01" \
To scope the list to specific users instead (for example, a legal hold on named custodians), pass 1–10 `user_ids[]` values. Obtain the IDs from [List organization users](https://pl
+13 −13 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-api-access
±changed
+1−1
apichanged
manage-claude/compliance-api-access
* **Claude Enterprise organizations:** The primary owner enables the Compliance API at [claude.ai > Organization settings > API](https://claude.ai/admin-settings/api-access). E
* **Claude Enterprise organizations:** The primary owner enables the Compliance API at [claude.ai > Organization settings > API](https://claude.ai/admin-settings/api-access). E
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-api
±changed
+4−4
apichanged
manage-claude/compliance-api
--header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
--header "anthropic-version: 2023-06-01"
-H "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
-H "anthropic-version: 2023-06-01"
All `/v1/compliance/*` endpoints share a rate limit of 600 requests per minute per parent organization (for a standalone Claude Console organization, per organization). The local s
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/compliance-activity-feed
±changed
+8−8
apichanged
manage-claude/compliance-activity-feed
--header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
--header "anthropic-version: 2023-06-01"
-H "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
-H "anthropic-version: 2023-06-01"
--header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
+8 −8 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/claude-code-analytics-api
±changed
+6−6
apichanged
manage-claude/claude-code-analytics-api
The Claude Code Analytics Admin API provides programmatic access to daily aggregated usage metrics for Claude Code users, enabling organizations to analyze developer productivity a
This API enables you to better monitor, analyze, and optimize your Claude Code adoption:
The Claude Code Analytics Admin API provides programmatic access to daily aggregated usage metrics for Claude Code users, allowing organizations to analyze developer productivity a
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/authentication
±changed
+21−21
apichanged
manage-claude/authentication
| Key type | Acts as | Works in
| -------------------------- | -------------------------------------------------------------------------------------------------------------------- | ------------------------------
| **Personal key** | You, the user, with your roles and permissions | Either a single workspace or t
| **Service account key** | A [service account](https://platform.claude.com/docs/en/manage-claude/workload-identity-federation#service-accounts) | Either a single workspace or a
| **Workspace key** (legacy) | No one: it belongs to the workspace it was created in | That workspace
+21 −21 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/app-attest
±changed
+1−1
apichanged
manage-claude/app-attest
Tokens are scoped to your workspace, expire after one hour, and authorize only [Messages API](https://platform.claude.com/docs/en/api/messages/create) calls. They carry no end-user
Tokens are scoped to your workspace, expire after 1 hour, and authorize only [Messages API](https://platform.claude.com/docs/en/api/messages/create) calls. They carry no end-user i
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/api-and-data-retention
±changed
+41−41
apichanged
manage-claude/api-and-data-retention
Different APIs and features have different storage needs. Where a feature does not require storage of customer prompts or responses, it may be eligible for ZDR. Where a feature nec
Different APIs and features have different storage needs. Where a feature does not require storage of customer prompts or responses, it might be eligible for ZDR. Where a feature n
* **Claude Messages and Token Counting APIs:** ZDR applies to these endpoints for eligible features listed in the [feature eligibility table](https://platform.claude.com/docs/en/ma
* **Claude Messages and Token Counting APIs:** ZDR applies to these endpoints for eligible features listed in the [feature eligibility table](https://platform.claude.com/docs/en/ma
| Feature | Endpoint
+41 −41 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/analytics-api
±changed
+8−8
apichanged
manage-claude/analytics-api
--header "anthropic-version: 2023-06-01" \
--header "x-api-key: $ANTHROPIC_ADMIN_KEY"
-H "anthropic-version: 2023-06-01" \
-H "x-api-key: $ANTHROPIC_ADMIN_KEY"
For the available metrics, request parameters, and response schema, see the [Claude Code Analytics API guide](https://platform.claude.com/docs/en/manage-claude/claude-code-analytic
+8 −8 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/admin-api-keys
±changed
+4−4
apichanged
manage-claude/admin-api-keys
Click **Create admin key**, give it a name, choose a [key expiration](https://platform.claude.com/docs/en/manage-claude/authentication#key-expiration), and click **Add**. Claud
Click **Create admin key**, give it a name, select a [key expiration](https://platform.claude.com/docs/en/manage-claude/authentication#key-expiration), and click **Add**. Claud
| Admin API [user management](https://platform.claude.com/docs/en/manage-claude/user-management): change member roles, remove members, create and withdraw invites (to assign the `m
| Admin API [user management](https://platform.claude.com/docs/en/manage-claude/user-management): change member roles, remove members, and create and withdraw invites (to assign th
| [Compliance API organization endpoints](https://platform.claude.com/docs/en/manage-claude/compliance-org-data): read organization metadata and effective settings
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/admin-api
±changed
+6−6
apichanged
manage-claude/admin-api
The Python, TypeScript, C#, Go, Java, PHP, and Ruby SDKs expose the endpoints on this page under `client.organization` (csharp, go: `client.Organization`; java: `client.organizatio
The SDK exposes the endpoints on this page under `client.organization` (csharp, go: `client.Organization`; java: `client.organization()`; php: `$client->organization`), and the `an
The SDKs and the `ant` CLI read `ANTHROPIC_AUTH_TOKEN` automatically. Leave `ANTHROPIC_API_KEY` unset in the same shell so they send the bearer token. Automated workloads skip the
The SDK and the `ant` CLI read `ANTHROPIC_AUTH_TOKEN` automatically. Leave `ANTHROPIC_API_KEY` unset in the same shell so they send the bearer token. Automated workloads skip the l
Monitor and manage [API keys](https://platform.claude.com/docs/en/api/organization/api_keys/list). Each key in the response includes its `expires_at` timestamp (`null` for keys wit
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/access-transparency-log
±changed
+27−27
apichanged
manage-claude/access-transparency-log
When Access Transparency is enabled, Anthropic maintains a transparency log for your organization. It is an append-only, cryptographically signed record of Access Transparency even
* **One log per organization.** Each organization's log has a fixed origin string: `axt.anthropic.com/<your organization UUID>`. The origin never changes for the life of the organi
When Access Transparency is enabled, Anthropic maintains a transparency log for your organization. It is an append-only, cryptographically signed record of Access Transparency even
+27 −27 lines
Recorded here 21 Oct 2026 19:37 UTC
api
manage-claude/access-transparency
±changed
+12−12
apichanged
manage-claude/access-transparency
* **Human access happens only under a published reason code.**
* **Human access occurs only under a published reason code.**
* **Covered content:** Access Transparency covers prompt and response content sent through the Claude Messages API or Claude Code sessions. Anthropic's [general ZDR documentation](
* **Covered content:** Access Transparency covers prompt and response content sent through the Claude Messages API or Claude Code sessions. The [API and data retention](https://pla
--header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
+12 −12 lines
Recorded here 21 Oct 2026 19:37 UTC
api
intro
±changed
+4−4
apichanged
intro
Follow these steps to go from zero to a working Claude integration.
Follow these steps to build a working Claude integration.
<Card title="API Reference" icon="code" href="https://platform.claude.com/docs/en/api/overview">
<Card title="API reference" icon="code" href="https://platform.claude.com/docs/en/api/overview">
Claude can assist with many tasks that involve text, code, and images.
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
get-started
±changed
+1−1
apichanged
get-started
Export your API key as an environment variable. The cURL command below reads it from `$ANTHROPIC_API_KEY`.
Export your API key as an environment variable. The cURL command in the following step reads it from `$ANTHROPIC_API_KEY`.
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
get-api-key
±changed
+5−5
apichanged
get-api-key
When you create a key, you choose its type, which determines what the key can do, where it works, and when it stops working. A **personal key** acts as you, and stops working if yo
When you create a key, you choose its type, which determines what the key can do, where it works, and when it stops working. A **personal key** acts as you, and stops working if yo
Click **Create key**, name the key, choose an [expiration](https://platform.claude.com/docs/en/manage-claude/authentication#key-expiration), and set **Linked account** to yours
Click **Create key**, name the key, select an [expiration](https://platform.claude.com/docs/en/manage-claude/authentication#key-expiration), and set **Linked account** to yours
If the **Create key** button on the API keys page is disabled, your role may not allow you to create keys there. Ask an organization admin to change your role, or to create a servi
+5 −5 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/sdks/typescript
±changed
+25−25
apichanged
cli-sdks-libraries/sdks/typescript
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
This library includes TypeScript definitions for all request parameters and response fields. You may import and use them like so:
This library includes TypeScript definitions for all request parameters and response fields. You can import and use them as follows:
Streaming with `client.messages.stream(...)` exposes various helpers for your convenience including event handlers and accumulation.
+25 −25 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/sdks/ruby
±changed
+16−16
apichanged
cli-sdks-libraries/sdks/ruby
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
The SDK provides helper mechanisms to define structured data classes for tools and let Claude automatically execute them. For detailed documentation on tool use patterns including
The SDK provides helper mechanisms to define structured data classes for tools and let Claude automatically run them. For detailed documentation on tool use patterns including the
When the library is unable to connect to the API, or if the API returns a non-success status code (that is, 4xx or 5xx response), a subclass of `Anthropic::Errors::APIError` is rai
+16 −16 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/sdks/python
±changed
+20−20
apichanged
cli-sdks-libraries/sdks/python
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
Alternatively, you can use `client.messages.create(..., stream=True)` which only returns an iterable of the events in the stream and uses less memory (it doesn't build up a final m
Alternatively, you can use `client.messages.create(..., stream=True)`, which only returns an iterable of the events in the stream and uses less memory (it doesn't build up a final
When the library is unable to connect to the API, or if the API returns a non-success status code (that is, 4xx or 5xx response), a subclass of `APIError` is raised:
+20 −20 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/sdks/php
±changed
+3−3
apichanged
cli-sdks-libraries/sdks/php
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
It is recommended to use the static `with` constructor `Base64ImageSource::with(data: "U3RhaW5sZXNzIHJvY2tz", ...)` and named parameters to initialize value objects.
The recommended way to initialize value objects is the static `with` constructor `Base64ImageSource::with(data: "U3RhaW5sZXNzIHJvY2tz", ...)` with named parameters.
| Cause | Error Type |
+3 −3 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/sdks/java
±changed
+21−21
apichanged
cli-sdks-libraries/sdks/java
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
The tool use feature supports a "strict" mode that guarantees that the JSON output from the AI model will conform to the JSON schema you provide in the input parameters.
The tool use feature supports a "strict" mode that guarantees that the JSON output from the AI model conforms to the JSON schema you provide in the input parameters.
When your tool classes are defined, add them to the message parameters using `MessageCreateParams.Builder.addTool(Class<T>)` and then call them if requested to do so in the AI mode
+21 −21 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/sdks/go
±changed
+21−21
apichanged
cli-sdks-libraries/sdks/go
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
Request structs contain a `.SetExtraFields(map[string]any)` method which can send non-conforming fields in the request body. Extra fields overwrite any struct fields with a matchin
Request structs contain a `.SetExtraFields(map[string]any)` method that can send non-conforming fields in the request body. Extra fields overwrite any struct fields with a matching
Unions are represented as a struct with fields prefixed by "Of" for each of its variants. Only one field can be non-zero. The non-zero field will be serialized.
+21 −21 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/sdks/csharp
±changed
+8−8
apichanged
cli-sdks-libraries/sdks/csharp
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
For authentication options including Workload Identity Federation, see [Authentication](https://platform.claude.com/docs/en/manage-claude/authentication). If your API key is a [per
Using a [`with` expression](https://learn.microsoft.com/en-us/dotnet/csharp/language-reference/operators/with-expression) makes it easy to construct the modified options.
You can use a [`with` expression](https://learn.microsoft.com/en-us/dotnet/csharp/language-reference/operators/with-expression) to construct the modified options.
* `AnthropicSseException`: thrown for errors encountered during SSE streaming after a successful initial HTTP response.
+8 −8 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/middleware
±changed
+1−1
apichanged
cli-sdks-libraries/middleware
The SDK also accepts a custom HTTP client (for proxy configuration, custom TLS, or connection pooling). Only one HTTP client is used per SDK client; setting it replaces the default
The SDK also accepts a custom HTTP client (for proxy configuration, custom TLS, or connection pooling). Only one HTTP client is used for each SDK client; setting it replaces the de
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/libraries/openai-sdk
±changed
+55−55
apichanged
cli-sdks-libraries/libraries/openai-sdk
description: Anthropic provides a compatibility layer that enables you to use the OpenAI SDK to test the Claude API. With a few code changes, you can quickly evaluate Anthropic mod
description: Anthropic provides a compatibility layer that lets you use the OpenAI SDK to test the Claude API. With a few code changes, you can quickly evaluate Anthropic model cap
This compatibility layer is primarily intended to test and compare model capabilities, and is not considered a long-term or production-ready solution for most use cases. While it
This compatibility layer is primarily intended to test and compare model capabilities, and is not considered a long-term or production-ready solution for most use cases. Although
If you encounter any issues with the OpenAI SDK compatibility feature, please share your feedback via this [compatibility feedback form](https://forms.gle/oQV4McQNiuuNbz9n8).
+55 −55 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/libraries/apple-foundation-models
±changed
+4−4
apichanged
cli-sdks-libraries/libraries/apple-foundation-models
Requests go directly from your app to the Claude API; Apple is not in the request path and does not see prompts or responses. Usage is billed to your Anthropic account at [standard
Requests go directly from your app to the Claude API; Apple is not in the request path and does not see prompts or responses. Usage is billed to your Anthropic account at [standard
Tokens are scoped to your workspace, expire after one hour, and authorize only [Messages API](https://platform.claude.com/docs/en/api/messages/create) calls. They carry no end-user
Tokens are scoped to your workspace, expire after 1 hour, and authorize only [Messages API](https://platform.claude.com/docs/en/api/messages/create) calls. They carry no end-user i
The framework's `tools:` array works unchanged. Conform your types to `Tool`, pass them to `LanguageModelSession`, and the framework invokes them on the device when Claude calls th
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/cli/using
±changed
+16−16
apichanged
cli-sdks-libraries/cli/using
| Flag | Description
| ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------
| `--profile` | Named profile to use for this invocation (equivalent to setting `ANTHROPIC_PROFILE`). See [Switch between workspaces](https://platform.cla
| `--api-key-stdin` | Read the API key from standard input. The flag reads all of standard input, so pass the request body with [flags](https://platform.claude.
| `--auth-token-stdin` | Read the bearer token from standard input. The flag reads all of standard input, so pass the request body with [flags](https://platform.cl
+16 −16 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/cli/sessions-connect
±changed
+2−2
apichanged
cli-sdks-libraries/cli/sessions-connect
When a tool call is waiting for your approval, the input line changes to **Allow tool call?** This happens under an `always_ask` policy, or under `auto` when the server reaches no
When a tool call is waiting for your approval, the input line changes to **Allow tool call?** This occurs under an `always_ask` policy, or under `auto` when the server reaches no d
The URL can be opened once, within two minutes of being printed. Reloading that tab works, but to open the viewer anywhere else, run the command again. Your credentials never leave
The URL can be opened once, within 2 minutes of being printed. Reloading that tab works, but to open the viewer anywhere else, run the command again. Your credentials never leave t
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/cli/scripting
±changed
+2−2
apichanged
cli-sdks-libraries/cli/scripting
`--transform id --raw-output` on a list endpoint emits one bare ID per line, so standard tools such as `head` and `xargs` apply directly. Capture the first result, then pass it to
`--transform id --raw-output` on a list endpoint emits one bare ID on each line, so standard tools such as `head` and `xargs` apply directly. Capture the first result, then pass it
Claude Code shells out to `ant`, parses the structured output, and reasons over the results (no custom integration code required).
Claude Code runs `ant` commands, parses the structured output, and reasons over the results (no custom integration code required).
+2 −2 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/cli/quickstart
±changed
+1−1
apichanged
cli-sdks-libraries/cli/quickstart
Version-control API resources, scripting patterns, and use from Claude Code
Version control for API resources, scripting patterns, and use from Claude Code
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/cli/authentication
±changed
+4−4
apichanged
cli-sdks-libraries/cli/authentication
The `ant` CLI supports several credential sources. The [Quickstart](https://platform.claude.com/docs/en/cli-sdks-libraries/cli/quickstart#authentication) covers the one-command hap
The `ant` CLI supports several credential sources. The [Quickstart](https://platform.claude.com/docs/en/cli-sdks-libraries/cli/quickstart#authentication) covers the one-command log
To override the key for a single invocation, pass [`--api-key-stdin`](https://platform.claude.com/docs/en/cli-sdks-libraries/cli/using#global-flags) and pipe the key to the command
To override the key for a single run, pass [`--api-key-stdin`](https://platform.claude.com/docs/en/cli-sdks-libraries/cli/using#global-flags) and pipe the key to the command. To po
If you are using an API key scoped to multiple workspaces, such as a [personal or service account key](https://platform.claude.com/docs/en/manage-claude/authentication#key-types),
+4 −4 lines
Recorded here 21 Oct 2026 19:37 UTC
api
cli-sdks-libraries/cli/apply
±changed
+1−1
apichanged
cli-sdks-libraries/cli/apply
Commit it with your files. It's how the next run, on your machine or in CI, finds these resources instead of creating them again, and it's where you read an agent's ID to [start a
Commit it with your files. It's how the next run, on your machine or in CI, finds these resources instead of creating them again, and it's where you read an agent's ID to [start a
+1 −1 lines
Recorded here 21 Oct 2026 19:37 UTC
api
claude_api_primer
±changed
+12−12
apichanged
claude_api_primer
Interleaved thinking enables Claude to think between tool calls, reasoning about tool results before determining the next step.
Interleaved thinking allows Claude to think between tool calls, reasoning about tool results before determining the next step.
| Parameter | Description |
| -------------- | --------------------------------------------------------------------------------------------------- |
| `name` | The name of the tool. Must match the regex `^[a-zA-Z0-9_-]{1,128}$`. |
+12 −12 lines
Recorded here 21 Oct 2026 19:37 UTC
api
build-with-claude/working-with-messages
±changed
+6−6
apichanged
build-with-claude/working-with-messages
The `temperature`, `top_p`, and `top_k` sampling parameters are not supported on Claude 4.7 and later models and Claude Mythos Preview, or on any model starting with [API version
The `temperature`, `top_p`, and `top_k` sampling parameters are not supported on Claude 4.7 and later models and Claude Mythos Preview, or on any model starting with [API version
model: "claude-opus-5-5",
model: Anthropic::Model::CLAUDE_OPUS_5_5,
model: "claude-opus-5-5",
+6 −6 lines
Recorded here 21 Oct 2026 19:37 UTC
api
build-with-claude/vision-coordinates
±changed
+9−9
apichanged
build-with-claude/vision-coordinates
**Claude works best with absolute pixel coordinates.** Ask for them explicitly in your prompt. For example: *"Return the bounding box of each table as `[x1, y1, x2, y2]` (top-lef
**Claude works best with absolute pixel coordinates.** Ask for them explicitly in your prompt. For example: *"Return the bounding box of each table as `[x1, y1, x2, y2]` (top-lef
Coordinates follow the standard image convention: the origin `(0, 0)` is the top-left corner of the image, with x increasing to the right and y increasing downward. The coordinates
Coordinates follow the standard image convention: the origin `(0, 0)` is the top-left corner of the image, with x increasing to the right and y increasing downward. The coordinates
The most reliable approach is to resize your image yourself before uploading, so the image you have is exactly the image Claude sees and the coordinates Claude returns need no conv
+9 −9 lines
Recorded here 21 Oct 2026 19:37 UTC
Nothing on this page matches that. Press Enter to search every page of the ledger.