HomeDocs changes
Documentation changes
What the docs quietly changed.
Anthropic's published documentation, fetched on a schedule and diffed against the last copy. Every edit dated, including the ones that never made a release note.
Last poll read all 4 cleanly: Claude Code CLI, Claude Developer Platform, Claude Documentation, Model Context Protocol. A date here is when this site noticed, not when Anthropic edited.
Claude Developer Platform
820pages tracked
773 changed this week · last read 23 Oct 2026
Claude Code CLI
228pages tracked
147 changed this week · last read 23 Oct 2026
Claude Documentation
280pages tracked
81 changed this week · last read 23 Oct 2026
Model Context Protocol
357pages tracked
171 changed this week · last read 23 Oct 2026
100 on this page
ReadSourcePageWhatLines
12 Sep 2026
29 pages
+473 −409 lines
claude-code
server-managed-settings
±changed
+1−1
claude-codechanged
server-managed-settings
Whether [`ANTHROPIC_CUSTOM_HEADERS`](/docs/en/env-vars#variables) needs approval also depends on the delivered value. Headers that only tag requests, such as `Accept-Language`, app
Whether [`ANTHROPIC_CUSTOM_HEADERS`](/docs/en/env-vars#variables) needs approval also depends on the delivered value. Headers that only tag requests, such as `Accept-Language`, app
+1 −1 lines
Recorded here 12 Sep 2026 03:07 UTC
claude-code
errors
±changed
+1−1
claude-codechanged
errors
These errors come from the `claude` command line and its subcommands, from a command name you submit at the prompt, and from commands such as `/security-review` that gather context
These errors come from the `claude` command line and its subcommands, from a command name you submit at the prompt, and from commands such as `/security-review` that gather context
+1 −1 lines
Recorded here 12 Sep 2026 03:07 UTC
claude-code
agent-view
±changed
+1−1
claude-codechanged
agent-view
If the session took its effort from your settings rather than from `--effort` or `/effort`, Claude Code reads your settings again each time it starts a process for the session. So
If the session took its effort from your settings rather than from `--effort` or `/effort`, Claude Code reads your settings again each time it starts a process for the session. Aft
+1 −1 lines
Recorded here 12 Sep 2026 03:07 UTC
claude-code
agent-sdk/typescript
±changed
+1−1
claude-codechanged
agent-sdk/typescript
* `true`: Claude Code registered the hooks. A session's first initialize returns this value. So does a repeated initialize sent over the CLI's stdin. In that case the hooks in the
* `true`: Claude Code registered the hooks. A session's first initialize returns this value. A repeated initialize sent over the CLI's stdin also returns `true`. In that case the h
+1 −1 lines
Recorded here 12 Sep 2026 03:07 UTC
claude-code
worktrees
±changed
+1−1
claude-codechanged
worktrees
Worktrees require a git repository; for other version control systems, [configure hooks to replace the git logic](#non-git-version-control). In the [desktop app](/docs/en/desktop
Worktrees require a git repository; for other version control systems, [configure hooks to replace the git logic](#non-git-version-control). In the [desktop app](/docs/en/desktop
+1 −1 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
troubleshoot-install
±changed
+1−29
claude-codechanged
troubleshoot-install
**Solutions:**
1. **Check network stability**: Claude Code binaries are hosted at `downloads.claude.ai`. Test that you can reach it:
```bash theme={null}
+1 −29 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
terminal-config
±changed
+8−7
claude-codechanged
terminal-config
| Terminal | Shift+Enter for newline |
| :---------------------------------------------------------------------- | :------------------------------------------ |
| Ghostty, Kitty, iTerm2, WezTerm, Warp, Apple Terminal, Windows Terminal | Works without setup |
| VS Code, Cursor, Devin Desktop, Alacritty, Zed | Run `/terminal-setup` once |
| gnome-terminal, JetBrains IDEs such as PyCharm and Android Studio | Not available; use Ctrl+J or `\` then Enter |
+8 −7 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
self-hosted-environments-deploy
±changed
+1−1
claude-codechanged
self-hosted-environments-deploy
* If the session is waiting on its user, or its turn has ended and it holds only background tasks, the runner releases it right away. The session resumes when its user sends their
* If the session is waiting on its user, the runner releases it. If its turn has ended and it holds only background tasks, the runner waits up to 60 seconds for those tasks to fini
+1 −1 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
sandbox-environments
±changed
+2−2
claude-codechanged
sandbox-environments
The [sandboxed Bash tool](/docs/en/sandboxing) is built into Claude Code and restricts only Bash commands. Built-in file tools, MCP servers, and hooks still run directly on your ho
The [sandboxed Bash tool](/docs/en/sandboxing) is built into Claude Code and restricts Bash commands. Built-in file tools, MCP servers, and hooks still run directly on your host. E
* [MCP](/docs/en/mcp) servers and hooks are separate processes that run unconstrained on the host.
* [MCP](/docs/en/mcp) servers and [command hooks](/docs/en/hooks#command-hook-fields) are separate processes that run unconstrained on the host.
+2 −2 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
monitoring-usage
±changed
+44−21
claude-codechanged
monitoring-usage
| Environment Variable | Description | Default Value | Example to Disable |
| ------------------------------------------ | ------------------------------------------------------------------------------- | ------------- | ------------------ |
| `OTEL_METRICS_INCLUDE_SESSION_ID` | Include session.id attribute in metrics | `true` | `false` |
| `OTEL_METRICS_INCLUDE_VERSION` | Include app.version attribute in metrics | `false` | `true` |
| `OTEL_METRICS_INCLUDE_ACCOUNT_UUID` | Include user.account\_uuid and user.account\_id attributes in metrics | `true` | `false` |
+44 −21 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
model-config
±changed
+5−3
claude-codechanged
model-config
* `s`: switch model for this session only
Typing `/model <name>` directly behaves like `Enter`. If you set a model with `/model` in [non-interactive mode](/docs/en/headless), with the `-p` flag, your choice applies to the
* `s`: switch model for this session only and leave your default unchanged. To use a different key, rebind [`modelPicker:thisSessionOnly`](/docs/en/keybindings#model-picker-actions
+5 −3 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
env-vars
±changed
+1−0
claude-codechanged
env-vars
| `OTEL_METRICS_INCLUDE_REPOSITORY` | Set to `true` to tag OpenTelemetry metrics and events with `vcs.*` attributes identifying the session's repository (defa
+1 −0 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
desktop-quickstart
±changed
+3−3
claude-codechanged
desktop-quickstart
Start with a small project you know well. It's the fastest way to see what Claude Code can do. On Windows, [Git](https://git-scm.com/downloads/win) must be installed for loca
Start with a small project you know well. It's the fastest way to see what Claude Code can do.
A [session](/docs/en/desktop#work-in-parallel-with-sessions) is a conversation with Claude about your code. Each session tracks its own context and changes, so you can work on
A [session](/docs/en/desktop#work-in-parallel-with-sessions) is a conversation with Claude about your code. Each session tracks its own context and changes.
**Scale up when you're ready.** Open [parallel sessions](/docs/en/desktop#work-in-parallel-with-sessions) from the sidebar to work on multiple tasks at once, each in its own Git wo
+3 −3 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
desktop
±changed
+7−7
claude-codechanged
desktop
After installing, launch Claude, sign in, and click the **Code** tab. The first time you open it on Windows, you need [Git for Windows](https://git-scm.com/downloads/win) installed
In the Code tab, each conversation is a **session**: it has its own chat history, project folder, and code changes, independent of any other session. The sidebar lists your session
After installing, launch Claude, sign in, and click the **Code** tab. For a walkthrough of your first session, see the [Get started guide](/docs/en/desktop-quickstart).
+7 −7 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
best-practices
±changed
+1−1
claude-codechanged
best-practices
* [Desktop app](/docs/en/desktop#work-in-parallel-with-sessions): manage multiple local sessions visually, each in its own worktree
* [Desktop app](/docs/en/desktop#work-in-parallel-with-sessions): manage multiple local sessions visually, optionally each in its own worktree
+1 −1 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
agent-sdk/typescript
±changed
+1−1
claude-codechanged
agent-sdk/typescript
Output from a local command such as `/voice` or `/usage`. Displayed as assistant-style text in the transcript.
Claude Code doesn't emit this message type. When you send a command such as `/context` or `/usage` as a prompt, its output arrives as an [`SDKAssistantMessage`](#sdkassistantmessag
+1 −1 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
admin-setup
±changed
+1−3
claude-codechanged
admin-setup
* Verify by running `/status` inside a WSL session and reading the `Setting sources` line. Claude Code names only the [managed source it selected](/docs/en/server-managed-settings#
* **In a session that [fetches server-managed settings](/docs/en/server-managed-settings#platform-availability) and receives any keys**: `Enterprise managed settings (remote)`, b
* **In any other session**: `Enterprise managed settings (HKLM)` confirms a registry deployment. `(file)` names the Windows file or the distribution's own `/etc/claude-code/manag
* Verify by running `/status` inside a WSL session and reading the `Setting sources` line. To interpret what it lists, see [Read the source in /status](/docs/en/managed-settings#re
+1 −3 lines
Recorded here 12 Sep 2026 02:37 UTC
claude-code
setup
±changed
+5−5
claude-codechanged
setup
```bash theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null}
```bash theme={null}
```powershell theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null}
```powershell theme={null}
```batch theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null}
+5 −5 lines
Recorded here 12 Sep 2026 02:07 UTC
claude-code
fast-mode
±changed
+1−1
claude-codechanged
fast-mode
* **Usage credits turned on for subscription plans**: on a Pro, Max, Team, or Enterprise plan, your account must have [usage credits](/docs/en/costs#add-usage-credits-to-your-subsc
* **Usage credits turned on for subscription plans**: on a Pro, Max, Team, or Enterprise plan, your account must have [usage credits](/docs/en/costs#add-usage-credits-to-your-subsc
+1 −1 lines
Recorded here 12 Sep 2026 02:07 UTC
claude-code
errors
±changed
+279−248
claude-codechanged
errors
| Message
| :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| `API Error: 500 Internal server error`
| `API Error: Repeated 529 Overloaded errors`
| `Request timed out`
+279 −248 lines
Recorded here 12 Sep 2026 02:07 UTC
claude-code
costs
±changed
+2−1
claude-codechanged
costs
Developers usually bring limit questions to their admin, so it helps to know which ceiling they hit. The four situations mean different things:
Developers usually bring limit questions to their admin, so it helps to know which ceiling they hit. These situations mean different things:
* **"You've hit your individual spend limit", "org's monthly spend limit", or "team's shared budget"**: the developer's request would be billed to usage credits, and those credits
+2 −1 lines
Recorded here 12 Sep 2026 02:07 UTC
claude-code
claude-apps-gateway-config
±changed
+1−1
claude-codechanged
claude-apps-gateway-config
The gateway validates each document against the CLI's settings schema at boot, so an unrecognized top-level key fails boot with an error naming every offending key. Deliberately op
The gateway validates each document against the CLI's settings schema at boot, so an unrecognized top-level key fails boot with an error naming every offending key. Deliberately op
+1 −1 lines
Recorded here 12 Sep 2026 02:07 UTC
claude-code
settings-reference
±changed
+12−12
claude-codechanged
settings-reference
| Kind of key | How Claude Code combines it
| :----------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------
| Lists | Combines entries from every source
| Locks | Applies the strictest value any source sets. When no source sets a strict value, applies a looser value only from the highest source
| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't
+12 −12 lines
Recorded here 12 Sep 2026 01:37 UTC
claude-code
server-managed-settings
±changed
+2−1
claude-codechanged
server-managed-settings
Two kinds of keys are exceptions to the no-merge rule:
Three kinds of keys are exceptions to the no-merge rule:
* **Gateway sign-in keys**: Claude Code never reads [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) or the `"gateway"` value of [`forceLoginMethod`](/doc
+2 −1 lines
Recorded here 12 Sep 2026 01:37 UTC
claude-code
managed-settings
±changed
+3−1
claude-codechanged
managed-settings
* **`"first-wins"`, the default**: Claude Code uses the highest-ranked source that delivers at least one policy key and ignores the rest rather than merging them, apart from the fe
* **`"first-wins"`, the default**: Claude Code uses the highest-ranked source that delivers at least one policy key and ignores the rest rather than merging them, apart from the ke
The [gateway login keys](#choose-a-delivery-mechanism), [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) and the `"gateway"` value of [`forceLoginMethod`]
+3 −1 lines
Recorded here 12 Sep 2026 01:37 UTC
claude-code
authentication
±changed
+1−6
claude-codechanged
authentication
Deploy the keys through your device management tooling. [Server-managed settings](/docs/en/server-managed-settings) reach only accounts that are already authenticated into your org
* **The `env` block**: [merges per key](/docs/en/server-managed-settings#per-key-exceptions-across-managed-sources) in Claude Code v2.1.223 or later
* **The [cross-source lock keys](/docs/en/server-managed-settings#per-key-exceptions-across-managed-sources)**: honored from any admin source
+1 −6 lines
Recorded here 12 Sep 2026 01:37 UTC
claude-docs
claude-tag/admins/federated-access/troubleshooting
±changed
+59−37
claude-docschanged
claude-tag/admins/federated-access/troubleshooting
### request blocked: Google (gcp) credentials aren't enabled for this organization
### Claude says Google credentials are not enabled for this organization
**What you see**
+59 −37 lines
Recorded here 12 Sep 2026 00:07 UTC
claude-docs
claude-tag/admins/federated-access/token-reference
±changed
+3−1
claude-docschanged
claude-tag/admins/federated-access/token-reference
Three claim names are reserved and absent from every token: `platform_user_id`, `actor_sub`, and `account_id`. Don't write a rule that depends on them. An absent claim is omitted f
Authorize on `sub`, as described under [Authorize on the subject](#authorize-on-the-subject). A gateway or authorization server, which can read every claim, can use `tenant` and `a
Authorize on `sub`, as described under [Authorize on the subject](#authorize-on-the-subject). A gateway or authorization server, which can read every claim, can use `tenant` and `a
+3 −1 lines
Recorded here 12 Sep 2026 00:07 UTC
claude-docs
claude-tag/admins/federated-access/gcp
±changed
+7−3
claude-docschanged
claude-tag/admins/federated-access/gcp
In a channel whose workspace or channel has the bundle attached, start a new thread and ask Claude to make a small read (replace `example-reports` with a bucket the identity can re
In a channel whose workspace or channel has the bundle attached, start a new thread and ask Claude to run a connectivity check. The check reads a bucket's metadata, so the identity
@Claude list the objects in the Cloud Storage bucket example-reports and tell me how many there are.
@Claude Connectivity check for this channel's Google Cloud connection. Please run exactly:
+7 −3 lines
Recorded here 12 Sep 2026 00:07 UTC
claude-docs
claude-tag/admins/federated-access/aws
±changed
+8−4
claude-docschanged
claude-tag/admins/federated-access/aws
Attach a least-privilege permissions policy to the role. For the check under [Verify the connection](#verify-the-connection), the role needs `s3:ListBucket` on the example buck
Attach a least-privilege permissions policy to the role for the work Claude will do. The check under [Verify the connection](#verify-the-connection) needs no permissions. Each
In a channel whose workspace or channel has the bundle attached, start a new thread and ask Claude to make a small read (replace `example-reports` with a bucket the role can read):
In a channel whose workspace or channel has the bundle attached, start a new thread and ask Claude to run a connectivity check. The check is Claude's own request to `sts.amazonaws.
@Claude list the objects in the S3 bucket example-reports and tell me how many there are.
+8 −4 lines
Recorded here 12 Sep 2026 00:07 UTC
claude-docs
claude-tag/admins/connections/custom
±changed
+3−2
claude-docschanged
claude-tag/admins/connections/custom
* The regionless hosts of global AWS services such as IAM, STS, and CloudFront
* Service hostnames with extra parts before the service name, as long as the region is the last part before `amazonaws.com`, for example the Amazon ECR API host `api.ecr.us-east-1.
* The regionless hosts of IAM, STS, S3, Route 53, CloudFront, Organizations, and Global Accelerator, for example `iam.amazonaws.com`, which Agent Proxy signs for `us-east-1`
Apart from S3 virtual-hosted-style endpoints, Agent Proxy can't read the service from a hostname that has extra parts before the service name, so requests to those hosts fail befor
Requests to other hostnames fail before reaching AWS. Agent Proxy can't sign a request to a hostname with no region for any other service, such as `ec2.amazonaws.com`, or to a host
+3 −2 lines
Recorded here 12 Sep 2026 00:07 UTC
11 Sep 2026
144 pages
+7994 −17775 lines
claude-docs
claude-tag/admins/federated-access/token-reference
±changed
+28−28
claude-docschanged
claude-tag/admins/federated-access/token-reference
| Item | Value |
| :----------------------------------------- | :------------------------------------------------------------------------------------------------ |
| Issuer (`iss`) | `https://identity.anthropic.com/agents`. Match it exactly, including the `/agents` path. |
| OpenID Connect (OIDC) discovery document | `https://identity.anthropic.com/agents/.well-known/openid-configuration` |
| Item | Value |
+28 −28 lines
Upstream edited 11 Sep 2026 23:40 UTC Recorded here 28 Sep 2026 22:07 UTC
claude-docs
connectors/building/submission
±changed
+4−2
claude-docschanged
connectors/building/submission
Connect the server you're submitting. You confirm the server URL (must be `https://`), the transport (streamable HTTP or SSE), and whether every user connects to the same URL o
Connect the server you're submitting. You confirm the server URL (must be `https://`), the transport (streamable HTTP or SSE), and how users reach your server: one **Universal
How users authenticate: OAuth (with dynamic client registration, client ID metadata documents, or a static client ID held by Anthropic), a custom connection where users supply
How users authenticate: OAuth (with dynamic client registration, client ID metadata documents, or Anthropic-held client credentials), a custom connection where users supply the
+4 −2 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-docs
connectors/building/directory-vs-custom
±changed
+1−1
claude-docschanged
connectors/building/directory-vs-custom
If your server URL varies per tenant (for example, `{tenant}.mcp.example.com`), this is typically handled either as separate per-tenant directory entries or via the [`custom_connec
If your server URL varies per tenant (for example, `{tenant}.mcp.example.com`), submit one directory listing with a URL pattern. Each user enters their own URL when they connect. S
+1 −1 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-docs
connectors/building/authentication
±changed
+61−4
claude-docschanged
connectors/building/authentication
| `oauth_anthropic_creds` | OAuth 2.0 with Anthropic-held client credentials
| `custom_connection` | Custom URL or credentials supplied at connection time (for example, Snowflake-style)
| `oauth_anthropic_creds` | OAuth 2.0 with [Anthropic-held client credentials](#anthropic-held-client-credentials)
| `custom_connection` | Custom URL or OAuth client credentials [entered at connection time](#credentials-entered-at-connection-time)
+61 −4 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
tools-reference
±changed
+12−4
claude-codechanged
tools-reference
| `Glob` | Finds files based on pattern matching. See [Glob tool behavior](#glob-tool-behavior)
| `Grep` | Searches for patterns in file contents. See [Grep tool behavior](#grep-tool-behavior)
| `Glob` | Finds files based on pattern matching. Absent by default on macOS, Linux, and WSL. See [Glob tool behavior](#glob-tool-behavior)
| `Grep` | Searches for patterns in file contents. Absent by default on macOS, Linux, and WSL. See [Grep tool behavior](#grep-tool-behavior)
The Glob tool finds files by name pattern. It supports standard glob syntax including `**` for recursive directory matching:
+12 −4 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
sub-agents
±changed
+1−1
claude-codechanged
sub-agents
Subagents inherit the [built-in tools](/docs/en/tools-reference) and MCP tools available in the main conversation, narrowed by two filters: the first removes a short list of tools
Subagents inherit the [built-in tools](/docs/en/tools-reference) and MCP tools available in the main conversation, narrowed by two filters: the first removes a short list of tools
+1 −1 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
setup
±changed
+7−5
claude-codechanged
setup
```bash theme={null}
```bash theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null}
```powershell theme={null}
```powershell theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null} theme={null}
```batch theme={null}
+7 −5 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
plugins-reference
±changed
+25−25
claude-codechanged
plugins-reference
**Arguments:**
The command takes these arguments:
**Options:**
The command accepts these options:
**Aliases:** `new`
+25 −25 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
plugin-evals
±changed
+28−20
claude-codechanged
plugin-evals
You don't have to write the suite by hand; `claude plugin eval init` asks you about your plugin, proposes the cases and graders, tries them, and writes the files, and you can ask C
You don't have to write the suite manually. `claude plugin eval init` asks you about your plugin, proposes the cases and graders, tries them, and writes the files. You can also ask
For each run of a case, Claude Code starts a fresh, [isolated](#how-runs-are-isolated) [non-interactive session](/docs/en/headless) with only your plugin loaded, sends the prompt,
For each run of a case, Claude Code starts a fresh, [isolated](#how-runs-are-isolated) [non-interactive session](/docs/en/headless) with only your plugin loaded, sends the prompt,
One run of a non-deterministic agent tells you little, so each case runs three times by default. A run's score is the fraction of its graders that passed, weighted if you set weigh
+28 −20 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
permissions
±changed
+7−3
claude-codechanged
permissions
* **Deny rules**: apply when either the symlink path or its target matches. A symlink that points to a denied file is itself denied.
For example, with `Read(./project/**)` allowed and `Read(~/.ssh/**)` denied, a symlink at `./project/key` pointing to `~/.ssh/id_rsa` is blocked: the target fails the allow rule an
* **Deny rules**: apply when either the symlink path or its target matches. A symlink that points to a denied file is itself denied. For example, with `Read(./project/**)` allowed
+7 −3 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
hooks-guide
±changed
+6−1
claude-codechanged
hooks-guide
Your hook prints valid JSON, but the decision doesn't take effect and no error appears in the transcript.
Your hook prints valid JSON, but the decision doesn't take effect and no error appears in the transcript. Check which cause applies:
* **Extra output before the JSON**: something else writes to stdout first, usually an unconditional `echo` in your shell profile, so the output no longer starts with `{` and Claude
* **A field at the wrong level**: compare each field's placement against the [JSON output](/docs/en/hooks#json-output) format. For example, `permissionDecision` belongs inside `hoo
+6 −1 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
google-vertex-ai
±changed
+1−1
claude-codechanged
google-vertex-ai
Choose how you authenticate to Google Cloud: Application Default Credentials from `gcloud`, a service account key file, or credentials already in your environment. The wizard d
Choose how you authenticate to Google Cloud: Application Default Credentials from `gcloud`, a service account key file, or credentials already in your environment. The wizard a
+1 −1 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
corporate-launcher
±changed
+1−1
claude-codechanged
corporate-launcher
With a launcher configured, `ps` and Activity Monitor show the versioned binary name for the background helper processes instead of Claude Code's `claude bg-pty-host` and `claude b
With a launcher configured, `ps` and Activity Monitor no longer show Claude Code's `claude bg-pty-host` and `claude bg-spare` labels for the background helper processes, because th
+1 −1 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
cli-reference
±changed
+1−1
claude-codechanged
cli-reference
| `--tools` | Restrict which built-in tools Claude can use. Use `""` to disable all, `"default"` for all, or tool names like `"Bash,Edit,Read"
| `--tools` | Restrict which built-in tools Claude can use. Use `""` to disable all, `"default"` for the default set, or tool names like `"Bas
+1 −1 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
artifacts
±changed
+2−0
claude-codechanged
artifacts
If you add a `WebFetch` deny or ask rule with no `domain:` part, it doesn't turn artifacts off or block artifact reads. A [`WebFetch(domain:claude.ai)` rule in `deny` or `ask` does
+2 −0 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-code
advisor
±changed
+8−8
claude-codechanged
advisor
| Main model | Accepted advisors | Notes
| -------------------- | ------------------------------------ | --------------------------------------------------------------------------------------------------------------------
| Haiku 4.5 | Fable, Opus, Sonnet | Haiku can call the advisor but cannot act as one
| Sonnet 4.6 | Fable, Opus, Sonnet |
| Sonnet 5 | Fable, Opus, Sonnet 5 | A Sonnet 4.6 advisor is rejected
+8 −8 lines
Recorded here 11 Sep 2026 22:07 UTC
claude-docs
government/tenant-admin/overview
±changed
+1−0
claude-docschanged
government/tenant-admin/overview
* The **[Compliance API keys](/docs/government/org-admin/compliance-api)** page lets you create and revoke API keys that stream audit events for every organization in your tenant,
+1 −0 lines
Recorded here 11 Sep 2026 20:53 UTC
claude-docs
government/org-admin/compliance-api
±changed
+9−6
claude-docschanged
government/org-admin/compliance-api
> **Who this is for:** Organization owners and the security or compliance teams who connect Claude for Government to their agency's log management or SIEM platform.
> **Who this is for:** Organization owners, tenant administrators, and the security or compliance teams who connect Claude for Government to their agency's log management or SIEM p
Open **Compliance API** in the organization admin portal to create and manage keys. The page lists every key that has been issued for your organization, showing its name, a hint wi
To create and manage keys for your organization, open **Compliance API** under **Settings** in the organization admin portal. To create and manage keys that return events for every
+9 −6 lines
Recorded here 11 Sep 2026 20:53 UTC
claude-docs
government/config/settings
±changed
+1−1
claude-docschanged
government/config/settings
Controls whether the [Compliance API](/docs/government/org-admin/compliance-api) is available. When it is off, organization owners cannot create new keys and every request to the A
Controls whether the [Compliance API](/docs/government/org-admin/compliance-api) is available. When it is off, organization owners and tenant administrators cannot create new keys
+1 −1 lines
Recorded here 11 Sep 2026 20:53 UTC
claude-docs
government/tenant-admin/overview
±changed
+18−18
claude-docschanged
government/tenant-admin/overview
> **Who this portal is for:** Tenant administrators who manage their agency's overall Claude for Government deployment across every organization. If you manage a single organizatio
> **Who this portal is for:** Tenant administrators who manage their agency's overall Claude for Government deployment across every organization. If you manage a single organizatio
Funding flows through **billing accounts**, which are credit and seat pools that Anthropic sets up with your agency. Every organization is linked to exactly one billing account, an
Funding flows through **billing accounts**, which are credit and seat pools that Anthropic sets up with your agency. Every organization is linked to exactly one billing account, an
* The **organization admin** portal is where each organization's own owners manage that organization's users, seats, and settings. As a tenant administrator, you can open any organ
+18 −18 lines
Upstream edited 11 Sep 2026 20:44 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
government/tenant-admin/overview
±changed
+3−3
claude-docschanged
government/tenant-admin/overview
<Warning>
There is a short setup period after Anthropic first creates your tenant. During that period, a banner appears on the Identity and access page and nobody at your agency can sign i
</Warning>
> [!WARNING]
>
+3 −3 lines
Upstream edited 11 Sep 2026 20:44 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
government/org-admin/compliance-api
±changed
+12−12
claude-docschanged
government/org-admin/compliance-api
| Parameter | Description
| --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------
| Parameter | Description |
| - | - |
| `until` or `created_at.lte` | The latest event time to return, in the same format. Optional.
+12 −12 lines
Upstream edited 11 Sep 2026 20:44 UTC Recorded here 28 Sep 2026 22:07 UTC
claude-docs
third-party/claude-desktop/vertex
±changed
+1−1
claude-docschanged
third-party/claude-desktop/vertex
To confirm which keys the app read and whether credentials validated, use **Help → Troubleshooting → Copy Managed Configuration Report**; see [Verifying the deployment](/docs/third
To confirm which keys the app read and whether the provider settings validated, use **Help → Troubleshooting → Generate Diagnostic Report**, export the report, and check `managed-c
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/telemetry
±changed
+2−0
claude-docschanged
third-party/claude-desktop/telemetry
With `otlpEndpoint` set, `otlpTracesEnabled` alone decides whether Cowork and Code sessions export traces. Leaving it unset or `false` keeps traces off even when Claude Code's own
+2 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/ssh-remote-sessions
±changed
+2−0
claude-docschanged
third-party/claude-desktop/ssh-remote-sessions
By default, Claude Desktop makes the SSH connection with its built-in client and runs the device's OpenSSH tools only to evaluate the user's SSH configuration, look up host keys, a
+2 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/overview
±changed
+1−1
claude-docschanged
third-party/claude-desktop/overview
With Anthropic-bound telemetry, non-essential services, and updates all disabled, the only remaining Anthropic-operated egress is `downloads.claude.ai` for the VM bundle at session
With Anthropic-bound telemetry, non-essential services, and updates all disabled, the only remaining Anthropic-operated egress is `downloads.claude.ai` for the VM bundle at session
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/mdm
±changed
+1−1
claude-docschanged
third-party/claude-desktop/mdm
| **Limits** | Per-device token cap and its window length
| **Limits** | Per-device token cap and its window length<br />Retention periods after which idle chats, Cowork tasks, and Code sessions are deleted, and the hold that
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/mantle
±changed
+1−1
claude-docschanged
third-party/claude-desktop/mantle
To confirm which keys the app read and whether credentials validated, use **Help → Troubleshooting → Copy Managed Configuration Report**; see [Verifying the deployment](/docs/third
To confirm which keys the app read and whether the provider settings validated, use **Help → Troubleshooting → Generate Diagnostic Report**, export the report, and check `managed-c
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/installation
±changed
+4−4
claude-docschanged
third-party/claude-desktop/installation
On any configured device, open Claude Desktop and go to **Help → Troubleshooting → Copy Managed Configuration Report**. This copies a summary showing which keys were detected, wher
On any configured device, open Claude Desktop, go to **Help → Troubleshooting → Generate Diagnostic Report**, and click **Export to file**. In the saved `.zip` file, `managed-confi
Also confirm that the [in-app configuration window](/docs/third-party/claude-desktop/in-app-configuration) (**Developer → Configure Third-Party Inference…**) opens read-only on a m
Also confirm that the [in-app configuration window](/docs/third-party/claude-desktop/in-app-configuration) (**Developer → Configure Third-Party Inference…**) opens read-only on a m
* On Windows (v1.19367.0 and later), the configuration is in `HKCU\SOFTWARE\Policies\Claude` but machine policy is also present: any `REG_SZ`, `REG_EXPAND_SZ`, or `REG_DWORD` value
+4 −4 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/gateway
±changed
+1−1
claude-docschanged
third-party/claude-desktop/gateway
If your gateway serves a Claude model under an opaque routing alias, it can mark the model as Claude by returning an `anthropic_family_tier` field (a Claude tier name such as `sonn
If your gateway serves a Claude model under an opaque routing alias, it can mark the model as Claude by returning an `anthropic_family_tier` field (a Claude tier name such as `sonn
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/foundry
±changed
+1−1
claude-docschanged
third-party/claude-desktop/foundry
To confirm which keys the app read and whether credentials validated, use **Help → Troubleshooting → Copy Managed Configuration Report**; see [Verifying the deployment](/docs/third
To confirm which keys the app read and whether the provider settings validated, use **Help → Troubleshooting → Generate Diagnostic Report**, export the report, and check `managed-c
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/extensions
±changed
+14−2
claude-docschanged
third-party/claude-desktop/extensions
[Plugins](/docs/plugins/overview) bundle MCP connectors, skills, slash commands, hooks, and sub-agents into a single directory. On this path, admins distribute plugins by placing t
[Plugins](/docs/plugins/overview) bundle MCP connectors, skills, slash commands, hooks, and sub-agents into a single directory. On this path, admins distribute plugins by placing t
| `hooks/` | Hook definitions that run on agent lifecycle events.
| `hooks/` | Hook definitions that run on agent lifecycle events. See [Plugin hooks](#plugin-hooks) for where they run.
+14 −2 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/entra-broker
±changed
+1−1
claude-docschanged
third-party/claude-desktop/entra-broker
What happens on Linux, or on a Windows or macOS device where the broker is unavailable, depends on the feature. For the inference sign-in flows (Foundry, gateway, and Workforce Ide
What happens on Linux, or on a Windows or macOS device where the broker is unavailable, depends on the feature. For the inference sign-in flows (Foundry, gateway, and Workforce Ide
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/data-storage
±changed
+8−2
claude-docschanged
third-party/claude-desktop/data-storage
Claude Desktop on third-party (3P) has no Anthropic account. There is no sign-in step, no cloud-stored conversation history, and no per-user state on Anthropic infrastructure. Iden
Claude Desktop on third-party (3P) keeps conversations, settings, and credentials on the device. When the configuration comes from MDM, a local file, or a bootstrap server, users h
When the app first launches in 3P mode, it generates a random UUID and writes it (base64-encoded) to the `ant-did` file in the application-data directory. This identifier, together
When the app first launches in 3P mode, it generates a random UUID and writes it (base64-encoded) to the `ant-did` file in the application-data directory. When the configuration co
## Automatic deletion of idle sessions
+8 −2 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/connectors-m365
±changed
+3−2
claude-docschanged
third-party/claude-desktop/connectors-m365
* `ChannelMessage.Read.All` adds Teams channel messages to chat search results. Requires tenant-admin consent.
* `ChannelMessage.Read.All` adds Teams channel messages to chat search results and lets Claude list a channel's messages (`teams_list_channel_messages`). Requires tenant-admin cons
Until `ChannelMessage.Read.All` and `OnlineMeetingTranscript.Read.All` are granted, chat search omits channel results and transcript requests return a permission error. The `search
Until `ChannelMessage.Read.All` and `OnlineMeetingTranscript.Read.All` are granted, chat search omits channel results and transcript requests return a permission error. The `search
| `teams_list_channel_messages` | List a channel's messages, or the replies in one conversation (needs `ChannelMessage.Read.All`) |
+3 −2 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/configuration-changelog
±changed
+4−0
claude-docschanged
third-party/claude-desktop/configuration-changelog
<Update label="v1.52386.3" description="2026-09-11">
No configuration changes in this release.
</Update>
+4 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/chat
±changed
+11−11
claude-docschanged
third-party/claude-desktop/chat
| Capability | Scope
| -------------------- | -----------------------------------------------------------------------------------------------------------------------------------------------------------
| Web search | Same options and rules as Cowork and Code sessions; depends on your provider or a configured search server. See [Web search](/docs/third-party/claude-deskt
| Web fetch | Runs in the app on the device, never inside a sandbox. Every fetch is checked against `coworkEgressAllowedHosts`; with no allowlist configured, fetch is di
| Attached files | Read-only access to files the user attaches to the conversation. Each attachment is copied or hard-linked into the conversation's local uploads directory.
+11 −11 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/bedrock
±changed
+1−1
claude-docschanged
third-party/claude-desktop/bedrock
To confirm which keys the app read and whether credentials validated, use **Help → Troubleshooting → Copy Managed Configuration Report**; see [Verifying the deployment](/docs/third
To confirm which keys the app read and whether the provider settings validated, use **Help → Troubleshooting → Generate Diagnostic Report**, export the report, and check `managed-c
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/admin-console
±changed
+7−1
claude-docschanged
third-party/claude-desktop/admin-console
* **Machines configured in the app:** a device set up from the [in-app configuration window](/docs/third-party/claude-desktop/in-app-configuration) with **Apply locally** stays in
* **Machines configured in the app:** a device set up from the [in-app configuration window](/docs/third-party/claude-desktop/in-app-configuration) with **Apply Changes** stays in
### Localhost base URLs
+7 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
cowork/changelog
±changed
+19−0
claude-docschanged
cowork/changelog
<Update label="v1.52386.3" description="2026-09-11">
**General**
* No user-facing changes.
+19 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
claude-tag/users/when-claude-responds
±changed
+3−1
claude-docschanged
claude-tag/users/when-claude-responds
Claude counts the messages posted in a channel since it last posted there itself. When the count gets high enough, Claude stops reading that channel's messages, and unprompted repl
Claude counts the messages posted in a channel since it last posted there itself. When the count gets high enough, Claude stops reading that channel's messages, and unprompted repl
To start Claude reading again, mention `@Claude` in the channel. A mention from a person reaches Claude even while Claude isn't reading the channel, and once Claude posts its reply
+3 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-code
skills
±changed
+4−0
claude-codechanged
skills
Two tools automate that comparison. For a skill that ships in a [plugin](/docs/en/plugins), [`claude plugin eval`](/docs/en/plugin-evals) runs each prompt in an isolated session wi
If the skill ships in a plugin, you can measure how often it triggers across realistic prompts rather than checking one at a time: write an eval case with a [`tool_used: Skill` gra
+4 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-code
plugins-reference
±changed
+67−16
claude-codechanged
plugins-reference
"monitors": "./monitors.json"
"monitors": "./monitors.json",
"evals": "quality/evals"
| Field | Type | Description
| :---------------------- | :-------------------- | :-------------------------------------------------------------------------------------------------------------------------------
+67 −16 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-code
plugins
±changed
+3−0
claude-codechanged
plugins
Trying the plugin with `--plugin-dir` tells you it can work. To find out how often Claude actually reaches for it and gets the right result, run it against a set of test prompts wi
* [Test plugins with evals](/docs/en/plugin-evals): measure what your plugin changes and gate CI on it
+3 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-code
plugin-marketplaces
±changed
+1−1
claude-codechanged
plugin-marketplaces
Test your marketplace before sharing.
Test your marketplace before sharing. Validation checks file structure; to test whether a plugin changes what Claude does on realistic prompts, run its eval suite with [`claude plu
+1 −1 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-code
plugin-evals
+new page
+617−0
claude-codenew page
plugin-evals
No line of the body moved in this read.
+617 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-code
errors
±changed
+22−0
claude-codechanged
errors
| `` `plugin eval` is currently in early access `` / `` `plugin eval` is currently unavailable ``
<h3 id="plugin-eval-is-currently-in-early-access">
plugin eval is currently in early access
</h3>
+22 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-code
changelog
±changed
+101−0
claude-codechanged
changelog
<Update label="2.1.269" description="September 11, 2026">
* Added `claude plugin eval`: run a plugin's eval suite against Claude Code and get scored, reproducible results (JSON + HTML report); see `claude plugin eval --help`
* Added `/output-style [name]` to list and switch output styles, including over Remote Control and in cloud and other headless sessions
* Added a diff of the files a Bash command changed to the Bash tool result when the Bash tool handles file edits (setting `bashEditDiffEnabled`)
+101 −0 lines
Recorded here 11 Sep 2026 20:07 UTC
claude-docs
third-party/claude-desktop/chat
±changed
+14−14
claude-docschanged
third-party/claude-desktop/chat
| Capability | Scope
| ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------
| Web search | Same options and rules as Cowork and Code sessions; depends on your provider or a configured search server. See [Web search](/docs/third-party/claude-de
| Web fetch | Runs in the app on the device, never inside a sandbox. Every fetch is checked against `coworkEgressAllowedHosts`; with no allowlist configured, fetch is
| Attached files | Read-only access to files the user attaches to the conversation. Each attachment is copied or hard-linked into the conversation's local uploads director
+14 −14 lines
Upstream edited 11 Sep 2026 18:30 UTC Recorded here 28 Sep 2026 22:07 UTC
api
manage-claude/cmek
±changed
+4−5
apichanged
manage-claude/cmek
* Conversation history search is disabled. Conversation titles are encrypted, so searching by title or content returns no results.
* Chat search is disabled because chat titles and content are encrypted under your key. Members cannot search past chats, and the **Search and reference chats** toggle stays off, s
* Claude Code on the web (including routines) and Claude in Slack are unavailable: new sessions cannot be started and Claude in Slack declines requests, even if an admin turns thes
* Audit log exports are disabled.
* Signed URLs for temporary file exchanges are disabled. These back organization data exports in claude.ai and Claude Code Remote file flows such as screenshot updates.
+4 −5 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/messages/create
±changed
+0−22
apichanged
api/messages/create
Tool invocation directly from the model.
Tool invocation directly from the model.
Tool invocation directly from the model.
+0 −22 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/messages/count_tokens
±changed
+0−10
apichanged
api/messages/count_tokens
Tool invocation directly from the model.
Tool invocation directly from the model.
Tool invocation directly from the model.
+0 −10 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/messages/batches/results
±changed
+0−10
apichanged
api/messages/batches/results
Tool invocation directly from the model.
Tool invocation directly from the model.
Tool invocation directly from the model.
+0 −10 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/messages/batches/create
±changed
+0−10
apichanged
api/messages/batches/create
Tool invocation directly from the model.
Tool invocation directly from the model.
Tool invocation directly from the model.
+0 −10 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/messages/batches
±changed
+0−50
apichanged
api/messages/batches
Tool invocation directly from the model.
Tool invocation directly from the model.
Tool invocation directly from the model.
+0 −50 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/messages
±changed
+109−275
apichanged
api/messages
Tool invocation directly from the model.
Tool invocation directly from the model.
Tool invocation directly from the model.
+109 −275 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/compliance/apps/projects/collaborators
±changed
+0−2
apichanged
api/compliance/apps/projects/collaborators
An individual user granted a role on a project.
+0 −2 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/compliance/apps/projects/attachments
±changed
+0−2
apichanged
api/compliance/apps/projects/attachments
File attachment reference for compliance responses.
+0 −2 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/compliance/activities/list
±changed
+0−2465
apichanged
api/compliance/activities/list
No line of the body moved in this read.
+0 −2465 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/compliance/activities
±changed
+0−4932
apichanged
api/compliance/activities
No line of the body moved in this read.
+0 −4932 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/compliance
±changed
+0−2465
apichanged
api/compliance
No line of the body moved in this read.
+0 −2465 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/vaults/credentials/update
±changed
+0−4
apichanged
api/beta/vaults/credentials/update
Updated HTTP Basic authentication parameters for the token endpoint.
Token endpoint requires no client authentication.
+0 −4 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/vaults/credentials/retrieve
±changed
+0−2
apichanged
api/beta/vaults/credentials/retrieve
Token endpoint requires no client authentication.
+0 −2 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/vaults/credentials/list
±changed
+0−2
apichanged
api/beta/vaults/credentials/list
Token endpoint requires no client authentication.
+0 −2 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/vaults/credentials/create
±changed
+0−4
apichanged
api/beta/vaults/credentials/create
Token endpoint requires no client authentication.
Token endpoint requires no client authentication.
+0 −4 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/vaults/credentials/archive
±changed
+0−2
apichanged
api/beta/vaults/credentials/archive
Token endpoint requires no client authentication.
+0 −2 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/vaults/credentials
±changed
+934−964
apichanged
api/beta/vaults/credentials
Token endpoint requires no client authentication.
Token endpoint requires no client authentication.
+934 −964 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/vaults
±changed
+0−14
apichanged
api/beta/vaults
Token endpoint requires no client authentication.
Token endpoint requires no client authentication.
+0 −14 lines
Recorded here 11 Sep 2026 17:37 UTC
api
api/beta/sessions/threads/events/stream
±changed
+0−6
apichanged
api/beta/sessions/threads/events/stream
An unknown or unexpected error occurred during session execution. A fallback variant; clients that don't recognize a new error code can match on `retry_status` and `message`
The agent completed its turn naturally and is ready for the next user message.
+0 −6 lines
Recorded here 11 Sep 2026 17:37 UTC
Nothing on this page matches that. Press Enter to search every page of the ledger.