--- title: Versions url: https://platform.claude.com/docs/en/api/cli/beta/organization/plugins/versions --- # Versions ## Create Plugin Version `$ ant beta:organization:plugins:versions create` **POST** `/v1/organizations/plugins/{plugin_id}/versions` Add a version to an organization-owned Plugin by uploading the new version's files; it becomes the version served to members unless the Plugin's served version has been pinned. The upload is the same `multipart/form-data` as creating a Plugin: the version's files (`files`, each part sent as `files[]`) and optional `release_notes`. The uploaded manifest's `name` must equal the Plugin's `name`. Returns the stored version; read the Plugin back to see which version it serves. Only a Plugin in a `manual` marketplace takes uploads; a Plugin synchronized from a repository gets its versions from the repository. When the Plugin is in the organization's library marketplace, a version that adds a skill with the name of an organization skill (a skill an administrator uploaded for the whole organization in claude.ai) is refused with a 409: `error_code` `skill_name_taken`, with that name in `details.skill_name`. A 503 with `error_code` `registration_pending` means the version was stored but is not yet usable; a later version create on the Plugin completes it. For a worked example, see [Create a version](https://platform.claude.com/docs/en/manage-claude/plugins-api?sdk_languages=cli#create-a-version) in the Plugins API guide. **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. ### Parameters - `--plugin-id: string` (path parameter) ID of the Plugin (prefixed `plugin_`). - `--file: array of string` The version's files: one part per file, the part's filename being the file's path within the Plugin (for example `skills/review-pr/SKILL.md`), or a single `.zip` or `.plugin` archive holding them all. On the wire each part is named `files[]`, and a part named plain `files` is not read; with cURL, `-F 'files[]=@SKILL.md;filename=skills/review-pr/SKILL.md'`. The files must include the manifest, `.claude-plugin/plugin.json`. - `--release-notes: optional string` Release notes stored with the version and shown in its version history in claude.ai; up to 5,000 characters. maxLength: 5000 - `--beta: optional array of AnthropicBeta` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. ### Returns - `beta_plugin_version: object` - `type: "plugin_version"` Always `plugin_version`. - `id: string` The version's ID. - `components: array of BetaPluginComponent` What the version contains; null when not enumerated. - `type: "agent" or "cli" or "command" or 3 more` The kind of component. - `"agent"` - `"cli"` - `"command"` - `"hook"` - `"mcp_server"` - `"skill"` - `description: string` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `name: string` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `content_scan: object` This version's content scan; null when it has not been scanned. - `assessment: "fail" or "pass" or "unknown" or "warn"` The scan's verdict; set only when `status` is `completed`. - `"fail"` - `"pass"` - `"unknown"` - `"warn"` - `reason: string` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `status: "completed" or "errored" or "processing"` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run or its outcome cannot be read. - `"completed"` - `"errored"` - `"processing"` - `created_at: string` RFC 3339. format: date-time - `created_by: BetaPluginUserActor or BetaPluginAPIActor` Who uploaded this version; null when not recorded. - `beta_plugin_user_actor: object` - `type: "user_actor"` A member of the organization. - `email_address: string` The member's email address; may be null, for example when they are no longer a member of the organization. - `user_id: string` The member's User ID. - `beta_plugin_api_actor: object` - `type: "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `api_key_id: string` The key's ID. - `description: string` The manifest's description; null when it declares none. - `display_name: string` The manifest's display name; null when it declares none. - `manifest_version: string` The version string the manifest declares; null when it declares none. - `plugin_id: string` The Plugin's ID. - `reach: "contained" or "privileged" or "remote"` How far the version reaches: `remote`, `privileged` or `contained`, as on the Plugin; null when not classifiable. - `"contained"` - `"privileged"` - `"remote"` - `release_notes: string` As supplied with the upload; null when none were supplied. ### Example ```bash ant beta:organization:plugins:versions create \ --api-key my-anthropic-api-key \ --plugin-id plugin_id \ --file 'Example data' ``` #### Response (200) ```json { "id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "manifest_version": "1.2.0", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "reach": "contained", "release_notes": "Adds a review checklist for database migrations.", "type": "plugin_version" } ``` ## List Plugin Versions `$ ant beta:organization:plugins:versions list` **GET** `/v1/organizations/plugins/{plugin_id}/versions` List a Plugin's versions, newest first. The first item of the first page is the version the Plugin's `latest_version_id` refers to. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. ### Parameters - `--plugin-id: string` (path parameter) ID of the Plugin (prefixed `plugin_`). - `--limit: optional number` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `--organization-id: optional string` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `--page: optional string` (query parameter) Optionally set to the `next_page` token from the previous response. maxLength: 2048 - `--beta: optional array of AnthropicBeta` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. ### Returns - `BetaPluginVersionList: object` - `data: array of BetaPluginVersion` - `type: "plugin_version"` Always `plugin_version`. - `id: string` The version's ID. - `components: array of BetaPluginComponent` What the version contains; null when not enumerated. - `type: "agent" or "cli" or "command" or 3 more` The kind of component. - `"agent"` - `"cli"` - `"command"` - `"hook"` - `"mcp_server"` - `"skill"` - `description: string` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `name: string` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `content_scan: object` This version's content scan; null when it has not been scanned. - `assessment: "fail" or "pass" or "unknown" or "warn"` The scan's verdict; set only when `status` is `completed`. - `"fail"` - `"pass"` - `"unknown"` - `"warn"` - `reason: string` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `status: "completed" or "errored" or "processing"` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run or its outcome cannot be read. - `"completed"` - `"errored"` - `"processing"` - `created_at: string` RFC 3339. format: date-time - `created_by: BetaPluginUserActor or BetaPluginAPIActor` Who uploaded this version; null when not recorded. - `beta_plugin_user_actor: object` - `type: "user_actor"` A member of the organization. - `email_address: string` The member's email address; may be null, for example when they are no longer a member of the organization. - `user_id: string` The member's User ID. - `beta_plugin_api_actor: object` - `type: "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `api_key_id: string` The key's ID. - `description: string` The manifest's description; null when it declares none. - `display_name: string` The manifest's display name; null when it declares none. - `manifest_version: string` The version string the manifest declares; null when it declares none. - `plugin_id: string` The Plugin's ID. - `reach: "contained" or "privileged" or "remote"` How far the version reaches: `remote`, `privileged` or `contained`, as on the Plugin; null when not classifiable. - `"contained"` - `"privileged"` - `"remote"` - `release_notes: string` As supplied with the upload; null when none were supplied. - `next_page: string` Token to provide in as `page` in the subsequent request to retrieve the next page of data. ### Example ```bash ant beta:organization:plugins:versions list \ --api-key my-anthropic-api-key \ --plugin-id plugin_id ``` #### Response (200) ```json { "data": [ { "id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "manifest_version": "1.2.0", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "reach": "contained", "release_notes": "Adds a review checklist for database migrations.", "type": "plugin_version" } ], "next_page": "page_MjAyNi0wOS0xNlQxNDowNTowOVo" } ``` ## Get Plugin Version `$ ant beta:organization:plugins:versions retrieve` **GET** `/v1/organizations/plugins/{plugin_id}/versions/{version}` Retrieve one version of a Plugin by its ID, or the Plugin's newest version. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. ### Parameters - `--plugin-id: string` (path parameter) ID of the Plugin (prefixed `plugin_`). - `--version: string` (path parameter) ID of the Plugin Version (prefixed `pluginver_`), or `latest` for the newest one. - `--organization-id: optional string` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `--beta: optional array of AnthropicBeta` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. ### Returns - `beta_plugin_version: object` - `type: "plugin_version"` Always `plugin_version`. - `id: string` The version's ID. - `components: array of BetaPluginComponent` What the version contains; null when not enumerated. - `type: "agent" or "cli" or "command" or 3 more` The kind of component. - `"agent"` - `"cli"` - `"command"` - `"hook"` - `"mcp_server"` - `"skill"` - `description: string` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `name: string` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `content_scan: object` This version's content scan; null when it has not been scanned. - `assessment: "fail" or "pass" or "unknown" or "warn"` The scan's verdict; set only when `status` is `completed`. - `"fail"` - `"pass"` - `"unknown"` - `"warn"` - `reason: string` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `status: "completed" or "errored" or "processing"` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run or its outcome cannot be read. - `"completed"` - `"errored"` - `"processing"` - `created_at: string` RFC 3339. format: date-time - `created_by: BetaPluginUserActor or BetaPluginAPIActor` Who uploaded this version; null when not recorded. - `beta_plugin_user_actor: object` - `type: "user_actor"` A member of the organization. - `email_address: string` The member's email address; may be null, for example when they are no longer a member of the organization. - `user_id: string` The member's User ID. - `beta_plugin_api_actor: object` - `type: "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `api_key_id: string` The key's ID. - `description: string` The manifest's description; null when it declares none. - `display_name: string` The manifest's display name; null when it declares none. - `manifest_version: string` The version string the manifest declares; null when it declares none. - `plugin_id: string` The Plugin's ID. - `reach: "contained" or "privileged" or "remote"` How far the version reaches: `remote`, `privileged` or `contained`, as on the Plugin; null when not classifiable. - `"contained"` - `"privileged"` - `"remote"` - `release_notes: string` As supplied with the upload; null when none were supplied. ### Example ```bash ant beta:organization:plugins:versions retrieve \ --api-key my-anthropic-api-key \ --plugin-id plugin_id \ --version version ``` #### Response (200) ```json { "id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "manifest_version": "1.2.0", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "reach": "contained", "release_notes": "Adds a review checklist for database migrations.", "type": "plugin_version" } ``` ## Download Plugin Version Archive `$ ant beta:organization:plugins:versions download` **GET** `/v1/organizations/plugins/{plugin_id}/versions/{version}/content` Download one version's `.zip` archive, exactly as stored. Each download of a Plugin from a member's personal plugin marketplace is recorded on the Compliance API activity feed. The response body is the archive (`Content-Type: application/zip`), sent as an attachment whose filename is derived from the Plugin's name; name saved files from the IDs in the request path, since that filename is not unique. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every read scope above (`read:plugins`, `read:org_audit`, and `read:compliance_org_data`) can download the files of plugins in members' personal marketplaces, including files that claude.ai's admin settings do not show, and a `read:org_audit` or `read:compliance_org_data` key created for all of your parent organization's linked organizations can do this in any organization under it that has access to this API, by passing `organization_id`. Each such download records a `claude_plugin_archive_accessed` event on the Compliance API activity feed, identifying the key, the plugin, the version, and the member. Downloads of organization-owned plugins are not recorded. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. ### Parameters - `--plugin-id: string` (path parameter) ID of the Plugin (prefixed `plugin_`). - `--version: string` (path parameter) ID of the Plugin Version (prefixed `pluginver_`). `latest` is not accepted here. - `--organization-id: optional string` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `--beta: optional array of AnthropicBeta` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. ### Returns - `unnamed_schema_3: file path` ### Example ```bash ant beta:organization:plugins:versions download \ --api-key my-anthropic-api-key \ --plugin-id plugin_id \ --version version ``` ## Domain types ### Beta Plugin Version - `beta_plugin_version: object` - `type: "plugin_version"` Always `plugin_version`. - `id: string` The version's ID. - `components: array of BetaPluginComponent` What the version contains; null when not enumerated. - `type: "agent" or "cli" or "command" or 3 more` The kind of component. - `"agent"` - `"cli"` - `"command"` - `"hook"` - `"mcp_server"` - `"skill"` - `description: string` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `name: string` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `content_scan: object` This version's content scan; null when it has not been scanned. - `assessment: "fail" or "pass" or "unknown" or "warn"` The scan's verdict; set only when `status` is `completed`. - `"fail"` - `"pass"` - `"unknown"` - `"warn"` - `reason: string` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `status: "completed" or "errored" or "processing"` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run or its outcome cannot be read. - `"completed"` - `"errored"` - `"processing"` - `created_at: string` RFC 3339. format: date-time - `created_by: BetaPluginUserActor or BetaPluginAPIActor` Who uploaded this version; null when not recorded. - `beta_plugin_user_actor: object` - `type: "user_actor"` A member of the organization. - `email_address: string` The member's email address; may be null, for example when they are no longer a member of the organization. - `user_id: string` The member's User ID. - `beta_plugin_api_actor: object` - `type: "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `api_key_id: string` The key's ID. - `description: string` The manifest's description; null when it declares none. - `display_name: string` The manifest's display name; null when it declares none. - `manifest_version: string` The version string the manifest declares; null when it declares none. - `plugin_id: string` The Plugin's ID. - `reach: "contained" or "privileged" or "remote"` How far the version reaches: `remote`, `privileged` or `contained`, as on the Plugin; null when not classifiable. - `"contained"` - `"privileged"` - `"remote"` - `release_notes: string` As supplied with the upload; null when none were supplied.