HomeDocs changes
Documentation changes
What the docs quietly changed.
Anthropic's published documentation, fetched on a schedule and diffed against the last copy. Every edit dated, including the ones that never made a release note.
Last poll read all 4 cleanly: Claude Code CLI, Claude Developer Platform, Claude Documentation, Model Context Protocol. A date here is when this site noticed, not when Anthropic edited.
Claude Developer Platform
821pages tracked
767 changed this week · last read 24 Oct 2026
Claude Code CLI
228pages tracked
146 changed this week · last read 24 Oct 2026
Claude Documentation
280pages tracked
69 changed this week · last read 24 Oct 2026
Model Context Protocol
357pages tracked
171 changed this week · last read 24 Oct 2026
100 on this page
ReadSourcePageWhatLines
5 Oct 2026
200 pages
+9010 −5083 lines
claude-docs
claude-tag/concepts/data-lifecycle
±changed
+20−20
claude-docschanged
claude-tag/concepts/data-lifecycle
| Memory | The notes Claude saves for each channel, the workspace notes it saves from public channels, and separate notes for each direct-message conversation. See [What Claude Tag
| Memory | The notes Claude saves for each channel, the workspace notes it saves from public channels, and separate notes for each direct-message conversation. See [What Claude Tag
| Scopes and their settings | Each workspace and channel [scope](/docs/claude-tag/concepts/glossary.md#scope), with its custom instructions, version setting, and the bundles and ac
| Bundles and connectors | The [bundles](/docs/claude-tag/concepts/glossary.md#bundle), connectors, and credentials set up for Claude Tag. They belong to your organization, not to
| Scopes and their settings | Each workspace and channel [scope](https://claude.com/docs/claude-tag/concepts/glossary.md#scope), with its custom instructions, version setting, and
+20 −20 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/troubleshooting
±changed
+22−22
claude-docschanged
claude-tag/admins/federated-access/troubleshooting
This page covers what goes wrong after you connect a gateway, AWS role, Google Cloud identity, or authorization server through **Federated agent access**. It's organized by where t
This page covers what goes wrong after you connect a gateway, AWS role, Google Cloud identity, or authorization server through **Federated agent access**. It's organized by where t
* The connection applies to the channel, as [Manage federated connections on the Connectors tab](/docs/claude-tag/admins/federated-access/overview#manage-federated-connections-on-t
* You tested in a new thread. A thread already running isn't told about a connection added after it started; ask Claude for the service by name, or send [`@Claude !restart`](/docs/
+22 −22 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/token-reference
±changed
+7−7
claude-docschanged
claude-tag/admins/federated-access/token-reference
This page lists what the token contains so the engineer who configures the verifying side can pin the right values. For setup steps, see [Connect a gateway](/docs/claude-tag/admins
This page lists what the token contains so the engineer who configures the verifying side can pin the right values. For setup steps, see [Connect a gateway](https://claude.com/docs
* The console's connection check for a gateway presents a token for a reserved test agent in your organization, shown in the **Connect a gateway** dialog as the **Control subject**
* The console's connection check for a gateway presents a token for a reserved test agent in your organization, shown in the **Connect a gateway** dialog as the **Control subject**
* [Connect a gateway](/docs/claude-tag/admins/federated-access/connect-a-gateway.md): verify the token yourself at a service you run
+7 −7 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/overview
±changed
+17−17
claude-docschanged
claude-tag/admins/federated-access/overview
In Slack channels, Claude Tag acts under its own [agent identity](/docs/claude-tag/concepts/agent-identity.md) rather than as any person. Federated agent access lets that identity
In Slack channels, Claude Tag acts under its own [agent identity](https://claude.com/docs/claude-tag/concepts/agent-identity.md) rather than as any person. Federated agent access l
In the console, you connect your gateway, AWS role, Google Cloud identity, or authorization server under **Federated agent access**, add it to a [bundle](/docs/claude-tag/concepts/
In the console, you connect your gateway, AWS role, Google Cloud identity, or authorization server under **Federated agent access**, add it to a [bundle](https://claude.com/docs/cl
In every case the system on your side decides what the agent may do in your systems. Each connection type has its own setup page: [Connect a gateway](/docs/claude-tag/admins/federa
+17 −17 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/limits
±changed
+12−12
claude-docschanged
claude-tag/admins/federated-access/limits
Federated connections are available to Claude in Slack channels, where it acts under your organization's [agent identity](/docs/claude-tag/concepts/agent-identity.md). They aren't
Federated connections are available to Claude in Slack channels, where it acts under your organization's [agent identity](https://claude.com/docs/claude-tag/concepts/agent-identity
| Claims | See the [identity token reference](/docs/claude-tag/admins/federated-access/token-reference.md#claims); verifiers must ignore claims they don't recognize. |
| Claims | See the [identity token reference](https://claude.com/docs/claude-tag/admins/federated-access/token-reference.md#claims); verifiers must ignore claims they don't recogni
| [Allowed websites](/docs/claude-tag/admins/add-connections.md#set-allowed-websites) on the gateway's connection | Exactly the gateway's host, the only host Claude sends the token
+12 −12 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/gcp
±changed
+19−19
claude-docschanged
claude-tag/admins/federated-access/gcp
With a Google Cloud identity connection, Claude exchanges a short-lived identity token at a workload identity pool you create and calls Google Cloud APIs with the result. No servic
With a Google Cloud identity connection, Claude exchanges a short-lived identity token at a workload identity pool you create and calls Google Cloud APIs with the result. No servic
Google doesn't require an attribute condition, and nothing checks it for you. Without one, agents of every other Claude Tag organization can authenticate to your pool, because ever
Google doesn't require an attribute condition, and nothing checks it for you. Without one, agents of every other Claude Tag organization can authenticate to your pool, because ever
* Requests to a list of services that deal in credentials are refused entirely. See [what the credential-minting block refuses](/docs/claude-tag/admins/federated-access/limits.md#w
+19 −19 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/connect-a-gateway
±changed
+15−15
claude-docschanged
claude-tag/admins/federated-access/connect-a-gateway
A gateway is a service you run between Claude and your internal systems. Every request Claude sends it carries a signed identity token naming your organization and the [agent](/doc
A gateway is a service you run between Claude and your internal systems. Every request Claude sends it carries a signed identity token naming your organization and the [agent](http
The subject check is yours to implement, and it's required, because every organization's tokens come from the same issuer; see [Authorize on the subject](/docs/claude-tag/admins/fe
The subject check is yours to implement, and it's required, because every organization's tokens come from the same issuer; see [Authorize on the subject](https://claude.com/docs/cl
Claude uses the gateway in the channels where its bundle applies. A bundle you created in the connect dialog applies nowhere until you choose places; see [Manage federated connecti
+15 −15 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/aws
±changed
+18−18
claude-docschanged
claude-tag/admins/federated-access/aws
With an AWS role connection, Claude signs in to an IAM role in your AWS account with a short-lived identity token and calls AWS with the role's permissions. No access key is stored
With an AWS role connection, Claude signs in to an IAM role in your AWS account with a short-lived identity token and calls AWS with the role's permissions. No access key is stored
Keep both conditions. Because every organization's tokens come from the same issuer with the same audience, the `sub` condition is the only thing that limits the role to your organ
Keep both conditions. Because every organization's tokens come from the same issuer with the same audience, the `sub` condition is the only thing that limits the role to your organ
The **Allowed AWS hosts** field starts with `*.amazonaws.com`, which lets Claude use the role with any AWS service. Keep that entry for the first verification, then narrow the list
+18 −18 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/authorization-server
±changed
+20−20
claude-docschanged
claude-tag/admins/federated-access/authorization-server
With an authorization server connection, Claude presents a short-lived identity token to an OAuth 2.0 authorization server you run, receives one of your access tokens in return, an
With an authorization server connection, Claude presents a short-lived identity token to an OAuth 2.0 authorization server you run, receives one of your access tokens in return, an
Choose this when you run an authorization server that issues tokens for your APIs. If your own service will verify the identity token on every request instead, [connect a gateway](
Choose this when you run an authorization server that issues tokens for your APIs. If your own service will verify the identity token on every request instead, [connect a gateway](
* An organization can register up to 5 [gateways](/docs/claude-tag/admins/federated-access/connect-a-gateway.md), and an authorization server's audience address (its **Issuer URL**
+20 −20 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/audit
±changed
+6−6
claude-docschanged
claude-tag/admins/audit
| **Network events** | An hourly JSON export of the outbound requests Claude made through [Agent Proxy](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). Git and MCP traffi
| **Network events** | An hourly JSON export of the outbound requests Claude made through [Agent Proxy](https://claude.com/docs/claude-tag/concepts/agent-identity.md#agent-proxy).
In channels, Claude acts as itself unless a task uses a member's [personal connectors](/docs/claude-tag/concepts/personal-connectors.md), which run with that member's permissions a
In channels, Claude acts as itself unless a task uses a member's [personal connectors](https://claude.com/docs/claude-tag/concepts/personal-connectors.md), which run with that memb
Routines run with the channel's credentials, so the channel listing is also the permission picture. See [proactivity](/docs/claude-tag/users/proactivity.md#manage-standing-work).
+6 −6 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/glossary
±changed
+16−16
claude-docschanged
claude-tag/concepts/glossary
The service accounts Claude acts with: the Claude app in Slack, the Claude GitHub App on code, and the credentials an admin provisions for every other tool. See [How agent identity
The service accounts Claude acts with: the Claude app in Slack, the Claude GitHub App on code, and the credentials an admin provisions for every other tool. See [How agent identity
The network layer that injects credentials into Claude's outbound requests. The model and the sandbox are not given the key; Agent Proxy adds the credential at the network boundary
The network layer that injects credentials into Claude's outbound requests. The model and the sandbox are not given the key; Agent Proxy adds the credential at the network boundary
A named set of connectors, repositories, [allowed domains](/docs/claude-tag/admins/add-connections#add-a-domain), plugins, and instructions that Claude uses for one kind of work, s
+16 −16 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/data-lifecycle
±changed
+19−19
claude-docschanged
claude-tag/concepts/data-lifecycle
| Memory | The notes Claude saves for each channel, the workspace notes it saves from public channels, and separate notes for each direct-message conversation. See [What Claude Tag
| Memory | The notes Claude saves for each channel, the workspace notes it saves from public channels, and separate notes for each direct-message conversation. See [What Claude Tag
| Scopes and their settings | Each workspace and channel [scope](/docs/claude-tag/concepts/glossary#scope), with its custom instructions, version setting, and the bundles and acces
| Bundles and connectors | The [bundles](/docs/claude-tag/concepts/glossary#bundle), connectors, and credentials set up for Claude Tag. They belong to your organization, not to a w
| Scopes and their settings | Each workspace and channel [scope](/docs/claude-tag/concepts/glossary.md#scope), with its custom instructions, version setting, and the bundles and ac
+19 −19 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/troubleshooting
±changed
+15−15
claude-docschanged
claude-tag/admins/federated-access/troubleshooting
This page covers what goes wrong after you connect a gateway, AWS role, Google Cloud identity, or authorization server through **Federated agent access**. It's organized by where t
This page covers what goes wrong after you connect a gateway, AWS role, Google Cloud identity, or authorization server through **Federated agent access**. It's organized by where t
* The connection applies to the channel, as [Manage federated connections on the Connectors tab](/docs/claude-tag/admins/federated-access/overview#manage-federated-connections-on-t
* The connection applies to the channel, as [Manage federated connections on the Connectors tab](/docs/claude-tag/admins/federated-access/overview#manage-federated-connections-on-t
If Claude reports that a host isn't allowed before any request is sent, see [Claude says a host isn't allowed](/docs/claude-tag/admins/troubleshooting#claude-says-a-host-isn%E2%80%
+15 −15 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/token-reference
±changed
+7−7
claude-docschanged
claude-tag/admins/federated-access/token-reference
This page lists what the token contains so the engineer who configures the verifying side can pin the right values. For setup steps, see [Connect a gateway](/docs/claude-tag/admins
This page lists what the token contains so the engineer who configures the verifying side can pin the right values. For setup steps, see [Connect a gateway](/docs/claude-tag/admins
* The console's connection check for a gateway presents a token for a reserved test agent in your organization, shown in the **Connect a gateway** dialog as the **Control subject**
* The console's connection check for a gateway presents a token for a reserved test agent in your organization, shown in the **Connect a gateway** dialog as the **Control subject**
* [Connect a gateway](/docs/claude-tag/admins/federated-access/connect-a-gateway): verify the token yourself at a service you run
+7 −7 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/overview
±changed
+17−17
claude-docschanged
claude-tag/admins/federated-access/overview
In Slack channels, Claude Tag acts under its own [agent identity](/docs/claude-tag/concepts/agent-identity) rather than as any person. Federated agent access lets that identity pro
In Slack channels, Claude Tag acts under its own [agent identity](/docs/claude-tag/concepts/agent-identity.md) rather than as any person. Federated agent access lets that identity
In the console, you connect your gateway, AWS role, Google Cloud identity, or authorization server under **Federated agent access**, add it to a [bundle](/docs/claude-tag/concepts/
In the console, you connect your gateway, AWS role, Google Cloud identity, or authorization server under **Federated agent access**, add it to a [bundle](/docs/claude-tag/concepts/
In every case the system on your side decides what the agent may do in your systems. Each connection type has its own setup page: [Connect a gateway](/docs/claude-tag/admins/federa
+17 −17 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/limits
±changed
+12−12
claude-docschanged
claude-tag/admins/federated-access/limits
Federated connections are available to Claude in Slack channels, where it acts under your organization's [agent identity](/docs/claude-tag/concepts/agent-identity). They aren't ava
Federated connections are available to Claude in Slack channels, where it acts under your organization's [agent identity](/docs/claude-tag/concepts/agent-identity.md). They aren't
| Claims | See the [identity token reference](/docs/claude-tag/admins/federated-access/token-reference#claims); verifiers must ignore claims they don't recognize. |
| Claims | See the [identity token reference](/docs/claude-tag/admins/federated-access/token-reference.md#claims); verifiers must ignore claims they don't recognize. |
| [Allowed websites](/docs/claude-tag/admins/add-connections#set-allowed-websites) on the gateway's connection | Exactly the gateway's host, the only host Claude sends the token to
+12 −12 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/gcp
±changed
+17−17
claude-docschanged
claude-tag/admins/federated-access/gcp
With a Google Cloud identity connection, Claude exchanges a short-lived identity token at a workload identity pool you create and calls Google Cloud APIs with the result. No servic
With a Google Cloud identity connection, Claude exchanges a short-lived identity token at a workload identity pool you create and calls Google Cloud APIs with the result. No servic
Google doesn't require an attribute condition, and nothing checks it for you. Without one, agents of every other Claude Tag organization can authenticate to your pool, because ever
Google doesn't require an attribute condition, and nothing checks it for you. Without one, agents of every other Claude Tag organization can authenticate to your pool, because ever
* Requests to a list of services that deal in credentials are refused entirely. See [what the credential-minting block refuses](/docs/claude-tag/admins/federated-access/limits#what
+17 −17 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/connect-a-gateway
±changed
+12−12
claude-docschanged
claude-tag/admins/federated-access/connect-a-gateway
A gateway is a service you run between Claude and your internal systems. Every request Claude sends it carries a signed identity token naming your organization and the [agent](/doc
A gateway is a service you run between Claude and your internal systems. Every request Claude sends it carries a signed identity token naming your organization and the [agent](/doc
The subject check is yours to implement, and it's required, because every organization's tokens come from the same issuer; see [Authorize on the subject](/docs/claude-tag/admins/fe
The subject check is yours to implement, and it's required, because every organization's tokens come from the same issuer; see [Authorize on the subject](/docs/claude-tag/admins/fe
Claude also needs to know the gateway exists. Add a line like this to the scope's [custom instructions](/docs/claude-tag/admins/attach-to-scope#add-custom-instructions):
+12 −12 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/aws
±changed
+15−15
claude-docschanged
claude-tag/admins/federated-access/aws
With an AWS role connection, Claude signs in to an IAM role in your AWS account with a short-lived identity token and calls AWS with the role's permissions. No access key is stored
With an AWS role connection, Claude signs in to an IAM role in your AWS account with a short-lived identity token and calls AWS with the role's permissions. No access key is stored
Keep both conditions. Because every organization's tokens come from the same issuer with the same audience, the `sub` condition is the only thing that limits the role to your organ
Keep both conditions. Because every organization's tokens come from the same issuer with the same audience, the `sub` condition is the only thing that limits the role to your organ
The **Allowed AWS hosts** field starts with `*.amazonaws.com`, which lets Claude use the role with any AWS service. Keep that entry for the first verification, then narrow the list
+15 −15 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/authorization-server
±changed
+16−16
claude-docschanged
claude-tag/admins/federated-access/authorization-server
With an authorization server connection, Claude presents a short-lived identity token to an OAuth 2.0 authorization server you run, receives one of your access tokens in return, an
With an authorization server connection, Claude presents a short-lived identity token to an OAuth 2.0 authorization server you run, receives one of your access tokens in return, an
Choose this when you run an authorization server that issues tokens for your APIs. If your own service will verify the identity token on every request instead, [connect a gateway](
Choose this when you run an authorization server that issues tokens for your APIs. If your own service will verify the identity token on every request instead, [connect a gateway](
* An organization can register up to 5 [gateways](/docs/claude-tag/admins/federated-access/connect-a-gateway), and an authorization server's audience address (its **Issuer URL** va
+16 −16 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/audit
±changed
+6−6
claude-docschanged
claude-tag/admins/audit
| **Network events** | An hourly JSON export of the outbound requests Claude made through [Agent Proxy](/docs/claude-tag/concepts/agent-identity#agent-proxy). Git and MCP traffic a
| **Network events** | An hourly JSON export of the outbound requests Claude made through [Agent Proxy](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). Git and MCP traffi
In channels, Claude acts as itself unless a task uses a member's [personal connectors](/docs/claude-tag/concepts/personal-connectors), which run with that member's permissions and
In channels, Claude acts as itself unless a task uses a member's [personal connectors](/docs/claude-tag/concepts/personal-connectors.md), which run with that member's permissions a
Routines run with the channel's credentials, so the channel listing is also the permission picture. See [proactivity](/docs/claude-tag/users/proactivity#manage-standing-work).
+6 −6 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/glossary
±changed
+3−7
claude-docschanged
claude-tag/concepts/glossary
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
> [!NOTE]
>
+3 −7 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/data-lifecycle
±changed
+3−3
claude-docschanged
claude-tag/concepts/data-lifecycle
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
> [!NOTE]
>
+3 −3 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/troubleshooting
±changed
+7−5
claude-docschanged
claude-tag/admins/federated-access/troubleshooting
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
<Note>Federated connections are managed on the [**Federated agent access**](https://claude.ai/admin-settings/claude-tag/federated-cloud-access) page, under **Claude Tag** in the ad
+7 −5 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/token-reference
±changed
+6−4
claude-docschanged
claude-tag/admins/federated-access/token-reference
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
> [!NOTE]
>
+6 −4 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/overview
±changed
+6−4
claude-docschanged
claude-tag/admins/federated-access/overview
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
> [!NOTE]
>
> Claude Tag is in public beta. Features and behavior described here may change before general availability.
<BetaNote />
+6 −4 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/limits
±changed
+3−3
claude-docschanged
claude-tag/admins/federated-access/limits
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
> [!NOTE]
>
+3 −3 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/gcp
±changed
+31−31
claude-docschanged
claude-tag/admins/federated-access/gcp
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
> [!NOTE]
>
> Claude Tag is in public beta. Features and behavior described here may change before general availability.
<BetaNote />
+31 −31 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/connect-a-gateway
±changed
+21−21
claude-docschanged
claude-tag/admins/federated-access/connect-a-gateway
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
> [!NOTE]
>
> Claude Tag is in public beta. Features and behavior described here may change before general availability.
<BetaNote />
+21 −21 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/aws
±changed
+52−54
claude-docschanged
claude-tag/admins/federated-access/aws
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
> [!NOTE]
>
> Claude Tag is in public beta. Features and behavior described here may change before general availability.
<BetaNote />
+52 −54 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/federated-access/authorization-server
±changed
+20−20
claude-docschanged
claude-tag/admins/federated-access/authorization-server
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
> [!NOTE]
>
> Claude Tag is in public beta. Features and behavior described here may change before general availability.
<BetaNote />
+20 −20 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/audit
±changed
+3−3
claude-docschanged
claude-tag/admins/audit
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
> [!NOTE]
>
+3 −3 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/security-and-data
±changed
+35−26
claude-docschanged
claude-tag/concepts/security-and-data
In channels, Claude acts under its own service accounts that an Owner provisions. By default it can read and post in Slack channels it's been added to and search public channels by
In channels, Claude acts under its own service accounts. By default it can read and post in Slack channels it's been added to and search public channels by keyword; it has no acces
Every channel request, whether a person typed it or a schedule triggered it, follows the same path: it runs in an isolated sandbox, and the credentials you provision aren't placed
Every channel request, whether a person typed it or a schedule triggered it, follows the same path: it runs in an isolated sandbox, and the credentials you provision aren't placed
| Agent Proxy | Injects credentials from the credential store at request time, and blocks a request that no [connection](/docs/claude-tag/admins/add-connections#set-allowed-website
+35 −26 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/concepts/personal-connectors
±changed
+8−8
claude-docschanged
claude-tag/concepts/personal-connectors
Personal connectors in channels are on for every organization on the Team plan, with nothing for an admin to set up. On the Enterprise plan, the **Personal connectors** section at
Personal connectors in channels are on for every organization on the Team plan, with nothing for an admin to set up. On the Enterprise plan, an admin manages them in the **Personal
* **You ask in a channel.** When your task needs one of your own tools, Claude can use your connector for it. The channel also uses the connections an admin attached to it, and eve
* **You ask in a channel.** When your task needs one of your own tools, Claude can use your connector for it. The channel also uses the Claude Tag connectors an admin attached to i
* **Claude starts work on its own.** [Routines](/docs/claude-tag/users/proactivity) and other work Claude starts on its own in a channel use the channel's connections, never your c
+8 −8 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/concepts/how-it-works
±changed
+7−7
claude-docschanged
claude-tag/concepts/how-it-works
Connections extend a session's reach into your own systems. An organization admin attaches access to a scope (the organization, a workspace, or a single channel), so the same reque
A thread locks in its skills, plugins, and custom instructions when it starts, and a running thread keeps that set. Connections and domain rules are enforced on each request, so on
Claude Tag connectors extend a session's reach into your own systems. An organization admin applies access to all of Slack, to one workspace, or to a single channel, either directl
+7 −7 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/concepts/glossary
±changed
+22−18
claude-docschanged
claude-tag/concepts/glossary
> Claude Tag terms defined in one place. See agent identity, Access bundle, channel manager, connection, scope, Agent Proxy, routine, channel memory, environment, and session.
> Claude Tag terms defined in one place, including agent identity, bundle, connector, personal connector, scope, Agent Proxy, routine, and session.
## Access bundle
+22 −18 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/concepts/data-lifecycle
±changed
+12−12
claude-docschanged
claude-tag/concepts/data-lifecycle
Claude Tag keeps a record of its work on Anthropic's side, separate from the messages in your Slack workspace. This page is for the Owner or security reviewer who needs to know wha
Claude Tag keeps a record of its work on Anthropic's side, separate from the messages in your Slack workspace. This page is for an Owner or security reviewer who needs to know what
| Scopes and their settings | Each workspace and channel [scope](/docs/claude-tag/concepts/glossary#scope), with its custom instructions, version setting, and Access bundle binding
| Access bundles | The connections and credentials an Owner provisions. Bundles belong to your organization, not to a workspace |
| Scopes and their settings | Each workspace and channel [scope](/docs/claude-tag/concepts/glossary#scope), with its custom instructions, version setting, and the bundles and acces
+12 −12 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/concepts/agent-identity
±changed
+13−11
claude-docschanged
claude-tag/concepts/agent-identity
In one-to-one direct messages (DMs) between `@Claude` and a user who has connected a Claude account, the provisioned identity does not apply. A DM session runs on [the individual's
In one-to-one direct messages (DMs) between `@Claude` and a user who has connected a Claude account, the provisioned identity does not apply. A DM session runs on [the individual's
* The agent's credentials for any additional connections, such as GitHub or a data warehouse, reach those systems to pull the required information. An organization Owner sets up th
* The agent's credentials for any additional Claude Tag connectors, such as GitHub or a data warehouse, reach those systems to pull the required information. An organization Owner
A matching credential comes from the credential store, where an admin's [connections](/docs/claude-tag/admins/add-connections) are kept. Once saved, a credential is never displ
+13 −11 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/troubleshooting
±changed
+51−63
claude-docschanged
claude-tag/admins/troubleshooting
* The connection reaches that channel through an attached bundle. To check, go to [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag) > **Claude Ta
* The test ran in a new thread; an existing thread isn't told about a connection added after it started, though the connection works there if the request names the service.
* The connector applies to that channel. To check, go to [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag), open the **Channels** tab under **Cla
* The test ran in a new thread; an existing thread isn't told about a connector added after it started, though the connector works there if the request names the service.
| A connected tool to work in your test | “I can't reach…” | Claude isn't told about a connection added after the thread started. Ask it to use the service by name, or start a fres
+51 −63 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/troubleshooting
±changed
+20−20
claude-docschanged
claude-tag/admins/federated-access/troubleshooting
<Note>Federated connections are managed at [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag): open **Federated agent access** in the left navigat
<Note>Federated connections are managed on the [**Federated agent access**](https://claude.ai/admin-settings/claude-tag/federated-cloud-access) page, under **Claude Tag** in the ad
* The connection is in an [Access bundle attached to the channel's scope](/docs/claude-tag/admins/attach-to-scope#attach-the-bundle). For a gateway, the scope's custom instructions
* The connection applies to the channel, as [Manage federated connections on the Connectors tab](/docs/claude-tag/admins/federated-access/overview#manage-federated-connections-on-t
| A dialog message containing "isn't enabled for your organization yet", or **Federated agent access** is missing from the left navigation | Federated agent access isn't available
+20 −20 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/token-reference
±changed
+1−1
claude-docschanged
claude-tag/admins/federated-access/token-reference
| `profile_id` | The ID of the Access bundle the connection belongs to, starting with `capp_`. Informational. |
| `profile_id` | The ID of the bundle the connection belongs to, starting with `capp_`. Informational. |
+1 −1 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/overview
±changed
+16−6
claude-docschanged
claude-tag/admins/federated-access/overview
<Note>Federated connections are managed at [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag): open **Federated agent access** in the left navigat
<Note>Federated connections are managed on the [**Federated agent access**](https://claude.ai/admin-settings/claude-tag/federated-cloud-access) page, under **Claude Tag** in the ad
In the console, you connect your gateway, AWS role, Google Cloud identity, or authorization server under **Federated agent access** and add it to an [Access bundle](/docs/claude-ta
In the console, you connect your gateway, AWS role, Google Cloud identity, or authorization server under **Federated agent access**, add it to a [bundle](/docs/claude-tag/concepts/
1. When a request from Claude's sandbox needs one of your systems, [Agent Proxy](/docs/claude-tag/concepts/agent-identity#agent-proxy) matches it by destination to a federated conn
+16 −6 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/limits
±changed
+5−4
claude-docschanged
claude-tag/admins/federated-access/limits
| Registered addresses per organization | 5, counting gateways and authorization-server token endpoints together. |
| Registered addresses per organization | 5, counting gateways and authorization-server audience addresses together. |
| Google Cloud connections in one bundle | No two Google Cloud connections in the same Access bundle can cover the same host under **Allowed hosts**, whatever their providers or se
| Google Cloud connections in one bundle | No two Google Cloud connections in the same bundle can cover the same host under **Allowed hosts**, whatever their providers or service a
| **Allowed API hosts** | Must not include the token endpoint's host. |
+5 −4 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/gcp
±changed
+9−9
claude-docschanged
claude-tag/admins/federated-access/gcp
<Note>Google Cloud identities are connected at [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag): open **Federated agent access** in the left nav
<Note>Google Cloud identities are connected on the [**Federated agent access**](https://claude.ai/admin-settings/claude-tag/federated-cloud-access) page, under **Claude Tag** in th
With a Google Cloud identity connection, Claude exchanges a short-lived identity token at a workload identity pool you create and calls Google Cloud APIs with the result. No servic
With a Google Cloud identity connection, Claude exchanges a short-lived identity token at a workload identity pool you create and calls Google Cloud APIs with the result. No servic
Replace the prefilled `*.googleapis.com` entry in the **Allowed Google hosts** field with the hosts Claude needs, for example `storage.googleapis.com`. A wildcard as the leftmo
+9 −9 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/connect-a-gateway
±changed
+9−9
claude-docschanged
claude-tag/admins/federated-access/connect-a-gateway
<Note>Gateways are connected at [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag): open **Federated agent access** in the left navigation and use
<Note>Gateways are connected on the [**Federated agent access**](https://claude.ai/admin-settings/claude-tag/federated-cloud-access) page, under **Claude Tag** in the admin setting
* An organization can register up to 5 addresses, counting gateways and authorization-server token endpoints together.
* An organization can register up to 5 addresses, counting gateways and authorization-server audience addresses together.
<Step title="Add the gateway to an Access bundle">
+9 −9 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/aws
±changed
+11−11
claude-docschanged
claude-tag/admins/federated-access/aws
<Note>AWS roles are connected at [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag): open **Federated agent access** in the left navigation and us
<Note>AWS roles are connected on the [**Federated agent access**](https://claude.ai/admin-settings/claude-tag/federated-cloud-access) page, under **Claude Tag** in the admin settin
With an AWS role connection, Claude signs in to an IAM role in your AWS account with a short-lived identity token and calls AWS with the role's permissions. No access key is stored
With an AWS role connection, Claude signs in to an IAM role in your AWS account with a short-lived identity token and calls AWS with the role's permissions. No access key is stored
The **Allowed AWS hosts** field starts with `*.amazonaws.com`, which lets Claude use the role with any AWS service. Keep that entry for the first verification, then narrow the
+11 −11 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/federated-access/authorization-server
±changed
+17−17
claude-docschanged
claude-tag/admins/federated-access/authorization-server
<Note>Authorization servers are connected at [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag): open **Federated agent access** in the left navig
<Note>Authorization servers are connected on the [**Federated agent access**](https://claude.ai/admin-settings/claude-tag/federated-cloud-access) page, under **Claude Tag** in the
* The token endpoint is on a different host from the APIs Claude will call with the returned token, for example `auth.example.com` and `api.example.com`.
* The token endpoint is on a different host from the APIs Claude will call with the returned token, for example `auth.example.com` and `api.example.com`, or its address has a folde
* An organization can register up to 5 [gateways](/docs/claude-tag/admins/federated-access/connect-a-gateway), and a token endpoint counts as one.
+17 −17 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/audit
±changed
+8−8
claude-docschanged
claude-tag/admins/audit
> Claude Tag actions appear under its own service accounts in each connected tool's audit log. See what the Audit page covers, how to trace an action to its source, and where each
> Claude Tag actions appear under its own service accounts in each connected tool's audit log. See what the Activity page covers, how to trace an action to its source, and where ea
The Audit page opens for Owners in your Claude organization. The other trails on this page are visible to anyone with access to the underlying surface.
The **Activity** page opens for Owners of your Claude organization. The other trails on this page are visible to anyone with access to the underlying surface.
* **[The Audit page](#what-the-audit-view-lists)** in admin settings, with tabs for scheduled work, memory, and network events
+8 −8 lines
Upstream edited 5 Oct 2026 18:54 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/concepts/settings-map
±changed
+23−23
claude-docschanged
claude-tag/concepts/settings-map
| [**Organization settings > Claude Tag**](https://claude.ai/admin-settings/claude-tag) | An Owner in your Claude organization, or a [Claude Tag admin](/docs/claude-tag/admins/rest
| [**Organization settings > Claude Tag**](https://claude.ai/admin-settings/claude-tag) | An Owner in your Claude organization, or a [Claude Tag admin](https://claude.com/docs/clau
| The **Configure** link in the footer of any Claude reply in a channel | Channel members (unless an admin restricts editing) and [channel managers](/docs/claude-tag/admins/restric
| [Customize > Connectors](https://claude.ai/customize/connectors) on your own claude.ai account | You | Which of your personal tools apply in [one-to-one DMs](/docs/claude-tag/con
| The **Configure** link in the footer of any Claude reply in a channel | Channel members (unless an admin restricts editing) and [channel managers](https://claude.com/docs/claude-
+23 −23 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/skills-repo
±changed
+8−8
claude-docschanged
claude-tag/admins/skills-repo
At [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag), open a [bundle](/docs/claude-tag/admins/add-connections.md) on the **Bundles** tab under **
At [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag), open a [bundle](https://claude.com/docs/claude-tag/admins/add-connections.md) on the **Bund
On the same bundle's page, select **Add**, then **Plugin**, and pick each plugin from your new marketplace. A plugin isn't in the bundle until you add it, and the bundle's plugins
On the same bundle's page, select **Add**, then **Plugin**, and pick each plugin from your new marketplace. A plugin isn't in the bundle until you add it, and the bundle's plugins
Claude opens the PR, and you merge it. To require a person's approval before a change reaches the default branch, see [Require a second approval on Claude's pull requests](/docs/cl
+8 −8 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/settings-map
±changed
+21−21
claude-docschanged
claude-tag/concepts/settings-map
| [**Organization settings > Claude Tag**](https://claude.ai/admin-settings/claude-tag) | An Owner in your Claude organization, or a [Claude Tag admin](/docs/claude-tag/admins/rest
| [**Organization settings > Claude Tag**](https://claude.ai/admin-settings/claude-tag) | An Owner in your Claude organization, or a [Claude Tag admin](/docs/claude-tag/admins/rest
| The **Configure** link in the footer of any Claude reply in a channel | Channel members (unless an admin restricts editing) and [channel managers](/docs/claude-tag/admins/restric
| [Customize > Connectors](https://claude.ai/customize/connectors) on your own claude.ai account | You | Which of your personal tools apply in [one-to-one DMs](/docs/claude-tag/con
| The **Configure** link in the footer of any Claude reply in a channel | Channel members (unless an admin restricts editing) and [channel managers](/docs/claude-tag/admins/restric
+21 −21 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/skills-repo
±changed
+8−8
claude-docschanged
claude-tag/admins/skills-repo
At [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag), open a [bundle](/docs/claude-tag/admins/add-connections) on the **Bundles** tab under **Cla
At [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag), open a [bundle](/docs/claude-tag/admins/add-connections.md) on the **Bundles** tab under **
On the same bundle's page, select **Add**, then **Plugin**, and pick each plugin from your new marketplace. A plugin isn't in the bundle until you add it, and the bundle's plugins
On the same bundle's page, select **Add**, then **Plugin**, and pick each plugin from your new marketplace. A plugin isn't in the bundle until you add it, and the bundle's plugins
Claude opens the PR, and you merge it. To require a person's approval before a change reaches the default branch, see [Require a second approval on Claude's pull requests](/docs/cl
+8 −8 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/settings-map
±changed
+3−3
claude-docschanged
claude-tag/concepts/settings-map
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
> [!NOTE]
>
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/skills-repo
±changed
+16−18
claude-docschanged
claude-tag/admins/skills-repo
export const BetaNote = () => <Info>Claude Tag is in public beta. Features and behavior described here may change before general availability.</Info>;
<BetaNote />
> [!NOTE]
>
+16 −18 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 20 Oct 2026 18:07 UTC
claude-docs
claude-tag/concepts/settings-map
±changed
+13−13
claude-docschanged
claude-tag/concepts/settings-map
| [Claude Tag admin page](https://claude.ai/admin-settings/claude-tag) | An Owner in your Claude organization, or a [Claude Tag admin](/docs/claude-tag/admins/restrict-access#deleg
| [**Organization settings > Claude Tag**](https://claude.ai/admin-settings/claude-tag) | An Owner in your Claude organization, or a [Claude Tag admin](/docs/claude-tag/admins/rest
Channel memory and routines aren't in the table because you change them by talking to Claude in the channel; see [what anyone can change from the channel](/docs/claude-tag/admins/c
Channel memory and routines aren't in the table because you change them by talking to Claude in the channel; see [what anyone can change from the channel](/docs/claude-tag/admins/c
## The Claude Tag admin page
+13 −13 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/skills-repo
±changed
+5−5
claude-docschanged
claude-tag/admins/skills-repo
Open an [Access bundle](/docs/claude-tag/admins/add-connections#your-first-access-bundle), go to its **Repositories** tab, and add the repository. The Claude GitHub App must al
At [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag), open a [bundle](/docs/claude-tag/admins/add-connections) on the **Bundles** tab under *
<Step title="Attach the plugins to a scope">
In the same bundle's **Plugins** tab, toggle on the plugins from your new marketplace; each is off until you enable it. See [Attach plugins](/docs/claude-tag/admins/add-connect
<Step title="Add the plugins to the bundle">
+5 −5 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/restrict-access
±changed
+68−61
claude-docschanged
claude-tag/admins/restrict-access
<Note>Most controls on this page require the Owner role in your Claude organization; the [permissions table](#permissions-by-role) below lists which actions a channel manager or a
<Note>Most controls on this page require the Owner role in your Claude organization; the [permissions table](#permissions-by-role) lists which actions a channel manager or a channe
At [`claude.ai/admin-settings/claude-tag`](https://claude.ai/admin-settings/claude-tag), under **Where Claude Tag works**, click **Manage** next to **Member access**. The **Claude
Go to [**Claude's access > Channels > Slack**](https://claude.ai/admin-settings/claude-tag/channels/slack) and open the **Advanced** tab. Under **Access**, a toggle controls who in
You may see the earlier three-option **Members** dropdown instead of the toggle. The dialog keeps the dropdown while your organization's stored choice matches neither toggle stat
+68 −61 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/managed-by
±changed
+3−3
claude-docschanged
claude-tag/admins/managed-by
* **Managed channel:** the channel has its own channel scope on the **Slack** tab in admin settings. If it doesn't appear there, [add the channel](/docs/claude-tag/admins/attach-to
* **Managed channel:** the channel has its own page on the **Channels** tab under **Claude's access** in admin settings. If it isn't listed there, [set the channel up](/docs/claude
| This channel's settings are locked by an admin | The managing channel's [**Channel member edits**](/docs/claude-tag/admins/attach-to-scope#restrict-who-can-set-channel-instructio
| This channel's settings are locked by an admin | The managing channel's [**Channel member edits**](/docs/claude-tag/admins/attach-to-scope#restrict-who-can-set-channel-instructio
| Claude isn't set up in the managed channel with its own channel configuration | The managed channel has no channel scope of its own on the **Slack** tab | [Add the channel](/docs
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/healthcare
±changed
+19−17
claude-docschanged
claude-tag/admins/healthcare
This page is for the Claude organization Owner and the compliance lead deciding where Claude works. It describes how to configure Claude Tag so PHI stays out of Claude's reach. It
This page is for the Claude organization's Owners and the compliance lead deciding where Claude works. It describes how to configure Claude Tag so PHI stays out of Claude's reach.
Limiting Claude to approved channels needs an [Enterprise plan](https://claude.com/pricing), in addition to the [general prerequisites for Claude Tag](/docs/claude-tag/admins/setup
Limiting Claude to approved channels needs an [Enterprise plan](https://claude.com/pricing), in addition to the [general prerequisites for Claude Tag](/docs/claude-tag/admins/setup
An Owner turns Claude off everywhere by default, turns it on only in channels approved as PHI-free, turns off direct messages, and blocks channel names that signal PHI. Every setti
+19 −17 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/customize
±changed
+28−24
claude-docschanged
claude-tag/admins/customize
| **Connections** | Credentials for the systems Claude can reach (GitHub, Drive, Datadog, your APIs) | Owner or [Claude Tag admin](/docs/claude-tag/admins/restrict-access#delegate-
| **Plugins and skills** | Instructions that teach Claude how to use a tool or follow a process. A plugin bundles one or more [skills](https://code.claude.com/docs/en/skills). | Ow
| **Connectors** | The systems Claude can reach and the credentials it uses for each (GitHub, Drive, Datadog, your APIs) | Owner or [Claude Tag admin](/docs/claude-tag/admins/restr
| **Plugins and skills** | Instructions that teach Claude how to use a tool or follow a process. A plugin bundles one or more [skills](https://code.claude.com/docs/en/skills). | Ow
Connections and plugins decide what Claude *can do*; instructions and memory shape *how it does it*.
+28 −24 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/admins/attach-to-scope
±changed
+131−99
claude-docschanged
claude-tag/admins/attach-to-scope
> Choose which Slack channels and workspaces a set of Claude Tag credentials applies to. Covers inheritance, overlap rules, and adding channels after setup.
> Choose which Slack workspaces and channels a Claude Tag bundle applies to, attach bundles to channels by name, and see how access stacks when bundles overlap.
This page covers adding access to more workspaces and channels, and how access stacks when several bundles apply to the same place. It assumes you have already [paired a workspace]
A scope is where a bundle applies: **Default Slack access** (the organization-wide root), a workspace, or a single channel. Bundles inherit downward through those scopes, and when
+131 −99 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 5 Oct 2026 19:07 UTC
claude-docs
claude-tag/overview
±changed
+40−40
claude-docschanged
claude-tag/overview
[I'm setting it up →](/docs/claude-tag/admins/setup-overview)
[I'm setting it up →](https://claude.com/docs/claude-tag/admins/setup-overview)
Claude Tag is available on Team and Enterprise plans, on Anthropic's first-party service. It isn't available on individual plans (Free, Pro, or Max), or for third-party deployments
Claude Tag is available on Team and Enterprise plans, on Anthropic's first-party service. It isn't available on individual plans (Free, Pro, or Max), or for third-party deployments
If you're choosing between Claude products for Slack-shaped work, [how Claude Tag differs from Cowork and Claude Code](/docs/claude-tag/concepts/how-it-works.md#how-claude-tag-diff
+40 −40 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/setup-overview
±changed
+42−42
claude-docschanged
claude-tag/admins/setup-overview
> | A Claude organization **without Zero Data Retention (ZDR), customer-managed encryption (CMEK), or the HIPAA configuration for Claude Code (local mode) and Cowork (local mode)**
> | A Claude organization **without Zero Data Retention (ZDR), customer-managed encryption (CMEK), or the HIPAA configuration for Claude Code (local mode) and Cowork (local mode)**
> If any of your services restrict traffic by IP, file the [network requirements](/docs/claude-tag/admins/network-requirements.md) request with your network team early; in many org
> If any of your services restrict traffic by IP, file the [network requirements](https://claude.com/docs/claude-tag/admins/network-requirements.md) request with your network team
> If your team already uses the earlier Claude in Slack, the same steps apply and your existing app stays; see [Migrate from the earlier app](/docs/claude-tag/admins/migrate-from-e
+42 −42 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/vercel
±changed
+3−3
claude-docschanged
claude-tag/admins/connections/vercel
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [Give Claude access](/docs/claude-tag/admins/add-connections.md): the full credential-type and allowed-hosts reference
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/stripe
±changed
+3−3
claude-docschanged
claude-tag/admins/connections/stripe
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [Give Claude access](/docs/claude-tag/admins/add-connections.md): the full credential-type and allowed-hosts reference
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/snowflake
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/snowflake
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [What this connection adds](/docs/claude-tag/users/use-cases/answer-data-questions.md): warehouse questions answered with charts in the thread
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/sentry
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/sentry
If the connect form offers to include the Sentry plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
If the connect form offers to include the Sentry plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [What this connection adds](/docs/claude-tag/users/use-cases/watch-monitors.md): the monitoring use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/salesforce
±changed
+3−3
claude-docschanged
claude-tag/admins/connections/salesforce
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [Pull deal and account state](/docs/claude-tag/users/use-cases/pull-deal-state.md): what this connection adds
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/pagerduty
±changed
+5−5
claude-docschanged
claude-tag/admins/connections/pagerduty
Generate a general-access read-only API key. A read-write key lets Claude acknowledge and resolve incidents. If you use one, [turn the connector on only in a private incident chann
Generate a general-access read-only API key. A read-write key lets Claude acknowledge and resolve incidents. If you use one, [turn the connector on only in a private incident chann
If the connect form offers to include the PagerDuty plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claud
If the connect form offers to include the PagerDuty plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claud
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
+5 −5 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/notion
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/notion
If the connect form offers to include the Notion plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
If the connect form offers to include the Notion plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [What this connection adds](/docs/claude-tag/users/use-cases/find-answers.md): the knowledge and docs use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/linear
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/linear
If the connect form offers to include the Linear plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
If the connect form offers to include the Linear plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [What this connection adds](/docs/claude-tag/users/use-cases/create-artifacts.md): the issue tracking use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/hubspot
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/hubspot
If the connect form offers to include the HubSpot plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
If the connect form offers to include the HubSpot plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [What this connection adds](/docs/claude-tag/users/use-cases/pull-deal-state.md): the go-to-market use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/google
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/google
This connector calls Google's HTTP APIs, and it's separate from members' personal claude.ai connectors. A member's own Google connector applies in one-to-one DMs. Claude can also [
This connector calls Google's HTTP APIs, and it's separate from members' personal claude.ai connectors. A member's own Google connector applies in one-to-one DMs. Claude can also [
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **Google Drive**, **Google Cal
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **Google Drive**, **Google Cal
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/gong
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/gong
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [What this connection adds](/docs/claude-tag/users/use-cases/pull-deal-state.md): the go-to-market use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/gitlab
±changed
+10−10
claude-docschanged
claude-tag/admins/connections/gitlab
> This page is the credential field reference. The full setup walkthrough, including creating a dedicated GitLab service account for Claude and scoping its group access, is at [Con
> This page is the credential field reference. The full setup walkthrough, including creating a dedicated GitLab service account for Claude and scoping its group access, is at [Con
A personal access token from a [dedicated service account](/docs/claude-tag/admins/configure-gitlab.md#create-a-dedicated-gitlab-account-for-claude) is recommended, so one identity
A personal access token from a [dedicated service account](https://claude.com/docs/claude-tag/admins/configure-gitlab.md#create-a-dedicated-gitlab-account-for-claude) is recommende
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, select **GitLab**, and paste the token. F
+10 −10 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/datadog
±changed
+5−5
claude-docschanged
claude-tag/admins/connections/datadog
If the connect form offers to include the Datadog plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
If the connect form offers to include the Datadog plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
The connector is created with path prefixes that cover Datadog's read and query routes: metric, log, trace, and RUM queries, monitors, downtimes, dashboards, SLOs, notebooks, event
The connector is created with path prefixes that cover Datadog's read and query routes: metric, log, trace, and RUM queries, monitors, downtimes, dashboards, SLOs, notebooks, event
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
+5 −5 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/bigquery
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/bigquery
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **BigQuery**. The first creden
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **BigQuery**. The first creden
Agent Proxy exchanges the service-account key for an access token and injects it at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy work
Agent Proxy exchanges the service-account key for an access token and injects it at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy work
If you allowlist [Anthropic's published egress IP range](/docs/claude-tag/admins/network-requirements.md) in an access level, Claude's queries still fail, because they reach your p
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/atlassian
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/atlassian
In the connect form, with **Use an API token** selected, enter the dedicated account's email address, the API token from Atlassian, and your own site's hostname, such as `your-doma
In the connect form, with **Use an API token** selected, enter the dedicated account's email address, the API token from Atlassian, and your own site's hostname, such as `your-doma
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
> Atlassian Data Center (self-hosted) isn't covered by the **Jira & Confluence** entry because it authenticates with a personal access token sent as a Bearer header. Add a Data Cen
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/asana
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/asana
If the connect form offers to include the Asana plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-ta
If the connect form offers to include the Asana plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-ta
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
* [What this connection adds](/docs/claude-tag/users/use-cases/track-projects.md): the issue tracking use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/amplitude
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/amplitude
For the API key route, pair the connector with a plugin that covers Amplitude so Claude knows how to call the REST API. Add the plugin on the [**Skills and plugins**](https://claud
For the API key route, pair the connector with a plugin that covers Amplitude so Claude knows how to call the REST API. Add the plugin on the [**Skills and plugins**](https://claud
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](https://claude.com/docs/claude-tag/conc
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 23 Oct 2026 18:07 UTC
claude-docs
claude-tag/overview
±changed
+33−33
claude-docschanged
claude-tag/overview
If you're choosing between Claude products for Slack-shaped work, [how Claude Tag differs from Cowork and Claude Code](/docs/claude-tag/concepts/how-it-works#how-claude-tag-differs
If you're choosing between Claude products for Slack-shaped work, [how Claude Tag differs from Cowork and Claude Code](/docs/claude-tag/concepts/how-it-works.md#how-claude-tag-diff
* **In channels**: by default, anyone in the paired Slack workspace can tag `@Claude` in a channel, and an Owner can [restrict who can use Claude](/docs/claude-tag/admins/restrict-
* **In group DMs**: the same restriction on who can use Claude applies, and the work bills to your organization's usage balance. See [Group DMs](/docs/claude-tag/admins/restrict-ac
* **In one-to-one DMs**: a DM from a member who has connected a Claude account runs on that account and bills to that person's seat. The seat must include Claude Code, or, on the E
+33 −33 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/setup-overview
±changed
+41−41
claude-docschanged
claude-tag/admins/setup-overview
> | A Claude organization **without Zero Data Retention (ZDR), customer-managed encryption (CMEK), or the HIPAA configuration for Claude Code (local mode) and Cowork (local mode)**
> | A Claude organization **without Zero Data Retention (ZDR), customer-managed encryption (CMEK), or the HIPAA configuration for Claude Code (local mode) and Cowork (local mode)**
> If any of your services restrict traffic by IP, file the [network requirements](/docs/claude-tag/admins/network-requirements) request with your network team early; in many organi
> If any of your services restrict traffic by IP, file the [network requirements](/docs/claude-tag/admins/network-requirements.md) request with your network team early; in many org
> If your team already uses the earlier Claude in Slack, the same steps apply and your existing app stays; see [Migrate from the earlier app](/docs/claude-tag/admins/migrate-from-e
+41 −41 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/vercel
±changed
+3−3
claude-docschanged
claude-tag/admins/connections/vercel
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [Give Claude access](/docs/claude-tag/admins/add-connections): the full credential-type and allowed-hosts reference
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/stripe
±changed
+3−3
claude-docschanged
claude-tag/admins/connections/stripe
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [Give Claude access](/docs/claude-tag/admins/add-connections): the full credential-type and allowed-hosts reference
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/snowflake
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/snowflake
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [What this connection adds](/docs/claude-tag/users/use-cases/answer-data-questions): warehouse questions answered with charts in the thread
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/sentry
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/sentry
If the connect form offers to include the Sentry plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
If the connect form offers to include the Sentry plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [What this connection adds](/docs/claude-tag/users/use-cases/watch-monitors): the monitoring use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/salesforce
±changed
+3−3
claude-docschanged
claude-tag/admins/connections/salesforce
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [Pull deal and account state](/docs/claude-tag/users/use-cases/pull-deal-state): what this connection adds
+3 −3 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/pagerduty
±changed
+5−5
claude-docschanged
claude-tag/admins/connections/pagerduty
Generate a general-access read-only API key. A read-write key lets Claude acknowledge and resolve incidents. If you use one, [turn the connector on only in a private incident chann
Generate a general-access read-only API key. A read-write key lets Claude acknowledge and resolve incidents. If you use one, [turn the connector on only in a private incident chann
If the connect form offers to include the PagerDuty plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claud
If the connect form offers to include the PagerDuty plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claud
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
+5 −5 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/notion
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/notion
If the connect form offers to include the Notion plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
If the connect form offers to include the Notion plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [What this connection adds](/docs/claude-tag/users/use-cases/find-answers): the knowledge and docs use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/linear
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/linear
If the connect form offers to include the Linear plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
If the connect form offers to include the Linear plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-t
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [What this connection adds](/docs/claude-tag/users/use-cases/create-artifacts): the issue tracking use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/hubspot
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/hubspot
If the connect form offers to include the HubSpot plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
If the connect form offers to include the HubSpot plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [What this connection adds](/docs/claude-tag/users/use-cases/pull-deal-state): the go-to-market use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/google
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/google
This connector calls Google's HTTP APIs, and it's separate from members' personal claude.ai connectors. A member's own Google connector applies in one-to-one DMs. Claude can also [
This connector calls Google's HTTP APIs, and it's separate from members' personal claude.ai connectors. A member's own Google connector applies in one-to-one DMs. Claude can also [
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **Google Drive**, **Google Cal
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **Google Drive**, **Google Cal
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/gong
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/gong
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [What this connection adds](/docs/claude-tag/users/use-cases/pull-deal-state): the go-to-market use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/gitlab
±changed
+10−10
claude-docschanged
claude-tag/admins/connections/gitlab
> This page is the credential field reference. The full setup walkthrough, including creating a dedicated GitLab service account for Claude and scoping its group access, is at [Con
> This page is the credential field reference. The full setup walkthrough, including creating a dedicated GitLab service account for Claude and scoping its group access, is at [Con
A personal access token from a [dedicated service account](/docs/claude-tag/admins/configure-gitlab#create-a-dedicated-gitlab-account-for-claude) is recommended, so one identity co
A personal access token from a [dedicated service account](/docs/claude-tag/admins/configure-gitlab.md#create-a-dedicated-gitlab-account-for-claude) is recommended, so one identity
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, select **GitLab**, and paste the token. F
+10 −10 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/datadog
±changed
+5−5
claude-docschanged
claude-tag/admins/connections/datadog
If the connect form offers to include the Datadog plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
If the connect form offers to include the Datadog plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-
The connector is created with path prefixes that cover Datadog's read and query routes: metric, log, trace, and RUM queries, monitors, downtimes, dashboards, SLOs, notebooks, event
The connector is created with path prefixes that cover Datadog's read and query routes: metric, log, trace, and RUM queries, monitors, downtimes, dashboards, SLOs, notebooks, event
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
+5 −5 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/bigquery
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/bigquery
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **BigQuery**. The first creden
Go to [**Organization settings > Claude Tag > Connectors**](https://claude.ai/admin-settings/claude-tag?access=connectors), click **Add**, and select **BigQuery**. The first creden
Agent Proxy exchanges the service-account key for an access token and injects it at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy work
Agent Proxy exchanges the service-account key for an access token and injects it at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy work
If you allowlist [Anthropic's published egress IP range](/docs/claude-tag/admins/network-requirements) in an access level, Claude's queries still fail, because they reach your peri
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/atlassian
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/atlassian
In the connect form, with **Use an API token** selected, enter the dedicated account's email address, the API token from Atlassian, and your own site's hostname, such as `your-doma
In the connect form, with **Use an API token** selected, enter the dedicated account's email address, the API token from Atlassian, and your own site's hostname, such as `your-doma
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
> Atlassian Data Center (self-hosted) isn't covered by the **Jira & Confluence** entry because it authenticates with a personal access token sent as a Bearer header. Add a Data Cen
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/asana
±changed
+4−4
claude-docschanged
claude-tag/admins/connections/asana
If the connect form offers to include the Asana plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-ta
If the connect form offers to include the Asana plugin, leave that box selected; otherwise add the plugin on the [**Skills and plugins**](https://claude.ai/admin-settings/claude-ta
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
* [What this connection adds](/docs/claude-tag/users/use-cases/track-projects): the issue tracking use cases
+4 −4 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/admins/connections/amplitude
±changed
+6−6
claude-docschanged
claude-tag/admins/connections/amplitude
For the API key route, pair the connector with a plugin that covers Amplitude so Claude knows how to call the REST API. Add the plugin on the [**Skills and plugins**](https://claud
For the API key route, pair the connector with a plugin that covers Amplitude so Claude knows how to call the REST API. Add the plugin on the [**Skills and plugins**](https://claud
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identit
The first credential you add for a service from the **Connectors** tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see [where a new conn
+6 −6 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 22 Oct 2026 18:07 UTC
claude-docs
claude-tag/overview
±changed
+60−143
claude-docschanged
claude-tag/overview
<div className="tm-hero">
<div className="tm-hero-copy">
<span className="tm-pill">Public Beta</span>
<p className="tm-hero-title">Tag <span className="tm-hero-at">@Claude</span> in. Get results back in the thread.</p>
<p className="tm-hero-lede">Anyone in a Slack channel can tag Claude into a problem and hand it work: reproduce a bug and open a pull request, turn a decision thread into a doc
+60 −143 lines
Upstream edited 5 Oct 2026 18:53 UTC Recorded here 20 Oct 2026 18:07 UTC
Nothing on this page matches that. Press Enter to search every page of the ledger.