--- title: Organization url: https://platform.claude.com/docs/en/api/csharp/beta/organization --- # Organization ## Get Current Organization `BetaOrganization Beta.Organization.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/me` Retrieve information about the organization associated with the authenticated API key. ### Parameters - `OrganizationRetrieveParams parameters` ### Returns - `class BetaOrganization` - `JsonElement Type = "organization"` Object type. For Organizations, this is always `"organization"`. - `required string ID` ID of the Organization. format: uuid - `required string Name` Name of the Organization. ### Example ```csharp using System; using Anthropic.Models.Beta.Organization; OrganizationRetrieveParams parameters = new(); var betaOrganization = await client.Beta.Organization.Retrieve(parameters); Console.WriteLine(betaOrganization); ``` #### Response (200) ```json { "id": "12345678-1234-5678-1234-567812345678", "name": "Organization Name", "type": "organization" } ``` ## Domain types ### Beta Organization - `class BetaOrganization` - `JsonElement Type = "organization"` Object type. For Organizations, this is always `"organization"`. - `required string ID` ID of the Organization. format: uuid - `required string Name` Name of the Organization. ### Beta Organization Role - `enum BetaOrganizationRole` - `Admin("admin")` - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `MembershipAdmin("membership_admin")` - `Owner("owner")` - `PrimaryOwner("primary_owner")` - `User("user")` ## Organization › API Keys ### List API Keys `ApiKeyListPage Beta.Organization.ApiKeys.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/api_keys` List API Keys #### Parameters - `ApiKeyListParams parameters` - `string afterID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately after this object. - `string beforeID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately before this object. - `string? createdByUserID` (query parameter) Filter by the ID of the User who created the object. - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `Status? status` (query parameter) Filter by API key status. - `Active("active")` - `Archived("archived")` - `Expired("expired")` - `Inactive("inactive")` - `string? workspaceID` (query parameter) Filter by Workspace ID. #### Returns - `class BetaApiKey` - `JsonElement Type = "api_key"` Object type. For API Keys, this is always `"api_key"`. - `required string ID` ID of the API key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the API Key was created. format: date-time - `required BetaApiKeyCreatedBy? CreatedBy` The ID and type of the actor that created the API key, or `null` when the creator is not recorded (legacy, workload-identity-federated, or system-created keys). - `required Type Type` Type of the actor that created the object. - `ServiceAccount("service_account")` - `User("user")` - `required string ID` ID of the actor that created the object. - `required DateTimeOffset? ExpiresAt` RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires. format: date-time - `required string Name` Name of the API key. - `required string? PartialKeyHint` Partially redacted hint for the API key. - `required Principal? Principal` The principal the API key acts as (a User or a Service Account), or `null` if the API key is not bound to a principal. - `class BetaApiKeyUserActor` - `JsonElement Type = "user_actor"` Principal type. Always `"user_actor"` for a User. - `required string UserID` ID of the User the API key acts as. - `class BetaApiKeyServiceAccountActor` - `JsonElement Type = "service_account_actor"` Principal type. Always `"service_account_actor"` for a Service Account. - `required string ServiceAccountID` ID of the Service Account the API key acts as. - `required Scope Scope` Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace. - `class BetaApiKeyOrganizationScope` - `JsonElement Type = "organization"` Scope type. Always `"organization"`: the API key has no Workspace. Only a principal-bound API key can have this scope. - `class BetaApiKeyWorkspaceScope` - `JsonElement Type = "workspace"` Scope type. Always `"workspace"`: the API key belongs to one Workspace. - `required string WorkspaceID` ID of the Workspace the API key belongs to, including when it is the organization's default Workspace. - `required Status Status` Status of the API key. - `Active("active")` - `Archived("archived")` - `Expired("expired")` - `Inactive("inactive")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ApiKeys; ApiKeyListParams parameters = new(); var page = await client.Beta.Organization.ApiKeys.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "apikey_01Rj2N8SVvo6BePZj99NhmiT", "created_at": "2024-10-30T23:58:27.427722Z", "created_by": { "id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "type": "user" }, "expires_at": "2024-10-30T23:58:27.427722Z", "name": "Developer Key", "partial_key_hint": "sk-ant-api03-R2D...igAA", "principal": { "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "scope": { "type": "workspace", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ" }, "status": "active", "type": "api_key" } ], "first_id": "first_id", "has_more": true, "last_id": "last_id" } ``` ### Retrieve API Key (Admin API) `BetaApiKey Beta.Organization.ApiKeys.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/api_keys/{api_key_id}` Retrieve information about a single API key in your organization, looked up by its ID. This Admin API endpoint requires an Admin API key, is intended for programmatic key management, and never returns the key's secret value. To view or create your own API keys, go to [API keys](https://platform.claude.com/settings/keys) in the Claude Console. #### Parameters - `ApiKeyRetrieveParams parameters` - `required string apiKeyID` (path parameter) ID of the API key. #### Returns - `class BetaApiKey` - `JsonElement Type = "api_key"` Object type. For API Keys, this is always `"api_key"`. - `required string ID` ID of the API key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the API Key was created. format: date-time - `required BetaApiKeyCreatedBy? CreatedBy` The ID and type of the actor that created the API key, or `null` when the creator is not recorded (legacy, workload-identity-federated, or system-created keys). - `required Type Type` Type of the actor that created the object. - `ServiceAccount("service_account")` - `User("user")` - `required string ID` ID of the actor that created the object. - `required DateTimeOffset? ExpiresAt` RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires. format: date-time - `required string Name` Name of the API key. - `required string? PartialKeyHint` Partially redacted hint for the API key. - `required Principal? Principal` The principal the API key acts as (a User or a Service Account), or `null` if the API key is not bound to a principal. - `class BetaApiKeyUserActor` - `JsonElement Type = "user_actor"` Principal type. Always `"user_actor"` for a User. - `required string UserID` ID of the User the API key acts as. - `class BetaApiKeyServiceAccountActor` - `JsonElement Type = "service_account_actor"` Principal type. Always `"service_account_actor"` for a Service Account. - `required string ServiceAccountID` ID of the Service Account the API key acts as. - `required Scope Scope` Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace. - `class BetaApiKeyOrganizationScope` - `JsonElement Type = "organization"` Scope type. Always `"organization"`: the API key has no Workspace. Only a principal-bound API key can have this scope. - `class BetaApiKeyWorkspaceScope` - `JsonElement Type = "workspace"` Scope type. Always `"workspace"`: the API key belongs to one Workspace. - `required string WorkspaceID` ID of the Workspace the API key belongs to, including when it is the organization's default Workspace. - `required Status Status` Status of the API key. - `Active("active")` - `Archived("archived")` - `Expired("expired")` - `Inactive("inactive")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ApiKeys; ApiKeyRetrieveParams parameters = new() { ApiKeyID = "api_key_id" }; var betaApiKey = await client.Beta.Organization.ApiKeys.Retrieve(parameters); Console.WriteLine(betaApiKey); ``` ##### Response (200) ```json { "id": "apikey_01Rj2N8SVvo6BePZj99NhmiT", "created_at": "2024-10-30T23:58:27.427722Z", "created_by": { "id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "type": "user" }, "expires_at": "2024-10-30T23:58:27.427722Z", "name": "Developer Key", "partial_key_hint": "sk-ant-api03-R2D...igAA", "principal": { "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "scope": { "type": "workspace", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ" }, "status": "active", "type": "api_key" } ``` ### Update API Key `BetaApiKey Beta.Organization.ApiKeys.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/api_keys/{api_key_id}` Update API Key #### Parameters - `ApiKeyUpdateParams parameters` - `required string apiKeyID` (path parameter) ID of the API key. - `string? name` Name of the API key. minLength: 1, maxLength: 500 - `Status? status` Status of the API key. - `Active("active")` - `Archived("archived")` - `Inactive("inactive")` #### Returns - `class BetaApiKey` - `JsonElement Type = "api_key"` Object type. For API Keys, this is always `"api_key"`. - `required string ID` ID of the API key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the API Key was created. format: date-time - `required BetaApiKeyCreatedBy? CreatedBy` The ID and type of the actor that created the API key, or `null` when the creator is not recorded (legacy, workload-identity-federated, or system-created keys). - `required Type Type` Type of the actor that created the object. - `ServiceAccount("service_account")` - `User("user")` - `required string ID` ID of the actor that created the object. - `required DateTimeOffset? ExpiresAt` RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires. format: date-time - `required string Name` Name of the API key. - `required string? PartialKeyHint` Partially redacted hint for the API key. - `required Principal? Principal` The principal the API key acts as (a User or a Service Account), or `null` if the API key is not bound to a principal. - `class BetaApiKeyUserActor` - `JsonElement Type = "user_actor"` Principal type. Always `"user_actor"` for a User. - `required string UserID` ID of the User the API key acts as. - `class BetaApiKeyServiceAccountActor` - `JsonElement Type = "service_account_actor"` Principal type. Always `"service_account_actor"` for a Service Account. - `required string ServiceAccountID` ID of the Service Account the API key acts as. - `required Scope Scope` Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace. - `class BetaApiKeyOrganizationScope` - `JsonElement Type = "organization"` Scope type. Always `"organization"`: the API key has no Workspace. Only a principal-bound API key can have this scope. - `class BetaApiKeyWorkspaceScope` - `JsonElement Type = "workspace"` Scope type. Always `"workspace"`: the API key belongs to one Workspace. - `required string WorkspaceID` ID of the Workspace the API key belongs to, including when it is the organization's default Workspace. - `required Status Status` Status of the API key. - `Active("active")` - `Archived("archived")` - `Expired("expired")` - `Inactive("inactive")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ApiKeys; ApiKeyUpdateParams parameters = new() { ApiKeyID = "api_key_id" }; var betaApiKey = await client.Beta.Organization.ApiKeys.Update(parameters); Console.WriteLine(betaApiKey); ``` ##### Response (200) ```json { "id": "apikey_01Rj2N8SVvo6BePZj99NhmiT", "created_at": "2024-10-30T23:58:27.427722Z", "created_by": { "id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "type": "user" }, "expires_at": "2024-10-30T23:58:27.427722Z", "name": "Developer Key", "partial_key_hint": "sk-ant-api03-R2D...igAA", "principal": { "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "scope": { "type": "workspace", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ" }, "status": "active", "type": "api_key" } ``` ## Organization › External Keys ### Create External Key `BetaExternalKey Beta.Organization.ExternalKeys.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/external_keys` Create an external key config owned by the caller's organization. #### Parameters - `ExternalKeyCreateParams parameters` - `required ProviderConfig providerConfig` KMS provider identity and auth coordinates. - `class BetaAwsExternalKeyConfig` - `JsonElement Type = "aws"` - `required string KmsArn` Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected. maxLength: 2048 - `string? Region` AWS region. Derived from `kms_arn` if omitted. - `string? RoleArn` **Deprecated** IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored. - `class BetaGcpExternalKeyConfig` - `JsonElement Type = "gcp"` - `required string KeyName` Full resource name of the Cloud KMS key. - `class BetaAzureExternalKeyConfigParam` Azure Key Vault provider configuration. - `JsonElement Type = "azure"` - `required string KeyName` Name of the key within the vault. - `required string TenantID` Azure AD tenant ID. - `required string VaultUri` Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`. - `string? ClientID` Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory. - `string? displayName` Human-friendly display name. minLength: 1, maxLength: 255 - `Geo geo` Data residency geo. Only `us` is supported. - `Us("us")` #### Returns - `class BetaExternalKey` CMEK external key config belonging to the caller's organization. Configs are organization-scoped. Workspaces attach to a config; once any workspace references it, the provider fields become effectively immutable (existing encrypted data needs the config for decrypt). - `JsonElement Type = "external_key"` - `required string ID` Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN. - `required Attachment Attachment` Whether any workspace uses this config to encrypt its data — counting live and archived workspaces (an archived workspace's data remains encrypted under the config), excluding deleted ones. Only an attached config is used by the encryption path; an `unattached` config is inert and can be deleted. - `class BetaExternalKeyAttachedAttachment` - `JsonElement Type = "attached"` - `class BetaExternalKeyUnattachedAttachment` - `JsonElement Type = "unattached"` - `required DateTimeOffset CreatedAt` format: date-time - `required string? DisplayName` Human-friendly display name. Null if none was set. - `required string Geo` Data residency geo. Selects which regional validator handles this key's encrypt/decrypt roundtrips. - `required ProviderConfig ProviderConfig` KMS provider identity and auth coordinates. - `class BetaAwsExternalKeyConfig` - `JsonElement Type = "aws"` - `required string KmsArn` Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected. maxLength: 2048 - `string? Region` AWS region. Derived from `kms_arn` if omitted. - `string? RoleArn` **Deprecated** IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored. - `class BetaGcpExternalKeyConfig` - `JsonElement Type = "gcp"` - `required string KeyName` Full resource name of the Cloud KMS key. - `class BetaAzureExternalKeyConfig` - `JsonElement Type = "azure"` - `required string KeyName` Name of the key within the vault. - `required string TenantID` Azure AD tenant ID. - `required string VaultUri` Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`. - `string? ClientID` Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory. - `required DateTimeOffset UpdatedAt` format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ExternalKeys; ExternalKeyCreateParams parameters = new() { ProviderConfig = new BetaAwsExternalKeyConfig() { KmsArn = "arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222", Region = "us-east-1", RoleArn = "arn:aws:iam::111122223333:role/anthropic-cmek", }, }; var betaExternalKey = await client.Beta.Organization.ExternalKeys.Create(parameters); Console.WriteLine(betaExternalKey); ``` ##### Response (200) ```json { "id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "attachment": { "type": "attached" }, "created_at": "2024-10-30T23:58:27.427722Z", "display_name": "prod-us-key", "geo": "us", "provider_config": { "kms_arn": "arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222", "type": "aws", "region": "us-east-1", "role_arn": "arn:aws:iam::111122223333:role/anthropic-cmek" }, "type": "external_key", "updated_at": "2024-10-30T23:58:27.427722Z" } ``` ### List External Keys `ExternalKeyListPage Beta.Organization.ExternalKeys.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/external_keys` List external key configs in the caller's organization. Results are ordered by creation time (newest first). Use the `next_page` cursor from the response to fetch subsequent pages. #### Parameters - `ExternalKeyListParams parameters` - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. #### Returns - `class BetaExternalKey` CMEK external key config belonging to the caller's organization. Configs are organization-scoped. Workspaces attach to a config; once any workspace references it, the provider fields become effectively immutable (existing encrypted data needs the config for decrypt). - `JsonElement Type = "external_key"` - `required string ID` Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN. - `required Attachment Attachment` Whether any workspace uses this config to encrypt its data — counting live and archived workspaces (an archived workspace's data remains encrypted under the config), excluding deleted ones. Only an attached config is used by the encryption path; an `unattached` config is inert and can be deleted. - `class BetaExternalKeyAttachedAttachment` - `JsonElement Type = "attached"` - `class BetaExternalKeyUnattachedAttachment` - `JsonElement Type = "unattached"` - `required DateTimeOffset CreatedAt` format: date-time - `required string? DisplayName` Human-friendly display name. Null if none was set. - `required string Geo` Data residency geo. Selects which regional validator handles this key's encrypt/decrypt roundtrips. - `required ProviderConfig ProviderConfig` KMS provider identity and auth coordinates. - `class BetaAwsExternalKeyConfig` - `JsonElement Type = "aws"` - `required string KmsArn` Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected. maxLength: 2048 - `string? Region` AWS region. Derived from `kms_arn` if omitted. - `string? RoleArn` **Deprecated** IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored. - `class BetaGcpExternalKeyConfig` - `JsonElement Type = "gcp"` - `required string KeyName` Full resource name of the Cloud KMS key. - `class BetaAzureExternalKeyConfig` - `JsonElement Type = "azure"` - `required string KeyName` Name of the key within the vault. - `required string TenantID` Azure AD tenant ID. - `required string VaultUri` Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`. - `string? ClientID` Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory. - `required DateTimeOffset UpdatedAt` format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ExternalKeys; ExternalKeyListParams parameters = new(); var page = await client.Beta.Organization.ExternalKeys.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "attachment": { "type": "attached" }, "created_at": "2024-10-30T23:58:27.427722Z", "display_name": "prod-us-key", "geo": "us", "provider_config": { "kms_arn": "arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222", "type": "aws", "region": "us-east-1", "role_arn": "arn:aws:iam::111122223333:role/anthropic-cmek" }, "type": "external_key", "updated_at": "2024-10-30T23:58:27.427722Z" } ], "next_page": "next_page" } ``` ### Get External Key `BetaExternalKey Beta.Organization.ExternalKeys.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/external_keys/{external_key_id}` Retrieve a single external key config in the caller's organization by ID. #### Parameters - `ExternalKeyRetrieveParams parameters` - `required string externalKeyID` (path parameter) ID of the External Key. maxLength: 2048 #### Returns - `class BetaExternalKey` CMEK external key config belonging to the caller's organization. Configs are organization-scoped. Workspaces attach to a config; once any workspace references it, the provider fields become effectively immutable (existing encrypted data needs the config for decrypt). - `JsonElement Type = "external_key"` - `required string ID` Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN. - `required Attachment Attachment` Whether any workspace uses this config to encrypt its data — counting live and archived workspaces (an archived workspace's data remains encrypted under the config), excluding deleted ones. Only an attached config is used by the encryption path; an `unattached` config is inert and can be deleted. - `class BetaExternalKeyAttachedAttachment` - `JsonElement Type = "attached"` - `class BetaExternalKeyUnattachedAttachment` - `JsonElement Type = "unattached"` - `required DateTimeOffset CreatedAt` format: date-time - `required string? DisplayName` Human-friendly display name. Null if none was set. - `required string Geo` Data residency geo. Selects which regional validator handles this key's encrypt/decrypt roundtrips. - `required ProviderConfig ProviderConfig` KMS provider identity and auth coordinates. - `class BetaAwsExternalKeyConfig` - `JsonElement Type = "aws"` - `required string KmsArn` Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected. maxLength: 2048 - `string? Region` AWS region. Derived from `kms_arn` if omitted. - `string? RoleArn` **Deprecated** IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored. - `class BetaGcpExternalKeyConfig` - `JsonElement Type = "gcp"` - `required string KeyName` Full resource name of the Cloud KMS key. - `class BetaAzureExternalKeyConfig` - `JsonElement Type = "azure"` - `required string KeyName` Name of the key within the vault. - `required string TenantID` Azure AD tenant ID. - `required string VaultUri` Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`. - `string? ClientID` Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory. - `required DateTimeOffset UpdatedAt` format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ExternalKeys; ExternalKeyRetrieveParams parameters = new() { ExternalKeyID = "external_key_id" }; var betaExternalKey = await client.Beta.Organization.ExternalKeys.Retrieve(parameters); Console.WriteLine(betaExternalKey); ``` ##### Response (200) ```json { "id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "attachment": { "type": "attached" }, "created_at": "2024-10-30T23:58:27.427722Z", "display_name": "prod-us-key", "geo": "us", "provider_config": { "kms_arn": "arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222", "type": "aws", "region": "us-east-1", "role_arn": "arn:aws:iam::111122223333:role/anthropic-cmek" }, "type": "external_key", "updated_at": "2024-10-30T23:58:27.427722Z" } ``` ### Update External Key `BetaExternalKey Beta.Organization.ExternalKeys.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/external_keys/{external_key_id}` Partially update an external key config. Omitted fields are left unchanged. `display_name` is always editable. `geo` and `provider_config` cannot be changed once any workspace references this config, because previously encrypted data requires the original key identity to decrypt. #### Parameters - `ExternalKeyUpdateParams parameters` - `required string externalKeyID` (path parameter) ID of the External Key. maxLength: 2048 - `string? displayName` Human-friendly display name. minLength: 1, maxLength: 255 - `Geo? geo` Data residency geo. Only `us` is supported. - `Us("us")` - `ProviderConfig? providerConfig` KMS provider identity and auth coordinates. - `class BetaAwsExternalKeyConfig` - `JsonElement Type = "aws"` - `required string KmsArn` Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected. maxLength: 2048 - `string? Region` AWS region. Derived from `kms_arn` if omitted. - `string? RoleArn` **Deprecated** IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored. - `class BetaGcpExternalKeyConfig` - `JsonElement Type = "gcp"` - `required string KeyName` Full resource name of the Cloud KMS key. - `class BetaAzureExternalKeyConfigParam` Azure Key Vault provider configuration. - `JsonElement Type = "azure"` - `required string KeyName` Name of the key within the vault. - `required string TenantID` Azure AD tenant ID. - `required string VaultUri` Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`. - `string? ClientID` Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory. #### Returns - `class BetaExternalKey` CMEK external key config belonging to the caller's organization. Configs are organization-scoped. Workspaces attach to a config; once any workspace references it, the provider fields become effectively immutable (existing encrypted data needs the config for decrypt). - `JsonElement Type = "external_key"` - `required string ID` Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN. - `required Attachment Attachment` Whether any workspace uses this config to encrypt its data — counting live and archived workspaces (an archived workspace's data remains encrypted under the config), excluding deleted ones. Only an attached config is used by the encryption path; an `unattached` config is inert and can be deleted. - `class BetaExternalKeyAttachedAttachment` - `JsonElement Type = "attached"` - `class BetaExternalKeyUnattachedAttachment` - `JsonElement Type = "unattached"` - `required DateTimeOffset CreatedAt` format: date-time - `required string? DisplayName` Human-friendly display name. Null if none was set. - `required string Geo` Data residency geo. Selects which regional validator handles this key's encrypt/decrypt roundtrips. - `required ProviderConfig ProviderConfig` KMS provider identity and auth coordinates. - `class BetaAwsExternalKeyConfig` - `JsonElement Type = "aws"` - `required string KmsArn` Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected. maxLength: 2048 - `string? Region` AWS region. Derived from `kms_arn` if omitted. - `string? RoleArn` **Deprecated** IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored. - `class BetaGcpExternalKeyConfig` - `JsonElement Type = "gcp"` - `required string KeyName` Full resource name of the Cloud KMS key. - `class BetaAzureExternalKeyConfig` - `JsonElement Type = "azure"` - `required string KeyName` Name of the key within the vault. - `required string TenantID` Azure AD tenant ID. - `required string VaultUri` Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or `https://{hsm-name}.managedhsm.azure.net`. - `string? ClientID` Azure AD application (client) ID. Omit to use Anthropic's multitenant app. Provide only if using a single-tenant app registration in the customer's directory. - `required DateTimeOffset UpdatedAt` format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ExternalKeys; ExternalKeyUpdateParams parameters = new() { ExternalKeyID = "external_key_id" }; var betaExternalKey = await client.Beta.Organization.ExternalKeys.Update(parameters); Console.WriteLine(betaExternalKey); ``` ##### Response (200) ```json { "id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "attachment": { "type": "attached" }, "created_at": "2024-10-30T23:58:27.427722Z", "display_name": "prod-us-key", "geo": "us", "provider_config": { "kms_arn": "arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222", "type": "aws", "region": "us-east-1", "role_arn": "arn:aws:iam::111122223333:role/anthropic-cmek" }, "type": "external_key", "updated_at": "2024-10-30T23:58:27.427722Z" } ``` ### Delete External Key `ExternalKeyDeleteResponse Beta.Organization.ExternalKeys.Delete(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/external_keys/{external_key_id}` Delete an external key config. The request is rejected if any workspace still references this config. #### Parameters - `ExternalKeyDeleteParams parameters` - `required string externalKeyID` (path parameter) ID of the External Key. maxLength: 2048 #### Returns - `class ExternalKeyDeleteResponse` - `JsonElement Type = "external_key_deleted"` - `required string ID` ID of the deleted External Key. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ExternalKeys; ExternalKeyDeleteParams parameters = new() { ExternalKeyID = "external_key_id" }; var externalKey = await client.Beta.Organization.ExternalKeys.Delete(parameters); Console.WriteLine(externalKey); ``` ##### Response (200) ```json { "id": "ekey_01AbCdEfGhIjKlMnOpQrStUv", "type": "external_key_deleted" } ``` ### Validate External Key `ExternalKeyValidateResponse Beta.Organization.ExternalKeys.Validate(parameters, cancellationToken = default)` **POST** `/v1/organizations/external_keys/{external_key_id}/validate` Validate an external key config against the customer's KMS. Anthropic performs an encrypt/decrypt roundtrip against the configured KMS key and waits up to 30 seconds for the result. The response status is `success` if the roundtrip succeeded, or `failure` with an error message if it failed or timed out. #### Parameters - `ExternalKeyValidateParams parameters` - `required string externalKeyID` (path parameter) ID of the External Key. maxLength: 2048 #### Returns - `class ExternalKeyValidateResponse` Result of a validation roundtrip against the customer's KMS. HTTP 200 for both outcomes — the operation completed; `status` says whether the key works. - `JsonElement Type = "external_key_validation"` - `required string? Error` Error message when status is `failure`. Null otherwise. - `required Status Status` `success` — encrypt/decrypt roundtrip succeeded. `failure` — the roundtrip failed or timed out; see `error`. - `Failure("failure")` - `Success("success")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ExternalKeys; ExternalKeyValidateParams parameters = new() { ExternalKeyID = "external_key_id" }; var response = await client.Beta.Organization.ExternalKeys.Validate(parameters); Console.WriteLine(response); ``` ##### Response (200) ```json { "error": "error", "status": "failure", "type": "external_key_validation" } ``` ## Organization › Federation › Issuers ### Create Federation Issuer `BetaFederationIssuer Beta.Organization.Federation.Issuers.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/federation_issuers` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Register an OIDC issuer that Anthropic will trust for workload identity federation in your organization. The `jwks` field controls how the issuer's signing keys are obtained and takes one of three shapes selected by `type`: `discovery` (resolve keys through OIDC discovery), `explicit_url` (fetch keys from a fixed JWKS URL), or `inline` (provide a static key set). When `jwks.type` is `discovery` and no `discovery_base` is set, the issuer URL must be publicly reachable over HTTPS so Anthropic can fetch the discovery document; for `explicit_url` and `inline` modes the issuer URL is only matched as the JWT's `iss` claim and is not fetched. #### Parameters - `IssuerCreateParams parameters` - `required string issuerUrl` The `iss` claim value to match against. minLength: 1 - `required string name` Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409. minLength: 1, maxLength: 255 - `bool? checkJti` Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Defaults to true. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. - `Jwks jwks` How signing keys are obtained. Defaults to OIDC discovery. - `class BetaJwksDiscovery` JWKS via the issuer's OIDC discovery document. - `JsonElement Type = "discovery"` - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `string? DiscoveryBase` Set when the discovery URL differs from `issuer_url`. - `class BetaJwksExplicitUrl` JWKS fetched from a fixed endpoint. - `JsonElement Type = "explicit_url"` - `required string Url` JWKS endpoint. minLength: 1 - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `class BetaJwksInline` JWKS supplied directly; no network fetch. - `JsonElement Type = "inline"` - `required IReadOnlyList> Keys` Inline JWK objects. minItems: 1 - `long? maxJwtLifetimeSeconds` Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Defaults to 3600 (1h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. minimum: 1, maximum: 176400 - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationIssuer` Registered external OIDC identity provider. Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly. - `JsonElement Type = "federation_issuer"` - `required string ID` Tagged ID of the federation issuer. - `required DateTimeOffset? ArchivedAt` If set, all rules referencing this issuer reject token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this issuer. - `required bool CheckJti` Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. - `required DateTimeOffset CreatedAt` When this issuer was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this issuer. - `required string IssuerUrl` The `iss` claim value. Incoming JWTs must match exactly. - `required Jwks Jwks` How signing keys are obtained for signature verification. - `class BetaJwksDiscovery` JWKS via the issuer's OIDC discovery document. - `JsonElement Type = "discovery"` - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `string? DiscoveryBase` Set when the discovery URL differs from `issuer_url`. - `class BetaJwksExplicitUrl` JWKS fetched from a fixed endpoint. - `JsonElement Type = "explicit_url"` - `required string Url` JWKS endpoint. minLength: 1 - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `class BetaJwksInline` JWKS supplied directly; no network fetch. - `JsonElement Type = "inline"` - `required IReadOnlyList> Keys` Inline JWK objects. minItems: 1 - `required DateTimeOffset? JwksPollingDisabledAt` If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session. format: date-time - `required long MaxJwtLifetimeSeconds` Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. - `required string Name` Admin-chosen slug identifier. - `required BetaFederationIssuerPollStatus? PollStatus` Live state of Anthropic's JWKS polling for this issuer. Populated on both single-issuer retrieval and list responses, including archived issuers. Typically null for inline-key issuers (no polling), or when poll status is temporarily unavailable or polling has not started yet. - `required long ConsecutiveFailures` Consecutive fetch failures since the last success. - `required DateTimeOffset? LastFetchedAt` When the last successful fetch completed. format: date-time - `required DateTimeOffset? NextPollAt` When the next fetch is scheduled. Null if paused. format: date-time - `required DateTimeOffset UpdatedAt` When this issuer was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this issuer. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Issuers; IssuerCreateParams parameters = new() { IssuerUrl = "x", Name = "x", }; var betaFederationIssuer = await client.Beta.Organization.Federation.Issuers.Create(parameters); Console.WriteLine(betaFederationIssuer); ``` ##### Response (200) ```json { "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "check_jti": true, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "issuer_url": "https://token.actions.githubusercontent.com", "jwks": { "type": "discovery", "ca_cert_pem": "ca_cert_pem", "discovery_base": "discovery_base" }, "jwks_polling_disabled_at": "2019-12-27T18:11:19.117Z", "max_jwt_lifetime_seconds": 0, "name": "github-actions", "poll_status": { "consecutive_failures": 0, "last_fetched_at": "2019-12-27T18:11:19.117Z", "next_poll_at": "2019-12-27T18:11:19.117Z" }, "type": "federation_issuer", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ### List Federation Issuers `IssuerListPage Beta.Organization.Federation.Issuers.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/federation_issuers` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List federation issuers in your organization. Archived issuers are excluded unless `include_archived=true`. #### Parameters - `IssuerListParams parameters` - `bool includeArchived` (query parameter) Include archived resources. Defaults to false. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationIssuer` Registered external OIDC identity provider. Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly. - `JsonElement Type = "federation_issuer"` - `required string ID` Tagged ID of the federation issuer. - `required DateTimeOffset? ArchivedAt` If set, all rules referencing this issuer reject token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this issuer. - `required bool CheckJti` Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. - `required DateTimeOffset CreatedAt` When this issuer was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this issuer. - `required string IssuerUrl` The `iss` claim value. Incoming JWTs must match exactly. - `required Jwks Jwks` How signing keys are obtained for signature verification. - `class BetaJwksDiscovery` JWKS via the issuer's OIDC discovery document. - `JsonElement Type = "discovery"` - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `string? DiscoveryBase` Set when the discovery URL differs from `issuer_url`. - `class BetaJwksExplicitUrl` JWKS fetched from a fixed endpoint. - `JsonElement Type = "explicit_url"` - `required string Url` JWKS endpoint. minLength: 1 - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `class BetaJwksInline` JWKS supplied directly; no network fetch. - `JsonElement Type = "inline"` - `required IReadOnlyList> Keys` Inline JWK objects. minItems: 1 - `required DateTimeOffset? JwksPollingDisabledAt` If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session. format: date-time - `required long MaxJwtLifetimeSeconds` Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. - `required string Name` Admin-chosen slug identifier. - `required BetaFederationIssuerPollStatus? PollStatus` Live state of Anthropic's JWKS polling for this issuer. Populated on both single-issuer retrieval and list responses, including archived issuers. Typically null for inline-key issuers (no polling), or when poll status is temporarily unavailable or polling has not started yet. - `required long ConsecutiveFailures` Consecutive fetch failures since the last success. - `required DateTimeOffset? LastFetchedAt` When the last successful fetch completed. format: date-time - `required DateTimeOffset? NextPollAt` When the next fetch is scheduled. Null if paused. format: date-time - `required DateTimeOffset UpdatedAt` When this issuer was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this issuer. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Issuers; IssuerListParams parameters = new(); var page = await client.Beta.Organization.Federation.Issuers.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "check_jti": true, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "issuer_url": "https://token.actions.githubusercontent.com", "jwks": { "type": "discovery", "ca_cert_pem": "ca_cert_pem", "discovery_base": "discovery_base" }, "jwks_polling_disabled_at": "2019-12-27T18:11:19.117Z", "max_jwt_lifetime_seconds": 0, "name": "github-actions", "poll_status": { "consecutive_failures": 0, "last_fetched_at": "2019-12-27T18:11:19.117Z", "next_poll_at": "2019-12-27T18:11:19.117Z" }, "type": "federation_issuer", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ], "next_page": "next_page" } ``` ### Get Federation Issuer `BetaFederationIssuer Beta.Organization.Federation.Issuers.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/federation_issuers/{federation_issuer_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Retrieve a federation issuer by its ID (`fdis_...`). #### Parameters - `IssuerRetrieveParams parameters` - `required string federationIssuerID` (path parameter) ID of the federation issuer. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationIssuer` Registered external OIDC identity provider. Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly. - `JsonElement Type = "federation_issuer"` - `required string ID` Tagged ID of the federation issuer. - `required DateTimeOffset? ArchivedAt` If set, all rules referencing this issuer reject token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this issuer. - `required bool CheckJti` Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. - `required DateTimeOffset CreatedAt` When this issuer was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this issuer. - `required string IssuerUrl` The `iss` claim value. Incoming JWTs must match exactly. - `required Jwks Jwks` How signing keys are obtained for signature verification. - `class BetaJwksDiscovery` JWKS via the issuer's OIDC discovery document. - `JsonElement Type = "discovery"` - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `string? DiscoveryBase` Set when the discovery URL differs from `issuer_url`. - `class BetaJwksExplicitUrl` JWKS fetched from a fixed endpoint. - `JsonElement Type = "explicit_url"` - `required string Url` JWKS endpoint. minLength: 1 - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `class BetaJwksInline` JWKS supplied directly; no network fetch. - `JsonElement Type = "inline"` - `required IReadOnlyList> Keys` Inline JWK objects. minItems: 1 - `required DateTimeOffset? JwksPollingDisabledAt` If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session. format: date-time - `required long MaxJwtLifetimeSeconds` Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. - `required string Name` Admin-chosen slug identifier. - `required BetaFederationIssuerPollStatus? PollStatus` Live state of Anthropic's JWKS polling for this issuer. Populated on both single-issuer retrieval and list responses, including archived issuers. Typically null for inline-key issuers (no polling), or when poll status is temporarily unavailable or polling has not started yet. - `required long ConsecutiveFailures` Consecutive fetch failures since the last success. - `required DateTimeOffset? LastFetchedAt` When the last successful fetch completed. format: date-time - `required DateTimeOffset? NextPollAt` When the next fetch is scheduled. Null if paused. format: date-time - `required DateTimeOffset UpdatedAt` When this issuer was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this issuer. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Issuers; IssuerRetrieveParams parameters = new() { FederationIssuerID = "federation_issuer_id" }; var betaFederationIssuer = await client.Beta.Organization.Federation.Issuers.Retrieve(parameters); Console.WriteLine(betaFederationIssuer); ``` ##### Response (200) ```json { "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "check_jti": true, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "issuer_url": "https://token.actions.githubusercontent.com", "jwks": { "type": "discovery", "ca_cert_pem": "ca_cert_pem", "discovery_base": "discovery_base" }, "jwks_polling_disabled_at": "2019-12-27T18:11:19.117Z", "max_jwt_lifetime_seconds": 0, "name": "github-actions", "poll_status": { "consecutive_failures": 0, "last_fetched_at": "2019-12-27T18:11:19.117Z", "next_poll_at": "2019-12-27T18:11:19.117Z" }, "type": "federation_issuer", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ### Update Federation Issuer `BetaFederationIssuer Beta.Organization.Federation.Issuers.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/federation_issuers/{federation_issuer_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Partially update a federation issuer. Setting `jwks` replaces the full JWKS shape at once. Archived issuers cannot be updated; this returns 400. Create a new issuer instead. Updating an issuer that backs a rule with a scope outside `workspace:developer` or `workspace:inference` requires a Console session. #### Parameters - `IssuerUpdateParams parameters` - `required string federationIssuerID` (path parameter) ID of the federation issuer to update. - `bool? checkJti` Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. - `string? issuerUrl` Replaces the `iss` claim value to match against. For discovery-mode issuers without a `discovery_base`, this is also the URL Anthropic fetches the OIDC discovery document and signing keys from, so changing it repoints the JWKS source. Changing the issuer URL to a well-known shared platform is rejected while any live rule under this issuer would not constrain tenant identity. minLength: 1 - `Jwks? jwks` Replaces the entire JWKS configuration. - `class BetaJwksDiscovery` JWKS via the issuer's OIDC discovery document. - `JsonElement Type = "discovery"` - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `string? DiscoveryBase` Set when the discovery URL differs from `issuer_url`. - `class BetaJwksExplicitUrl` JWKS fetched from a fixed endpoint. - `JsonElement Type = "explicit_url"` - `required string Url` JWKS endpoint. minLength: 1 - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `class BetaJwksInline` JWKS supplied directly; no network fetch. - `JsonElement Type = "inline"` - `required IReadOnlyList> Keys` Inline JWK objects. minItems: 1 - `bool? jwksPollingDisabled` Only `false` is accepted, to re-enable polling after the system pauses it. Polling is paused automatically; sending `true` is rejected. - `long? maxJwtLifetimeSeconds` Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. minimum: 1, maximum: 176400 - `string? name` Replaces the slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409. minLength: 1, maxLength: 255 - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationIssuer` Registered external OIDC identity provider. Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly. - `JsonElement Type = "federation_issuer"` - `required string ID` Tagged ID of the federation issuer. - `required DateTimeOffset? ArchivedAt` If set, all rules referencing this issuer reject token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this issuer. - `required bool CheckJti` Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. - `required DateTimeOffset CreatedAt` When this issuer was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this issuer. - `required string IssuerUrl` The `iss` claim value. Incoming JWTs must match exactly. - `required Jwks Jwks` How signing keys are obtained for signature verification. - `class BetaJwksDiscovery` JWKS via the issuer's OIDC discovery document. - `JsonElement Type = "discovery"` - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `string? DiscoveryBase` Set when the discovery URL differs from `issuer_url`. - `class BetaJwksExplicitUrl` JWKS fetched from a fixed endpoint. - `JsonElement Type = "explicit_url"` - `required string Url` JWKS endpoint. minLength: 1 - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `class BetaJwksInline` JWKS supplied directly; no network fetch. - `JsonElement Type = "inline"` - `required IReadOnlyList> Keys` Inline JWK objects. minItems: 1 - `required DateTimeOffset? JwksPollingDisabledAt` If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session. format: date-time - `required long MaxJwtLifetimeSeconds` Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. - `required string Name` Admin-chosen slug identifier. - `required BetaFederationIssuerPollStatus? PollStatus` Live state of Anthropic's JWKS polling for this issuer. Populated on both single-issuer retrieval and list responses, including archived issuers. Typically null for inline-key issuers (no polling), or when poll status is temporarily unavailable or polling has not started yet. - `required long ConsecutiveFailures` Consecutive fetch failures since the last success. - `required DateTimeOffset? LastFetchedAt` When the last successful fetch completed. format: date-time - `required DateTimeOffset? NextPollAt` When the next fetch is scheduled. Null if paused. format: date-time - `required DateTimeOffset UpdatedAt` When this issuer was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this issuer. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Issuers; IssuerUpdateParams parameters = new() { FederationIssuerID = "federation_issuer_id" }; var betaFederationIssuer = await client.Beta.Organization.Federation.Issuers.Update(parameters); Console.WriteLine(betaFederationIssuer); ``` ##### Response (200) ```json { "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "check_jti": true, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "issuer_url": "https://token.actions.githubusercontent.com", "jwks": { "type": "discovery", "ca_cert_pem": "ca_cert_pem", "discovery_base": "discovery_base" }, "jwks_polling_disabled_at": "2019-12-27T18:11:19.117Z", "max_jwt_lifetime_seconds": 0, "name": "github-actions", "poll_status": { "consecutive_failures": 0, "last_fetched_at": "2019-12-27T18:11:19.117Z", "next_poll_at": "2019-12-27T18:11:19.117Z" }, "type": "federation_issuer", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ### Archive Federation Issuer `BetaFederationIssuer Beta.Organization.Federation.Issuers.Archive(parameters, cancellationToken = default)` **POST** `/v1/organizations/federation_issuers/{federation_issuer_id}/archive` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Archive a federation issuer. Idempotent; re-archiving returns the issuer with its original `archived_at`. Rejected with 400 if any live (non-archived) federation rule still references the issuer; archive those rules first (a rule's issuer cannot be changed), or recreate them against another issuer. #### Parameters - `IssuerArchiveParams parameters` - `required string federationIssuerID` (path parameter) ID of the federation issuer to archive. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationIssuer` Registered external OIDC identity provider. Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly. - `JsonElement Type = "federation_issuer"` - `required string ID` Tagged ID of the federation issuer. - `required DateTimeOffset? ArchivedAt` If set, all rules referencing this issuer reject token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this issuer. - `required bool CheckJti` Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement. - `required DateTimeOffset CreatedAt` When this issuer was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this issuer. - `required string IssuerUrl` The `iss` claim value. Incoming JWTs must match exactly. - `required Jwks Jwks` How signing keys are obtained for signature verification. - `class BetaJwksDiscovery` JWKS via the issuer's OIDC discovery document. - `JsonElement Type = "discovery"` - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `string? DiscoveryBase` Set when the discovery URL differs from `issuer_url`. - `class BetaJwksExplicitUrl` JWKS fetched from a fixed endpoint. - `JsonElement Type = "explicit_url"` - `required string Url` JWKS endpoint. minLength: 1 - `string? CACertPem` Optional custom CA (PEM) for TLS verification of the JWKS fetch. maxLength: 8192 - `class BetaJwksInline` JWKS supplied directly; no network fetch. - `JsonElement Type = "inline"` - `required IReadOnlyList> Keys` Inline JWK objects. minItems: 1 - `required DateTimeOffset? JwksPollingDisabledAt` If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session. format: date-time - `required long MaxJwtLifetimeSeconds` Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected. - `required string Name` Admin-chosen slug identifier. - `required BetaFederationIssuerPollStatus? PollStatus` Live state of Anthropic's JWKS polling for this issuer. Populated on both single-issuer retrieval and list responses, including archived issuers. Typically null for inline-key issuers (no polling), or when poll status is temporarily unavailable or polling has not started yet. - `required long ConsecutiveFailures` Consecutive fetch failures since the last success. - `required DateTimeOffset? LastFetchedAt` When the last successful fetch completed. format: date-time - `required DateTimeOffset? NextPollAt` When the next fetch is scheduled. Null if paused. format: date-time - `required DateTimeOffset UpdatedAt` When this issuer was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this issuer. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Issuers; IssuerArchiveParams parameters = new() { FederationIssuerID = "federation_issuer_id" }; var betaFederationIssuer = await client.Beta.Organization.Federation.Issuers.Archive(parameters); Console.WriteLine(betaFederationIssuer); ``` ##### Response (200) ```json { "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "check_jti": true, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "issuer_url": "https://token.actions.githubusercontent.com", "jwks": { "type": "discovery", "ca_cert_pem": "ca_cert_pem", "discovery_base": "discovery_base" }, "jwks_polling_disabled_at": "2019-12-27T18:11:19.117Z", "max_jwt_lifetime_seconds": 0, "name": "github-actions", "poll_status": { "consecutive_failures": 0, "last_fetched_at": "2019-12-27T18:11:19.117Z", "next_poll_at": "2019-12-27T18:11:19.117Z" }, "type": "federation_issuer", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ## Organization › Federation › Rules ### Create Federation Rule `BetaFederationRule Beta.Organization.Federation.Rules.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/federation_rules` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Create a federation rule owned by your organization. The referenced issuer and the target service account must already exist in the same organization; invalid references are rejected with a 400 error. The workspace reference is validated. Membership is not checked at rule creation: token exchange resolves a single enabled workspace per call and is rejected unless the target service account is a member of that workspace (it is implicitly a member of the default workspace). Rules on well-known shared issuers (GitHub Actions, GitLab, Buildkite, Terraform Cloud, Google) must constrain tenant identity via an identity-bearing claim, a tenant-pinning subject prefix (such as `repo:YOUR_ORG/...`), or a CEL condition referencing one of those identity claims (e.g. `claims.repository_owner`). OAuth callers may only manage rules whose `oauth_scope` is `workspace:developer` or `workspace:inference`; other scopes require a Console session. #### Parameters - `RuleCreateParams parameters` - `required string issuerID` Tagged ID of the federation issuer. - `required BetaFederationRuleMatch match` Conditions the verified JWT must satisfy for this rule to apply. At least one of `subject_prefix` (other than a wildcard-only value like `*`), `claims`, or `condition` is required; `audience` alone is not sufficient. - `required string name` Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409. minLength: 1, maxLength: 255 - `required string oauthScope` Space-separated OAuth scopes. OAuth callers may only set `workspace:developer` or `workspace:inference`; other scopes (such as `org:admin`) require a Console session. minLength: 1 - `required BetaServiceAccountTarget target` Identity that tokens minted via this rule act as. Currently always a `service_account` target. - `bool appliesToAllWorkspaces` When true, enable this rule for every workspace in the org (including workspaces created later). - `IReadOnlyDictionary? attributes` CEL expressions `{name: expr}` extracting named values from claims. Not yet supported; any non-empty value is rejected with 400. - `string? description` Optional free-text description. maxLength: 2000 - `long tokenLifetimeSeconds` Lifetime in seconds for access tokens minted via this rule (60-86400). Defaults to 3600 (1h). Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. minimum: 60, maximum: 86400 - `string? workspaceID` Tagged ID of the workspace to enable this rule for. Required unless `applies_to_all_workspaces` is true. Additional workspaces can be added via the `/federation_rules/{federation_rule_id}/workspaces` sub-resource. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationRule` Authorization rule binding an external OIDC identity to Anthropic. Evaluates the match conditions and mints an OAuth access token for the resolved target, scoped to a single workspace where the rule is enabled (chosen by the caller at exchange time when the rule is enabled for more than one). For rules enabled via `workspace_ids` or `applies_to_all_workspaces`, the target service account must be a member of that workspace (it is implicitly a member of the default workspace); rules carrying only the legacy `workspace_id` binding do not enforce this. - `JsonElement Type = "federation_rule"` - `required string ID` Tagged ID of the federation rule. - `required bool AppliesToAllWorkspaces` When true, this rule is enabled for every workspace in the org (including ones created after the rule). `workspace_ids` is ignored at exchange time. - `required DateTimeOffset? ArchivedAt` If set, this rule is archived and rejects token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this rule. - `required IReadOnlyDictionary? Attributes` CEL expressions extracting named values from claims. Not yet supported; always null. - `required DateTimeOffset CreatedAt` When this rule was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this rule. - `required string? Description` Optional free-text description. - `required string IssuerID` Tagged ID of the issuer whose tokens this rule accepts. - `required string? IssuerName` Issuer's display name at read time. - `required BetaFederationRuleMatch Match` Conditions the verified JWT must satisfy for this rule to apply. All populated matcher fields must pass. - `string? Audience` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default. maxLength: 1024 - `IReadOnlyDictionary? Claims` Exact-match `{claim: value}` pairs against top-level claims. Only string-valued claims can be matched; use `condition` for non-string claims. - `string? Condition` CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the `claims` variable; a constant-true expression (such as `true`) is rejected with 400. maxLength: 4096 - `string? SubjectPrefix` Match the verified JWT `sub` claim. Exact match unless the value ends with `*`, in which case it is a prefix match. Example: `repo:my-org/my-repo:ref:refs/heads/main`. maxLength: 1024 - `required string Name` Admin-chosen slug identifier. - `required string OAuthScope` Space-separated OAuth scopes granted on the minted token. - `required BetaServiceAccountTarget Target` What this rule targets. Check `type` before reading the other fields. Tokens minted via a rule whose target `type` is `service_account` act as that service account. - `JsonElement Type = "service_account"` - `required string ServiceAccountID` Tagged ID of the service account to mint tokens for. - `string? ServiceAccountName` Service account's display name at read time. Ignored on writes. - `required long TokenLifetimeSeconds` Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. - `required DateTimeOffset UpdatedAt` When this rule was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this rule. - `required string? WorkspaceID` Legacy single-workspace binding. Prefer `workspace_ids` and the `/federation_rules/{federation_rule_id}/workspaces` sub-resource for managing workspace enablement. - `required IReadOnlyList WorkspaceIds` Tagged IDs of the workspaces this rule is enabled for. May be empty for older rules that only carry the legacy `workspace_id` binding. Ignored at exchange time when `applies_to_all_workspaces` is true (the list may still be non-empty). #### Example ```csharp using System; using System.Collections.Generic; using Anthropic.Models.Beta.Organization.Federation.Rules; RuleCreateParams parameters = new() { IssuerID = "issuer_id", Match = new() { Audience = "audience", Claims = new Dictionary() { { "foo", "string" } }, Condition = "condition", SubjectPrefix = "subject_prefix", }, Name = "x", OAuthScope = "x", Target = new() { ServiceAccountID = "svac_01SDCCSbTxrXDpWc1phhtcfK", ServiceAccountName = "service_account_name", }, }; var betaFederationRule = await client.Beta.Organization.Federation.Rules.Create(parameters); Console.WriteLine(betaFederationRule); ``` ##### Response (200) ```json { "id": "fdrl_01SDCCSbTxrXDpWc1phhtcfK", "applies_to_all_workspaces": true, "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "attributes": { "foo": "string" }, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "issuer_id": "issuer_id", "issuer_name": "issuer_name", "match": { "audience": "audience", "claims": { "foo": "string" }, "condition": "condition", "subject_prefix": "subject_prefix" }, "name": "prod-deploy-pipeline", "oauth_scope": "oauth_scope", "target": { "service_account_id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "type": "service_account", "service_account_name": "service_account_name" }, "token_lifetime_seconds": 0, "type": "federation_rule", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id", "workspace_id": "workspace_id", "workspace_ids": [ "string" ] } ``` ### List Federation Rules `RuleListPage Beta.Organization.Federation.Rules.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/federation_rules` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List federation rules in your organization. Optionally filter by issuer with `issuer_id`. Archived rules are excluded unless `include_archived=true`. #### Parameters - `RuleListParams parameters` - `bool includeArchived` (query parameter) Include archived resources. Defaults to false. - `string? issuerID` (query parameter) Filter to rules referencing this federation issuer. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationRule` Authorization rule binding an external OIDC identity to Anthropic. Evaluates the match conditions and mints an OAuth access token for the resolved target, scoped to a single workspace where the rule is enabled (chosen by the caller at exchange time when the rule is enabled for more than one). For rules enabled via `workspace_ids` or `applies_to_all_workspaces`, the target service account must be a member of that workspace (it is implicitly a member of the default workspace); rules carrying only the legacy `workspace_id` binding do not enforce this. - `JsonElement Type = "federation_rule"` - `required string ID` Tagged ID of the federation rule. - `required bool AppliesToAllWorkspaces` When true, this rule is enabled for every workspace in the org (including ones created after the rule). `workspace_ids` is ignored at exchange time. - `required DateTimeOffset? ArchivedAt` If set, this rule is archived and rejects token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this rule. - `required IReadOnlyDictionary? Attributes` CEL expressions extracting named values from claims. Not yet supported; always null. - `required DateTimeOffset CreatedAt` When this rule was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this rule. - `required string? Description` Optional free-text description. - `required string IssuerID` Tagged ID of the issuer whose tokens this rule accepts. - `required string? IssuerName` Issuer's display name at read time. - `required BetaFederationRuleMatch Match` Conditions the verified JWT must satisfy for this rule to apply. All populated matcher fields must pass. - `string? Audience` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default. maxLength: 1024 - `IReadOnlyDictionary? Claims` Exact-match `{claim: value}` pairs against top-level claims. Only string-valued claims can be matched; use `condition` for non-string claims. - `string? Condition` CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the `claims` variable; a constant-true expression (such as `true`) is rejected with 400. maxLength: 4096 - `string? SubjectPrefix` Match the verified JWT `sub` claim. Exact match unless the value ends with `*`, in which case it is a prefix match. Example: `repo:my-org/my-repo:ref:refs/heads/main`. maxLength: 1024 - `required string Name` Admin-chosen slug identifier. - `required string OAuthScope` Space-separated OAuth scopes granted on the minted token. - `required BetaServiceAccountTarget Target` What this rule targets. Check `type` before reading the other fields. Tokens minted via a rule whose target `type` is `service_account` act as that service account. - `JsonElement Type = "service_account"` - `required string ServiceAccountID` Tagged ID of the service account to mint tokens for. - `string? ServiceAccountName` Service account's display name at read time. Ignored on writes. - `required long TokenLifetimeSeconds` Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. - `required DateTimeOffset UpdatedAt` When this rule was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this rule. - `required string? WorkspaceID` Legacy single-workspace binding. Prefer `workspace_ids` and the `/federation_rules/{federation_rule_id}/workspaces` sub-resource for managing workspace enablement. - `required IReadOnlyList WorkspaceIds` Tagged IDs of the workspaces this rule is enabled for. May be empty for older rules that only carry the legacy `workspace_id` binding. Ignored at exchange time when `applies_to_all_workspaces` is true (the list may still be non-empty). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules; RuleListParams parameters = new(); var page = await client.Beta.Organization.Federation.Rules.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "fdrl_01SDCCSbTxrXDpWc1phhtcfK", "applies_to_all_workspaces": true, "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "attributes": { "foo": "string" }, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "issuer_id": "issuer_id", "issuer_name": "issuer_name", "match": { "audience": "audience", "claims": { "foo": "string" }, "condition": "condition", "subject_prefix": "subject_prefix" }, "name": "prod-deploy-pipeline", "oauth_scope": "oauth_scope", "target": { "service_account_id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "type": "service_account", "service_account_name": "service_account_name" }, "token_lifetime_seconds": 0, "type": "federation_rule", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id", "workspace_id": "workspace_id", "workspace_ids": [ "string" ] } ], "next_page": "next_page" } ``` ### Get Federation Rule `BetaFederationRule Beta.Organization.Federation.Rules.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/federation_rules/{federation_rule_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Retrieve a federation rule by its ID (`fdrl_...`). #### Parameters - `RuleRetrieveParams parameters` - `required string federationRuleID` (path parameter) ID of the federation rule. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationRule` Authorization rule binding an external OIDC identity to Anthropic. Evaluates the match conditions and mints an OAuth access token for the resolved target, scoped to a single workspace where the rule is enabled (chosen by the caller at exchange time when the rule is enabled for more than one). For rules enabled via `workspace_ids` or `applies_to_all_workspaces`, the target service account must be a member of that workspace (it is implicitly a member of the default workspace); rules carrying only the legacy `workspace_id` binding do not enforce this. - `JsonElement Type = "federation_rule"` - `required string ID` Tagged ID of the federation rule. - `required bool AppliesToAllWorkspaces` When true, this rule is enabled for every workspace in the org (including ones created after the rule). `workspace_ids` is ignored at exchange time. - `required DateTimeOffset? ArchivedAt` If set, this rule is archived and rejects token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this rule. - `required IReadOnlyDictionary? Attributes` CEL expressions extracting named values from claims. Not yet supported; always null. - `required DateTimeOffset CreatedAt` When this rule was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this rule. - `required string? Description` Optional free-text description. - `required string IssuerID` Tagged ID of the issuer whose tokens this rule accepts. - `required string? IssuerName` Issuer's display name at read time. - `required BetaFederationRuleMatch Match` Conditions the verified JWT must satisfy for this rule to apply. All populated matcher fields must pass. - `string? Audience` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default. maxLength: 1024 - `IReadOnlyDictionary? Claims` Exact-match `{claim: value}` pairs against top-level claims. Only string-valued claims can be matched; use `condition` for non-string claims. - `string? Condition` CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the `claims` variable; a constant-true expression (such as `true`) is rejected with 400. maxLength: 4096 - `string? SubjectPrefix` Match the verified JWT `sub` claim. Exact match unless the value ends with `*`, in which case it is a prefix match. Example: `repo:my-org/my-repo:ref:refs/heads/main`. maxLength: 1024 - `required string Name` Admin-chosen slug identifier. - `required string OAuthScope` Space-separated OAuth scopes granted on the minted token. - `required BetaServiceAccountTarget Target` What this rule targets. Check `type` before reading the other fields. Tokens minted via a rule whose target `type` is `service_account` act as that service account. - `JsonElement Type = "service_account"` - `required string ServiceAccountID` Tagged ID of the service account to mint tokens for. - `string? ServiceAccountName` Service account's display name at read time. Ignored on writes. - `required long TokenLifetimeSeconds` Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. - `required DateTimeOffset UpdatedAt` When this rule was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this rule. - `required string? WorkspaceID` Legacy single-workspace binding. Prefer `workspace_ids` and the `/federation_rules/{federation_rule_id}/workspaces` sub-resource for managing workspace enablement. - `required IReadOnlyList WorkspaceIds` Tagged IDs of the workspaces this rule is enabled for. May be empty for older rules that only carry the legacy `workspace_id` binding. Ignored at exchange time when `applies_to_all_workspaces` is true (the list may still be non-empty). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules; RuleRetrieveParams parameters = new() { FederationRuleID = "federation_rule_id" }; var betaFederationRule = await client.Beta.Organization.Federation.Rules.Retrieve(parameters); Console.WriteLine(betaFederationRule); ``` ##### Response (200) ```json { "id": "fdrl_01SDCCSbTxrXDpWc1phhtcfK", "applies_to_all_workspaces": true, "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "attributes": { "foo": "string" }, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "issuer_id": "issuer_id", "issuer_name": "issuer_name", "match": { "audience": "audience", "claims": { "foo": "string" }, "condition": "condition", "subject_prefix": "subject_prefix" }, "name": "prod-deploy-pipeline", "oauth_scope": "oauth_scope", "target": { "service_account_id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "type": "service_account", "service_account_name": "service_account_name" }, "token_lifetime_seconds": 0, "type": "federation_rule", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id", "workspace_id": "workspace_id", "workspace_ids": [ "string" ] } ``` ### Update Federation Rule `BetaFederationRule Beta.Organization.Federation.Rules.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/federation_rules/{federation_rule_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Partially update a federation rule. `issuer_id` is immutable. `match` and `target` are replaced as whole objects when set. Referenced service accounts and workspaces must exist in your organization; invalid references are rejected with a 400 error. Archived rules cannot be updated; this returns 400. Create a new rule instead. Rules on well-known shared issuers (GitHub Actions, GitLab, Buildkite, Terraform Cloud, Google) must constrain tenant identity via an identity-bearing claim, a tenant-pinning subject prefix (such as `repo:YOUR_ORG/...`), or a CEL condition referencing one of those identity claims (e.g. `claims.repository_owner`). On these issuers the requirement is re-checked on every update; if an existing rule's stored match does not yet constrain tenant identity, any update (even a rename or description change) must also supply a conforming `match` in the same request. OAuth callers may only manage rules whose `oauth_scope` is `workspace:developer` or `workspace:inference`; other scopes require a Console session. #### Parameters - `RuleUpdateParams parameters` - `required string federationRuleID` (path parameter) ID of the federation rule to update. - `bool? appliesToAllWorkspaces` When true, enables this rule for every workspace in the org (including workspaces created later). Setting `false` is rejected with 400 if no workspace would remain enabled; a rule with only a legacy `workspace_id` binding continues to mint. - `IReadOnlyDictionary? attributes` Replaces the CEL expressions `{name: expr}` extracting named values from claims. Send null to clear them. Not yet supported; any non-empty value is rejected with 400. - `string? description` Replaces the description. Omit to leave unchanged; send `null` to clear (the field is stored as an empty string). maxLength: 2000 - `BetaFederationRuleMatch? match` Replaces the entire match object. All populated matcher fields must pass. - `string? name` Replaces the slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409. minLength: 1, maxLength: 255 - `string? oauthScope` Replaces the space-separated OAuth scopes granted on minted tokens. OAuth callers may only set `workspace:developer` or `workspace:inference`; other scopes (such as `org:admin`) require a Console session. minLength: 1 - `BetaServiceAccountTarget? target` Replaces the entire target object. Currently always a `service_account` target. - `long? tokenLifetimeSeconds` Replaces the lifetime in seconds for access tokens minted via this rule (60-86400). Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. minimum: 60, maximum: 86400 - `string? workspaceID` Replaces the existing single workspace enablement (the previous one is removed). Rejected with 400 if the rule is enabled for more than one workspace; use the `/federation_rules/{federation_rule_id}/workspaces` sub-resource instead. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationRule` Authorization rule binding an external OIDC identity to Anthropic. Evaluates the match conditions and mints an OAuth access token for the resolved target, scoped to a single workspace where the rule is enabled (chosen by the caller at exchange time when the rule is enabled for more than one). For rules enabled via `workspace_ids` or `applies_to_all_workspaces`, the target service account must be a member of that workspace (it is implicitly a member of the default workspace); rules carrying only the legacy `workspace_id` binding do not enforce this. - `JsonElement Type = "federation_rule"` - `required string ID` Tagged ID of the federation rule. - `required bool AppliesToAllWorkspaces` When true, this rule is enabled for every workspace in the org (including ones created after the rule). `workspace_ids` is ignored at exchange time. - `required DateTimeOffset? ArchivedAt` If set, this rule is archived and rejects token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this rule. - `required IReadOnlyDictionary? Attributes` CEL expressions extracting named values from claims. Not yet supported; always null. - `required DateTimeOffset CreatedAt` When this rule was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this rule. - `required string? Description` Optional free-text description. - `required string IssuerID` Tagged ID of the issuer whose tokens this rule accepts. - `required string? IssuerName` Issuer's display name at read time. - `required BetaFederationRuleMatch Match` Conditions the verified JWT must satisfy for this rule to apply. All populated matcher fields must pass. - `string? Audience` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default. maxLength: 1024 - `IReadOnlyDictionary? Claims` Exact-match `{claim: value}` pairs against top-level claims. Only string-valued claims can be matched; use `condition` for non-string claims. - `string? Condition` CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the `claims` variable; a constant-true expression (such as `true`) is rejected with 400. maxLength: 4096 - `string? SubjectPrefix` Match the verified JWT `sub` claim. Exact match unless the value ends with `*`, in which case it is a prefix match. Example: `repo:my-org/my-repo:ref:refs/heads/main`. maxLength: 1024 - `required string Name` Admin-chosen slug identifier. - `required string OAuthScope` Space-separated OAuth scopes granted on the minted token. - `required BetaServiceAccountTarget Target` What this rule targets. Check `type` before reading the other fields. Tokens minted via a rule whose target `type` is `service_account` act as that service account. - `JsonElement Type = "service_account"` - `required string ServiceAccountID` Tagged ID of the service account to mint tokens for. - `string? ServiceAccountName` Service account's display name at read time. Ignored on writes. - `required long TokenLifetimeSeconds` Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. - `required DateTimeOffset UpdatedAt` When this rule was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this rule. - `required string? WorkspaceID` Legacy single-workspace binding. Prefer `workspace_ids` and the `/federation_rules/{federation_rule_id}/workspaces` sub-resource for managing workspace enablement. - `required IReadOnlyList WorkspaceIds` Tagged IDs of the workspaces this rule is enabled for. May be empty for older rules that only carry the legacy `workspace_id` binding. Ignored at exchange time when `applies_to_all_workspaces` is true (the list may still be non-empty). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules; RuleUpdateParams parameters = new() { FederationRuleID = "federation_rule_id" }; var betaFederationRule = await client.Beta.Organization.Federation.Rules.Update(parameters); Console.WriteLine(betaFederationRule); ``` ##### Response (200) ```json { "id": "fdrl_01SDCCSbTxrXDpWc1phhtcfK", "applies_to_all_workspaces": true, "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "attributes": { "foo": "string" }, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "issuer_id": "issuer_id", "issuer_name": "issuer_name", "match": { "audience": "audience", "claims": { "foo": "string" }, "condition": "condition", "subject_prefix": "subject_prefix" }, "name": "prod-deploy-pipeline", "oauth_scope": "oauth_scope", "target": { "service_account_id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "type": "service_account", "service_account_name": "service_account_name" }, "token_lifetime_seconds": 0, "type": "federation_rule", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id", "workspace_id": "workspace_id", "workspace_ids": [ "string" ] } ``` ### Archive Federation Rule `BetaFederationRule Beta.Organization.Federation.Rules.Archive(parameters, cancellationToken = default)` **POST** `/v1/organizations/federation_rules/{federation_rule_id}/archive` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Archive a federation rule. Token exchange through this rule stops immediately. Idempotent; re-archiving returns the rule with its original `archived_at`. Archiving clears the rule's workspace targeting (`workspace_id` and `workspace_ids` are emptied). Tokens already minted before archive remain valid until they expire. OAuth callers may only manage rules whose `oauth_scope` is `workspace:developer` or `workspace:inference`; other scopes require a Console session. #### Parameters - `RuleArchiveParams parameters` - `required string federationRuleID` (path parameter) ID of the federation rule to archive. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationRule` Authorization rule binding an external OIDC identity to Anthropic. Evaluates the match conditions and mints an OAuth access token for the resolved target, scoped to a single workspace where the rule is enabled (chosen by the caller at exchange time when the rule is enabled for more than one). For rules enabled via `workspace_ids` or `applies_to_all_workspaces`, the target service account must be a member of that workspace (it is implicitly a member of the default workspace); rules carrying only the legacy `workspace_id` binding do not enforce this. - `JsonElement Type = "federation_rule"` - `required string ID` Tagged ID of the federation rule. - `required bool AppliesToAllWorkspaces` When true, this rule is enabled for every workspace in the org (including ones created after the rule). `workspace_ids` is ignored at exchange time. - `required DateTimeOffset? ArchivedAt` If set, this rule is archived and rejects token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this rule. - `required IReadOnlyDictionary? Attributes` CEL expressions extracting named values from claims. Not yet supported; always null. - `required DateTimeOffset CreatedAt` When this rule was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this rule. - `required string? Description` Optional free-text description. - `required string IssuerID` Tagged ID of the issuer whose tokens this rule accepts. - `required string? IssuerName` Issuer's display name at read time. - `required BetaFederationRuleMatch Match` Conditions the verified JWT must satisfy for this rule to apply. All populated matcher fields must pass. - `string? Audience` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default. maxLength: 1024 - `IReadOnlyDictionary? Claims` Exact-match `{claim: value}` pairs against top-level claims. Only string-valued claims can be matched; use `condition` for non-string claims. - `string? Condition` CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the `claims` variable; a constant-true expression (such as `true`) is rejected with 400. maxLength: 4096 - `string? SubjectPrefix` Match the verified JWT `sub` claim. Exact match unless the value ends with `*`, in which case it is a prefix match. Example: `repo:my-org/my-repo:ref:refs/heads/main`. maxLength: 1024 - `required string Name` Admin-chosen slug identifier. - `required string OAuthScope` Space-separated OAuth scopes granted on the minted token. - `required BetaServiceAccountTarget Target` What this rule targets. Check `type` before reading the other fields. Tokens minted via a rule whose target `type` is `service_account` act as that service account. - `JsonElement Type = "service_account"` - `required string ServiceAccountID` Tagged ID of the service account to mint tokens for. - `string? ServiceAccountName` Service account's display name at read time. Ignored on writes. - `required long TokenLifetimeSeconds` Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. - `required DateTimeOffset UpdatedAt` When this rule was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this rule. - `required string? WorkspaceID` Legacy single-workspace binding. Prefer `workspace_ids` and the `/federation_rules/{federation_rule_id}/workspaces` sub-resource for managing workspace enablement. - `required IReadOnlyList WorkspaceIds` Tagged IDs of the workspaces this rule is enabled for. May be empty for older rules that only carry the legacy `workspace_id` binding. Ignored at exchange time when `applies_to_all_workspaces` is true (the list may still be non-empty). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules; RuleArchiveParams parameters = new() { FederationRuleID = "federation_rule_id" }; var betaFederationRule = await client.Beta.Organization.Federation.Rules.Archive(parameters); Console.WriteLine(betaFederationRule); ``` ##### Response (200) ```json { "id": "fdrl_01SDCCSbTxrXDpWc1phhtcfK", "applies_to_all_workspaces": true, "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "attributes": { "foo": "string" }, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "issuer_id": "issuer_id", "issuer_name": "issuer_name", "match": { "audience": "audience", "claims": { "foo": "string" }, "condition": "condition", "subject_prefix": "subject_prefix" }, "name": "prod-deploy-pipeline", "oauth_scope": "oauth_scope", "target": { "service_account_id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "type": "service_account", "service_account_name": "service_account_name" }, "token_lifetime_seconds": 0, "type": "federation_rule", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id", "workspace_id": "workspace_id", "workspace_ids": [ "string" ] } ``` ## Organization › Federation › Rules › Workspaces ### Add Federation Rule Workspace `BetaFederationRuleWorkspace Beta.Organization.Federation.Rules.Workspaces.Add(parameters, cancellationToken = default)` **POST** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Enable a federation rule for a workspace. Idempotent; re-enabling returns the existing enablement. The rule and workspace must both belong to your organization. Membership of the rule's target service account in this workspace is not checked at enablement: token exchange into this workspace is rejected unless the target is a member (it is implicitly a member of the default workspace). Archived rules are rejected with 400. OAuth callers may only manage rules whose `oauth_scope` is `workspace:developer` or `workspace:inference`; other scopes require a Console session. #### Parameters - `WorkspaceAddParams parameters` - `required string federationRuleID` (path parameter) ID of the federation rule. - `required string workspaceID` Tagged ID of the workspace to enable this rule for. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationRuleWorkspace` - `JsonElement Type = "federation_rule_workspace"` - `required DateTimeOffset CreatedAt` When this workspace was enabled for the rule. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_...` or `svac_...`) of the actor that enabled this workspace for the rule, if known. - `required string FederationRuleID` Tagged ID of the federation rule. - `required string WorkspaceID` Tagged ID of the workspace this rule is enabled for. - `required string? WorkspaceName` Workspace display name. Populated when listing; null in the enable response. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules.Workspaces; WorkspaceAddParams parameters = new() { FederationRuleID = "federation_rule_id", WorkspaceID = "workspace_id", }; var betaFederationRuleWorkspace = await client.Beta.Organization.Federation.Rules.Workspaces.Add(parameters); Console.WriteLine(betaFederationRuleWorkspace); ``` ##### Response (200) ```json { "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "federation_rule_id": "federation_rule_id", "type": "federation_rule_workspace", "workspace_id": "workspace_id", "workspace_name": "workspace_name" } ``` ### List Federation Rule Workspaces `WorkspaceListPage Beta.Organization.Federation.Rules.Workspaces.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List workspaces where this federation rule is enabled. Returns all workspace enablements in a single response; the `limit` and `page` parameters are accepted but have no effect, and `next_page` is always `null`. Returns explicit per-workspace enablements only; for rules with `applies_to_all_workspaces` or a legacy single `workspace_id`, check those fields on the rule itself. #### Parameters - `WorkspaceListParams parameters` - `required string federationRuleID` (path parameter) ID of the federation rule. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaFederationRuleWorkspace` - `JsonElement Type = "federation_rule_workspace"` - `required DateTimeOffset CreatedAt` When this workspace was enabled for the rule. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_...` or `svac_...`) of the actor that enabled this workspace for the rule, if known. - `required string FederationRuleID` Tagged ID of the federation rule. - `required string WorkspaceID` Tagged ID of the workspace this rule is enabled for. - `required string? WorkspaceName` Workspace display name. Populated when listing; null in the enable response. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules.Workspaces; WorkspaceListParams parameters = new() { FederationRuleID = "federation_rule_id" }; var page = await client.Beta.Organization.Federation.Rules.Workspaces.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "federation_rule_id": "federation_rule_id", "type": "federation_rule_workspace", "workspace_id": "workspace_id", "workspace_name": "workspace_name" } ], "next_page": "next_page" } ``` ### Remove Federation Rule Workspace `WorkspaceRemoveResponse Beta.Organization.Federation.Rules.Workspaces.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces/{workspace_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Disable a federation rule for a workspace. Idempotent; succeeds even if the enablement was already removed. OAuth callers may only manage rules whose `oauth_scope` is `workspace:developer` or `workspace:inference`; other scopes require a Console session. #### Parameters - `WorkspaceRemoveParams parameters` - `required string federationRuleID` (path parameter) ID of the federation rule. - `required string workspaceID` (path parameter) ID of the workspace to disable for. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class WorkspaceRemoveResponse` - `JsonElement Type = "federation_rule_workspace_deleted"` - `required string FederationRuleID` Tagged ID of the federation rule. - `required string WorkspaceID` Tagged ID of the workspace named in the delete request. Removal is idempotent. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules.Workspaces; WorkspaceRemoveParams parameters = new() { FederationRuleID = "federation_rule_id", WorkspaceID = "workspace_id", }; var workspace = await client.Beta.Organization.Federation.Rules.Workspaces.Remove(parameters); Console.WriteLine(workspace); ``` ##### Response (200) ```json { "federation_rule_id": "federation_rule_id", "type": "federation_rule_workspace_deleted", "workspace_id": "workspace_id" } ``` ## Organization › Invites ### Create Invite `BetaOrganizationInvite Beta.Organization.Invites.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/invites` Invite a user to join the organization by email. On plans that draw members from a finite pool of purchased seats, the invite automatically consumes a seat from the lowest tier with availability; there is no seat-tier parameter. When no seat is free the request fails with a 400 error rather than purchasing a seat. #### Parameters - `InviteCreateParams parameters` - `required string email` Email of the User. format: email - `required Role role` Role for the invited User. The accepted values depend on the organization type. Console and API organizations accept `user`, `developer`, `billing`, and `claude_code_user`; `admin` cannot be assigned through the API. Claude Enterprise organizations accept `user` and `managed`; inviting with the `managed` role requires the `write:rbac_groups` scope in addition to `write:members`. - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `User("user")` - `IReadOnlyList rbacGroupIds` RBAC group IDs to assign to the User when the Invite is accepted. A non-empty array is accepted only for a Claude Enterprise organization with RBAC groups, and requires the key to carry the `write:rbac_groups` scope. maxItems: 100 #### Returns - `class BetaOrganizationInvite` - `JsonElement Type = "invite"` Object type. For Invites, this is always `"invite"`. - `required string ID` ID of the Invite. - `required DateTimeOffset? AcceptedAt` RFC 3339 datetime string indicating when the Invite was accepted, or null. format: date-time - `required string Email` Email of the User being invited. - `required DateTimeOffset ExpiresAt` RFC 3339 datetime string indicating when the Invite expires. format: date-time - `required DateTimeOffset InvitedAt` RFC 3339 datetime string indicating when the Invite was created. format: date-time - `required IReadOnlyList RbacGroupIds` RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none. - `required BetaOrganizationRole Role` Organization role of the User. - `Admin("admin")` - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `MembershipAdmin("membership_admin")` - `Owner("owner")` - `PrimaryOwner("primary_owner")` - `User("user")` - `required Status Status` Status of the Invite. - `Accepted("accepted")` - `Deleted("deleted")` - `Expired("expired")` - `Pending("pending")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Invites; InviteCreateParams parameters = new() { Email = "user@emaildomain.com", Role = Role.User, }; var betaOrganizationInvite = await client.Beta.Organization.Invites.Create(parameters); Console.WriteLine(betaOrganizationInvite); ``` ##### Response (200) ```json { "id": "invite_015gWxCN9Hfg2QhZwTK7Mdeu", "accepted_at": "2019-12-27T18:11:19.117Z", "email": "user@emaildomain.com", "expires_at": "2024-11-20T23:58:27.427722Z", "invited_at": "2024-10-30T23:58:27.427722Z", "rbac_group_ids": [ "string" ], "role": "admin", "status": "pending", "type": "invite" } ``` ### List Invites `InviteListPage Beta.Organization.Invites.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/invites` List the organization's invites. #### Parameters - `InviteListParams parameters` - `string afterID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately after this object. - `string beforeID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately before this object. - `string email` (query parameter) Filter by the email address the Invite was sent to. Matches the same way as the Users list's `email` filter (normalized, case-insensitive). format: email - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `IReadOnlyList roles` (query parameter) Filter to items whose `role` equals one of the supplied values. Repeatable; values are OR'ed together. Accepted values depend on the organization type: Console and API organizations accept `user`, `developer`, `billing`, `admin`, and `claude_code_user`; Claude Enterprise organizations accept `user`, `owner`, `primary_owner`, `membership_admin`, and `managed`. - `IReadOnlyList statuses` (query parameter) Filter by Invite status. Repeatable; values are OR'ed together. Omit to return `pending`, `accepted`, and `expired` Invites alike. - `Accepted("accepted")` - `Expired("expired")` - `Pending("pending")` #### Returns - `class BetaOrganizationInvite` - `JsonElement Type = "invite"` Object type. For Invites, this is always `"invite"`. - `required string ID` ID of the Invite. - `required DateTimeOffset? AcceptedAt` RFC 3339 datetime string indicating when the Invite was accepted, or null. format: date-time - `required string Email` Email of the User being invited. - `required DateTimeOffset ExpiresAt` RFC 3339 datetime string indicating when the Invite expires. format: date-time - `required DateTimeOffset InvitedAt` RFC 3339 datetime string indicating when the Invite was created. format: date-time - `required IReadOnlyList RbacGroupIds` RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none. - `required BetaOrganizationRole Role` Organization role of the User. - `Admin("admin")` - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `MembershipAdmin("membership_admin")` - `Owner("owner")` - `PrimaryOwner("primary_owner")` - `User("user")` - `required Status Status` Status of the Invite. - `Accepted("accepted")` - `Deleted("deleted")` - `Expired("expired")` - `Pending("pending")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Invites; InviteListParams parameters = new(); var page = await client.Beta.Organization.Invites.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "invite_015gWxCN9Hfg2QhZwTK7Mdeu", "accepted_at": "2019-12-27T18:11:19.117Z", "email": "user@emaildomain.com", "expires_at": "2024-11-20T23:58:27.427722Z", "invited_at": "2024-10-30T23:58:27.427722Z", "rbac_group_ids": [ "string" ], "role": "admin", "status": "pending", "type": "invite" } ], "first_id": "first_id", "has_more": true, "last_id": "last_id" } ``` ### Get Invite `BetaOrganizationInvite Beta.Organization.Invites.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/invites/{invite_id}` Retrieve an invite by ID. #### Parameters - `InviteRetrieveParams parameters` - `required string inviteID` (path parameter) ID of the Invite. #### Returns - `class BetaOrganizationInvite` - `JsonElement Type = "invite"` Object type. For Invites, this is always `"invite"`. - `required string ID` ID of the Invite. - `required DateTimeOffset? AcceptedAt` RFC 3339 datetime string indicating when the Invite was accepted, or null. format: date-time - `required string Email` Email of the User being invited. - `required DateTimeOffset ExpiresAt` RFC 3339 datetime string indicating when the Invite expires. format: date-time - `required DateTimeOffset InvitedAt` RFC 3339 datetime string indicating when the Invite was created. format: date-time - `required IReadOnlyList RbacGroupIds` RBAC group IDs recorded on the Invite (Claude Enterprise organizations), to be assigned to the User when the Invite is accepted. `[]` when none. - `required BetaOrganizationRole Role` Organization role of the User. - `Admin("admin")` - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `MembershipAdmin("membership_admin")` - `Owner("owner")` - `PrimaryOwner("primary_owner")` - `User("user")` - `required Status Status` Status of the Invite. - `Accepted("accepted")` - `Deleted("deleted")` - `Expired("expired")` - `Pending("pending")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Invites; InviteRetrieveParams parameters = new() { InviteID = "invite_id" }; var betaOrganizationInvite = await client.Beta.Organization.Invites.Retrieve(parameters); Console.WriteLine(betaOrganizationInvite); ``` ##### Response (200) ```json { "id": "invite_015gWxCN9Hfg2QhZwTK7Mdeu", "accepted_at": "2019-12-27T18:11:19.117Z", "email": "user@emaildomain.com", "expires_at": "2024-11-20T23:58:27.427722Z", "invited_at": "2024-10-30T23:58:27.427722Z", "rbac_group_ids": [ "string" ], "role": "admin", "status": "pending", "type": "invite" } ``` ### Delete Invite `InviteDeleteResponse Beta.Organization.Invites.Delete(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/invites/{invite_id}` Delete a pending invite. #### Parameters - `InviteDeleteParams parameters` - `required string inviteID` (path parameter) ID of the Invite. #### Returns - `class InviteDeleteResponse` - `JsonElement Type = "invite_deleted"` Deleted object type. For Invites, this is always `"invite_deleted"`. - `required string ID` ID of the Invite. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Invites; InviteDeleteParams parameters = new() { InviteID = "invite_id" }; var invite = await client.Beta.Organization.Invites.Delete(parameters); Console.WriteLine(invite); ``` ##### Response (200) ```json { "id": "invite_015gWxCN9Hfg2QhZwTK7Mdeu", "type": "invite_deleted" } ``` ## Organization › Service Accounts ### Create Service Account `BetaServiceAccount Beta.Organization.ServiceAccounts.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/service_accounts` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Create a service account. A service account is a named workload identity that federation rules target. `organization_role` is `developer` (default) or `admin`; a rule may only be created or retargeted to grant `org:admin` scope when the target's `organization_role` is `admin`. Creating an `admin`-role service account requires an interactive credential (a user OAuth token or a Console session) — a workload may only create `developer`-role service accounts. #### Parameters - `ServiceAccountCreateParams parameters` - `required string name` Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409. minLength: 1, maxLength: 255 - `string? description` Optional free-text description. maxLength: 2000 - `OrganizationRole organizationRole` Org-level role. Defaults to `developer`. - `Admin("admin")` - `Developer("developer")` - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccount` Named non-human identity within the caller's organization. A service account is a pure identity: name + org. Authorization lives on whatever references it (federation rules). - `JsonElement Type = "service_account"` - `required string ID` Tagged ID of the service account. - `required DateTimeOffset? ArchivedAt` If set, this service account is archived. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this service account. - `required DateTimeOffset CreatedAt` When this service account was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this service account. - `required string? Description` Optional free-text description. - `required string Name` Admin-chosen slug identifier. - `required OrganizationRole OrganizationRole` Org-level role. A federation rule may only be created or retargeted to grant `org:admin` scope when this is `admin`. A rule granting `org:admin` whose target is later demoted to `developer` is rejected at token exchange. Rules granting `org:admin` are managed in the Console. - `Admin("admin")` - `Developer("developer")` - `required DateTimeOffset UpdatedAt` When this service account was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this service account. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts; ServiceAccountCreateParams parameters = new() { Name = "ci-deploy-bot" }; var betaServiceAccount = await client.Beta.Organization.ServiceAccounts.Create(parameters); Console.WriteLine(betaServiceAccount); ``` ##### Response (200) ```json { "id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "name": "ci-deploy-bot", "organization_role": "admin", "type": "service_account", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ### List Service Accounts `ServiceAccountListPage Beta.Organization.ServiceAccounts.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/service_accounts` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List service accounts in the caller's organization. Results are ordered by creation time, newest first. Use `limit` and the `next_page` cursor to paginate; set `include_archived=true` to include archived service accounts. #### Parameters - `ServiceAccountListParams parameters` - `bool includeArchived` (query parameter) Include archived resources. Defaults to false. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccount` Named non-human identity within the caller's organization. A service account is a pure identity: name + org. Authorization lives on whatever references it (federation rules). - `JsonElement Type = "service_account"` - `required string ID` Tagged ID of the service account. - `required DateTimeOffset? ArchivedAt` If set, this service account is archived. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this service account. - `required DateTimeOffset CreatedAt` When this service account was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this service account. - `required string? Description` Optional free-text description. - `required string Name` Admin-chosen slug identifier. - `required OrganizationRole OrganizationRole` Org-level role. A federation rule may only be created or retargeted to grant `org:admin` scope when this is `admin`. A rule granting `org:admin` whose target is later demoted to `developer` is rejected at token exchange. Rules granting `org:admin` are managed in the Console. - `Admin("admin")` - `Developer("developer")` - `required DateTimeOffset UpdatedAt` When this service account was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this service account. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts; ServiceAccountListParams parameters = new(); var page = await client.Beta.Organization.ServiceAccounts.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "name": "ci-deploy-bot", "organization_role": "admin", "type": "service_account", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ], "next_page": "next_page" } ``` ### Get Service Account `BetaServiceAccount Beta.Organization.ServiceAccounts.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/service_accounts/{service_account_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Retrieve a service account by its ID (`svac_...`). #### Parameters - `ServiceAccountRetrieveParams parameters` - `required string serviceAccountID` (path parameter) ID of the service account. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccount` Named non-human identity within the caller's organization. A service account is a pure identity: name + org. Authorization lives on whatever references it (federation rules). - `JsonElement Type = "service_account"` - `required string ID` Tagged ID of the service account. - `required DateTimeOffset? ArchivedAt` If set, this service account is archived. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this service account. - `required DateTimeOffset CreatedAt` When this service account was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this service account. - `required string? Description` Optional free-text description. - `required string Name` Admin-chosen slug identifier. - `required OrganizationRole OrganizationRole` Org-level role. A federation rule may only be created or retargeted to grant `org:admin` scope when this is `admin`. A rule granting `org:admin` whose target is later demoted to `developer` is rejected at token exchange. Rules granting `org:admin` are managed in the Console. - `Admin("admin")` - `Developer("developer")` - `required DateTimeOffset UpdatedAt` When this service account was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this service account. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts; ServiceAccountRetrieveParams parameters = new() { ServiceAccountID = "service_account_id" }; var betaServiceAccount = await client.Beta.Organization.ServiceAccounts.Retrieve(parameters); Console.WriteLine(betaServiceAccount); ``` ##### Response (200) ```json { "id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "name": "ci-deploy-bot", "organization_role": "admin", "type": "service_account", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ### Update Service Account `BetaServiceAccount Beta.Organization.ServiceAccounts.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/service_accounts/{service_account_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Update a service account. Only `description` and `organization_role` are mutable; `name` cannot be changed. Archived service accounts cannot be updated; this returns 400. Setting `organization_role` to `admin` (even when unchanged) requires an interactive credential (a user OAuth token or a Console session). #### Parameters - `ServiceAccountUpdateParams parameters` - `required string serviceAccountID` (path parameter) ID of the service account to update. - `string? description` Replaces the description. Omit to leave unchanged; send `null` to clear (the field is stored as an empty string). maxLength: 2000 - `OrganizationRole? organizationRole` Replaces the org-level role. Omit or send `null` to leave unchanged. - `Admin("admin")` - `Developer("developer")` - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccount` Named non-human identity within the caller's organization. A service account is a pure identity: name + org. Authorization lives on whatever references it (federation rules). - `JsonElement Type = "service_account"` - `required string ID` Tagged ID of the service account. - `required DateTimeOffset? ArchivedAt` If set, this service account is archived. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this service account. - `required DateTimeOffset CreatedAt` When this service account was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this service account. - `required string? Description` Optional free-text description. - `required string Name` Admin-chosen slug identifier. - `required OrganizationRole OrganizationRole` Org-level role. A federation rule may only be created or retargeted to grant `org:admin` scope when this is `admin`. A rule granting `org:admin` whose target is later demoted to `developer` is rejected at token exchange. Rules granting `org:admin` are managed in the Console. - `Admin("admin")` - `Developer("developer")` - `required DateTimeOffset UpdatedAt` When this service account was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this service account. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts; ServiceAccountUpdateParams parameters = new() { ServiceAccountID = "service_account_id" }; var betaServiceAccount = await client.Beta.Organization.ServiceAccounts.Update(parameters); Console.WriteLine(betaServiceAccount); ``` ##### Response (200) ```json { "id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "name": "ci-deploy-bot", "organization_role": "admin", "type": "service_account", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ### Archive Service Account `BetaServiceAccount Beta.Organization.ServiceAccounts.Archive(parameters, cancellationToken = default)` **POST** `/v1/organizations/service_accounts/{service_account_id}/archive` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Archive a service account. Idempotent; re-archiving returns the service account with its original `archived_at`. Rejected with 400 if any live (non-archived) federation rule still targets this service account, same as issuer archival; archive those rules first or change their target to another service account. #### Parameters - `ServiceAccountArchiveParams parameters` - `required string serviceAccountID` (path parameter) ID of the service account to archive. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccount` Named non-human identity within the caller's organization. A service account is a pure identity: name + org. Authorization lives on whatever references it (federation rules). - `JsonElement Type = "service_account"` - `required string ID` Tagged ID of the service account. - `required DateTimeOffset? ArchivedAt` If set, this service account is archived. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this service account. - `required DateTimeOffset CreatedAt` When this service account was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this service account. - `required string? Description` Optional free-text description. - `required string Name` Admin-chosen slug identifier. - `required OrganizationRole OrganizationRole` Org-level role. A federation rule may only be created or retargeted to grant `org:admin` scope when this is `admin`. A rule granting `org:admin` whose target is later demoted to `developer` is rejected at token exchange. Rules granting `org:admin` are managed in the Console. - `Admin("admin")` - `Developer("developer")` - `required DateTimeOffset UpdatedAt` When this service account was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this service account. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts; ServiceAccountArchiveParams parameters = new() { ServiceAccountID = "service_account_id" }; var betaServiceAccount = await client.Beta.Organization.ServiceAccounts.Archive(parameters); Console.WriteLine(betaServiceAccount); ``` ##### Response (200) ```json { "id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "name": "ci-deploy-bot", "organization_role": "admin", "type": "service_account", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id" } ``` ## Organization › Service Accounts › Workspaces ### Add Workspace To Service Account `BetaServiceAccountWorkspaceMember Beta.Organization.ServiceAccounts.Workspaces.Add(parameters, cancellationToken = default)` **POST** `/v1/organizations/service_accounts/{service_account_id}/workspaces` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Add a service account to a workspace with the given `workspace_role`. Mirror of `POST /workspaces/{workspace_id}/service_accounts`, addressed from the service-account side; both create the same membership. If the service account is already an explicit member of the workspace, its `workspace_role` is replaced with the value supplied here. Archived workspaces return 400. Archived service accounts cannot be added and are rejected. #### Parameters - `WorkspaceAddParams parameters` - `required string serviceAccountID` (path parameter) ID of the service account. - `required string workspaceID` Tagged workspace ID to add the service account to. - `required BetaNoBillingWorkspaceRole workspaceRole` Role to assign to the service account in this workspace. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccountWorkspaceMember` - `JsonElement Type = "service_account_workspace_member"` - `required string? CreatedByActorID` Tagged ID (`user_...`/`svac_...`) of the actor who created this membership. - `required bool? Implicit` True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed. - `required string ServiceAccountID` Tagged service account ID (`svac_...`). - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`). - `required BetaWorkspaceRole WorkspaceRole` Role of the service account in this workspace. Service accounts cannot hold the `workspace_billing` role. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts.Workspaces; using Anthropic.Models.Beta.Organization.Workspaces; WorkspaceAddParams parameters = new() { ServiceAccountID = "service_account_id", WorkspaceID = "workspace_id", WorkspaceRole = BetaNoBillingWorkspaceRole.WorkspaceAdmin, }; var betaServiceAccountWorkspaceMember = await client.Beta.Organization.ServiceAccounts.Workspaces.Add(parameters); Console.WriteLine(betaServiceAccountWorkspaceMember); ``` ##### Response (200) ```json { "created_by_actor_id": "created_by_actor_id", "implicit": true, "service_account_id": "service_account_id", "type": "service_account_workspace_member", "workspace_id": "workspace_id", "workspace_role": "workspace_admin" } ``` ### List Workspaces For Service Account `WorkspaceListPage Beta.Organization.ServiceAccounts.Workspaces.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/service_accounts/{service_account_id}/workspaces` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List the workspaces a service account is a member of. Each entry includes the service account's `workspace_role` in that workspace. Use `limit` and the `next_page` cursor to paginate. When the service account has no explicit default-workspace membership, the implicit (`implicit: true`) membership is returned as the first entry on the first page; with `limit=1` the first page may return up to 2 entries (the implicit entry plus one explicit membership) so a pagination cursor can be derived. Memberships are returned only while the service account is active. Without a `page` cursor, an archived service account returns an empty list. A `page` cursor that does not match an active membership returns a 400 invalid-request error. A cursor stops matching when the membership is removed, the workspace is deleted, or the service account is archived. Restart pagination from the first page to recover. #### Parameters - `WorkspaceListParams parameters` - `required string serviceAccountID` (path parameter) ID of the service account. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccountWorkspaceMember` - `JsonElement Type = "service_account_workspace_member"` - `required string? CreatedByActorID` Tagged ID (`user_...`/`svac_...`) of the actor who created this membership. - `required bool? Implicit` True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed. - `required string ServiceAccountID` Tagged service account ID (`svac_...`). - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`). - `required BetaWorkspaceRole WorkspaceRole` Role of the service account in this workspace. Service accounts cannot hold the `workspace_billing` role. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts.Workspaces; WorkspaceListParams parameters = new() { ServiceAccountID = "service_account_id" }; var page = await client.Beta.Organization.ServiceAccounts.Workspaces.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "created_by_actor_id": "created_by_actor_id", "implicit": true, "service_account_id": "service_account_id", "type": "service_account_workspace_member", "workspace_id": "workspace_id", "workspace_role": "workspace_admin" } ], "next_page": "next_page" } ``` ### Remove Workspace From Service Account `WorkspaceRemoveResponse Beta.Organization.ServiceAccounts.Workspaces.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/service_accounts/{service_account_id}/workspaces/{workspace_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Remove a service account from a workspace. Mirror of `DELETE /workspaces/{workspace_id}/service_accounts/{service_account_id}`, addressed from the service-account side. Removal is idempotent (returns 200 even if the membership was already removed). A DELETE against the implicit default-workspace membership returns 200 but is a no-op and the membership persists; deleting an explicit default-workspace row reverts to the implicit `workspace_user` membership. Archived workspaces return 400. #### Parameters - `WorkspaceRemoveParams parameters` - `required string serviceAccountID` (path parameter) ID of the service account. - `required string workspaceID` (path parameter) ID of the workspace. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class WorkspaceRemoveResponse` - `JsonElement Type = "service_account_workspace_member_deleted"` - `required string ServiceAccountID` Tagged service account ID (`svac_...`) named in the delete request. Removal is idempotent; see the endpoint description for the implicit-membership no-op. - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`) named in the delete request. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ServiceAccounts.Workspaces; WorkspaceRemoveParams parameters = new() { ServiceAccountID = "service_account_id", WorkspaceID = "workspace_id", }; var workspace = await client.Beta.Organization.ServiceAccounts.Workspaces.Remove(parameters); Console.WriteLine(workspace); ``` ##### Response (200) ```json { "service_account_id": "service_account_id", "type": "service_account_workspace_member_deleted", "workspace_id": "workspace_id" } ``` ## Organization › Users ### List Users `UserListPage Beta.Organization.Users.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/users` List the organization's members. #### Parameters - `UserListParams parameters` - `string afterID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately after this object. - `string beforeID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately before this object. - `string email` (query parameter) Filter by user email. format: email - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `IReadOnlyList roles` (query parameter) Filter to items whose `role` equals one of the supplied values. Repeatable; values are OR'ed together. Accepted values depend on the organization type: Console and API organizations accept `user`, `developer`, `billing`, `admin`, and `claude_code_user`; Claude Enterprise organizations accept `user`, `owner`, `primary_owner`, `membership_admin`, and `managed`. #### Returns - `class BetaOrganizationUser` - `JsonElement Type = "user"` Object type. For Users, this is always `"user"`. - `required string ID` ID of the User. - `required DateTimeOffset AddedAt` RFC 3339 datetime string indicating when the User joined the Organization. format: date-time - `required string Email` Email of the User. - `required string Name` Name of the User. - `required BetaOrganizationRole Role` Organization role of the User. - `Admin("admin")` - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `MembershipAdmin("membership_admin")` - `Owner("owner")` - `PrimaryOwner("primary_owner")` - `User("user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Users; UserListParams parameters = new(); var page = await client.Beta.Organization.Users.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "added_at": "2024-10-30T23:58:27.427722Z", "email": "user@emaildomain.com", "name": "Jane Doe", "role": "admin", "type": "user" } ], "first_id": "first_id", "has_more": true, "last_id": "last_id" } ``` ### Get User `BetaOrganizationUser Beta.Organization.Users.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/users/{user_id}` Retrieve a member of the organization by user ID. #### Parameters - `UserRetrieveParams parameters` - `required string userID` (path parameter) ID of the User. #### Returns - `class BetaOrganizationUser` - `JsonElement Type = "user"` Object type. For Users, this is always `"user"`. - `required string ID` ID of the User. - `required DateTimeOffset AddedAt` RFC 3339 datetime string indicating when the User joined the Organization. format: date-time - `required string Email` Email of the User. - `required string Name` Name of the User. - `required BetaOrganizationRole Role` Organization role of the User. - `Admin("admin")` - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `MembershipAdmin("membership_admin")` - `Owner("owner")` - `PrimaryOwner("primary_owner")` - `User("user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Users; UserRetrieveParams parameters = new() { UserID = "user_id" }; var betaOrganizationUser = await client.Beta.Organization.Users.Retrieve(parameters); Console.WriteLine(betaOrganizationUser); ``` ##### Response (200) ```json { "id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "added_at": "2024-10-30T23:58:27.427722Z", "email": "user@emaildomain.com", "name": "Jane Doe", "role": "admin", "type": "user" } ``` ### Update User `BetaOrganizationUser Beta.Organization.Users.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/users/{user_id}` Update a member's organization role. #### Parameters - `UserUpdateParams parameters` - `required string userID` (path parameter) ID of the User. - `required Role role` New role for the User. The accepted values depend on the organization type. Console and API organizations accept `user`, `developer`, `billing`, and `claude_code_user`; `admin` cannot be assigned through the API. Claude Enterprise organizations accept `user` and `managed`; changing a User's role to `managed` requires the `write:rbac_groups` scope in addition to `write:members`. - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `User("user")` #### Returns - `class BetaOrganizationUser` - `JsonElement Type = "user"` Object type. For Users, this is always `"user"`. - `required string ID` ID of the User. - `required DateTimeOffset AddedAt` RFC 3339 datetime string indicating when the User joined the Organization. format: date-time - `required string Email` Email of the User. - `required string Name` Name of the User. - `required BetaOrganizationRole Role` Organization role of the User. - `Admin("admin")` - `Billing("billing")` - `ClaudeCodeUser("claude_code_user")` - `Developer("developer")` - `Managed("managed")` - `MembershipAdmin("membership_admin")` - `Owner("owner")` - `PrimaryOwner("primary_owner")` - `User("user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Users; UserUpdateParams parameters = new() { UserID = "user_id", Role = Role.User, }; var betaOrganizationUser = await client.Beta.Organization.Users.Update(parameters); Console.WriteLine(betaOrganizationUser); ``` ##### Response (200) ```json { "id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "added_at": "2024-10-30T23:58:27.427722Z", "email": "user@emaildomain.com", "name": "Jane Doe", "role": "admin", "type": "user" } ``` ### Remove User `UserRemoveResponse Beta.Organization.Users.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/users/{user_id}` Remove a member from the organization. #### Parameters - `UserRemoveParams parameters` - `required string userID` (path parameter) ID of the User. #### Returns - `class UserRemoveResponse` - `JsonElement Type = "user_deleted"` Deleted object type. For Users, this is always `"user_deleted"`. - `required string ID` ID of the User. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Users; UserRemoveParams parameters = new() { UserID = "user_id" }; var user = await client.Beta.Organization.Users.Remove(parameters); Console.WriteLine(user); ``` ##### Response (200) ```json { "id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "type": "user_deleted" } ``` ## Organization › Workspaces ### List Workspaces `WorkspaceListPage Beta.Organization.Workspaces.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/workspaces` List Workspaces #### Parameters - `WorkspaceListParams parameters` - `string afterID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately after this object. - `string beforeID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately before this object. - `bool includeArchived` (query parameter) Whether to include Workspaces that have been archived in the response - `bool includeDefault` (query parameter) Whether to include the organization's default Workspace in the response - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 #### Returns - `class BetaWorkspace` - `JsonElement Type = "workspace"` Object type. For Workspaces, this is always `"workspace"`. - `required string ID` ID of the Workspace. - `required DateTimeOffset? ArchivedAt` RFC 3339 datetime string indicating when the Workspace was archived, or `null` if the Workspace is not archived. format: date-time - `required string CompartmentID` Identifier for this Workspace's encryption compartment. When you configure a customer-managed encryption key (CMEK) on AWS, reference this value in your KMS key-policy condition so the key is scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment binding automatically; you do not need to reference this value in your key configuration. See the CMEK integration guide for the required key configuration; unless your organization is on Claude Platform on AWS, it includes a separate value used during key validation. On Claude Platform on AWS there is no separate validation value: the key is validated against this Workspace's own value when it is attached, so if your key policy uses the compartment condition, add this value to it before attaching the key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the Workspace was created. format: date-time - `required BetaDataResidency DataResidency` Data residency configuration. - `required AllowedInferenceGeos AllowedInferenceGeos` Permitted inference geo values. 'unrestricted' means all geos are allowed. - `IReadOnlyList` - `Global("global")` - `Us("us")` - `class Unrestricted:` - `required DefaultInferenceGeo DefaultInferenceGeo` Default inference geo applied when requests omit the parameter. - `Global("global")` - `Us("us")` - `required WorkspaceGeo WorkspaceGeo` Geographic region for workspace data storage. Immutable after creation. - `required string DisplayColor` Hex color code representing the Workspace in the Anthropic Console. - `required string? ExternalKeyID` ID of the customer-managed encryption key (CMEK) configuration to use for this Workspace. Setting this field requires CMEK to be enabled for your organization. When set, data stored for this Workspace is encrypted with the referenced key. Create key configurations with the External Keys API. On Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a single-Region key in the same AWS account and Region as the Workspace. On that platform the key is validated against this Workspace when it is attached, so a key-policy problem is reported as an error on this request. This field is write-once: once a key is attached to a Workspace it cannot be detached or replaced. To rotate key material, rotate the underlying key on your cloud KMS; the `external_key_id` stays the same. - `required string Name` Name of the Workspace. - `required IReadOnlyDictionary Tags` User-defined tags as string key-value pairs. Keys may not begin with `anthropic`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; WorkspaceListParams parameters = new(); var page = await client.Beta.Organization.Workspaces.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "archived_at": "2024-11-01T23:59:27.427722Z", "compartment_id": "f8a7b6c5-4d3e-4f1a-8b9c-0d1e2f3a4b5c", "created_at": "2024-10-30T23:58:27.427722Z", "data_residency": { "allowed_inference_geos": "unrestricted", "default_inference_geo": "global", "workspace_geo": "us" }, "display_color": "#6C5BB9", "external_key_id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "name": "Workspace Name", "tags": { "env": "prod", "team": "platform" }, "type": "workspace" } ], "first_id": "first_id", "has_more": true, "last_id": "last_id" } ``` ### Create Workspace `BetaWorkspace Beta.Organization.Workspaces.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces` Create Workspace #### Parameters - `WorkspaceCreateParams parameters` - `required string name` Name of the Workspace. minLength: 1, maxLength: 255 - `BetaDataResidencyCreateConfig? dataResidency` Data residency configuration for the workspace. If omitted, defaults to `workspace_geo: "us"`, `allowed_inference_geos: "unrestricted"`, and `default_inference_geo: "global"`. - `string? displayColor` Hex color code representing the Workspace in the Anthropic Console. maxLength: 7, pattern: ^#[0-9A-Fa-f]{6}$ - `string? externalKeyID` ID of the customer-managed encryption key (CMEK) configuration to use for this Workspace. Setting this field requires CMEK to be enabled for your organization. When set, data stored for this Workspace is encrypted with the referenced key. Create key configurations with the External Keys API. On Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a single-Region key in the same AWS account and Region as the Workspace. On that platform the key is validated against this Workspace when it is attached, so a key-policy problem is reported as an error on this request. This field is write-once: once a key is attached to a Workspace it cannot be detached or replaced. To rotate key material, rotate the underlying key on your cloud KMS; the `external_key_id` stays the same. - `IReadOnlyDictionary? tags` User-defined tags as string key-value pairs. Keys may not begin with `anthropic`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaWorkspace` - `JsonElement Type = "workspace"` Object type. For Workspaces, this is always `"workspace"`. - `required string ID` ID of the Workspace. - `required DateTimeOffset? ArchivedAt` RFC 3339 datetime string indicating when the Workspace was archived, or `null` if the Workspace is not archived. format: date-time - `required string CompartmentID` Identifier for this Workspace's encryption compartment. When you configure a customer-managed encryption key (CMEK) on AWS, reference this value in your KMS key-policy condition so the key is scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment binding automatically; you do not need to reference this value in your key configuration. See the CMEK integration guide for the required key configuration; unless your organization is on Claude Platform on AWS, it includes a separate value used during key validation. On Claude Platform on AWS there is no separate validation value: the key is validated against this Workspace's own value when it is attached, so if your key policy uses the compartment condition, add this value to it before attaching the key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the Workspace was created. format: date-time - `required BetaDataResidency DataResidency` Data residency configuration. - `required AllowedInferenceGeos AllowedInferenceGeos` Permitted inference geo values. 'unrestricted' means all geos are allowed. - `IReadOnlyList` - `Global("global")` - `Us("us")` - `class Unrestricted:` - `required DefaultInferenceGeo DefaultInferenceGeo` Default inference geo applied when requests omit the parameter. - `Global("global")` - `Us("us")` - `required WorkspaceGeo WorkspaceGeo` Geographic region for workspace data storage. Immutable after creation. - `required string DisplayColor` Hex color code representing the Workspace in the Anthropic Console. - `required string? ExternalKeyID` ID of the customer-managed encryption key (CMEK) configuration to use for this Workspace. Setting this field requires CMEK to be enabled for your organization. When set, data stored for this Workspace is encrypted with the referenced key. Create key configurations with the External Keys API. On Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a single-Region key in the same AWS account and Region as the Workspace. On that platform the key is validated against this Workspace when it is attached, so a key-policy problem is reported as an error on this request. This field is write-once: once a key is attached to a Workspace it cannot be detached or replaced. To rotate key material, rotate the underlying key on your cloud KMS; the `external_key_id` stays the same. - `required string Name` Name of the Workspace. - `required IReadOnlyDictionary Tags` User-defined tags as string key-value pairs. Keys may not begin with `anthropic`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; WorkspaceCreateParams parameters = new() { Name = "x" }; var betaWorkspace = await client.Beta.Organization.Workspaces.Create(parameters); Console.WriteLine(betaWorkspace); ``` ##### Response (200) ```json { "id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "archived_at": "2024-11-01T23:59:27.427722Z", "compartment_id": "f8a7b6c5-4d3e-4f1a-8b9c-0d1e2f3a4b5c", "created_at": "2024-10-30T23:58:27.427722Z", "data_residency": { "allowed_inference_geos": "unrestricted", "default_inference_geo": "global", "workspace_geo": "us" }, "display_color": "#6C5BB9", "external_key_id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "name": "Workspace Name", "tags": { "env": "prod", "team": "platform" }, "type": "workspace" } ``` ### Get Workspace `BetaWorkspace Beta.Organization.Workspaces.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/workspaces/{workspace_id}` Get Workspace #### Parameters - `WorkspaceRetrieveParams parameters` - `required string workspaceID` (path parameter) ID of the Workspace. #### Returns - `class BetaWorkspace` - `JsonElement Type = "workspace"` Object type. For Workspaces, this is always `"workspace"`. - `required string ID` ID of the Workspace. - `required DateTimeOffset? ArchivedAt` RFC 3339 datetime string indicating when the Workspace was archived, or `null` if the Workspace is not archived. format: date-time - `required string CompartmentID` Identifier for this Workspace's encryption compartment. When you configure a customer-managed encryption key (CMEK) on AWS, reference this value in your KMS key-policy condition so the key is scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment binding automatically; you do not need to reference this value in your key configuration. See the CMEK integration guide for the required key configuration; unless your organization is on Claude Platform on AWS, it includes a separate value used during key validation. On Claude Platform on AWS there is no separate validation value: the key is validated against this Workspace's own value when it is attached, so if your key policy uses the compartment condition, add this value to it before attaching the key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the Workspace was created. format: date-time - `required BetaDataResidency DataResidency` Data residency configuration. - `required AllowedInferenceGeos AllowedInferenceGeos` Permitted inference geo values. 'unrestricted' means all geos are allowed. - `IReadOnlyList` - `Global("global")` - `Us("us")` - `class Unrestricted:` - `required DefaultInferenceGeo DefaultInferenceGeo` Default inference geo applied when requests omit the parameter. - `Global("global")` - `Us("us")` - `required WorkspaceGeo WorkspaceGeo` Geographic region for workspace data storage. Immutable after creation. - `required string DisplayColor` Hex color code representing the Workspace in the Anthropic Console. - `required string? ExternalKeyID` ID of the customer-managed encryption key (CMEK) configuration to use for this Workspace. Setting this field requires CMEK to be enabled for your organization. When set, data stored for this Workspace is encrypted with the referenced key. Create key configurations with the External Keys API. On Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a single-Region key in the same AWS account and Region as the Workspace. On that platform the key is validated against this Workspace when it is attached, so a key-policy problem is reported as an error on this request. This field is write-once: once a key is attached to a Workspace it cannot be detached or replaced. To rotate key material, rotate the underlying key on your cloud KMS; the `external_key_id` stays the same. - `required string Name` Name of the Workspace. - `required IReadOnlyDictionary Tags` User-defined tags as string key-value pairs. Keys may not begin with `anthropic`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; WorkspaceRetrieveParams parameters = new() { WorkspaceID = "workspace_id" }; var betaWorkspace = await client.Beta.Organization.Workspaces.Retrieve(parameters); Console.WriteLine(betaWorkspace); ``` ##### Response (200) ```json { "id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "archived_at": "2024-11-01T23:59:27.427722Z", "compartment_id": "f8a7b6c5-4d3e-4f1a-8b9c-0d1e2f3a4b5c", "created_at": "2024-10-30T23:58:27.427722Z", "data_residency": { "allowed_inference_geos": "unrestricted", "default_inference_geo": "global", "workspace_geo": "us" }, "display_color": "#6C5BB9", "external_key_id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "name": "Workspace Name", "tags": { "env": "prod", "team": "platform" }, "type": "workspace" } ``` ### Update Workspace `BetaWorkspace Beta.Organization.Workspaces.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces/{workspace_id}` Update Workspace #### Parameters - `WorkspaceUpdateParams parameters` - `required string workspaceID` (path parameter) - `BetaDataResidencyUpdateConfig? dataResidency` Data residency configuration for the workspace. - `string displayColor` Hex color code representing the Workspace in the Anthropic Console. maxLength: 7, pattern: ^#[0-9A-Fa-f]{6}$ - `string externalKeyID` ID of the customer-managed encryption key (CMEK) configuration to use for this Workspace. Setting this field requires CMEK to be enabled for your organization. When set, data stored for this Workspace is encrypted with the referenced key. Create key configurations with the External Keys API. On Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a single-Region key in the same AWS account and Region as the Workspace. On that platform the key is validated against this Workspace when it is attached, so a key-policy problem is reported as an error on this request. This field is write-once: once a key is attached to a Workspace it cannot be detached or replaced. To rotate key material, rotate the underlying key on your cloud KMS; the `external_key_id` stays the same. - `string name` Name of the Workspace. minLength: 1, maxLength: 255 - `IReadOnlyDictionary? tags` User-defined tags as string key-value pairs. Keys may not begin with `anthropic`. #### Returns - `class BetaWorkspace` - `JsonElement Type = "workspace"` Object type. For Workspaces, this is always `"workspace"`. - `required string ID` ID of the Workspace. - `required DateTimeOffset? ArchivedAt` RFC 3339 datetime string indicating when the Workspace was archived, or `null` if the Workspace is not archived. format: date-time - `required string CompartmentID` Identifier for this Workspace's encryption compartment. When you configure a customer-managed encryption key (CMEK) on AWS, reference this value in your KMS key-policy condition so the key is scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment binding automatically; you do not need to reference this value in your key configuration. See the CMEK integration guide for the required key configuration; unless your organization is on Claude Platform on AWS, it includes a separate value used during key validation. On Claude Platform on AWS there is no separate validation value: the key is validated against this Workspace's own value when it is attached, so if your key policy uses the compartment condition, add this value to it before attaching the key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the Workspace was created. format: date-time - `required BetaDataResidency DataResidency` Data residency configuration. - `required AllowedInferenceGeos AllowedInferenceGeos` Permitted inference geo values. 'unrestricted' means all geos are allowed. - `IReadOnlyList` - `Global("global")` - `Us("us")` - `class Unrestricted:` - `required DefaultInferenceGeo DefaultInferenceGeo` Default inference geo applied when requests omit the parameter. - `Global("global")` - `Us("us")` - `required WorkspaceGeo WorkspaceGeo` Geographic region for workspace data storage. Immutable after creation. - `required string DisplayColor` Hex color code representing the Workspace in the Anthropic Console. - `required string? ExternalKeyID` ID of the customer-managed encryption key (CMEK) configuration to use for this Workspace. Setting this field requires CMEK to be enabled for your organization. When set, data stored for this Workspace is encrypted with the referenced key. Create key configurations with the External Keys API. On Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a single-Region key in the same AWS account and Region as the Workspace. On that platform the key is validated against this Workspace when it is attached, so a key-policy problem is reported as an error on this request. This field is write-once: once a key is attached to a Workspace it cannot be detached or replaced. To rotate key material, rotate the underlying key on your cloud KMS; the `external_key_id` stays the same. - `required string Name` Name of the Workspace. - `required IReadOnlyDictionary Tags` User-defined tags as string key-value pairs. Keys may not begin with `anthropic`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; WorkspaceUpdateParams parameters = new() { WorkspaceID = "workspace_id" }; var betaWorkspace = await client.Beta.Organization.Workspaces.Update(parameters); Console.WriteLine(betaWorkspace); ``` ##### Response (200) ```json { "id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "archived_at": "2024-11-01T23:59:27.427722Z", "compartment_id": "f8a7b6c5-4d3e-4f1a-8b9c-0d1e2f3a4b5c", "created_at": "2024-10-30T23:58:27.427722Z", "data_residency": { "allowed_inference_geos": "unrestricted", "default_inference_geo": "global", "workspace_geo": "us" }, "display_color": "#6C5BB9", "external_key_id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "name": "Workspace Name", "tags": { "env": "prod", "team": "platform" }, "type": "workspace" } ``` ### Archive Workspace `BetaWorkspace Beta.Organization.Workspaces.Archive(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces/{workspace_id}/archive` Archive Workspace #### Parameters - `WorkspaceArchiveParams parameters` - `required string workspaceID` (path parameter) #### Returns - `class BetaWorkspace` - `JsonElement Type = "workspace"` Object type. For Workspaces, this is always `"workspace"`. - `required string ID` ID of the Workspace. - `required DateTimeOffset? ArchivedAt` RFC 3339 datetime string indicating when the Workspace was archived, or `null` if the Workspace is not archived. format: date-time - `required string CompartmentID` Identifier for this Workspace's encryption compartment. When you configure a customer-managed encryption key (CMEK) on AWS, reference this value in your KMS key-policy condition so the key is scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment binding automatically; you do not need to reference this value in your key configuration. See the CMEK integration guide for the required key configuration; unless your organization is on Claude Platform on AWS, it includes a separate value used during key validation. On Claude Platform on AWS there is no separate validation value: the key is validated against this Workspace's own value when it is attached, so if your key policy uses the compartment condition, add this value to it before attaching the key. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the Workspace was created. format: date-time - `required BetaDataResidency DataResidency` Data residency configuration. - `required AllowedInferenceGeos AllowedInferenceGeos` Permitted inference geo values. 'unrestricted' means all geos are allowed. - `IReadOnlyList` - `Global("global")` - `Us("us")` - `class Unrestricted:` - `required DefaultInferenceGeo DefaultInferenceGeo` Default inference geo applied when requests omit the parameter. - `Global("global")` - `Us("us")` - `required WorkspaceGeo WorkspaceGeo` Geographic region for workspace data storage. Immutable after creation. - `required string DisplayColor` Hex color code representing the Workspace in the Anthropic Console. - `required string? ExternalKeyID` ID of the customer-managed encryption key (CMEK) configuration to use for this Workspace. Setting this field requires CMEK to be enabled for your organization. When set, data stored for this Workspace is encrypted with the referenced key. Create key configurations with the External Keys API. On Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a single-Region key in the same AWS account and Region as the Workspace. On that platform the key is validated against this Workspace when it is attached, so a key-policy problem is reported as an error on this request. This field is write-once: once a key is attached to a Workspace it cannot be detached or replaced. To rotate key material, rotate the underlying key on your cloud KMS; the `external_key_id` stays the same. - `required string Name` Name of the Workspace. - `required IReadOnlyDictionary Tags` User-defined tags as string key-value pairs. Keys may not begin with `anthropic`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; WorkspaceArchiveParams parameters = new() { WorkspaceID = "workspace_id" }; var betaWorkspace = await client.Beta.Organization.Workspaces.Archive(parameters); Console.WriteLine(betaWorkspace); ``` ##### Response (200) ```json { "id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "archived_at": "2024-11-01T23:59:27.427722Z", "compartment_id": "f8a7b6c5-4d3e-4f1a-8b9c-0d1e2f3a4b5c", "created_at": "2024-10-30T23:58:27.427722Z", "data_residency": { "allowed_inference_geos": "unrestricted", "default_inference_geo": "global", "workspace_geo": "us" }, "display_color": "#6C5BB9", "external_key_id": "ekey_01SDCCSbTxrXDpWc1phhtcfK", "name": "Workspace Name", "tags": { "env": "prod", "team": "platform" }, "type": "workspace" } ``` ## Organization › Workspaces › Rate Limits ### List Workspace Rate Limits `RateLimitListPage Beta.Organization.Workspaces.RateLimits.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/workspaces/{workspace_id}/rate_limits` List a workspace's rate limits. By default, returns only the groups and limiter types that have a workspace-level override. With `include_inherited=true`, returns every group with organization-level limits the workspace can see, listing for each the values it inherits from the organization as well as its own overrides. Each value's `source` says which it is. When `limit` is omitted, every matching entry is returned in a single page; when `limit` truncates the result, follow `next_page` to fetch the remaining entries. #### Parameters - `RateLimitListParams parameters` - `required string workspaceID` (path parameter) The ID of the workspace. - `GroupType? groupType` (query parameter) Filter by group type. - `Batch("batch")` - `Files("files")` - `ModelGroup("model_group")` - `Skills("skills")` - `TokenCount("token_count")` - `WebSearch("web_search")` - `bool includeInherited` (query parameter) Also list the limiter values the workspace inherits from the organization, including groups with no workspace-level override. - `long? limit` (query parameter) Maximum number of items to return per page. Ranges from `1` to `1000`. When omitted, every remaining entry is returned in a single page and `next_page` is `null`. minimum: 1, maximum: 1000 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. #### Returns - `class BetaWorkspaceRateLimit` - `JsonElement Type = "workspace_rate_limit"` Object type. Always `workspace_rate_limit` for workspace rate-limit entries. - `required Group Group` The rate-limit group this entry's limits apply to. - `class BetaOrganizationRateLimitModelGroup` - `JsonElement Type = "model_group"` Always `model_group`: a family of models. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `required string DisplayName` Human-readable name of the model group (for example, `Claude Sonnet 4.x`). For display only; it may change. - `class BetaOrganizationRateLimitBatchGroup` - `JsonElement Type = "batch"` Always `batch`: the Message Batches API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitTokenCountGroup` - `JsonElement Type = "token_count"` Always `token_count`: the Token Count API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitFilesGroup` - `JsonElement Type = "files"` Always `files`: the Files API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitSkillsGroup` - `JsonElement Type = "skills"` Always `skills`: the Skills API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitWebSearchGroup` - `JsonElement Type = "web_search"` Always `web_search`: the Messages API web search tool. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `required IReadOnlyList Limits` The workspace's limiter values for this group. By default only the limiter types with a workspace-level override are listed. With `include_inherited` set to `true`, the limiter types the workspace inherits from the organization are listed too, each marked by `source`. - `required string Type` The limiter type (for example, `requests_per_minute` or `input_tokens_per_minute`). - `required long? OrgLimit` The organization-level value for the same limiter type, for reference. `null` when the organization has no limit configured for this limiter type. - `required Source Source` Where `value` comes from. `organization` values are listed only when `include_inherited` is `true`, and then `value` equals `org_limit`. - `class BetaWorkspaceRateLimitWorkspaceSource` - `JsonElement Type = "workspace"` Always `workspace`: a workspace-level override is stored. - `class BetaWorkspaceRateLimitOrganizationSource` - `JsonElement Type = "organization"` Always `organization`: no workspace-level override is stored, so the organization's value applies. - `required long Value` The workspace's value for this limiter type: the workspace-level override when `source.type` is `workspace`, otherwise the organization's value. - `required IReadOnlyList? Models` Model names this entry's limits apply to, including aliases. `null` when `group.type` is not `"model_group"`. The list covers the models this workspace has access to, so it can differ between workspaces. - `required string RateLimitID` The `id` of the organization's RateLimit entry this entry applies to. - `required string WorkspaceID` ID of the Workspace this entry applies to. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.RateLimits; RateLimitListParams parameters = new() { WorkspaceID = "workspace_id" }; var page = await client.Beta.Organization.Workspaces.RateLimits.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "group": { "id": "id", "display_name": "display_name", "type": "model_group" }, "limits": [ { "org_limit": 0, "source": { "type": "workspace" }, "type": "type", "value": 0 } ], "models": [ "string" ], "rate_limit_id": "rate_limit_id", "type": "workspace_rate_limit", "workspace_id": "workspace_id" } ], "next_page": "next_page" } ``` ### Set Workspace Rate Limits `BetaWorkspaceRateLimit Beta.Organization.Workspaces.RateLimits.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces/{workspace_id}/rate_limits/{rate_limit_id}` Set or clear rate-limit overrides for one rate-limit group in a workspace. Only the limiter types named in `limits` change: an integer `value` sets that type's override and `null` clears it. Types not named keep their current value. A value above the organization's own limit is stored, but the organization limit still applies, so the lower of the two is enforced. Returns the targeted group's entry with this request applied, in the shape `GET /v1/organizations/workspaces/{workspace_id}/rate_limits` returns. Changes take effect within about an hour. #### Parameters - `RateLimitUpdateParams parameters` - `required string workspaceID` (path parameter) The ID of the workspace. - `required string rateLimitID` (path parameter) The `id` of the organization's rate-limit entry to set overrides for. - `required IReadOnlyList limits` Limits to set or clear. Unspecified limit types are unchanged. minItems: 1, maxItems: 16 - `required BetaWorkspaceRateLimitType Type` Rate limiter type. - `FastItpmca("fast_itpmca")` - `FastOtpm("fast_otpm")` - `InputTokensPerMinute("input_tokens_per_minute")` - `InputTokensPerMinuteCacheAware("input_tokens_per_minute_cache_aware")` - `OutputTokensPerMinute("output_tokens_per_minute")` - `RequestsPerMinute("requests_per_minute")` - `TokensPerDay("tokens_per_day")` - `TokensPerMinute("tokens_per_minute")` - `ToolUsesPerSecond("tool_uses_per_second")` - `required long? Value` New limit value. Set to null to clear the workspace override and fall back to the organization limit. minimum: 0, maximum: 9007199254740991 #### Returns - `class BetaWorkspaceRateLimit` - `JsonElement Type = "workspace_rate_limit"` Object type. Always `workspace_rate_limit` for workspace rate-limit entries. - `required Group Group` The rate-limit group this entry's limits apply to. - `class BetaOrganizationRateLimitModelGroup` - `JsonElement Type = "model_group"` Always `model_group`: a family of models. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `required string DisplayName` Human-readable name of the model group (for example, `Claude Sonnet 4.x`). For display only; it may change. - `class BetaOrganizationRateLimitBatchGroup` - `JsonElement Type = "batch"` Always `batch`: the Message Batches API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitTokenCountGroup` - `JsonElement Type = "token_count"` Always `token_count`: the Token Count API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitFilesGroup` - `JsonElement Type = "files"` Always `files`: the Files API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitSkillsGroup` - `JsonElement Type = "skills"` Always `skills`: the Skills API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitWebSearchGroup` - `JsonElement Type = "web_search"` Always `web_search`: the Messages API web search tool. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `required IReadOnlyList Limits` The workspace's limiter values for this group. By default only the limiter types with a workspace-level override are listed. With `include_inherited` set to `true`, the limiter types the workspace inherits from the organization are listed too, each marked by `source`. - `required string Type` The limiter type (for example, `requests_per_minute` or `input_tokens_per_minute`). - `required long? OrgLimit` The organization-level value for the same limiter type, for reference. `null` when the organization has no limit configured for this limiter type. - `required Source Source` Where `value` comes from. `organization` values are listed only when `include_inherited` is `true`, and then `value` equals `org_limit`. - `class BetaWorkspaceRateLimitWorkspaceSource` - `JsonElement Type = "workspace"` Always `workspace`: a workspace-level override is stored. - `class BetaWorkspaceRateLimitOrganizationSource` - `JsonElement Type = "organization"` Always `organization`: no workspace-level override is stored, so the organization's value applies. - `required long Value` The workspace's value for this limiter type: the workspace-level override when `source.type` is `workspace`, otherwise the organization's value. - `required IReadOnlyList? Models` Model names this entry's limits apply to, including aliases. `null` when `group.type` is not `"model_group"`. The list covers the models this workspace has access to, so it can differ between workspaces. - `required string RateLimitID` The `id` of the organization's RateLimit entry this entry applies to. - `required string WorkspaceID` ID of the Workspace this entry applies to. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.RateLimits; RateLimitUpdateParams parameters = new() { WorkspaceID = "workspace_id", RateLimitID = "rate_limit_id", Limits = [ new() { Type = BetaWorkspaceRateLimitType.FastItpmca, Value = 0, }, ], }; var betaWorkspaceRateLimit = await client.Beta.Organization.Workspaces.RateLimits.Update(parameters); Console.WriteLine(betaWorkspaceRateLimit); ``` ##### Response (200) ```json { "group": { "id": "id", "display_name": "display_name", "type": "model_group" }, "limits": [ { "org_limit": 0, "source": { "type": "workspace" }, "type": "type", "value": 0 } ], "models": [ "string" ], "rate_limit_id": "rate_limit_id", "type": "workspace_rate_limit", "workspace_id": "workspace_id" } ``` ## Organization › Workspaces › Members ### List Workspace Members `MemberListPage Beta.Organization.Workspaces.Members.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/workspaces/{workspace_id}/members` List Workspace Members #### Parameters - `MemberListParams parameters` - `required string workspaceID` (path parameter) ID of the Workspace. - `string afterID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately after this object. - `string beforeID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately before this object. - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 #### Returns - `class BetaWorkspaceMember` - `JsonElement Type = "workspace_member"` Object type. For Workspace Members, this is always `"workspace_member"`. - `required string UserID` ID of the User. - `required string WorkspaceID` ID of the Workspace. - `required BetaWorkspaceRole WorkspaceRole` Role of the Workspace Member. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.Members; MemberListParams parameters = new() { WorkspaceID = "workspace_id" }; var page = await client.Beta.Organization.Workspaces.Members.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "type": "workspace_member", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "workspace_role": "workspace_admin" } ], "first_id": "first_id", "has_more": true, "last_id": "last_id" } ``` ### Create Workspace Member `BetaWorkspaceMember Beta.Organization.Workspaces.Members.Add(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces/{workspace_id}/members` Create Workspace Member #### Parameters - `MemberAddParams parameters` - `required string workspaceID` (path parameter) ID of the Workspace. - `required string userID` ID of the User. - `required BetaNoBillingWorkspaceRole workspaceRole` Role of the new Workspace Member. Cannot be `workspace_billing`. #### Returns - `class BetaWorkspaceMember` - `JsonElement Type = "workspace_member"` Object type. For Workspace Members, this is always `"workspace_member"`. - `required string UserID` ID of the User. - `required string WorkspaceID` ID of the Workspace. - `required BetaWorkspaceRole WorkspaceRole` Role of the Workspace Member. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; using Anthropic.Models.Beta.Organization.Workspaces.Members; MemberAddParams parameters = new() { WorkspaceID = "workspace_id", UserID = "user_01WCz1FkmYMm4gnmykNKUu3Q", WorkspaceRole = BetaNoBillingWorkspaceRole.WorkspaceAdmin, }; var betaWorkspaceMember = await client.Beta.Organization.Workspaces.Members.Add(parameters); Console.WriteLine(betaWorkspaceMember); ``` ##### Response (200) ```json { "type": "workspace_member", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "workspace_role": "workspace_admin" } ``` ### Get Workspace Member `BetaWorkspaceMember Beta.Organization.Workspaces.Members.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/workspaces/{workspace_id}/members/{user_id}` Get Workspace Member #### Parameters - `MemberRetrieveParams parameters` - `required string workspaceID` (path parameter) ID of the Workspace. - `required string userID` (path parameter) ID of the User. #### Returns - `class BetaWorkspaceMember` - `JsonElement Type = "workspace_member"` Object type. For Workspace Members, this is always `"workspace_member"`. - `required string UserID` ID of the User. - `required string WorkspaceID` ID of the Workspace. - `required BetaWorkspaceRole WorkspaceRole` Role of the Workspace Member. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.Members; MemberRetrieveParams parameters = new() { WorkspaceID = "workspace_id", UserID = "user_id", }; var betaWorkspaceMember = await client.Beta.Organization.Workspaces.Members.Retrieve(parameters); Console.WriteLine(betaWorkspaceMember); ``` ##### Response (200) ```json { "type": "workspace_member", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "workspace_role": "workspace_admin" } ``` ### Update Workspace Member `BetaWorkspaceMember Beta.Organization.Workspaces.Members.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces/{workspace_id}/members/{user_id}` Update Workspace Member #### Parameters - `MemberUpdateParams parameters` - `required string workspaceID` (path parameter) ID of the Workspace. - `required string userID` (path parameter) ID of the User. - `required BetaWorkspaceRole workspaceRole` New workspace role for the User. #### Returns - `class BetaWorkspaceMember` - `JsonElement Type = "workspace_member"` Object type. For Workspace Members, this is always `"workspace_member"`. - `required string UserID` ID of the User. - `required string WorkspaceID` ID of the Workspace. - `required BetaWorkspaceRole WorkspaceRole` Role of the Workspace Member. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; using Anthropic.Models.Beta.Organization.Workspaces.Members; MemberUpdateParams parameters = new() { WorkspaceID = "workspace_id", UserID = "user_id", WorkspaceRole = BetaWorkspaceRole.WorkspaceAdmin, }; var betaWorkspaceMember = await client.Beta.Organization.Workspaces.Members.Update(parameters); Console.WriteLine(betaWorkspaceMember); ``` ##### Response (200) ```json { "type": "workspace_member", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ", "workspace_role": "workspace_admin" } ``` ### Delete Workspace Member `MemberRemoveResponse Beta.Organization.Workspaces.Members.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/workspaces/{workspace_id}/members/{user_id}` Delete Workspace Member #### Parameters - `MemberRemoveParams parameters` - `required string workspaceID` (path parameter) ID of the Workspace. - `required string userID` (path parameter) ID of the User. #### Returns - `class MemberRemoveResponse` - `JsonElement Type = "workspace_member_deleted"` Deleted object type. For Workspace Members, this is always `"workspace_member_deleted"`. - `required string UserID` ID of the User. - `required string WorkspaceID` ID of the Workspace. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.Members; MemberRemoveParams parameters = new() { WorkspaceID = "workspace_id", UserID = "user_id", }; var member = await client.Beta.Organization.Workspaces.Members.Remove(parameters); Console.WriteLine(member); ``` ##### Response (200) ```json { "type": "workspace_member_deleted", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q", "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ" } ``` ## Organization › Workspaces › Service Accounts ### List Service Account Workspace Members `ServiceAccountListPage Beta.Organization.Workspaces.ServiceAccounts.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/workspaces/{workspace_id}/service_accounts` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List the service accounts that are members of a workspace. Each entry includes the service account's `workspace_role`. Use `limit` and the `next_page` cursor to paginate. Archived workspaces return 400; use `GET /service_accounts/{id}/workspaces` to audit memberships of an archived workspace. The implicit default-workspace membership is not included in this list. Memberships of archived service accounts are omitted from the results. #### Parameters - `ServiceAccountListParams parameters` - `required string workspaceID` (path parameter) ID of the workspace. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccountWorkspaceMember` - `JsonElement Type = "service_account_workspace_member"` - `required string? CreatedByActorID` Tagged ID (`user_...`/`svac_...`) of the actor who created this membership. - `required bool? Implicit` True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed. - `required string ServiceAccountID` Tagged service account ID (`svac_...`). - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`). - `required BetaWorkspaceRole WorkspaceRole` Role of the service account in this workspace. Service accounts cannot hold the `workspace_billing` role. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.ServiceAccounts; ServiceAccountListParams parameters = new() { WorkspaceID = "workspace_id" }; var page = await client.Beta.Organization.Workspaces.ServiceAccounts.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "created_by_actor_id": "created_by_actor_id", "implicit": true, "service_account_id": "service_account_id", "type": "service_account_workspace_member", "workspace_id": "workspace_id", "workspace_role": "workspace_admin" } ], "next_page": "next_page" } ``` ### Create Service Account Workspace Member `BetaServiceAccountWorkspaceMember Beta.Organization.Workspaces.ServiceAccounts.Add(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces/{workspace_id}/service_accounts` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Add a service account to a workspace with the given `workspace_role`. The role determines what the service account can do in the workspace and which workspace-scoped permissions it can be granted when authenticating through federation. Every service account is already an implicit `workspace_user` member of the default workspace; adding it explicitly assigns a chosen role. If the service account is already an explicit member of the workspace, its `workspace_role` is replaced with the value supplied here. Archived workspaces return 400. Archived service accounts cannot be added and are rejected. #### Parameters - `ServiceAccountAddParams parameters` - `required string workspaceID` (path parameter) ID of the workspace. - `required string serviceAccountID` Tagged service account ID to add. - `required BetaNoBillingWorkspaceRole workspaceRole` Role to assign to the service account in this workspace. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccountWorkspaceMember` - `JsonElement Type = "service_account_workspace_member"` - `required string? CreatedByActorID` Tagged ID (`user_...`/`svac_...`) of the actor who created this membership. - `required bool? Implicit` True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed. - `required string ServiceAccountID` Tagged service account ID (`svac_...`). - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`). - `required BetaWorkspaceRole WorkspaceRole` Role of the service account in this workspace. Service accounts cannot hold the `workspace_billing` role. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; using Anthropic.Models.Beta.Organization.Workspaces.ServiceAccounts; ServiceAccountAddParams parameters = new() { WorkspaceID = "workspace_id", ServiceAccountID = "service_account_id", WorkspaceRole = BetaNoBillingWorkspaceRole.WorkspaceAdmin, }; var betaServiceAccountWorkspaceMember = await client.Beta.Organization.Workspaces.ServiceAccounts.Add(parameters); Console.WriteLine(betaServiceAccountWorkspaceMember); ``` ##### Response (200) ```json { "created_by_actor_id": "created_by_actor_id", "implicit": true, "service_account_id": "service_account_id", "type": "service_account_workspace_member", "workspace_id": "workspace_id", "workspace_role": "workspace_admin" } ``` ### Get Service Account Workspace Member `BetaServiceAccountWorkspaceMember Beta.Organization.Workspaces.ServiceAccounts.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/workspaces/{workspace_id}/service_accounts/{service_account_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Retrieve a service account's membership in a workspace. Returns the membership record, including the service account's `workspace_role` in this workspace. Archived workspaces return 400. For the default workspace, returns the implicit (`implicit: true`) membership when no explicit membership exists; an explicitly added membership is returned with its assigned role. An archived service account returns 404. #### Parameters - `ServiceAccountRetrieveParams parameters` - `required string workspaceID` (path parameter) ID of the workspace. - `required string serviceAccountID` (path parameter) ID of the service account. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccountWorkspaceMember` - `JsonElement Type = "service_account_workspace_member"` - `required string? CreatedByActorID` Tagged ID (`user_...`/`svac_...`) of the actor who created this membership. - `required bool? Implicit` True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed. - `required string ServiceAccountID` Tagged service account ID (`svac_...`). - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`). - `required BetaWorkspaceRole WorkspaceRole` Role of the service account in this workspace. Service accounts cannot hold the `workspace_billing` role. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.ServiceAccounts; ServiceAccountRetrieveParams parameters = new() { WorkspaceID = "workspace_id", ServiceAccountID = "service_account_id", }; var betaServiceAccountWorkspaceMember = await client.Beta.Organization.Workspaces.ServiceAccounts.Retrieve(parameters); Console.WriteLine(betaServiceAccountWorkspaceMember); ``` ##### Response (200) ```json { "created_by_actor_id": "created_by_actor_id", "implicit": true, "service_account_id": "service_account_id", "type": "service_account_workspace_member", "workspace_id": "workspace_id", "workspace_role": "workspace_admin" } ``` ### Update Service Account Workspace Member `BetaServiceAccountWorkspaceMember Beta.Organization.Workspaces.ServiceAccounts.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/workspaces/{workspace_id}/service_accounts/{service_account_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Change a service account's role in a workspace. The new `workspace_role` replaces the current one. Only explicit memberships can be updated; to set a role on the implicit default-workspace membership, add the service account explicitly with `POST /workspaces/{workspace_id}/service_accounts`. Archived workspaces return 400. Archived service accounts cannot be updated and are rejected. #### Parameters - `ServiceAccountUpdateParams parameters` - `required string workspaceID` (path parameter) ID of the workspace. - `required string serviceAccountID` (path parameter) ID of the service account. - `required BetaNoBillingWorkspaceRole workspaceRole` New role for the service account in this workspace. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaServiceAccountWorkspaceMember` - `JsonElement Type = "service_account_workspace_member"` - `required string? CreatedByActorID` Tagged ID (`user_...`/`svac_...`) of the actor who created this membership. - `required bool? Implicit` True when this is the implicit default-workspace membership every service account has when no explicit membership exists. Implicit memberships have role `workspace_user` and cannot be removed. - `required string ServiceAccountID` Tagged service account ID (`svac_...`). - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`). - `required BetaWorkspaceRole WorkspaceRole` Role of the service account in this workspace. Service accounts cannot hold the `workspace_billing` role. - `WorkspaceAdmin("workspace_admin")` - `WorkspaceBilling("workspace_billing")` - `WorkspaceDeveloper("workspace_developer")` - `WorkspaceRestrictedDeveloper("workspace_restricted_developer")` - `WorkspaceUser("workspace_user")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces; using Anthropic.Models.Beta.Organization.Workspaces.ServiceAccounts; ServiceAccountUpdateParams parameters = new() { WorkspaceID = "workspace_id", ServiceAccountID = "service_account_id", WorkspaceRole = BetaNoBillingWorkspaceRole.WorkspaceAdmin, }; var betaServiceAccountWorkspaceMember = await client.Beta.Organization.Workspaces.ServiceAccounts.Update(parameters); Console.WriteLine(betaServiceAccountWorkspaceMember); ``` ##### Response (200) ```json { "created_by_actor_id": "created_by_actor_id", "implicit": true, "service_account_id": "service_account_id", "type": "service_account_workspace_member", "workspace_id": "workspace_id", "workspace_role": "workspace_admin" } ``` ### Delete Service Account Workspace Member `ServiceAccountRemoveResponse Beta.Organization.Workspaces.ServiceAccounts.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/workspaces/{workspace_id}/service_accounts/{service_account_id}` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). Remove a service account from a workspace. Removal is idempotent (returns 200 even if the membership was already removed). A DELETE against the implicit default-workspace membership returns 200 but is a no-op and the membership persists; deleting an explicit default-workspace row reverts to the implicit `workspace_user` membership. Archived workspaces return 400. #### Parameters - `ServiceAccountRemoveParams parameters` - `required string workspaceID` (path parameter) ID of the workspace. - `required string serviceAccountID` (path parameter) ID of the service account. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class ServiceAccountRemoveResponse` - `JsonElement Type = "service_account_workspace_member_deleted"` - `required string ServiceAccountID` Tagged service account ID (`svac_...`) named in the delete request. Removal is idempotent; see the endpoint description for the implicit-membership no-op. - `required string WorkspaceID` Tagged workspace ID (`wrkspc_...`) named in the delete request. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Workspaces.ServiceAccounts; ServiceAccountRemoveParams parameters = new() { WorkspaceID = "workspace_id", ServiceAccountID = "service_account_id", }; var serviceAccount = await client.Beta.Organization.Workspaces.ServiceAccounts.Remove(parameters); Console.WriteLine(serviceAccount); ``` ##### Response (200) ```json { "service_account_id": "service_account_id", "type": "service_account_workspace_member_deleted", "workspace_id": "workspace_id" } ``` ## Organization › Rate Limits ### List Organization Rate Limits `RateLimitListPage Beta.Organization.RateLimits.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/rate_limits` List Messages API rate limits for your organization. Each entry corresponds to one rate-limit group (either a model family or an API-surface category such as the Message Batches API or the web search tool) and contains the set of limiter values that apply to it. When `limit` is omitted, every matching entry is returned in a single page; when `limit` truncates the result, follow `next_page` to fetch the remaining entries. #### Parameters - `RateLimitListParams parameters` - `GroupType? groupType` (query parameter) Filter by group type. - `Batch("batch")` - `Files("files")` - `ModelGroup("model_group")` - `Skills("skills")` - `TokenCount("token_count")` - `WebSearch("web_search")` - `long? limit` (query parameter) Maximum number of items to return per page. Ranges from `1` to `1000`. When omitted, every remaining entry is returned in a single page and `next_page` is `null`. minimum: 1, maximum: 1000 - `string? model` (query parameter) Filter to the single entry containing this model. Accepts full model names and aliases. Returns 404 if the model is not found or has no rate limits for this organization. - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. #### Returns - `class BetaOrganizationRateLimit` - `JsonElement Type = "rate_limit"` Object type. Always `rate_limit` for organization rate-limit entries. - `required string ID` Identifier of this rate-limit entry. It is stable within the organization and differs between organizations; the group's own identifier is `group.id`. Pass it as `rate_limit_id` to set a workspace's overrides for this group. - `required Group Group` The rate-limit group this entry's limits apply to. - `class BetaOrganizationRateLimitModelGroup` - `JsonElement Type = "model_group"` Always `model_group`: a family of models. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `required string DisplayName` Human-readable name of the model group (for example, `Claude Sonnet 4.x`). For display only; it may change. - `class BetaOrganizationRateLimitBatchGroup` - `JsonElement Type = "batch"` Always `batch`: the Message Batches API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitTokenCountGroup` - `JsonElement Type = "token_count"` Always `token_count`: the Token Count API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitFilesGroup` - `JsonElement Type = "files"` Always `files`: the Files API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitSkillsGroup` - `JsonElement Type = "skills"` Always `skills`: the Skills API. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `class BetaOrganizationRateLimitWebSearchGroup` - `JsonElement Type = "web_search"` Always `web_search`: the Messages API web search tool. - `required string ID` Opaque identifier of the rate-limit group (for example, `rlg_01VPTCmyiu5ZLsWkcxYG2pY8`). It is the same in every organization and never changes, unlike the entry's own identifier, which differs per organization. - `required IReadOnlyList Limits` The limiter values that apply to this group. - `required string Type` The limiter type (for example, `requests_per_minute` or `input_tokens_per_minute`). - `required long Value` The configured limit value for this limiter type. - `required IReadOnlyList? Models` Model names this entry's limits apply to, including aliases. `null` when `group.type` is not `"model_group"`. The list covers the models your organization has access to, so it can differ between organizations. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RateLimits; RateLimitListParams parameters = new(); var page = await client.Beta.Organization.RateLimits.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "id", "group": { "id": "id", "display_name": "display_name", "type": "model_group" }, "limits": [ { "type": "type", "value": 0 } ], "models": [ "string" ], "type": "rate_limit" } ], "next_page": "next_page" } ``` ## Organization › Compliance Settings ### Get Compliance Settings `BetaComplianceSettings Beta.Organization.ComplianceSettings.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/compliance_settings` Retrieve your organization's Compliance Settings. Compliance Settings is a singleton resource: there is exactly one per organization, addressed without an identifier. The `state` field reflects whether the Compliance API is enabled. An organization with a parent organization reads the state inherited from the parent's configuration. #### Parameters - `ComplianceSettingRetrieveParams parameters` #### Returns - `class BetaComplianceSettings` - `JsonElement Type = "compliance_settings"` - `required BetaComplianceSettingsState State` Whether the Compliance API is enabled for this organization. - `class BetaComplianceSettingsStateEnabled` - `JsonElement Type = "enabled"` - `class BetaComplianceSettingsStateDisabled` - `JsonElement Type = "disabled"` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ComplianceSettings; ComplianceSettingRetrieveParams parameters = new(); var betaComplianceSettings = await client.Beta.Organization.ComplianceSettings.Retrieve(parameters); Console.WriteLine(betaComplianceSettings); ``` ##### Response (200) ```json { "state": { "type": "enabled" }, "type": "compliance_settings" } ``` ### Update Compliance Settings `BetaComplianceSettings Beta.Organization.ComplianceSettings.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/compliance_settings` Update your organization's Compliance Settings. Setting `state` to `enabled` turns on the Compliance API and begins capturing organization activity events. Setting it to `disabled` turns both off. `state` reflects whether the Compliance API is enabled. A request that sets `state` to its current value succeeds and leaves the resource unchanged. A `disabled` request stays in effect until a later `enabled` request or the organization's next provisioning action that enables Access Transparency: enabling Access Transparency also enables the Compliance API, which serves its activity events, so such provisioning (including re-runs) re-enables the Compliance API even after a `disabled` request. Automated provisioning never disables compliance settings. #### Parameters - `ComplianceSettingUpdateParams parameters` - `required BetaComplianceSettingsStateParam state` Desired state. Accepts the string shorthand "enabled" or "disabled" in place of the object form; the response always returns the canonical object form. #### Returns - `class BetaComplianceSettings` - `JsonElement Type = "compliance_settings"` - `required BetaComplianceSettingsState State` Whether the Compliance API is enabled for this organization. - `class BetaComplianceSettingsStateEnabled` - `JsonElement Type = "enabled"` - `class BetaComplianceSettingsStateDisabled` - `JsonElement Type = "disabled"` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.ComplianceSettings; ComplianceSettingUpdateParams parameters = new() { State = new BetaComplianceSettingsStateEnabledParam() }; var betaComplianceSettings = await client.Beta.Organization.ComplianceSettings.Update(parameters); Console.WriteLine(betaComplianceSettings); ``` ##### Response (200) ```json { "state": { "type": "enabled" }, "type": "compliance_settings" } ``` ## Organization › Analytics › Summaries ### Get Activity Summaries `SummaryListPage Beta.Organization.Analytics.Summaries.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/summaries` Get organization-wide activity summaries for a date range. Returns one entry per day from `starting_date` (inclusive) to `ending_date` (exclusive) in `data`, the same `data` / `next_page` envelope as the other analytics list endpoints; the series is currently returned in full, so `next_page` is always null. Data is typically available with a 1-day lag and may be revised by a few percent over the following days: when `ending_date` is omitted it defaults to the most recent available day + 1, so the last entry covers the most recent available day. The series can be scoped to an RBAC group via `filter[]=rbac_group_id:{id}`. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `SummaryListParams parameters` - `required DateOnly startingDate` (query parameter) UTC date in YYYY-MM-DD format. Start of the date range (inclusive). Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date - `DateOnly? endingDate` (query parameter) UTC date in YYYY-MM-DD format. End of the date range (exclusive). Data is typically available with a 1-day lag, so this can be at most today — which is also the default when omitted, making the last entry cover the most recent available day. Data may be revised by a few percent over the following days. The range may span at most 366 days. format: date - `IReadOnlyList? filter` (query parameter) Filters as `dimension:value`. Only `rbac_group_id` is supported (e.g. `filter[]=rbac_group_id:{id}`); repeat the param to OR across groups. Scopes the whole day series to members of the matching group(s), re-aggregated from member-level activity — org-wide seat/invite fields and the adoption rates derived from them are null on scoped rows. `rbac_group_id` accepts the tagged id (`rbac_group_...`, as emitted in responses and by the spend-limits API) or a bare group UUID, and matches users who held the group at any point during each UTC day (time-of-usage attribution). At most 100 entries. maxItems: 100 - `long? limit` (query parameter) Number of results per page (1-1000, default 100). The day series (at most 366 entries) is currently returned in full in a single page, so `limit` does not yet shorten it. minimum: 1, maximum: 1000 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. `next_page` is currently always null, so there is never a cursor to send. #### Returns - `class BetaAnalyticsSingleDayActivitySummary` Per-day entry in the /summaries response. - `required long? AssignedSeatCount` Number of seats currently assigned to members. Null when the response is scoped to an RBAC group — seat assignment is org-wide and has no per-group analogue. - `required long CoworkDailyActiveUserCount` Number of users with Cowork activity on the requested day - `required long CoworkMonthlyActiveUserCount` Number of users with Cowork activity in the 30-day rolling window - `required long CoworkWeeklyActiveUserCount` Number of users with Cowork activity in the 7-day rolling window - `required long DailyActiveUserCount` Number of users with token consumption on the requested day - `required double? DailyAdoptionRate` Percentage of assigned seats with activity on the requested day (`DAU / assigned_seat_count * 100`). Null when the response is scoped to an RBAC group. - `required DateTimeOffset EndingAt` End of the aggregation period (exclusive), UTC midnight in RFC 3339 format (e.g. `2026-01-16T00:00:00Z`). format: date-time - `required long MonthlyActiveUserCount` Number of users with token consumption in the 30-day rolling window - `required double? MonthlyAdoptionRate` Percentage of assigned seats with activity in the 30-day rolling window (`MAU / assigned_seat_count * 100`). Null when the response is scoped to an RBAC group. - `required long? PendingInviteCount` Number of pending invitations to join the organization. Null when the response is scoped to an RBAC group. - `required DateTimeOffset StartingAt` Start of the aggregation period (inclusive), UTC midnight in RFC 3339 format (e.g. `2026-01-15T00:00:00Z`). format: date-time - `required long WeeklyActiveUserCount` Number of users with token consumption in the 7-day rolling window - `required double? WeeklyAdoptionRate` Percentage of assigned seats with activity in the 7-day rolling window (`WAU / assigned_seat_count * 100`). Null when the response is scoped to an RBAC group. - `long? ChatCoworkUnifiedDailyActiveUserCount` Number of users with activity in Chat and Cowork unified on the requested day. Omitted from the response on deployments that do not offer Chat and Cowork unified. - `long? ChatCoworkUnifiedMonthlyActiveUserCount` Number of users with activity in Chat and Cowork unified in the 28-day rolling window (30 days when the request filters by `rbac_group_id`). Omitted from the response on deployments that do not offer Chat and Cowork unified. - `long? ChatCoworkUnifiedWeeklyActiveUserCount` Number of users with activity in Chat and Cowork unified in the 7-day rolling window. Omitted from the response on deployments that do not offer Chat and Cowork unified. - `long? ChatDailyActiveUserCount` Number of users with claude.ai (chat) activity on the requested day. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ChatMonthlyActiveUserCount` Number of users with claude.ai (chat) activity in the 30-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ChatWeeklyActiveUserCount` Number of users with claude.ai (chat) activity in the 7-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ClaudeCodeDailyActiveUserCount` Number of users with Claude Code activity on the requested day. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ClaudeCodeMonthlyActiveUserCount` Number of users with Claude Code activity in the 30-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ClaudeCodeWeeklyActiveUserCount` Number of users with Claude Code activity in the 7-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ClaudeDesignDailyActiveUserCount` Number of users with Claude Design activity on the requested day. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ClaudeDesignMonthlyActiveUserCount` Number of users with Claude Design activity in the 30-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ClaudeDesignWeeklyActiveUserCount` Number of users with Claude Design activity in the 7-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? OfficeAgentDailyActiveUserCount` Number of users with Claude in Office activity on the requested day. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? OfficeAgentMonthlyActiveUserCount` Number of users with Claude in Office activity in the 30-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? OfficeAgentWeeklyActiveUserCount` Number of users with Claude in Office activity in the 7-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ScienceDailyActiveUserCount` Number of users with Claude Science activity on the requested day. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ScienceEntitledUserCount` Number of users with a Claude Science seat entitlement (per-seat RBAC) at the time of the daily snapshot. The funnel top; independent of the org-level Claude Science toggle. Null when the response is scoped to an RBAC group — entitlement is org-wide and has no per-group analogue. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ScienceMonthlyActiveUserCount` Number of users with Claude Science activity in the 30-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. - `long? ScienceWeeklyActiveUserCount` Number of users with Claude Science activity in the 7-day rolling window. Omitted from the response while the per-product breakdown is not enabled for this organization. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.Summaries; SummaryListParams parameters = new() { StartingDate = "2019-12-27" }; var page = await client.Beta.Organization.Analytics.Summaries.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "assigned_seat_count": 0, "cowork_daily_active_user_count": 0, "cowork_monthly_active_user_count": 0, "cowork_weekly_active_user_count": 0, "daily_active_user_count": 0, "daily_adoption_rate": 0, "ending_at": "2019-12-27T18:11:19.117Z", "monthly_active_user_count": 0, "monthly_adoption_rate": 0, "pending_invite_count": 0, "starting_at": "2019-12-27T18:11:19.117Z", "weekly_active_user_count": 0, "weekly_adoption_rate": 0, "chat_cowork_unified_daily_active_user_count": 0, "chat_cowork_unified_monthly_active_user_count": 0, "chat_cowork_unified_weekly_active_user_count": 0, "chat_daily_active_user_count": 0, "chat_monthly_active_user_count": 0, "chat_weekly_active_user_count": 0, "claude_code_daily_active_user_count": 0, "claude_code_monthly_active_user_count": 0, "claude_code_weekly_active_user_count": 0, "claude_design_daily_active_user_count": 0, "claude_design_monthly_active_user_count": 0, "claude_design_weekly_active_user_count": 0, "office_agent_daily_active_user_count": 0, "office_agent_monthly_active_user_count": 0, "office_agent_weekly_active_user_count": 0, "science_daily_active_user_count": 0, "science_entitled_user_count": 0, "science_monthly_active_user_count": 0, "science_weekly_active_user_count": 0 } ], "next_page": "next_page" } ``` ## Organization › Analytics › Users ### List User Activity `UserListPage Beta.Organization.Analytics.Users.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/users` Get per-user activity for a given day, with cursor-based pagination. Returns activity metrics for each user in the organization, sorted by email address. Use `group_by[]` for per-RBAC-group aggregates, or `filter[]` to scope results to specific members, groups, or a chat project. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `UserListParams parameters` - `DateOnly? date` (query parameter) UTC date in YYYY-MM-DD format. The day to get user activity for. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date - `DateOnly? endingDate` (query parameter) UTC date in YYYY-MM-DD format. End of the date range (exclusive); only valid with `starting_date`. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day), so this can be at most today — which is also the default when omitted, resolved once when the first page is served and reused for the rest of the pagination sequence. At most 366 days after `starting_date`. format: date - `IReadOnlyList? filter` (query parameter) Filters as `dimension:value`, e.g. `filter[]=rbac_group_id:{id}`. Repeat the param for OR within a dimension and across dimensions for AND. Supported dimensions on this endpoint: `project_id`, `rbac_group_id`, `user_id`. Value forms: `project_id` takes a tagged project id (`claude_proj_...`); `rbac_group_id` takes the tagged id (`rbac_group_...`, as emitted in responses and by the spend-limits API) or a bare group UUID, and matches users who held the group at any point during each covered UTC day (time-of-usage attribution); `user_id` takes a tagged user id (`user_...`), as emitted in responses. An unsupported dimension returns 400. At most 100 entries. A `project_id` filter limits each member's row to their claude.ai chat activity in that project and cannot be combined with `group_by[]` or an `rbac_group_id` filter. On these rows, every count in `chat_cowork_unified_metrics.sessions` is 0, because sessions are not measured per project. On any day a member sent a chat message in Chat and Cowork unified, all of that member's project activity for the day is counted in `chat_cowork_unified_metrics.chat` instead of `chat_metrics`. maxItems: 100 - `IReadOnlyList? groupBy` (query parameter) Dimensions to break results out by (e.g. `group_by[]=rbac_group_id`). Supported on this endpoint: `rbac_group_id`. Rows are already per-member, so the one supported grouping aggregates them per RBAC group instead. Grouped rows carry the requested dimension values as additional fields and paginate like ungrouped responses via `next_page`; an unsupported dimension returns 400. `rbac_group_id` attributes a user to every group they held at any point during each covered UTC day, so grouped rows are not an exclusive partition and can sum above org-level totals. At most 100 entries. maxItems: 100 - `RbacGroupID("rbac_group_id")` - `long? limit` (query parameter) Number of results per page (1-1000, default 100). minimum: 1, maximum: 1000 - `Order? order` (query parameter) Sort direction: `asc` or `desc`. Defaults to `asc` for the endpoint's sort column and to `desc` when `order_by` names a metric (a top-N ranking). Applies to `order_by`, or to the endpoint's default sort field when `order_by` is omitted. - `Asc("asc")` - `Desc("desc")` - `string? orderBy` (query parameter) Sort field. Restricted to the endpoint's sort column plus its rankable metrics (metrics default to descending; a few metrics rank in date-range mode only, per the endpoint's documented orderable set). - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `DateOnly? startingDate` (query parameter) UTC date in YYYY-MM-DD format. Start of a date range (inclusive). Enables rollup mode: one row per entity aggregated over the whole range — addable counters are summed across days, and a distinct count is never summed where summing could double-count (a field's range value is recomputed exactly over the window, approximate via HLL with typical error under 2%, null, or — for the creation-event counts, whose per-day values cannot overlap — a per-day sum that is itself exact; each field's own description says which). Use either `date` or `starting_date`, not both. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date #### Returns - `class BetaAnalyticsUserActivity` Per-user activity data for a given day. - `required BetaAnalyticsChatMetrics ChatMetrics` Claude.ai activity metrics for a single user on a given day. - `required long ConnectorsUsedCount` Number of MCP connector invocations. - `required long DistinctArtifactsCreatedCount` Number of distinct artifacts created. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long? DistinctConnectorsUsedCount` Distinct claude.ai connectors this user used. Excludes calls whose connector could not be identified and all calls from organizations with zero data retention. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctConversationCount` Number of distinct conversations the user participated in. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctFilesUploadedCount` Number of distinct files uploaded. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long DistinctProjectsCreatedCount` Number of distinct projects created. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long? DistinctProjectsUsedCount` Number of distinct projects used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSharedArtifactsViewedCount` Number of distinct shared artifacts the user viewed. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSkillsUsedCount` Number of distinct skills used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long MessageCount` Number of messages sent - `required long SharedConversationsViewedCount` Number of times the user opened a shared conversation in a project - `required long ThinkingMessageCount` Number of messages that used extended thinking - `required BetaAnalyticsClaudeCodeMetrics ClaudeCodeMetrics` Claude Code activity metrics for a single user on a given day. - `required BetaAnalyticsCoreCodeMetrics CoreMetrics` Core Claude Code activity metrics for a single user on a given day. - `required long ArtifactsCreatedCount` Number of artifacts created in Claude Code sessions: an artifact counts once, on the day a session first saves it. Counted from 2026-08-17; 0 on earlier days. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long CommitCount` Number of commits made via Claude Code - `required long? DistinctSessionCount` Number of distinct Claude Code sessions. On aggregated rows and in date-range mode: summed per-day distinct counts. A session essentially never spans a UTC day, so the sum is in practice the true distinct count. - `required BetaAnalyticsLinesOfCode LinesOfCode` Lines of code added and removed via Claude Code. - `required long AddedCount` Lines of code added - `required long RemovedCount` Lines of code removed - `required long PullRequestCount` Number of pull requests created via Claude Code - `required BetaAnalyticsToolActions ToolActions` Per-tool accepted/rejected counts for Claude Code file modification tools. - `required BetaAnalyticsToolActionCounts EditTool` Accepted/rejected counts for a single Claude Code tool type. - `required long AcceptedCount` Number of tool proposals accepted - `required long RejectedCount` Number of tool proposals rejected - `required BetaAnalyticsToolActionCounts MultiEditTool` Accepted/rejected counts for a single Claude Code tool type. - `required BetaAnalyticsToolActionCounts NotebookEditTool` Accepted/rejected counts for a single Claude Code tool type. - `required BetaAnalyticsToolActionCounts WriteTool` Accepted/rejected counts for a single Claude Code tool type. - `required BetaAnalyticsCoworkMetrics CoworkMetrics` Cowork activity metrics for a single user on a given day. - `required long ActionCount` Number of tool actions completed in Cowork sessions - `required long ArtifactsCreatedCount` Number of artifacts created in Cowork sessions: an artifact counts once, on the day a session first saves it. Counted from 2026-08-17; 0 on earlier days. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long ConnectorsUsedCount` Total number of connector invocations in Cowork sessions - `required long DispatchTurnCount` Number of Dispatch (background agent) turns completed - `required long? DistinctConnectorsUsedCount` Number of distinct connectors used in Cowork sessions. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSessionCount` Number of distinct Cowork sessions. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSkillsUsedCount` Number of distinct skills used in Cowork sessions. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long MessageCount` Number of messages sent in Cowork sessions - `required long SkillsUsedCount` Total number of skill invocations in Cowork sessions - `long? DistinctPluginsUsedCount` Number of distinct plugins used in Cowork sessions. Null while Cowork plugin-use metrics are not enabled for this organization. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `long? EditToolCount` Number of successful Edit tool calls in Cowork sessions. Null while the file-edit metrics are not enabled for this organization. - `long? FileEditCount` Number of successful file-edit tool calls (Edit, MultiEdit, Write, NotebookEdit) in Cowork sessions. Null, never 0, while the file-edit metrics are not enabled for this organization. - `long? MultiEditToolCount` Number of successful MultiEdit tool calls in Cowork sessions. Null while the file-edit metrics are not enabled for this organization. - `long? NotebookEditToolCount` Number of successful NotebookEdit tool calls in Cowork sessions. Null while the file-edit metrics are not enabled for this organization. - `long? PluginsUsedCount` Total number of plugin invocations in Cowork sessions. Null while Cowork plugin-use metrics are not enabled for this organization. - `long? SessionsWithFileEditsCount` Number of distinct Cowork sessions with at least one successful file-edit tool call. Null while the file-edit metrics are not enabled for this organization. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `long? WriteToolCount` Number of successful Write tool calls in Cowork sessions. Null while the file-edit metrics are not enabled for this organization. - `required BetaAnalyticsDesignMetrics DesignMetrics` Claude Design activity metrics for a single user on a given day. - `required long DistinctProjectsCreatedCount` Number of distinct Claude Design projects created. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long? DistinctProjectsUsedCount` Number of distinct Claude Design projects the user worked in. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSessionCount` Number of distinct Claude Design sessions. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long MessageCount` Number of messages sent in Claude Design sessions - `required BetaAnalyticsOfficeMetrics OfficeMetrics` Office Agent activity metrics for a single user on a given day, broken out by Office product. - `required BetaAnalyticsOfficeProductMetrics Excel` Office Agent activity metrics for a single user on a given day within one Office product. - `required long ConnectorsUsedCount` Number of MCP connector invocations - `required long? DistinctConnectorsUsedCount` Number of distinct MCP connectors used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSessionCount` Number of distinct Office Agent sessions. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSkillsUsedCount` Number of distinct skills used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long MessageCount` Number of messages sent - `required long SkillsUsedCount` Number of skill invocations - `required BetaAnalyticsOfficeProductMetrics Outlook` Office Agent activity metrics for a single user on a given day within one Office product. - `required BetaAnalyticsOfficeProductMetrics Powerpoint` Office Agent activity metrics for a single user on a given day within one Office product. - `required BetaAnalyticsOfficeProductMetrics Word` Office Agent activity metrics for a single user on a given day within one Office product. - `required BetaAnalyticsScienceMetrics ScienceMetrics` Claude Science activity metrics for a single user on a given day. - `required long DelegationCount` Number of delegations (handoffs to a specialized agent) in Claude Science sessions - `required long? DistinctSessionCount` Number of distinct Claude Science sessions. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long MessageCount` Number of messages sent in Claude Science sessions - `required long RemoteComputeJobCount` Number of remote compute jobs launched from Claude Science sessions - `required long SkillsUsedCount` Total number of skill invocations in Claude Science sessions - `required long WebSearchCount` Number of web searches performed - `ChatCoworkUnifiedMetrics? ChatCoworkUnifiedMetrics` Activity recorded while the member had Chat and Cowork unified (Cowork's features inside claude.ai chat) turned on, split into `chat` (chat activity) and `sessions` (Cowork activity). Omitted from the response on deployments that do not offer Chat and Cowork unified. - `required BetaAnalyticsChatCoworkUnifiedChatMetrics Chat` Chat activity recorded while members had Chat and Cowork unified turned on. - `required long ConnectorsUsedCount` Same measure as `chat_metrics.connectors_used_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long DistinctArtifactsCreatedCount` Same measure as `chat_metrics.distinct_artifacts_created_count`, for activity recorded while members had Chat and Cowork unified turned on. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long? DistinctConnectorsUsedCount` Same measure as `chat_metrics.distinct_connectors_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctConversationCount` Same measure as `chat_metrics.distinct_conversation_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctFilesUploadedCount` Same measure as `chat_metrics.distinct_files_uploaded_count`, for activity recorded while members had Chat and Cowork unified turned on. It counts uploaded files as well as files Claude created and images returned by Claude's tools, such as screenshots. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long DistinctProjectsCreatedCount` Same measure as `chat_metrics.distinct_projects_created_count`, for activity recorded while members had Chat and Cowork unified turned on. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long? DistinctProjectsUsedCount` Same measure as `chat_metrics.distinct_projects_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSharedArtifactsViewedCount` Always null: shared-artifact views are not currently measured. - `required long? DistinctSkillsUsedCount` Same measure as `chat_metrics.distinct_skills_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long MessageCount` Same measure as `chat_metrics.message_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long SharedConversationsViewedCount` Same measure as `chat_metrics.shared_conversations_viewed_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long ThinkingMessageCount` Same measure as `chat_metrics.thinking_message_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required BetaAnalyticsChatCoworkUnifiedSessionsMetrics Sessions` Cowork session activity recorded while members had Chat and Cowork unified turned on. - `required long ActionCount` Same measure as `cowork_metrics.action_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long ArtifactsCreatedCount` Same measure as `cowork_metrics.artifacts_created_count`, for activity recorded while members had Chat and Cowork unified turned on. Exact in date-range mode: a creation belongs to exactly one day, so the per-day counts never overlap and their sum over the window is the exact count of distinct creations in it. - `required long ConnectorsUsedCount` Same measure as `cowork_metrics.connectors_used_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long DispatchTurnCount` Same measure as `cowork_metrics.dispatch_turn_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long? DistinctConnectorsUsedCount` Same measure as `cowork_metrics.distinct_connectors_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctPluginsUsedCount` Same measure as `cowork_metrics.distinct_plugins_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSessionCount` Same measure as `cowork_metrics.distinct_session_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? DistinctSkillsUsedCount` Same measure as `cowork_metrics.distinct_skills_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long? EditToolCount` Same measure as `cowork_metrics.edit_tool_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long? FileEditCount` Same measure as `cowork_metrics.file_edit_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long MessageCount` Same measure as `cowork_metrics.message_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long? MultiEditToolCount` Same measure as `cowork_metrics.multi_edit_tool_count`, for activity recorded while members had Chat and Cowork unified turned on. Claude no longer has a multi-edit tool, so expect 0 when not null; each edit is now a separate Edit tool call, counted in `edit_tool_count` and `file_edit_count`. - `required long? NotebookEditToolCount` Same measure as `cowork_metrics.notebook_edit_tool_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long? PluginsUsedCount` Same measure as `cowork_metrics.plugins_used_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long? SessionsWithFileEditsCount` Same measure as `cowork_metrics.sessions_with_file_edits_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long SkillsUsedCount` Same measure as `cowork_metrics.skills_used_count`, for activity recorded while members had Chat and Cowork unified turned on. - `required long? WriteToolCount` Same measure as `cowork_metrics.write_tool_count`, for activity recorded while members had Chat and Cowork unified turned on. - `long? DistinctUserCount` Number of distinct active users represented by this row. Only set for grouped rollups (`group_by[]`); null for per-user rows. In date-range mode, recomputed as an exact distinct count of the group's active members over the requested window, never a sum of per-day values. - `DateOnly? LastActivityDate` Most recent UTC day (YYYY-MM-DD) on which the user had any counted activity, within the requested window: equal to the requested `date` in single-day mode, and to the latest active day from `starting_date` (inclusive) to `ending_date` (exclusive) in date-range rollup mode — never a day earlier than the window start. On filtered requests (`filter[]`) only days matching the filter count: with `filter[]=rbac_group_id:{id}` it is the last day the user was active while a member of that group, consistent with the row's other metrics. On grouped (`group_by[]`) rows it is the latest day any member of the group was active (the requested `date` in single-day mode). Omitted from the response while last-activity reporting is not enabled for this organization. format: date - `string? RbacGroupID` Tagged RBAC group identifier (`rbac_group_...`), matching the spend-limits API spelling. Present only when the request grouped by `rbac_group_id`. - `string? RbacGroupName` Resolved RBAC group display name, alongside `rbac_group_id` when name resolution is available. Null if the group has been deleted or its name could not be resolved; `rbac_group_id` remains the stable key. - `BetaAnalyticsUser? User` The user this row describes. Null on rows aggregated across users. - `JsonElement Type = "user"` Object type. Always `user`. - `required string ID` Tagged user identifier (e.g. `user_...`) - `required string EmailAddress` Email address of the user #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.Users; UserListParams parameters = new(); var page = await client.Beta.Organization.Analytics.Users.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "chat_metrics": { "connectors_used_count": 0, "distinct_artifacts_created_count": 0, "distinct_connectors_used_count": 0, "distinct_conversation_count": 0, "distinct_files_uploaded_count": 0, "distinct_projects_created_count": 0, "distinct_projects_used_count": 0, "distinct_shared_artifacts_viewed_count": 0, "distinct_skills_used_count": 0, "message_count": 0, "shared_conversations_viewed_count": 0, "thinking_message_count": 0 }, "claude_code_metrics": { "core_metrics": { "artifacts_created_count": 0, "commit_count": 0, "distinct_session_count": 0, "lines_of_code": { "added_count": 0, "removed_count": 0 }, "pull_request_count": 0 }, "tool_actions": { "edit_tool": { "accepted_count": 0, "rejected_count": 0 }, "multi_edit_tool": { "accepted_count": 0, "rejected_count": 0 }, "notebook_edit_tool": { "accepted_count": 0, "rejected_count": 0 }, "write_tool": { "accepted_count": 0, "rejected_count": 0 } } }, "cowork_metrics": { "action_count": 0, "artifacts_created_count": 0, "connectors_used_count": 0, "dispatch_turn_count": 0, "distinct_connectors_used_count": 0, "distinct_session_count": 0, "distinct_skills_used_count": 0, "message_count": 0, "skills_used_count": 0, "distinct_plugins_used_count": 0, "edit_tool_count": 0, "file_edit_count": 0, "multi_edit_tool_count": 0, "notebook_edit_tool_count": 0, "plugins_used_count": 0, "sessions_with_file_edits_count": 0, "write_tool_count": 0 }, "design_metrics": { "distinct_projects_created_count": 0, "distinct_projects_used_count": 0, "distinct_session_count": 0, "message_count": 0 }, "office_metrics": { "excel": { "connectors_used_count": 0, "distinct_connectors_used_count": 0, "distinct_session_count": 0, "distinct_skills_used_count": 0, "message_count": 0, "skills_used_count": 0 }, "outlook": { "connectors_used_count": 0, "distinct_connectors_used_count": 0, "distinct_session_count": 0, "distinct_skills_used_count": 0, "message_count": 0, "skills_used_count": 0 }, "powerpoint": { "connectors_used_count": 0, "distinct_connectors_used_count": 0, "distinct_session_count": 0, "distinct_skills_used_count": 0, "message_count": 0, "skills_used_count": 0 }, "word": { "connectors_used_count": 0, "distinct_connectors_used_count": 0, "distinct_session_count": 0, "distinct_skills_used_count": 0, "message_count": 0, "skills_used_count": 0 } }, "science_metrics": { "delegation_count": 0, "distinct_session_count": 0, "message_count": 0, "remote_compute_job_count": 0, "skills_used_count": 0 }, "web_search_count": 0, "chat_cowork_unified_metrics": { "chat": { "connectors_used_count": 0, "distinct_artifacts_created_count": 0, "distinct_connectors_used_count": 0, "distinct_conversation_count": 0, "distinct_files_uploaded_count": 0, "distinct_projects_created_count": 0, "distinct_projects_used_count": 0, "distinct_shared_artifacts_viewed_count": 0, "distinct_skills_used_count": 0, "message_count": 0, "shared_conversations_viewed_count": 0, "thinking_message_count": 0 }, "sessions": { "action_count": 0, "artifacts_created_count": 0, "connectors_used_count": 0, "dispatch_turn_count": 0, "distinct_connectors_used_count": 0, "distinct_plugins_used_count": 0, "distinct_session_count": 0, "distinct_skills_used_count": 0, "edit_tool_count": 0, "file_edit_count": 0, "message_count": 0, "multi_edit_tool_count": 0, "notebook_edit_tool_count": 0, "plugins_used_count": 0, "sessions_with_file_edits_count": 0, "skills_used_count": 0, "write_tool_count": 0 } }, "distinct_user_count": 0, "last_activity_date": "2019-12-27", "rbac_group_id": "rbac_group_id", "rbac_group_name": "rbac_group_name", "user": { "id": "id", "email_address": "email_address", "type": "user" } } ], "next_page": "next_page" } ``` ## Organization › Analytics › Apps › Chat › Projects ### Get Chat Project Usage `ProjectListPage Beta.Organization.Analytics.Apps.Chat.Projects.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/apps/chat/projects` Get per-project activity for a given day, with cursor-based pagination. Returns activity metrics for each project in the organization, sorted by project ID. Use `group_by[]` to break projects out per member or per RBAC group, and `filter[]` to scope results; the parameter descriptions list the supported dimensions. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `ProjectListParams parameters` - `DateOnly? date` (query parameter) UTC date in YYYY-MM-DD format. The day to get project activity for. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date - `DateOnly? endingDate` (query parameter) UTC date in YYYY-MM-DD format. End of the date range (exclusive); only valid with `starting_date`. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day), so this can be at most today — which is also the default when omitted, resolved once when the first page is served and reused for the rest of the pagination sequence. At most 366 days after `starting_date`. format: date - `IReadOnlyList? filter` (query parameter) Filters as `dimension:value`, e.g. `filter[]=rbac_group_id:{id}`. Repeat the param for OR within a dimension and across dimensions for AND. Supported dimensions on this endpoint: `project_id`, `rbac_group_id`, `user_id`. Value forms: `project_id` takes a tagged project id (`claude_proj_...`); `rbac_group_id` takes the tagged id (`rbac_group_...`, as emitted in responses and by the spend-limits API) or a bare group UUID, and matches users who held the group at any point during each covered UTC day (time-of-usage attribution); `user_id` takes a tagged user id (`user_...`), as emitted in responses. An unsupported dimension returns 400. At most 100 entries. maxItems: 100 - `IReadOnlyList? groupBy` (query parameter) Dimensions to break results out by (e.g. `group_by[]=user_id`). Supported on this endpoint: `rbac_group_id`, `user_id`. Grouped rows carry the requested dimension values as additional fields and paginate like ungrouped responses via `next_page`; an unsupported dimension returns 400. `rbac_group_id` attributes a user to every group they held at any point during each covered UTC day, so grouped rows are not an exclusive partition and can sum above org-level totals. At most 100 entries. maxItems: 100 - `RbacGroupID("rbac_group_id")` - `UserID("user_id")` - `long? limit` (query parameter) Number of results per page (1-1000, default 100). minimum: 1, maximum: 1000 - `Order? order` (query parameter) Sort direction: `asc` or `desc`. Defaults to `asc` for the endpoint's sort column and to `desc` when `order_by` names a metric (a top-N ranking). Applies to `order_by`, or to the endpoint's default sort field when `order_by` is omitted. - `Asc("asc")` - `Desc("desc")` - `string? orderBy` (query parameter) Sort field. Restricted to the endpoint's sort column plus its rankable metrics (metrics default to descending; a few metrics rank in date-range mode only, per the endpoint's documented orderable set). - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `DateOnly? startingDate` (query parameter) UTC date in YYYY-MM-DD format. Start of a date range (inclusive). Enables rollup mode: one row per entity aggregated over the whole range — addable counters are summed across days, and a distinct count is never summed where summing could double-count (a field's range value is recomputed exactly over the window, approximate via HLL with typical error under 2%, null, or — for the creation-event counts, whose per-day values cannot overlap — a per-day sum that is itself exact; each field's own description says which). Use either `date` or `starting_date`, not both. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date #### Returns - `class BetaAnalyticsProjectActivity` Per-project activity data for a given day. - `required long DistinctUserCount` Number of distinct users who used the project on the requested day, or, in date-range mode, over the requested window — recomputed as an exact distinct count over the window's per-member daily rows, never a sum of per-day values. - `required long MessageCount` Number of messages sent in the project on the requested day - `required string ProjectID` Tagged project identifier (e.g. `claude_proj_...`) - `required string ProjectName` Name of the project - `DateTimeOffset? CreatedAt` Project creation timestamp in RFC 3339 format. Null if the project was deleted before attribution was recorded. format: date-time - `BetaAnalyticsUser? CreatedBy` User who created the project. Null if the project was deleted before attribution was recorded, or if the creator's account no longer exists. - `JsonElement Type = "user"` Object type. Always `user`. - `required string ID` Tagged user identifier (e.g. `user_...`) - `required string EmailAddress` Email address of the user - `long? DistinctConversationCount` Number of distinct conversations in the project. Null on aggregated rows where a distinct count cannot be computed. - `string? Product` Product that produced this row's activity: one of `chat`, `claude_code`, `cowork`, `office_agent`, or `chat_cowork_unified` (Chat and Cowork unified). These are the canonical Cost & Usage product names; an `office_agent` row's per-surface breakdown is in its `office_metrics`. On `/plugins` only `cowork`, `claude_code` and `chat_cowork_unified` occur (the only surfaces with plugin attribution); on `/artifacts` only `chat`, `claude_code`, `cowork` and `chat_cowork_unified` occur (the surfaces that create artifacts); `/apps/chat/projects` does not support the product dimension (a `product` entry in `group_by[]` or `filter[]` there is rejected). Present only when the request grouped by `product`. - `string? RbacGroupID` Tagged RBAC group identifier (`rbac_group_...`), matching the spend-limits API spelling. Present only when the request grouped by `rbac_group_id`. - `string? RbacGroupName` Resolved RBAC group display name, alongside `rbac_group_id` when name resolution is available. Null if the group has been deleted or its name could not be resolved; `rbac_group_id` remains the stable key. - `string? UserID` Tagged user identifier (e.g. `user_...`). Present only when the request grouped by `user_id`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.Apps.Chat.Projects; ProjectListParams parameters = new(); var page = await client.Beta.Organization.Analytics.Apps.Chat.Projects.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "distinct_user_count": 0, "message_count": 0, "project_id": "project_id", "project_name": "project_name", "created_at": "2019-12-27T18:11:19.117Z", "created_by": { "id": "id", "email_address": "email_address", "type": "user" }, "distinct_conversation_count": 0, "product": "product", "rbac_group_id": "rbac_group_id", "rbac_group_name": "rbac_group_name", "user_id": "user_id" } ], "next_page": "next_page" } ``` ## Organization › Analytics › Connectors ### Get Connector Usage `ConnectorListPage Beta.Organization.Analytics.Connectors.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/connectors` Get per-connector usage for a given day, with cursor-based pagination. Returns connector usage metrics for the organization, sorted by connector name. Connector names are normalized from their various sources — for example, "Atlassian MCP server" and "mcp-atlassian" both appear as "atlassian". Use `group_by[]` to break usage out per member, per RBAC group, or per product surface, and `filter[]` to scope results; the parameter descriptions list the supported dimensions. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `ConnectorListParams parameters` - `DateOnly? date` (query parameter) UTC date in YYYY-MM-DD format. The day to get connector usage for. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date - `DateOnly? endingDate` (query parameter) UTC date in YYYY-MM-DD format. End of the date range (exclusive); only valid with `starting_date`. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day), so this can be at most today — which is also the default when omitted, resolved once when the first page is served and reused for the rest of the pagination sequence. At most 366 days after `starting_date`. format: date - `IReadOnlyList? filter` (query parameter) Filters as `dimension:value`, e.g. `filter[]=rbac_group_id:{id}`. Repeat the param for OR within a dimension and across dimensions for AND. Supported dimensions on this endpoint: `connector_name`, `product`, `rbac_group_id`, `user_id`. Value forms: `connector_name` matches case-insensitively, a display name such as 'GitHub MCP' also matches its normalized stored form ('github'), and for rows whose `connector_name` is an opaque connector id the connector's display name (`connector_display_name`) also matches; `product` is one of `chat_cowork_unified`, `chat`, `claude_code`, `cowork`, or `office_agent`; `rbac_group_id` takes the tagged id (`rbac_group_...`, as emitted in responses and by the spend-limits API) or a bare group UUID, and matches users who held the group at any point during each covered UTC day (time-of-usage attribution); `user_id` takes a tagged user id (`user_...`), as emitted in responses. An unsupported dimension returns 400. At most 100 entries. `chat_cowork_unified` is accepted as a `product` value only on deployments that offer Chat and Cowork unified. maxItems: 100 - `IReadOnlyList? groupBy` (query parameter) Dimensions to break results out by (e.g. `group_by[]=user_id`). Supported on this endpoint: `product`, `rbac_group_id`, `user_id`. Grouped rows carry the requested dimension values as additional fields and paginate like ungrouped responses via `next_page`; an unsupported dimension returns 400. `rbac_group_id` attributes a user to every group they held at any point during each covered UTC day, so grouped rows are not an exclusive partition and can sum above org-level totals. At most 100 entries. maxItems: 100 - `Product("product")` - `RbacGroupID("rbac_group_id")` - `UserID("user_id")` - `long? limit` (query parameter) Number of results per page (1-1000, default 100). minimum: 1, maximum: 1000 - `Order? order` (query parameter) Sort direction: `asc` or `desc`. Defaults to `asc` for the endpoint's sort column and to `desc` when `order_by` names a metric (a top-N ranking). Applies to `order_by`, or to the endpoint's default sort field when `order_by` is omitted. - `Asc("asc")` - `Desc("desc")` - `string? orderBy` (query parameter) Sort field. Restricted to the endpoint's sort column plus its rankable metrics (metrics default to descending; a few metrics rank in date-range mode only, per the endpoint's documented orderable set). - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `DateOnly? startingDate` (query parameter) UTC date in YYYY-MM-DD format. Start of a date range (inclusive). Enables rollup mode: one row per entity aggregated over the whole range — addable counters are summed across days, and a distinct count is never summed where summing could double-count (a field's range value is recomputed exactly over the window, approximate via HLL with typical error under 2%, null, or — for the creation-event counts, whose per-day values cannot overlap — a per-day sum that is itself exact; each field's own description says which). Use either `date` or `starting_date`, not both. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date #### Returns - `class BetaAnalyticsConnectorActivity` Per-connector activity data for a given day. - `required BetaAnalyticsConnectorChatMetrics ChatMetrics` Claude.ai activity metrics for a single connector on a given day. - `required long? DistinctConversationConnectorUsedCount` Number of distinct conversations in which the connector was used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsConnectorClaudeCodeMetrics ClaudeCodeMetrics` Claude Code activity metrics for a single connector on a given day. - `required long? DistinctSessionConnectorUsedCount` Number of distinct Claude Code sessions in which the connector was used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required string ConnectorName` Name of the connector. Some rows carry an opaque connector id here instead of a readable name; `connector_display_name` holds the resolved name for those rows. - `required BetaAnalyticsConnectorCoworkMetrics CoworkMetrics` Cowork activity metrics for a single connector on a given day. - `required long? DistinctSessionConnectorUsedCount` Number of distinct Cowork sessions in which the connector was used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long DistinctUserCount` Number of distinct users who used the connector on the requested day, or, in date-range mode, over the requested window — recomputed as an exact distinct count over the window's per-member daily rows, never a sum of per-day values. - `required BetaAnalyticsConnectorOfficeMetrics OfficeMetrics` Office Agent activity metrics for a single connector on a given day, broken out by Office product. - `required BetaAnalyticsConnectorOfficeProductMetrics Excel` Office Agent activity metrics for a single connector on a given day within one Office product. - `required long? DistinctSessionConnectorUsedCount` Number of distinct Office Agent sessions in which the connector was used. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsConnectorOfficeProductMetrics Outlook` Office Agent activity metrics for a single connector on a given day within one Office product. - `required BetaAnalyticsConnectorOfficeProductMetrics Powerpoint` Office Agent activity metrics for a single connector on a given day within one Office product. - `required BetaAnalyticsConnectorOfficeProductMetrics Word` Office Agent activity metrics for a single connector on a given day within one Office product. - `ChatCoworkUnifiedMetrics? ChatCoworkUnifiedMetrics` Connector use recorded while members had Chat and Cowork unified (Cowork's features inside claude.ai chat) turned on, split into chat conversations and Cowork sessions. A count is null in date-range mode where it cannot be computed. Omitted from the response on deployments that do not offer Chat and Cowork unified. - `required BetaAnalyticsConnectorChatCoworkUnifiedChatMetrics Chat` A connector's use in chat conversations recorded while members had Chat and Cowork unified turned on. - `required long? DistinctConversationConnectorUsedCount` Same measure as `chat_metrics.distinct_conversation_connector_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsConnectorChatCoworkUnifiedSessionsMetrics Sessions` A connector's use in Cowork sessions recorded while members had Chat and Cowork unified turned on. - `required long? DistinctSessionConnectorUsedCount` Same measure as `cowork_metrics.distinct_session_connector_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `string? ConnectorDisplayName` Human-readable display name for rows whose `connector_name` is an opaque connector id rather than a readable name, resolved at request time from the organization's connectors (including connectors that have since been removed). `connector_name` remains the row's stable key for sorting and pagination, and `filter[]=connector_name:{value}` also matches these rows by display name. Display names are not unique, and the same connector's claude.ai usage can appear under a separate row with a readable `connector_name`. Null when `connector_name` is already a readable name, when the id cannot be resolved to one of the organization's connectors, or when display-name resolution is not enabled for this organization. - `long? IndividualAuthDistinctUserCount` Number of distinct users whose use of this connector on the requested day ran on their own individual credential, connected through their own consent flow. Companion bucket to `managed_auth_distinct_user_count`, which carries the measurement, attribution, and null rules. Users whose requests used no stored credential count in neither bucket. - `long? ManagedAuthDistinctUserCount` Number of distinct users whose use of this connector on the requested day ran on Enterprise Managed Auth (an organization-managed credential provisioned through the organization's identity provider), read from the token record each request used. Null, never 0, when managed-auth reporting is not enabled for the organization, the value cannot be attributed to the row, no credentialed requests and no managed-token mint events (a managed credential being provisioned for a user's use of the connector) were observed that day, or the day predates 2026-07-01, the first day the backing data exists (forward-only data, no backfill). When credentialed requests or mint events were observed and attributed, both managed-auth fields populate, reporting 0 for a bucket with no users; the two counts are independent, not a partition — a user whose requests that day used both kinds of credential counts in both. Mint events carry user but not surface attribution, so they count as observed auth activity on `user_id` and `rbac_group_id` cuts — attributed to the user the credential was provisioned for — but never on a cut that references `product` (group or filter). Date-range rollup mode (`starting_date`/`ending_date`) computes both fields exactly over the window — distinct users with at least one qualifying day — when the whole window starts on or after 2026-07-01, with the null-versus-0 and mint-event rules applying with the window in place of the day; a range starting earlier reports every managed-auth field as null, never a partial-window value. - `string? Product` Product that produced this row's activity: one of `chat`, `claude_code`, `cowork`, `office_agent`, or `chat_cowork_unified` (Chat and Cowork unified). These are the canonical Cost & Usage product names; an `office_agent` row's per-surface breakdown is in its `office_metrics`. On `/plugins` only `cowork`, `claude_code` and `chat_cowork_unified` occur (the only surfaces with plugin attribution); on `/artifacts` only `chat`, `claude_code`, `cowork` and `chat_cowork_unified` occur (the surfaces that create artifacts); `/apps/chat/projects` does not support the product dimension (a `product` entry in `group_by[]` or `filter[]` there is rejected). Present only when the request grouped by `product`. - `string? RbacGroupID` Tagged RBAC group identifier (`rbac_group_...`), matching the spend-limits API spelling. Present only when the request grouped by `rbac_group_id`. - `string? RbacGroupName` Resolved RBAC group display name, alongside `rbac_group_id` when name resolution is available. Null if the group has been deleted or its name could not be resolved; `rbac_group_id` remains the stable key. - `long? ReadCallCount` Number of connector tool calls on the requested day whose trusted read-only annotation marked them read-only. Call count, not distinct users. Every call recorded on a classified surface lands in exactly one of `read_call_count`, `write_call_count`, or `unclassified_call_count`, so the three sum to the day's classified calls. Classification is forward-only per surface: claude.ai from 2026-06-01, Claude Code from 2026-05-30, Claude in Office from 2026-05-29, Cowork from 2026-06-02 (Cowork clients predating annotation forwarding land in `unclassified_call_count`). Null, never 0, when the value cannot be stated: the read/write split is not enabled for this organization, or the day predates 2026-05-29. For a date-range total, sum the per-day values, but treat a window that extends before 2026-05-29 as null rather than summing only its covered days — date-range rollup mode (`starting_date`/`ending_date`) applies both rules server-side. - `long? UnclassifiedCallCount` Number of connector tool calls on the requested day with no trusted read-only annotation — the annotation is optional in the MCP spec and is discarded when connector access controls are active, so unclassified calls are common. This field shows how much of the day's classified activity the read/write split actually covers. Call count, not distinct users. One of the three call-classification buckets; see `read_call_count` for the per-surface data-start dates, null conditions, and date-range guidance. - `string? UserID` Tagged user identifier (e.g. `user_...`). Present only when the request grouped by `user_id`. - `long? WriteCallCount` Number of connector tool calls on the requested day whose trusted read-only annotation marked them not read-only. Call count, not distinct users. One of the three call-classification buckets; see `read_call_count` for the per-surface data-start dates, null conditions, and date-range guidance. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.Connectors; ConnectorListParams parameters = new(); var page = await client.Beta.Organization.Analytics.Connectors.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "chat_metrics": { "distinct_conversation_connector_used_count": 0 }, "claude_code_metrics": { "distinct_session_connector_used_count": 0 }, "connector_name": "connector_name", "cowork_metrics": { "distinct_session_connector_used_count": 0 }, "distinct_user_count": 0, "office_metrics": { "excel": { "distinct_session_connector_used_count": 0 }, "outlook": { "distinct_session_connector_used_count": 0 }, "powerpoint": { "distinct_session_connector_used_count": 0 }, "word": { "distinct_session_connector_used_count": 0 } }, "chat_cowork_unified_metrics": { "chat": { "distinct_conversation_connector_used_count": 0 }, "sessions": { "distinct_session_connector_used_count": 0 } }, "connector_display_name": "connector_display_name", "individual_auth_distinct_user_count": 0, "managed_auth_distinct_user_count": 0, "product": "product", "rbac_group_id": "rbac_group_id", "rbac_group_name": "rbac_group_name", "read_call_count": 0, "unclassified_call_count": 0, "user_id": "user_id", "write_call_count": 0 } ], "next_page": "next_page" } ``` ## Organization › Analytics › Plugins ### Get Plugin Usage `PluginListPage Beta.Organization.Analytics.Plugins.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/plugins` Get per-plugin install + invocation usage for a given day, with pagination. Returns plugin usage metrics for the organization across Cowork and Claude Code, sorted by plugin name. The `plugin_name` value `third-party` is an aggregate bucket, not a plugin: it collects plugin activity, from either surface, for which the reporting client did not provide a plugin name — so an organization's own plugins can contribute both to their own named rows and to this bucket. Use `group_by[]` to break usage out per member, per RBAC group, or per product surface (Cowork / Claude Code), and `filter[]` to scope results; the parameter descriptions list the supported dimensions. Requires an API key with the `read:analytics` scope. `starting_date` / `ending_date` select range-rollup mode like `/skills`. #### Parameters - `PluginListParams parameters` - `DateOnly? date` (query parameter) UTC date in YYYY-MM-DD format. The day to get plugin usage for. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date - `DateOnly? endingDate` (query parameter) UTC date in YYYY-MM-DD format. End of the date range (exclusive); only valid with `starting_date`. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day), so this can be at most today — which is also the default when omitted, resolved once when the first page is served and reused for the rest of the pagination sequence. At most 366 days after `starting_date`. format: date - `IReadOnlyList? filter` (query parameter) Filters as `dimension:value`, e.g. `filter[]=rbac_group_id:{id}`. Repeat the param for OR within a dimension and across dimensions for AND. Supported dimensions on this endpoint: `plugin_name`, `product`, `rbac_group_id`, `user_id`. Value forms: `plugin_name` matches case-insensitively; `product` is `chat_cowork_unified`, `claude_code`, or `cowork` (the only surfaces with plugin attribution); `rbac_group_id` takes the tagged id (`rbac_group_...`, as emitted in responses and by the spend-limits API) or a bare group UUID, and matches users who held the group at any point during each covered UTC day (time-of-usage attribution); `user_id` takes a tagged user id (`user_...`), as emitted in responses. An unsupported dimension returns 400. At most 100 entries. `chat_cowork_unified` is accepted as a `product` value only on deployments that offer Chat and Cowork unified. maxItems: 100 - `IReadOnlyList? groupBy` (query parameter) Dimensions to break results out by (e.g. `group_by[]=user_id`). Supported on this endpoint: `product`, `rbac_group_id`, `user_id`. On this endpoint `product` takes the values `chat_cowork_unified`, `claude_code`, or `cowork` only (the surfaces with plugin attribution). Grouped rows carry the requested dimension values as additional fields and paginate like ungrouped responses via `next_page`; an unsupported dimension returns 400. `rbac_group_id` attributes a user to every group they held at any point during each covered UTC day, so grouped rows are not an exclusive partition and can sum above org-level totals. At most 100 entries. maxItems: 100 - `Product("product")` - `RbacGroupID("rbac_group_id")` - `UserID("user_id")` - `long? limit` (query parameter) Number of results per page (1-1000, default 100). minimum: 1, maximum: 1000 - `Order? order` (query parameter) Sort direction: `asc` or `desc`. Defaults to `asc` for the endpoint's sort column and to `desc` when `order_by` names a metric (a top-N ranking). Applies to `order_by`, or to the endpoint's default sort field when `order_by` is omitted. - `Asc("asc")` - `Desc("desc")` - `string? orderBy` (query parameter) Sort field. Restricted to the endpoint's sort column plus its rankable metrics (metrics default to descending; a few metrics rank in date-range mode only, per the endpoint's documented orderable set). - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `DateOnly? startingDate` (query parameter) UTC date in YYYY-MM-DD format. Start of a date range (inclusive). Enables rollup mode: one row per entity aggregated over the whole range — addable counters are summed across days, and a distinct count is never summed where summing could double-count (a field's range value is recomputed exactly over the window, approximate via HLL with typical error under 2%, null, or — for the creation-event counts, whose per-day values cannot overlap — a per-day sum that is itself exact; each field's own description says which). Use either `date` or `starting_date`, not both. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date #### Returns - `class BetaAnalyticsPluginActivity` Per-plugin install + invocation activity for a given day. With `group_by[]=user_id` / `rbac_group_id` / `product` (`cowork`, `claude_code` and `chat_cowork_unified` only on this endpoint) each row is one (plugin, user), (plugin, group), or (plugin, product) cut: the flat `user_id` / `rbac_group_id` / `product` keys carry the cut and the counts are scoped to it. - `required BetaAnalyticsPluginClaudeCodeMetrics ClaudeCodeMetrics` Claude Code activity metrics for a single plugin on a given day. - `required long? DistinctSessionPluginUsedCount` Number of distinct Claude Code sessions in which the plugin was invoked. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsPluginCoworkMetrics CoworkMetrics` Cowork activity metrics for a single plugin on a given day. - `required long? DistinctSessionPluginUsedCount` Number of distinct Cowork sessions in which the plugin was invoked. Null on aggregated rows where a distinct count cannot be computed. - `required long DistinctUserCount` Number of distinct users with recorded install or invocation activity for the plugin on the requested day (install-only users count), or, in date-range mode, over the requested window — recomputed as an exact distinct count over the window's per-member daily rows, never a sum of per-day values. - `required long? InstallCount` Number of distinct users who installed the plugin on the requested day, or, in date-range mode, over the requested window — recomputed as an exact distinct count over the window's per-member daily rows, never a sum of per-day values. - `required long InvocationCount` Number of plugin invocations on the requested day - `required string PluginName` Name of the plugin - `ChatCoworkUnifiedMetrics? ChatCoworkUnifiedMetrics` Plugin use recorded while members had Chat and Cowork unified (Cowork's features inside claude.ai chat) turned on. A count is null in date-range mode where it cannot be computed. Omitted from the response on deployments that do not offer Chat and Cowork unified. - `required long? DistinctSessionPluginUsedCount` Same measure as `cowork_metrics.distinct_session_plugin_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Null on aggregated rows where a distinct count cannot be computed. - `string? PluginID` Stable plugin identifier when available (e.g. `serena@claude-plugins-official`). Null for third-party Claude Code plugins (redacted at the source) and Cowork slash commands that carry only a hashed id. - `string? Product` Product that produced this row's activity: one of `chat`, `claude_code`, `cowork`, `office_agent`, or `chat_cowork_unified` (Chat and Cowork unified). These are the canonical Cost & Usage product names; an `office_agent` row's per-surface breakdown is in its `office_metrics`. On `/plugins` only `cowork`, `claude_code` and `chat_cowork_unified` occur (the only surfaces with plugin attribution); on `/artifacts` only `chat`, `claude_code`, `cowork` and `chat_cowork_unified` occur (the surfaces that create artifacts); `/apps/chat/projects` does not support the product dimension (a `product` entry in `group_by[]` or `filter[]` there is rejected). Present only when the request grouped by `product`. - `string? RbacGroupID` Tagged RBAC group identifier (`rbac_group_...`), matching the spend-limits API spelling. Present only when the request grouped by `rbac_group_id`. - `string? RbacGroupName` Resolved RBAC group display name, alongside `rbac_group_id` when name resolution is available. Null if the group has been deleted or its name could not be resolved; `rbac_group_id` remains the stable key. - `string? UserID` Tagged user identifier (e.g. `user_...`). Present only when the request grouped by `user_id`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.Plugins; PluginListParams parameters = new(); var page = await client.Beta.Organization.Analytics.Plugins.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "claude_code_metrics": { "distinct_session_plugin_used_count": 0 }, "cowork_metrics": { "distinct_session_plugin_used_count": 0 }, "distinct_user_count": 0, "install_count": 0, "invocation_count": 0, "plugin_name": "plugin_name", "chat_cowork_unified_metrics": { "distinct_session_plugin_used_count": 0 }, "plugin_id": "plugin_id", "product": "product", "rbac_group_id": "rbac_group_id", "rbac_group_name": "rbac_group_name", "user_id": "user_id" } ], "next_page": "next_page" } ``` ## Organization › Analytics › Skills ### Get Skill Usage `SkillListPage Beta.Organization.Analytics.Skills.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/skills` Get per-skill usage for a given day, with cursor-based pagination. Returns skill usage metrics for the organization, sorted by skill name. Use `group_by[]` to break usage out per member, per RBAC group, or per product surface, and `filter[]` to scope results; the parameter descriptions list the supported dimensions. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `SkillListParams parameters` - `DateOnly? date` (query parameter) UTC date in YYYY-MM-DD format. The day to get skill usage for. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date - `DateOnly? endingDate` (query parameter) UTC date in YYYY-MM-DD format. End of the date range (exclusive); only valid with `starting_date`. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day), so this can be at most today — which is also the default when omitted, resolved once when the first page is served and reused for the rest of the pagination sequence. At most 366 days after `starting_date`. format: date - `IReadOnlyList? filter` (query parameter) Filters as `dimension:value`, e.g. `filter[]=rbac_group_id:{id}`. Repeat the param for OR within a dimension and across dimensions for AND. Supported dimensions on this endpoint: `product`, `rbac_group_id`, `share_status`, `skill_name`, `user_id`. Value forms: `product` is one of `chat_cowork_unified`, `chat`, `claude_code`, `cowork`, or `office_agent`; `rbac_group_id` takes the tagged id (`rbac_group_...`, as emitted in responses and by the spend-limits API) or a bare group UUID, and matches users who held the group at any point during each covered UTC day (time-of-usage attribution); `share_status` is one of `organization`, `private`, or `public`; `skill_name` matches case-insensitively; `user_id` takes a tagged user id (`user_...`), as emitted in responses. An unsupported dimension returns 400. At most 100 entries. `chat_cowork_unified` is accepted as a `product` value only on deployments that offer Chat and Cowork unified. maxItems: 100 - `IReadOnlyList? groupBy` (query parameter) Dimensions to break results out by (e.g. `group_by[]=user_id`). Supported on this endpoint: `product`, `rbac_group_id`, `user_id`. Grouped rows carry the requested dimension values as additional fields and paginate like ungrouped responses via `next_page`; an unsupported dimension returns 400. `rbac_group_id` attributes a user to every group they held at any point during each covered UTC day, so grouped rows are not an exclusive partition and can sum above org-level totals. At most 100 entries. maxItems: 100 - `Product("product")` - `RbacGroupID("rbac_group_id")` - `UserID("user_id")` - `long? limit` (query parameter) Number of results per page (1-1000, default 100). minimum: 1, maximum: 1000 - `Order? order` (query parameter) Sort direction: `asc` or `desc`. Defaults to `asc` for the endpoint's sort column and to `desc` when `order_by` names a metric (a top-N ranking). Applies to `order_by`, or to the endpoint's default sort field when `order_by` is omitted. - `Asc("asc")` - `Desc("desc")` - `string? orderBy` (query parameter) Sort field. Restricted to the endpoint's sort column plus its rankable metrics (metrics default to descending; a few metrics rank in date-range mode only, per the endpoint's documented orderable set). - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `DateOnly? startingDate` (query parameter) UTC date in YYYY-MM-DD format. Start of a date range (inclusive). Enables rollup mode: one row per entity aggregated over the whole range — addable counters are summed across days, and a distinct count is never summed where summing could double-count (a field's range value is recomputed exactly over the window, approximate via HLL with typical error under 2%, null, or — for the creation-event counts, whose per-day values cannot overlap — a per-day sum that is itself exact; each field's own description says which). Use either `date` or `starting_date`, not both. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date #### Returns - `class BetaAnalyticsSkillActivity` Per-skill activity data for a given day. - `required BetaAnalyticsSkillChatMetrics ChatMetrics` Claude.ai activity metrics for a single skill on a given day. - `required long? DistinctConversationSkillUsedCount` Number of distinct conversations in which the skill was used. A skill counts as used only when it is explicitly activated — the model (or the user, via the skill's slash command) invokes it, reading its instructions into context as part of that activation. Skills that are merely installed or listed as available, or whose content reaches the context without an activation (preloaded, hook-injected, or read as a plain file), are not counted. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsSkillClaudeCodeMetrics ClaudeCodeMetrics` Claude Code activity metrics for a single skill on a given day. - `required long? DistinctSessionSkillUsedCount` Number of distinct Claude Code sessions in which the skill was used. A skill counts as used only when it is explicitly activated — the model (or the user, via the skill's slash command) invokes it, reading its instructions into context as part of that activation. Skills that are merely installed or listed as available, or whose content reaches the context without an activation (preloaded, hook-injected, or read as a plain file), are not counted. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsSkillCoworkMetrics CoworkMetrics` Cowork activity metrics for a single skill on a given day. - `required long? DistinctSessionSkillUsedCount` Number of distinct Cowork sessions in which the skill was used. A skill counts as used only when it is explicitly activated — the model (or the user, via the skill's slash command) invokes it, reading its instructions into context as part of that activation. Skills that are merely installed or listed as available, or whose content reaches the context without an activation (preloaded, hook-injected, or read as a plain file), are not counted. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required long DistinctUserCount` Number of distinct users who used the skill on the requested day, or, in date-range mode, over the requested window — recomputed as an exact distinct count over the window's per-member daily rows, never a sum of per-day values. A skill counts as used only when it is explicitly activated — the model (or the user, via the skill's slash command) invokes it, reading its instructions into context as part of that activation. Skills that are merely installed or listed as available, or whose content reaches the context without an activation (preloaded, hook-injected, or read as a plain file), are not counted. - `required BetaAnalyticsSkillOfficeMetrics OfficeMetrics` Office Agent activity metrics for a single skill on a given day, broken out by Office product. - `required BetaAnalyticsSkillOfficeProductMetrics Excel` Office Agent activity metrics for a single skill on a given day within one Office product. - `required long? DistinctSessionSkillUsedCount` Number of distinct Office Agent sessions in which the skill was used. A skill counts as used only when it is explicitly activated — the model (or the user, via the skill's slash command) invokes it, reading its instructions into context as part of that activation. Skills that are merely installed or listed as available, or whose content reaches the context without an activation (preloaded, hook-injected, or read as a plain file), are not counted. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsSkillOfficeProductMetrics Outlook` Office Agent activity metrics for a single skill on a given day within one Office product. - `required BetaAnalyticsSkillOfficeProductMetrics Powerpoint` Office Agent activity metrics for a single skill on a given day within one Office product. - `required BetaAnalyticsSkillOfficeProductMetrics Word` Office Agent activity metrics for a single skill on a given day within one Office product. - `required string SkillName` Name of the skill - `string? AttributedListPrice` List-price (rate-card) value of the member requests attributed to this skill, as a decimal string in the minor unit of `currency` (cents for USD), from Claude Code, Cowork, and Office Agent request-level attribution — the value of requests that involved the skill, not the skill's incremental cost. Unlike `estimated_overage_spend` this reflects usage value regardless of how it was funded — seat-covered usage counts — but it is undiscounted and does not tie to billed spend or the organization's spend reporting. claude.ai chat usage carries no request-level attribution and contributes nothing: the field is null on `chat` product rows and on `office_agent` product cuts dated before 2026-06-18 (the Office Agent attribution data-start), and on ungrouped rows it covers the Claude Code + Cowork + Office Agent share only (null when no attributable usage exists). Also null under the same conditions as `estimated_overage_spend` (spend reporting not enabled for this organization, `office_agent` product cuts before the 2026-06-18 data-start). "0" means attributable usage existed but none was attributed to this skill. Addable across days: date-range rollup mode returns the window's sum. On `group_by[]` and `filter[]` shapes both amounts can total below the ungrouped value for the same skill over the same date or range: spend attributed to a member–skill pair with no counted usage on that day is excluded from those cuts. - `ChatCoworkUnifiedMetrics? ChatCoworkUnifiedMetrics` Skill use recorded while members had Chat and Cowork unified (Cowork's features inside claude.ai chat) turned on, split into chat conversations and Cowork sessions. A count is null in date-range mode where it cannot be computed. Omitted from the response on deployments that do not offer Chat and Cowork unified. - `required BetaAnalyticsSkillChatCoworkUnifiedChatMetrics Chat` A skill's use in chat conversations recorded while members had Chat and Cowork unified turned on. - `required long? DistinctConversationSkillUsedCount` Same measure as `chat_metrics.distinct_conversation_skill_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `required BetaAnalyticsSkillChatCoworkUnifiedSessionsMetrics Sessions` A skill's use in Cowork sessions recorded while members had Chat and Cowork unified turned on. - `required long? DistinctSessionSkillUsedCount` Same measure as `cowork_metrics.distinct_session_skill_used_count`, for activity recorded while members had Chat and Cowork unified turned on. Approximate (HLL, typical error <2%) in date-range mode. Null on aggregated rows where a distinct count cannot be computed. - `string? Currency` Currency for this row's monetary fields (`estimated_overage_spend` and `attributed_list_price`), as an uppercase ISO-4217 code. Always "USD" when either amount is populated; null whenever both amounts are null. - `long? EnableCount` Distinct accounts that enabled this skill on the requested day (claude.ai only — the skill analog of plugin `install_count`). The count is org-wide: null when enable reporting is not enabled for this organization, or when the request scopes to `user_id` / `rbac_group_id` / `product` via `group_by[]` or `filter[]` (an org-wide count would be misleading on per-cut rows). A distinct count, not an event count: summing across days double-counts members who enable the skill on more than one day, so it is also null in date-range rollup mode (`starting_date`/`ending_date`). - `string? EstimatedOverageSpend` Estimated overage spend attributed to this skill, as a decimal string in the minor unit of `currency` (cents for USD; "1250" is $12.50, fractional cents possible) — an allocation of each member's daily post-discount, pre-credit metered overage spend (the same cost basis as the organization's spend reporting and the Cost & Usage API, so per-skill figures are directly comparable; spend with no skill attribution — including any member-day without skill invocations — is not represented, so skill rows sum to at most those totals) across the skills the member used. Overage only: usage covered by included seat allowances bills nothing and allocates $0 here — see `attributed_list_price` for the funding-independent usage-value companion. Claude Code, Cowork, and Office Agent spend use request-level skill attribution; claude.ai chat spend is approximated proportionally to skill-invoking messages. An estimate, not a billing number — and the cost of the requests/messages that involved the skill, not the skill's incremental cost (the same request would still have cost something without the skill active). "0" means no overage spend was attributed; null when spend reporting is not enabled for this organization, on `office_agent` product cuts dated before 2026-06-18 (the Office Agent attribution data-start). Addable across days: date-range rollup mode (`starting_date`/`ending_date`) returns the window's sum. With `group_by[]=user_id` each row carries the user's own attributed spend. On `group_by[]` and `filter[]` shapes both amounts can total below the ungrouped value for the same skill over the same date or range: spend attributed to a member–skill pair with no counted usage on that day is excluded from those cuts. - `long? InvocationCount` Total number of times this skill was invoked on the requested day (the skill analog of plugin `invocation_count`). Unlike `distinct_user_count` — which answers '\# of users' — this is the true '# of uses'. A skill counts as used only when it is explicitly activated — the model (or the user, via the skill's slash command) invokes it, reading its instructions into context as part of that activation. Skills that are merely installed or listed as available, or whose content reaches the context without an activation (preloaded, hook-injected, or read as a plain file), are not counted. Null when invocation reporting is not enabled for this organization. Sum across a date range for total uses in the window — date-range rollup mode (`starting_date`/`ending_date`) returns this sum directly. - `string? Product` Product that produced this row's activity: one of `chat`, `claude_code`, `cowork`, `office_agent`, or `chat_cowork_unified` (Chat and Cowork unified). These are the canonical Cost & Usage product names; an `office_agent` row's per-surface breakdown is in its `office_metrics`. On `/plugins` only `cowork`, `claude_code` and `chat_cowork_unified` occur (the only surfaces with plugin attribution); on `/artifacts` only `chat`, `claude_code`, `cowork` and `chat_cowork_unified` occur (the surfaces that create artifacts); `/apps/chat/projects` does not support the product dimension (a `product` entry in `group_by[]` or `filter[]` there is rejected). Present only when the request grouped by `product`. - `string? RbacGroupID` Tagged RBAC group identifier (`rbac_group_...`), matching the spend-limits API spelling. Present only when the request grouped by `rbac_group_id`. - `string? RbacGroupName` Resolved RBAC group display name, alongside `rbac_group_id` when name resolution is available. Null if the group has been deleted or its name could not be resolved; `rbac_group_id` remains the stable key. - `ShareStatus? ShareStatus` Skill share status (claude.ai only): one of `private`, `organization`, or `public`. Null for skills used only in Claude Code or Office (no per-skill share-status concept) and when share-status reporting is not yet available for the organization. Filterable via `filter[]=share_status:{value}`. - `Organization("organization")` - `Private("private")` - `Public("public")` - `string? SkillDisplayName` Human-readable display name for rows whose `skill_name` is an opaque skill id (user/organization skill types and plugin-delivered skills, whose user-defined names usage reports generally withhold). Organization-shared skills and skills delivered by the organization's own plugins (its plugin marketplaces and its library) resolve; plugin skill names are shown without their 'plugin:' prefix. The literal 'unknown' bucket row gets a fixed 'Unknown skill' label. For a member's own skill (private or personal-plugin) it is null, except when the skill's owner used it from Claude Code or Cowork in the requested period: then it shows the name that client reported at the time. Apart from that, the names of members' own skills are not disclosed to analytics-key holders. Also null for Anthropic-provided plugin skills (not resolved), for an organization skill or plugin whose name can no longer be found (for example, one since deleted), when `skill_name` is already a display name, or when display-name resolution is not enabled for this organization. - `string? UserID` Tagged user identifier (e.g. `user_...`). Present only when the request grouped by `user_id`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.Skills; SkillListParams parameters = new(); var page = await client.Beta.Organization.Analytics.Skills.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "chat_metrics": { "distinct_conversation_skill_used_count": 0 }, "claude_code_metrics": { "distinct_session_skill_used_count": 0 }, "cowork_metrics": { "distinct_session_skill_used_count": 0 }, "distinct_user_count": 0, "office_metrics": { "excel": { "distinct_session_skill_used_count": 0 }, "outlook": { "distinct_session_skill_used_count": 0 }, "powerpoint": { "distinct_session_skill_used_count": 0 }, "word": { "distinct_session_skill_used_count": 0 } }, "skill_name": "skill_name", "attributed_list_price": "attributed_list_price", "chat_cowork_unified_metrics": { "chat": { "distinct_conversation_skill_used_count": 0 }, "sessions": { "distinct_session_skill_used_count": 0 } }, "currency": "currency", "enable_count": 0, "estimated_overage_spend": "estimated_overage_spend", "invocation_count": 0, "product": "product", "rbac_group_id": "rbac_group_id", "rbac_group_name": "rbac_group_name", "share_status": "organization", "skill_display_name": "skill_display_name", "user_id": "user_id" } ], "next_page": "next_page" } ``` ## Organization › Analytics › Artifacts ### Get Artifact Activity `ArtifactListPage Beta.Organization.Analytics.Artifacts.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/artifacts` Get artifact-creation activity for a given day, broken out by MIME type. Returns the full (`artifact_type`, `is_shared`) cube for the organization; `next_page` is null except for grouped queries, which paginate. The cube can be broken out per product, per member, or per RBAC group via `group_by[]`, and scoped via `filter[]`. Requires an API key with the `read:analytics` scope. #### Parameters - `ArtifactListParams parameters` - `required DateOnly date` (query parameter) UTC date in YYYY-MM-DD format. The day to get artifact activity for. Data is typically available with a 1-day lag (varies by query; the error for a too-recent date names the latest available day) and may be revised by a few percent over the following days. No earlier than 2026-01-01. format: date - `IReadOnlyList? filter` (query parameter) Filters as `dimension:value`, e.g. `filter[]=rbac_group_id:{id}`. Repeat the param for OR within a dimension and across dimensions for AND. Supported dimensions on this endpoint: `artifact_type`, `is_shared`, `product`, `rbac_group_id`, `user_id`. Value forms: `artifact_type` is a canonical artifact MIME type (e.g. `text/markdown`) or `other`; `is_shared` is `true` or `false`; `product` is `chat_cowork_unified`, `chat`, `claude_code`, or `cowork` (the surfaces that create artifacts); `rbac_group_id` takes the tagged id (`rbac_group_...`, as emitted in responses and by the spend-limits API) or a bare group UUID, and matches users who held the group at any point during each covered UTC day (time-of-usage attribution); `user_id` takes a tagged user id (`user_...`), as emitted in responses. An unsupported dimension returns 400. At most 100 entries. `chat_cowork_unified` is accepted as a `product` value only on deployments that offer Chat and Cowork unified. maxItems: 100 - `IReadOnlyList? groupBy` (query parameter) Dimensions to break results out by: `product`, `user_id` and/or `rbac_group_id`. The ungrouped artifact-type cube is finite and returned in full; grouped queries multiply the cube and paginate via `next_page`. `product` takes the values `chat_cowork_unified`, `chat`, `claude_code`, or `cowork` (the surfaces that create artifacts). `rbac_group_id` attributes a user to every group they held at any point during the requested UTC day, so grouped rows are not an exclusive partition. At most 100 entries. maxItems: 100 - `Product("product")` - `RbacGroupID("rbac_group_id")` - `UserID("user_id")` - `long? limit` (query parameter) Maximum rows to return (1-1000, default 100). The ungrouped artifact-type cube is finite and returned in full; `limit` is the page size only when `group_by[]` multiplies the cube. minimum: 1, maximum: 1000 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. Only valid with `group_by[]` — the ungrouped cube is never paginated. #### Returns - `class BetaAnalyticsArtifactActivity` Artifact-creation activity for one (`artifact_type`, `is_shared`) bucket on a given day. Artifacts form a small finite cube — the canonical MIME type (8 values incl. `other`) crossed with shared-vs-private — so the response is the full set of non-empty buckets, not a ranked/paginated list. Claude Code and Cowork artifacts report under `text/html` and are counted from 2026-08-17 onward; earlier days contain claude.ai chat artifacts only. With `group_by[]=product` / `user_id` / `rbac_group_id` each row is further split by the flat group keys and counts are scoped to that cut. - `required string ArtifactType` Canonical artifact MIME type (e.g. `text/markdown`, `application/vnd.ant.react`, `image/svg+xml`), or `other`. Claude Code and Cowork artifacts report as `text/html`. - `required long ArtifactsCreatedCount` Number of artifacts created in this bucket on the requested day - `required long DistinctUserCount` Number of distinct users who created artifacts in this bucket on the requested day - `required bool IsShared` Whether the artifacts in this bucket have ever been shared (a Claude Code / Cowork artifact is shared once anyone beyond its creator may open it: named members, the whole organization, or anyone with the link). - `required long PublishedArtifactsCreatedCount` Number of those artifacts that have been published (for Claude Code / Cowork artifacts: open to anyone with the link); never exceeds `artifacts_created_count` - `string? Product` Product that produced this row's activity: one of `chat`, `claude_code`, `cowork`, `office_agent`, or `chat_cowork_unified` (Chat and Cowork unified). These are the canonical Cost & Usage product names; an `office_agent` row's per-surface breakdown is in its `office_metrics`. On `/plugins` only `cowork`, `claude_code` and `chat_cowork_unified` occur (the only surfaces with plugin attribution); on `/artifacts` only `chat`, `claude_code`, `cowork` and `chat_cowork_unified` occur (the surfaces that create artifacts); `/apps/chat/projects` does not support the product dimension (a `product` entry in `group_by[]` or `filter[]` there is rejected). Present only when the request grouped by `product`. - `string? RbacGroupID` Tagged RBAC group identifier (`rbac_group_...`), matching the spend-limits API spelling. Present only when the request grouped by `rbac_group_id`. - `string? RbacGroupName` Resolved RBAC group display name, alongside `rbac_group_id` when name resolution is available. Null if the group has been deleted or its name could not be resolved; `rbac_group_id` remains the stable key. - `string? UserID` Tagged user identifier (e.g. `user_...`). Present only when the request grouped by `user_id`. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.Artifacts; ArtifactListParams parameters = new() { Date = "2019-12-27" }; var page = await client.Beta.Organization.Analytics.Artifacts.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "artifact_type": "artifact_type", "artifacts_created_count": 0, "distinct_user_count": 0, "is_shared": true, "published_artifacts_created_count": 0, "product": "product", "rbac_group_id": "rbac_group_id", "rbac_group_name": "rbac_group_name", "user_id": "user_id" } ], "next_page": "next_page" } ``` ## Organization › Analytics › Usage Report ### Get Token Usage Over Time `UsageReportListPage Beta.Organization.Analytics.UsageReport.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/usage_report` Get token usage over time across a date range. Returns token usage bucketed by minute, hour, or day, optionally broken down by product, model, context window, inference region, or speed. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `UsageReportListParams parameters` - `required DateTimeOffset startingAt` (query parameter) Start of range, inclusive. RFC 3339 tz-aware. Must be within the last 365 days and no earlier than 2026-01-01T00:00:00Z. format: date-time - `BucketWidth bucketWidth` (query parameter) Time bucket granularity. - `Day("1d")` - `Hour("1h")` - `Minute("1m")` - `IReadOnlyList? claudeTagCategories` (query parameter) Filter to Claude Tag (Claude in Slack) usage in specific spend categories. Usage with no category never matches. `dm` usage is reported under the user's product rather than `claude-tag`, so combining this filter with `products[]=claude-tag` excludes it. Use `group_by[]=claude_tag_category` to break out per-category values. maxItems: 100 - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `IReadOnlyList? claudeTagUserIds` (query parameter) Filter to Claude Tag (Claude in Slack) usage attributed to specific Slack users, by Slack user ID (for example `U0123ABCDEF`), not claude.ai user ID. Usage that is not Claude Tag, and Claude Tag usage not attributed to a single user, never matches. Use `group_by[]=claude_tag_user_id` to break out per-user values. maxItems: 100 - `IReadOnlyList? contextWindows` (query parameter) Filter to specific context-window pricing tiers. Use `group_by[]=context_window` to break out per-tier values. maxItems: 100 - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `DateTimeOffset? endingAt` (query parameter) End of range, exclusive. When omitted, defaults to the earlier of now and `starting_at` + 31 days. The range may span at most 31 days. format: date-time - `IReadOnlyList? groupBy` (query parameter) Dimensions to break each time bucket out by. Defaults to no grouping (one total per bucket). Each bucket reports at most its top 100 groups; a group beyond that cap has no row in that bucket (there is no remainder row), so grouped buckets are not exhaustive when a dimension has more than 100 distinct values. maxItems: 100 - `ClaudeTagCategory("claude_tag_category")` - `ClaudeTagUserID("claude_tag_user_id")` - `ContextWindow("context_window")` - `InferenceGeo("inference_geo")` - `Model("model")` - `Product("product")` - `RbacGroupID("rbac_group_id")` - `SlackChannelID("slack_channel_id")` - `Speed("speed")` - `IReadOnlyList? inferenceGeos` (query parameter) Filter to specific inference regions. `not_available` matches rows where the region is unset. Use `group_by[]=inference_geo` to break out per-region values. maxItems: 100 - `Global("global")` - `NotAvailable("not_available")` - `Us("us")` - `long? limit` (query parameter) Maximum number of time buckets per page. Defaults and caps vary by `bucket_width` (`1d`: default 7, max 31; `1h`: default 24, max 168; `1m`: default 60, max 256). minimum: 1 - `IReadOnlyList? models` (query parameter) Models to include. Defaults to all models. Use `group_by[]=model` to break out per-model values. maxItems: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `IReadOnlyList? products` (query parameter) Product surfaces to include. Defaults to all products. Use `group_by[]=product` to break out per-product values. maxItems: 100 - `Chat("chat")` - `ChatCoworkUnified("chat_cowork_unified")` - `ClaudeTag("claude-tag")` - `ClaudeCode("claude_code")` - `ClaudeDesign("claude_design")` - `ClaudeInChrome("claude_in_chrome")` - `Cowork("cowork")` - `OfficeAgent("office_agent")` - `IReadOnlyList? rbacGroupIds` (query parameter) Filter to usage attributed to specific RBAC groups. Accepts tagged RBAC group IDs (`rbac_group_...`) or bare group UUIDs. A row matches when the user belonged to any of the listed groups on the (UTC) day the usage occurred; usage with no group attribution never matches. maxItems: 100 - `IReadOnlyList? slackChannelIds` (query parameter) Filter to usage originating from specific Slack channels. Use `group_by[]=slack_channel_id` to break out per-channel values. maxItems: 100 - `IReadOnlyList? speeds` (query parameter) Filter to fast or standard inference mode. Use `group_by[]=speed` to break out per-mode values. maxItems: 100 - `Fast("fast")` - `Standard("standard")` - `IReadOnlyList? userIds` (query parameter) Filter to specific users by tagged user ID. maxItems: 100 #### Returns - `class BetaAnalyticsUsageReportTimeBucket` - `required DateTimeOffset EndingAt` End of the time bucket (exclusive) in RFC 3339 format. format: date-time - `required IReadOnlyList Results` Rows for this time bucket. Empty when the bucket has no data; otherwise a single combined row when `group_by[]` is omitted, or one row per group (subject to the per-bucket group cap described on the `group_by[]` parameter). - `required BetaCacheCreation CacheCreation` The number of input tokens for cache creation. - `required long Ephemeral1hInputTokens` The number of input tokens used to create the 1 hour cache entry. minimum: 0 - `required long Ephemeral5mInputTokens` The number of input tokens used to create the 5 minute cache entry. minimum: 0 - `required long CacheReadInputTokens` The number of input tokens read from the cache. - `required BetaAnalyticsClaudeTagCategory? ClaudeTagCategory` Claude Tag (Claude in Slack) spend category: `engaged` (a person addressed Claude in a channel or thread), `proactive` (Claude responded without being addressed), `scheduled` (a scheduled routine ran), `monitoring` (Claude watching a channel it was asked to monitor), or `dm` (direct messages with Claude). Populated only when `claude_tag_category` is in `group_by[]`; null for usage that is not Claude Tag. Direct-message usage is billed to the individual user and is reported under that user's product, not under `claude-tag`. New categories may be added over time. - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `required string? ClaudeTagUserID` Slack user ID (for example `U0123ABCDEF`) of the member the Claude Tag (Claude in Slack) usage is attributed to, not a claude.ai user ID. Populated only when `claude_tag_user_id` is in `group_by[]`; null for usage that is not Claude Tag and for Claude Tag usage that is not attributed to a single user (for example `monitoring`, and `proactive` usage Claude initiated), so per-user rows can sum to less than the Claude Tag total. Cannot be combined with `group_by[]=rbac_group_id` or the `rbac_group_ids[]` filter. - `required BetaAnalyticsContextWindow? ContextWindow` Context-window pricing tier of the usage or cost. Null unless `context_window` is in `group_by[]`; it can also be null on grouped rows with no context-window tier, such as code execution. - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `required InferenceGeo? InferenceGeo` Inference region of the usage or cost. Null unless `inference_geo` is in `group_by[]`; it can also be null on grouped rows where the region is not set (the rows that `inference_geos[]=not_available` matches). - `Global("global")` - `Us("us")` - `required string? Model` Model that produced the usage or cost, as a model name in the form the `models[]` filter accepts (for example, `claude-opus-5-5`). Null unless `model` is in `group_by[]`; it can also be null on grouped rows whose usage or cost is not attributed to a specific model, such as code execution. - `required long OutputTokens` The number of output tokens generated. - `required string? Product` Product surface that produced the usage or cost. Null unless product is in `group_by[]`; it can also be null on grouped rows whose usage cannot be attributed to a known surface. Values include `chat`, `claude_code`, `cowork`, `office_agent`, `claude_in_chrome`, `claude_design`, `claude-tag`, and `chat_cowork_unified`. `claude-tag` is Claude Tag, the Claude product in Slack. `chat_cowork_unified` is Chat and Cowork unified, Cowork's features inside claude.ai chat: chat and Cowork usage by a member who has it turned on is reported under this value instead of `chat` or `cowork`. It is accepted as a filter only on deployments that offer Chat and Cowork unified. Some unattributed usage is reported as "other". - `required string? RbacGroupID` RBAC group (team) the usage is attributed to, in the public tagged `rbac_group_...` spelling — the same spelling the activity resources use for this key, so the same team has one id across resources and it round-trips as an `rbac_group_ids[]` filter value. Populated only when `rbac_group_id` is in `group_by[]`. Any-membership semantics: a user in several groups contributes their full usage to each of those groups' rows, so the named-group rows overlap and their sum can exceed the org total. A null value is the single unassigned row: users in no group on that (UTC) day. For the true org total, run the same query without `group_by[]`. - `required long? Requests` Number of API requests in this row's scope. For sandbox / code-execution events, this counts execution spans rather than HTTP requests (these rows surface with `product: null`). - `required BetaAnalyticsServerToolUse ServerToolUse` Server-side tool usage metrics. - `required long WebSearchRequests` The number of web search requests made. - `required string? SlackChannelID` Slack channel the usage originated from. Populated only when `slack_channel_id` is in `group_by[]`; null for usage outside Slack (and for rows recorded before channel attribution was enabled). - `required Speed? Speed` Inference speed mode of the usage or cost: `fast` or `standard`. Null unless `speed` is in `group_by[]`. - `Fast("fast")` - `Standard("standard")` - `required long UncachedInputTokens` The number of uncached input tokens processed. - `required DateTimeOffset StartingAt` Start of the time bucket (inclusive) in RFC 3339 format. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.UsageReport; UsageReportListParams parameters = new() { StartingAt = DateTimeOffset.Parse("2019-12-27T18:11:19.117Z") }; var page = await client.Beta.Organization.Analytics.UsageReport.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "ending_at": "2019-12-27T18:11:19.117Z", "results": [ { "cache_creation": { "ephemeral_1h_input_tokens": 0, "ephemeral_5m_input_tokens": 0 }, "cache_read_input_tokens": 0, "claude_tag_category": "dm", "claude_tag_user_id": "U0123ABCDEF", "context_window": "0-200k", "inference_geo": "global", "model": "claude-opus-5-5", "output_tokens": 0, "product": "chat", "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "requests": 0, "server_tool_use": { "web_search_requests": 10 }, "slack_channel_id": "C0123ABCDEF", "speed": "fast", "uncached_input_tokens": 0 } ], "starting_at": "2019-12-27T18:11:19.117Z" } ], "data_refreshed_at": "2019-12-27T18:11:19.117Z", "has_more": true, "next_page": "next_page", "organization_id": "org_013FP9SaFPBg7Kw7fetjn6cF" } ``` ## Organization › Analytics › User Usage Report ### Get Per-User Token Usage `UserUsageReportListPage Beta.Organization.Analytics.UserUsageReport.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/user_usage_report` Get per-user token usage across a date range. Returns one row per user, ranked by the chosen token metric. Use this to see which users consume the most tokens. Only usage attributable to a seat user is included; for organization-wide totals including direct API-key and automation traffic, use the bucketed `/v1/organizations/analytics/usage_report` endpoint. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `UserUsageReportListParams parameters` - `required DateTimeOffset startingAt` (query parameter) Start of range, inclusive. RFC 3339 tz-aware. Must be within the last 365 days and no earlier than 2026-01-01T00:00:00Z. format: date-time - `BucketWidth? bucketWidth` (query parameter) Time-bucket granularity. When set, each row's `starting_at` and `ending_at` are populated and one actor may span several rows (one per time bucket with usage). The time bucket counts toward `limit`, so one page can return multiple rows for the same actor. `ending_at` is required when `bucket_width` is set, and with `bucket_width="1m"` the range may span at most 24 hours. When omitted, each row aggregates the full `[starting_at, ending_at)` range. - `Day("1d")` - `Hour("1h")` - `Minute("1m")` - `IReadOnlyList? claudeTagCategories` (query parameter) Filter to Claude Tag (Claude in Slack) usage in specific spend categories. Usage with no category never matches. `dm` usage is reported under the user's product rather than `claude-tag`, so combining this filter with `products[]=claude-tag` excludes it. Use `group_by[]=claude_tag_category` to break out per-category values. maxItems: 100 - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `IReadOnlyList? claudeTagUserIds` (query parameter) Filter to Claude Tag (Claude in Slack) usage attributed to specific Slack users, by Slack user ID (for example `U0123ABCDEF`), not claude.ai user ID. Usage that is not Claude Tag, and Claude Tag usage not attributed to a single user, never matches. Use `group_by[]=claude_tag_user_id` to break out per-user values. maxItems: 100 - `IReadOnlyList? contextWindows` (query parameter) Filter to specific context-window pricing tiers. Use `group_by[]=context_window` to break out per-tier values. maxItems: 100 - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `DateTimeOffset? endingAt` (query parameter) End of range, exclusive. When omitted, defaults to the earlier of now and `starting_at` + 31 days. The range may span at most 31 days. format: date-time - `bool excludeDeletedUsers` (query parameter) If true, omit rows for users who are deleted (`deleted: true`). A page may contain fewer than `limit` rows; use `has_more` and `next_page` to paginate as usual. - `IReadOnlyList? groupBy` (query parameter) Break each actor's row out by the given dimensions. Accepts the same values as the bucketed `/usage_report` endpoint. `limit` bounds (actor × time bucket × dimension) rows — with dimensions or `bucket_width` present, one actor may span several rows. maxItems: 100 - `ClaudeTagCategory("claude_tag_category")` - `ClaudeTagUserID("claude_tag_user_id")` - `ContextWindow("context_window")` - `InferenceGeo("inference_geo")` - `Model("model")` - `Product("product")` - `RbacGroupID("rbac_group_id")` - `SlackChannelID("slack_channel_id")` - `Speed("speed")` - `IReadOnlyList? inferenceGeos` (query parameter) Filter to specific inference regions. `not_available` matches rows where the region is unset. Use `group_by[]=inference_geo` to break out per-region values. maxItems: 100 - `Global("global")` - `NotAvailable("not_available")` - `Us("us")` - `long limit` (query parameter) Number of rows per page (1-1000, default 20). One row per actor unless `group_by[]` or `bucket_width` splits an actor across rows; `cost_type`/`token_type` fan-out rows (cost endpoint only) are the exception — they do not count toward this limit, so `data` can exceed it. minimum: 1, maximum: 1000 - `IReadOnlyList? models` (query parameter) Models to include. Defaults to all models. Use `group_by[]=model` to break out per-model values. maxItems: 100 - `Order order` (query parameter) Sort direction. Defaults to `desc`. - `Asc("asc")` - `Desc("desc")` - `OrderBy orderBy` (query parameter) Metric to rank actors by. Defaults to `total_tokens`. - `OutputTokens("output_tokens")` - `Requests("requests")` - `TotalTokens("total_tokens")` - `UncachedInputTokens("uncached_input_tokens")` - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `IReadOnlyList? products` (query parameter) Product surfaces to include. Defaults to all products. maxItems: 100 - `Chat("chat")` - `ChatCoworkUnified("chat_cowork_unified")` - `ClaudeTag("claude-tag")` - `ClaudeCode("claude_code")` - `ClaudeDesign("claude_design")` - `ClaudeInChrome("claude_in_chrome")` - `Cowork("cowork")` - `OfficeAgent("office_agent")` - `IReadOnlyList? rbacGroupIds` (query parameter) Filter to usage attributed to specific RBAC groups. Accepts tagged RBAC group IDs (`rbac_group_...`) or bare group UUIDs. A row matches when the user belonged to any of the listed groups on the (UTC) day the usage occurred; usage with no group attribution never matches. maxItems: 100 - `IReadOnlyList? slackChannelIds` (query parameter) Filter to usage originating from specific Slack channels. Use `group_by[]=slack_channel_id` to break out per-channel values. maxItems: 100 - `IReadOnlyList? speeds` (query parameter) Filter to fast or standard inference mode. Use `group_by[]=speed` to break out per-mode values. maxItems: 100 - `Fast("fast")` - `Standard("standard")` - `IReadOnlyList? userIds` (query parameter) Filter to specific users by tagged user ID. maxItems: 100 #### Returns - `class BetaAnalyticsUsageUsersItem` - `required BetaAnalyticsUserActor Actor` The user this row's usage or cost is attributed to. Always a `user_actor`. - `JsonElement Type = "user_actor"` Actor type. Always `"user_actor"`. - `required bool Deleted` True when the account has been deleted, or when the user is no longer a member of the organization or its associated organizations (for example, their membership was removed or they were deprovisioned via your identity provider). `email_address` stays populated for removed users and is null when the account has been deleted. `name` follows the rules described on that field. The `user_id` is still populated for reconciliation. - `required string? EmailAddress` The user's email address, including for users who are no longer members of the organization or its associated organizations. Null when the account has been deleted (check `deleted`) and for system-minted service accounts, which have no person's mailbox behind them (check `name`). - `required string? Name` The user's full name. Null when the user has not set a name. Returns `"Deleted User"` when the account itself has been deleted, or when the user is no longer a member of the organization or its associated organizations and the organization has chosen to hide the names of removed users. Otherwise, the name stays populated for removed users. Rows for system-minted service accounts render the service name (for example, `"Claude Security"` for usage by Anthropic's security-patching service) or null. - `required string UserID` Tagged user ID. - `required BetaCacheCreation CacheCreation` The number of input tokens for cache creation. - `required long Ephemeral1hInputTokens` The number of input tokens used to create the 1 hour cache entry. minimum: 0 - `required long Ephemeral5mInputTokens` The number of input tokens used to create the 5 minute cache entry. minimum: 0 - `required long CacheReadInputTokens` The number of input tokens read from the cache. - `required BetaAnalyticsClaudeTagCategory? ClaudeTagCategory` Claude Tag (Claude in Slack) spend category: `engaged` (a person addressed Claude in a channel or thread), `proactive` (Claude responded without being addressed), `scheduled` (a scheduled routine ran), `monitoring` (Claude watching a channel it was asked to monitor), or `dm` (direct messages with Claude). Populated only when `claude_tag_category` is in `group_by[]`; null for usage that is not Claude Tag. Direct-message usage is billed to the individual user and is reported under that user's product, not under `claude-tag`. New categories may be added over time. - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `required string? ClaudeTagUserID` Slack user ID (for example `U0123ABCDEF`) of the member the Claude Tag (Claude in Slack) usage is attributed to, not a claude.ai user ID. Populated only when `claude_tag_user_id` is in `group_by[]`; null for usage that is not Claude Tag and for Claude Tag usage that is not attributed to a single user (for example `monitoring`, and `proactive` usage Claude initiated), so per-user rows can sum to less than the Claude Tag total. Cannot be combined with `group_by[]=rbac_group_id` or the `rbac_group_ids[]` filter. - `required BetaAnalyticsContextWindow? ContextWindow` Context-window pricing tier of the usage or cost. Null unless `context_window` is in `group_by[]`; it can also be null on grouped rows with no context-window tier, such as code execution. - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `required DateTimeOffset? EndingAt` End of the row's UTC time bucket (exclusive), as an RFC 3339 timestamp; equal to `starting_at` plus one `bucket_width`. Null unless `bucket_width` is set. format: date-time - `required InferenceGeo? InferenceGeo` Inference region of the usage or cost. Null unless `inference_geo` is in `group_by[]`; it can also be null on grouped rows where the region is not set (the rows that `inference_geos[]=not_available` matches). - `Global("global")` - `Us("us")` - `required string? Model` Model that produced the usage or cost, as a model name in the form the `models[]` filter accepts (for example, `claude-opus-5-5`). Null unless `model` is in `group_by[]`; it can also be null on grouped rows whose usage or cost is not attributed to a specific model, such as code execution. - `required long OutputTokens` The number of output tokens generated. - `required string? Product` Product surface that produced the usage or cost. Null unless product is in `group_by[]`; it can also be null on grouped rows whose usage cannot be attributed to a known surface. Values include `chat`, `claude_code`, `cowork`, `office_agent`, `claude_in_chrome`, `claude_design`, `claude-tag`, and `chat_cowork_unified`. `claude-tag` is Claude Tag, the Claude product in Slack. `chat_cowork_unified` is Chat and Cowork unified, Cowork's features inside claude.ai chat: chat and Cowork usage by a member who has it turned on is reported under this value instead of `chat` or `cowork`. It is accepted as a filter only on deployments that offer Chat and Cowork unified. Some unattributed usage is reported as "other". - `required string? RbacGroupID` RBAC group (team) the usage is attributed to, in the public tagged `rbac_group_...` spelling — the same spelling the activity resources use for this key, so the same team has one id across resources and it round-trips as an `rbac_group_ids[]` filter value. Populated only when `rbac_group_id` is in `group_by[]`. Any-membership semantics: a user in several groups contributes their full usage to each of those groups' rows, so the named-group rows overlap and their sum can exceed the org total. A null value is the single unassigned row: users in no group on that (UTC) day. For the true org total, run the same query without `group_by[]`. - `required long? Requests` Number of API requests in this row's scope. For sandbox / code-execution events, this counts execution spans rather than HTTP requests (these rows surface with `product: null`). - `required BetaAnalyticsServerToolUse ServerToolUse` Server-side tool usage metrics. - `required long WebSearchRequests` The number of web search requests made. - `required string? SlackChannelID` Slack channel the usage originated from. Populated only when `slack_channel_id` is in `group_by[]`; null for usage outside Slack (and for rows recorded before channel attribution was enabled). - `required Speed? Speed` Inference speed mode of the usage or cost: `fast` or `standard`. Null unless `speed` is in `group_by[]`. - `Fast("fast")` - `Standard("standard")` - `required DateTimeOffset? StartingAt` Start of the row's UTC time bucket (inclusive), as an RFC 3339 timestamp. Null unless `bucket_width` is set; without `bucket_width`, each row aggregates the full requested range. format: date-time - `required long TotalTokens` Total token count across all token types. This is the value the default `order_by` (`total_tokens`) sorts on. - `required long UncachedInputTokens` The number of uncached input tokens processed. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.UserUsageReport; UserUsageReportListParams parameters = new() { StartingAt = DateTimeOffset.Parse("2019-12-27T18:11:19.117Z") }; var page = await client.Beta.Organization.Analytics.UserUsageReport.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "actor": { "deleted": true, "email_address": "jane@example.com", "name": "Jane Smith", "type": "user_actor", "user_id": "user_01AbCdEfGhIjKlMnOpQrSt" }, "cache_creation": { "ephemeral_1h_input_tokens": 0, "ephemeral_5m_input_tokens": 0 }, "cache_read_input_tokens": 3200000, "claude_tag_category": "dm", "claude_tag_user_id": "U0123ABCDEF", "context_window": "0-200k", "ending_at": "2019-12-27T18:11:19.117Z", "inference_geo": "global", "model": "claude-opus-5-5", "output_tokens": 891000, "product": "chat", "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "requests": 128, "server_tool_use": { "web_search_requests": 10 }, "slack_channel_id": "C0123ABCDEF", "speed": "fast", "starting_at": "2019-12-27T18:11:19.117Z", "total_tokens": 5377000, "uncached_input_tokens": 1284500 } ], "data_refreshed_at": "2019-12-27T18:11:19.117Z", "has_more": true, "next_page": "next_page", "organization_id": "org_013FP9SaFPBg7Kw7fetjn6cF" } ``` ## Organization › Analytics › Cost Report ### Get Cost Over Time `CostReportListPage Beta.Organization.Analytics.CostReport.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/cost_report` Get cost in USD over time across a date range. Returns cost bucketed by minute, hour, or day, optionally broken down by product, model, context window, inference region, speed, cost type, or token type. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `CostReportListParams parameters` - `required DateTimeOffset startingAt` (query parameter) Start of range, inclusive. RFC 3339 tz-aware. Must be within the last 365 days and no earlier than 2026-01-01T00:00:00Z. format: date-time - `BucketWidth bucketWidth` (query parameter) Time bucket granularity. - `Day("1d")` - `Hour("1h")` - `Minute("1m")` - `IReadOnlyList? claudeTagCategories` (query parameter) Filter to Claude Tag (Claude in Slack) usage in specific spend categories. Usage with no category never matches. `dm` usage is reported under the user's product rather than `claude-tag`, so combining this filter with `products[]=claude-tag` excludes it. Use `group_by[]=claude_tag_category` to break out per-category values. maxItems: 100 - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `IReadOnlyList? claudeTagUserIds` (query parameter) Filter to Claude Tag (Claude in Slack) usage attributed to specific Slack users, by Slack user ID (for example `U0123ABCDEF`), not claude.ai user ID. Usage that is not Claude Tag, and Claude Tag usage not attributed to a single user, never matches. Use `group_by[]=claude_tag_user_id` to break out per-user values. maxItems: 100 - `IReadOnlyList? contextWindows` (query parameter) Filter to specific context-window pricing tiers. Use `group_by[]=context_window` to break out per-tier values. maxItems: 100 - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `DateTimeOffset? endingAt` (query parameter) End of range, exclusive. When omitted, defaults to the earlier of now and `starting_at` + 31 days. The range may span at most 31 days. format: date-time - `IReadOnlyList? groupBy` (query parameter) Dimensions to break each time bucket out by. Defaults to no grouping (one total per bucket). Each bucket reports at most its top 100 groups; a group beyond that cap has no row in that bucket (there is no remainder row), so grouped buckets are not exhaustive when a dimension has more than 100 distinct values. maxItems: 100 - `ClaudeTagCategory("claude_tag_category")` - `ClaudeTagUserID("claude_tag_user_id")` - `ContextWindow("context_window")` - `CostType("cost_type")` - `InferenceGeo("inference_geo")` - `Model("model")` - `Product("product")` - `RbacGroupID("rbac_group_id")` - `SlackChannelID("slack_channel_id")` - `Speed("speed")` - `TokenType("token_type")` - `IReadOnlyList? inferenceGeos` (query parameter) Filter to specific inference regions. `not_available` matches rows where the region is unset. Use `group_by[]=inference_geo` to break out per-region values. maxItems: 100 - `Global("global")` - `NotAvailable("not_available")` - `Us("us")` - `long? limit` (query parameter) Maximum number of time buckets per page. Defaults and caps vary by `bucket_width` (`1d`: default 7, max 31; `1h`: default 24, max 168; `1m`: default 60, max 256). minimum: 1 - `IReadOnlyList? models` (query parameter) Models to include. Defaults to all models. Use `group_by[]=model` to break out per-model values. maxItems: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `IReadOnlyList? products` (query parameter) Product surfaces to include. Defaults to all products. Use `group_by[]=product` to break out per-product values. maxItems: 100 - `Chat("chat")` - `ChatCoworkUnified("chat_cowork_unified")` - `ClaudeTag("claude-tag")` - `ClaudeCode("claude_code")` - `ClaudeDesign("claude_design")` - `ClaudeInChrome("claude_in_chrome")` - `Cowork("cowork")` - `OfficeAgent("office_agent")` - `IReadOnlyList? rbacGroupIds` (query parameter) Filter to usage attributed to specific RBAC groups. Accepts tagged RBAC group IDs (`rbac_group_...`) or bare group UUIDs. A row matches when the user belonged to any of the listed groups on the (UTC) day the usage occurred; usage with no group attribution never matches. maxItems: 100 - `IReadOnlyList? slackChannelIds` (query parameter) Filter to usage originating from specific Slack channels. Use `group_by[]=slack_channel_id` to break out per-channel values. maxItems: 100 - `IReadOnlyList? speeds` (query parameter) Filter to fast or standard inference mode. Use `group_by[]=speed` to break out per-mode values. maxItems: 100 - `Fast("fast")` - `Standard("standard")` - `IReadOnlyList? userIds` (query parameter) Filter to specific users by tagged user ID. maxItems: 100 #### Returns - `class BetaAnalyticsCostReportTimeBucket` - `required DateTimeOffset EndingAt` End of the time bucket (exclusive) in RFC 3339 format. format: date-time - `required IReadOnlyList Results` Rows for this time bucket. Empty when the bucket has no data; otherwise a single combined row when `group_by[]` is omitted, or one row per group (subject to the per-bucket group cap described on the `group_by[]` parameter). - `required string Amount` Amount (post-discount, pre-credit) in fractional cents. - `required BetaAnalyticsClaudeTagCategory? ClaudeTagCategory` Claude Tag (Claude in Slack) spend category: `engaged` (a person addressed Claude in a channel or thread), `proactive` (Claude responded without being addressed), `scheduled` (a scheduled routine ran), `monitoring` (Claude watching a channel it was asked to monitor), or `dm` (direct messages with Claude). Populated only when `claude_tag_category` is in `group_by[]`; null for usage that is not Claude Tag. Direct-message usage is billed to the individual user and is reported under that user's product, not under `claude-tag`. New categories may be added over time. - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `required string? ClaudeTagUserID` Slack user ID (for example `U0123ABCDEF`) of the member the Claude Tag (Claude in Slack) usage is attributed to, not a claude.ai user ID. Populated only when `claude_tag_user_id` is in `group_by[]`; null for usage that is not Claude Tag and for Claude Tag usage that is not attributed to a single user (for example `monitoring`, and `proactive` usage Claude initiated), so per-user rows can sum to less than the Claude Tag total. Cannot be combined with `group_by[]=rbac_group_id` or the `rbac_group_ids[]` filter. - `required BetaAnalyticsContextWindow? ContextWindow` Context-window pricing tier of the usage or cost. Null unless `context_window` is in `group_by[]`; it can also be null on grouped rows with no context-window tier, such as code execution. - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `required BetaAnalyticsCostType? CostType` Cost component when `group_by[]=cost_type`; null otherwise (amount is the combined total). - `CodeExecution("code_execution")` - `Tokens("tokens")` - `WebSearch("web_search")` - `required string Currency` Currency code for the cost amount. Currently always `"USD"`. - `required InferenceGeo? InferenceGeo` Inference region of the usage or cost. Null unless `inference_geo` is in `group_by[]`; it can also be null on grouped rows where the region is not set (the rows that `inference_geos[]=not_available` matches). - `Global("global")` - `Us("us")` - `required string ListAmount` List-price amount (pre-discount) in fractional cents. - `required string? Model` Model that produced the usage or cost, as a model name in the form the `models[]` filter accepts (for example, `claude-opus-5-5`). Null unless `model` is in `group_by[]`; it can also be null on grouped rows whose usage or cost is not attributed to a specific model, such as code execution. - `required string? Product` Product surface that produced the usage or cost. Null unless product is in `group_by[]`; it can also be null on grouped rows whose usage cannot be attributed to a known surface. Values include `chat`, `claude_code`, `cowork`, `office_agent`, `claude_in_chrome`, `claude_design`, `claude-tag`, and `chat_cowork_unified`. `claude-tag` is Claude Tag, the Claude product in Slack. `chat_cowork_unified` is Chat and Cowork unified, Cowork's features inside claude.ai chat: chat and Cowork usage by a member who has it turned on is reported under this value instead of `chat` or `cowork`. It is accepted as a filter only on deployments that offer Chat and Cowork unified. Some unattributed usage is reported as "other". - `required string? RbacGroupID` RBAC group (team) the usage is attributed to, in the public tagged `rbac_group_...` spelling — the same spelling the activity resources use for this key, so the same team has one id across resources and it round-trips as an `rbac_group_ids[]` filter value. Populated only when `rbac_group_id` is in `group_by[]`. Any-membership semantics: a user in several groups contributes their full usage to each of those groups' rows, so the named-group rows overlap and their sum can exceed the org total. A null value is the single unassigned row: users in no group on that (UTC) day. For the true org total, run the same query without `group_by[]`. - `required long? Requests` Number of API requests in this row's scope. Null when `group_by` includes `cost_type` or `token_type` (the count has no per-component attribution; read it from the ungrouped response). For sandbox / code-execution events, this counts execution spans rather than HTTP requests (these rows surface with `product: null`). - `required string? SlackChannelID` Slack channel the usage originated from. Populated only when `slack_channel_id` is in `group_by[]`; null for usage outside Slack (and for rows recorded before channel attribution was enabled). - `required Speed? Speed` Inference speed mode of the usage or cost: `fast` or `standard`. Null unless `speed` is in `group_by[]`. - `Fast("fast")` - `Standard("standard")` - `required BetaAnalyticsTokenType? TokenType` Token type when `group_by[]=token_type` and `cost_type=tokens`; null otherwise. - `CacheCreationEphemeral1hInputTokens("cache_creation.ephemeral_1h_input_tokens")` - `CacheCreationEphemeral5mInputTokens("cache_creation.ephemeral_5m_input_tokens")` - `CacheReadInputTokens("cache_read_input_tokens")` - `OutputTokens("output_tokens")` - `UncachedInputTokens("uncached_input_tokens")` - `required DateTimeOffset StartingAt` Start of the time bucket (inclusive) in RFC 3339 format. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.CostReport; CostReportListParams parameters = new() { StartingAt = DateTimeOffset.Parse("2019-12-27T18:11:19.117Z") }; var page = await client.Beta.Organization.Analytics.CostReport.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "ending_at": "2019-12-27T18:11:19.117Z", "results": [ { "amount": "amount", "claude_tag_category": "dm", "claude_tag_user_id": "U0123ABCDEF", "context_window": "0-200k", "cost_type": "code_execution", "currency": "USD", "inference_geo": "global", "list_amount": "list_amount", "model": "claude-opus-5-5", "product": "chat", "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "requests": 0, "slack_channel_id": "C0123ABCDEF", "speed": "fast", "token_type": "cache_creation.ephemeral_1h_input_tokens" } ], "starting_at": "2019-12-27T18:11:19.117Z" } ], "data_refreshed_at": "2019-12-27T18:11:19.117Z", "has_more": true, "next_page": "next_page", "organization_id": "org_013FP9SaFPBg7Kw7fetjn6cF" } ``` ## Organization › Analytics › User Cost Report ### Get Per-User Cost `UserCostReportListPage Beta.Organization.Analytics.UserCostReport.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/analytics/user_cost_report` Get per-user cost in USD across a date range. Returns one row per user, ranked by spend. Use this to see which users account for the most cost. Only cost attributable to a seat user is included; for organization-wide totals including direct API-key and automation traffic, use the bucketed `/v1/organizations/analytics/cost_report` endpoint. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. #### Parameters - `UserCostReportListParams parameters` - `required DateTimeOffset startingAt` (query parameter) Start of range, inclusive. RFC 3339 tz-aware. Must be within the last 365 days and no earlier than 2026-01-01T00:00:00Z. format: date-time - `BucketWidth? bucketWidth` (query parameter) Time-bucket granularity. When set, each row's `starting_at` and `ending_at` are populated and one actor may span several rows (one per time bucket with usage). The time bucket counts toward `limit`, so one page can return multiple rows for the same actor. `ending_at` is required when `bucket_width` is set, and with `bucket_width="1m"` the range may span at most 24 hours. When omitted, each row aggregates the full `[starting_at, ending_at)` range. - `Day("1d")` - `Hour("1h")` - `Minute("1m")` - `IReadOnlyList? claudeTagCategories` (query parameter) Filter to Claude Tag (Claude in Slack) usage in specific spend categories. Usage with no category never matches. `dm` usage is reported under the user's product rather than `claude-tag`, so combining this filter with `products[]=claude-tag` excludes it. Use `group_by[]=claude_tag_category` to break out per-category values. maxItems: 100 - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `IReadOnlyList? claudeTagUserIds` (query parameter) Filter to Claude Tag (Claude in Slack) usage attributed to specific Slack users, by Slack user ID (for example `U0123ABCDEF`), not claude.ai user ID. Usage that is not Claude Tag, and Claude Tag usage not attributed to a single user, never matches. Use `group_by[]=claude_tag_user_id` to break out per-user values. maxItems: 100 - `IReadOnlyList? contextWindows` (query parameter) Filter to specific context-window pricing tiers. Use `group_by[]=context_window` to break out per-tier values. maxItems: 100 - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `DateTimeOffset? endingAt` (query parameter) End of range, exclusive. When omitted, defaults to the earlier of now and `starting_at` + 31 days. The range may span at most 31 days. format: date-time - `bool excludeDeletedUsers` (query parameter) If true, omit rows for users who are deleted (`deleted: true`). A page may contain fewer than `limit` rows; use `has_more` and `next_page` to paginate as usual. - `IReadOnlyList? groupBy` (query parameter) Break each actor's row out by the given dimensions. Accepts the same values as the bucketed `/cost_report` endpoint. The `product`, `model`, `context_window`, `inference_geo`, and `speed` dimensions — and the time bucket, when `bucket_width` is set — count toward `limit`. `cost_type` and `token_type` do not: `cost_type` returns one row per cost component (tokens, web search, code execution); `token_type` returns one row per token type, each with `cost_type: "tokens"`; combining both returns the per-token-type rows plus the web-search and code-execution rows. A page can therefore contain more rows than `limit` when `cost_type` or `token_type` is requested. maxItems: 100 - `ClaudeTagCategory("claude_tag_category")` - `ClaudeTagUserID("claude_tag_user_id")` - `ContextWindow("context_window")` - `CostType("cost_type")` - `InferenceGeo("inference_geo")` - `Model("model")` - `Product("product")` - `RbacGroupID("rbac_group_id")` - `SlackChannelID("slack_channel_id")` - `Speed("speed")` - `TokenType("token_type")` - `IReadOnlyList? inferenceGeos` (query parameter) Filter to specific inference regions. `not_available` matches rows where the region is unset. Use `group_by[]=inference_geo` to break out per-region values. maxItems: 100 - `Global("global")` - `NotAvailable("not_available")` - `Us("us")` - `long limit` (query parameter) Number of rows per page (1-1000, default 20). One row per actor unless `group_by[]` or `bucket_width` splits an actor across rows; `cost_type`/`token_type` fan-out rows (cost endpoint only) are the exception — they do not count toward this limit, so `data` can exceed it. minimum: 1, maximum: 1000 - `IReadOnlyList? models` (query parameter) Models to include. Defaults to all models. Use `group_by[]=model` to break out per-model values. maxItems: 100 - `Order order` (query parameter) Sort direction. Defaults to `desc`. - `Asc("asc")` - `Desc("desc")` - `OrderBy orderBy` (query parameter) Metric to rank actors by. Defaults to `amount`. - `Amount("amount")` - `ListAmount("list_amount")` - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `IReadOnlyList? products` (query parameter) Product surfaces to include. Defaults to all products. maxItems: 100 - `Chat("chat")` - `ChatCoworkUnified("chat_cowork_unified")` - `ClaudeTag("claude-tag")` - `ClaudeCode("claude_code")` - `ClaudeDesign("claude_design")` - `ClaudeInChrome("claude_in_chrome")` - `Cowork("cowork")` - `OfficeAgent("office_agent")` - `IReadOnlyList? rbacGroupIds` (query parameter) Filter to usage attributed to specific RBAC groups. Accepts tagged RBAC group IDs (`rbac_group_...`) or bare group UUIDs. A row matches when the user belonged to any of the listed groups on the (UTC) day the usage occurred; usage with no group attribution never matches. maxItems: 100 - `IReadOnlyList? slackChannelIds` (query parameter) Filter to usage originating from specific Slack channels. Use `group_by[]=slack_channel_id` to break out per-channel values. maxItems: 100 - `IReadOnlyList? speeds` (query parameter) Filter to fast or standard inference mode. Use `group_by[]=speed` to break out per-mode values. maxItems: 100 - `Fast("fast")` - `Standard("standard")` - `IReadOnlyList? userIds` (query parameter) Filter to specific users by tagged user ID. maxItems: 100 #### Returns - `class BetaAnalyticsCostUsersItem` - `required BetaAnalyticsUserActor Actor` The user this row's usage or cost is attributed to. Always a `user_actor`. - `JsonElement Type = "user_actor"` Actor type. Always `"user_actor"`. - `required bool Deleted` True when the account has been deleted, or when the user is no longer a member of the organization or its associated organizations (for example, their membership was removed or they were deprovisioned via your identity provider). `email_address` stays populated for removed users and is null when the account has been deleted. `name` follows the rules described on that field. The `user_id` is still populated for reconciliation. - `required string? EmailAddress` The user's email address, including for users who are no longer members of the organization or its associated organizations. Null when the account has been deleted (check `deleted`) and for system-minted service accounts, which have no person's mailbox behind them (check `name`). - `required string? Name` The user's full name. Null when the user has not set a name. Returns `"Deleted User"` when the account itself has been deleted, or when the user is no longer a member of the organization or its associated organizations and the organization has chosen to hide the names of removed users. Otherwise, the name stays populated for removed users. Rows for system-minted service accounts render the service name (for example, `"Claude Security"` for usage by Anthropic's security-patching service) or null. - `required string UserID` Tagged user ID. - `required string Amount` Amount (post-discount, pre-credit) in fractional cents (minor units). - `required BetaAnalyticsClaudeTagCategory? ClaudeTagCategory` Claude Tag (Claude in Slack) spend category: `engaged` (a person addressed Claude in a channel or thread), `proactive` (Claude responded without being addressed), `scheduled` (a scheduled routine ran), `monitoring` (Claude watching a channel it was asked to monitor), or `dm` (direct messages with Claude). Populated only when `claude_tag_category` is in `group_by[]`; null for usage that is not Claude Tag. Direct-message usage is billed to the individual user and is reported under that user's product, not under `claude-tag`. New categories may be added over time. - `Dm("dm")` - `Engaged("engaged")` - `Monitoring("monitoring")` - `Proactive("proactive")` - `Scheduled("scheduled")` - `required string? ClaudeTagUserID` Slack user ID (for example `U0123ABCDEF`) of the member the Claude Tag (Claude in Slack) usage is attributed to, not a claude.ai user ID. Populated only when `claude_tag_user_id` is in `group_by[]`; null for usage that is not Claude Tag and for Claude Tag usage that is not attributed to a single user (for example `monitoring`, and `proactive` usage Claude initiated), so per-user rows can sum to less than the Claude Tag total. Cannot be combined with `group_by[]=rbac_group_id` or the `rbac_group_ids[]` filter. - `required BetaAnalyticsContextWindow? ContextWindow` Context-window pricing tier of the usage or cost. Null unless `context_window` is in `group_by[]`; it can also be null on grouped rows with no context-window tier, such as code execution. - `From0To200k("0-200k")` - `From200kTo1M("200k-1M")` - `required BetaAnalyticsCostType? CostType` Cost component breakdown; null when returning the combined total. - `CodeExecution("code_execution")` - `Tokens("tokens")` - `WebSearch("web_search")` - `required string Currency` Currency code for the cost amount. Currently always `"USD"`. - `required DateTimeOffset? EndingAt` End of the row's UTC time bucket (exclusive), as an RFC 3339 timestamp; equal to `starting_at` plus one `bucket_width`. Null unless `bucket_width` is set. format: date-time - `required InferenceGeo? InferenceGeo` Inference region of the usage or cost. Null unless `inference_geo` is in `group_by[]`; it can also be null on grouped rows where the region is not set (the rows that `inference_geos[]=not_available` matches). - `Global("global")` - `Us("us")` - `required string ListAmount` List-price amount (pre-discount) in fractional cents. - `required string? Model` Model that produced the usage or cost, as a model name in the form the `models[]` filter accepts (for example, `claude-opus-5-5`). Null unless `model` is in `group_by[]`; it can also be null on grouped rows whose usage or cost is not attributed to a specific model, such as code execution. - `required string? Product` Product surface that produced the usage or cost. Null unless product is in `group_by[]`; it can also be null on grouped rows whose usage cannot be attributed to a known surface. Values include `chat`, `claude_code`, `cowork`, `office_agent`, `claude_in_chrome`, `claude_design`, `claude-tag`, and `chat_cowork_unified`. `claude-tag` is Claude Tag, the Claude product in Slack. `chat_cowork_unified` is Chat and Cowork unified, Cowork's features inside claude.ai chat: chat and Cowork usage by a member who has it turned on is reported under this value instead of `chat` or `cowork`. It is accepted as a filter only on deployments that offer Chat and Cowork unified. Some unattributed usage is reported as "other". - `required string? RbacGroupID` RBAC group (team) the usage is attributed to, in the public tagged `rbac_group_...` spelling — the same spelling the activity resources use for this key, so the same team has one id across resources and it round-trips as an `rbac_group_ids[]` filter value. Populated only when `rbac_group_id` is in `group_by[]`. Any-membership semantics: a user in several groups contributes their full usage to each of those groups' rows, so the named-group rows overlap and their sum can exceed the org total. A null value is the single unassigned row: users in no group on that (UTC) day. For the true org total, run the same query without `group_by[]`. - `required long? Requests` Number of API requests in this row's scope. Null when `group_by` includes `cost_type` or `token_type` (the count has no per-component attribution; read it from the ungrouped response). For sandbox / code-execution events, this counts execution spans rather than HTTP requests (these rows surface with `product: null`). - `required string? SlackChannelID` Slack channel the usage originated from. Populated only when `slack_channel_id` is in `group_by[]`; null for usage outside Slack (and for rows recorded before channel attribution was enabled). - `required Speed? Speed` Inference speed mode of the usage or cost: `fast` or `standard`. Null unless `speed` is in `group_by[]`. - `Fast("fast")` - `Standard("standard")` - `required DateTimeOffset? StartingAt` Start of the row's UTC time bucket (inclusive), as an RFC 3339 timestamp. Null unless `bucket_width` is set; without `bucket_width`, each row aggregates the full requested range. format: date-time - `required BetaAnalyticsTokenType? TokenType` Token type when `cost_type` is `tokens`; null otherwise. - `CacheCreationEphemeral1hInputTokens("cache_creation.ephemeral_1h_input_tokens")` - `CacheCreationEphemeral5mInputTokens("cache_creation.ephemeral_5m_input_tokens")` - `CacheReadInputTokens("cache_read_input_tokens")` - `OutputTokens("output_tokens")` - `UncachedInputTokens("uncached_input_tokens")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Analytics.UserCostReport; UserCostReportListParams parameters = new() { StartingAt = DateTimeOffset.Parse("2019-12-27T18:11:19.117Z") }; var page = await client.Beta.Organization.Analytics.UserCostReport.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "actor": { "deleted": true, "email_address": "jane@example.com", "name": "Jane Smith", "type": "user_actor", "user_id": "user_01AbCdEfGhIjKlMnOpQrSt" }, "amount": "41280.000000", "claude_tag_category": "dm", "claude_tag_user_id": "U0123ABCDEF", "context_window": "0-200k", "cost_type": "code_execution", "currency": "USD", "ending_at": "2019-12-27T18:11:19.117Z", "inference_geo": "global", "list_amount": "51600.000000", "model": "claude-opus-5-5", "product": "chat", "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "requests": 128, "slack_channel_id": "C0123ABCDEF", "speed": "fast", "starting_at": "2019-12-27T18:11:19.117Z", "token_type": "cache_creation.ephemeral_1h_input_tokens" } ], "data_refreshed_at": "2019-12-27T18:11:19.117Z", "has_more": true, "next_page": "next_page", "organization_id": "org_013FP9SaFPBg7Kw7fetjn6cF" } ``` ## Organization › Spend Limits ### Set Spend Limit `BetaSpendLimit Beta.Organization.SpendLimits.Set(parameters, cancellationToken = default)` **POST** `/v1/organizations/spend_limits` Set a spend limit. Upsert keyed on (scope, period): setting a limit that already exists overwrites it in place. A Claude Enterprise organization sets `user` limits. Its seat-tier, group, and organization-level defaults are configured in claude.ai. A Claude Console organization sets `organization` and `workspace` limits, which are monthly and always carry an amount. Setting those limits is in an early access preview. To request access, contact your Anthropic account team. #### Parameters - `SpendLimitSetParams parameters` - `required string? amount` Limit amount as a non-negative integer decimal string in the minor unit of the organization's billing currency (cents for USD): "50000" is $500.00. `null` sets an explicit no-limit override for this scope and `period` only — each period resolves independently, so caps for other periods still apply. - `required Scope scope` What the limit applies to. Claude Enterprise organizations set `user` limits. Claude Console organizations set `organization` and `workspace` limits. Any other combination returns 400. Setting `organization` and `workspace` limits through the API is in an early access preview. To request access, contact your Anthropic account team. - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `BetaSpendLimitPeriod period` - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaSpendLimit` A configured spend limit: a cap on metered spend for one scope and period. - `JsonElement Type = "spend_limit"` Object type. Always `spend_limit`. - `required string ID` Unique tagged ID of the spend limit (`spl_...`). - `required string? Amount` Limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD): "50000" is $500.00. `null` means no numeric cap is configured at this scope — see the effective report for whether a limit applies. - `required DateTimeOffset CreatedAt` RFC 3339 datetime at which the spend limit was created. format: date-time - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount`. - `required bool IsEnabled` Read-only. `false` when extra usage is switched off for this organization (`organization` limit); `amount` is kept and applies again when it's switched back on. Always `true` for other limits. - `required BetaSpendLimitPeriod Period` Length of the window the limit resets over. `amount` caps spend within each period. - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required Scope Scope` What the limit applies to. A tagged union on `type`; each variant carries the identifier for its scope. - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required DateTimeOffset UpdatedAt` RFC 3339 datetime at which the spend limit was last modified. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits; SpendLimitSetParams parameters = new() { Amount = "50000", Scope = new BetaSpendLimitUserScope("user_01WCz1FkmYMm4gnmykNKUu3Q"), }; var betaSpendLimit = await client.Beta.Organization.SpendLimits.Set(parameters); Console.WriteLine(betaSpendLimit); ``` ##### Response (200) ```json { "id": "id", "amount": "50000", "created_at": "2019-12-27T18:11:19.117Z", "currency": "USD", "is_enabled": true, "period": "daily", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "type": "spend_limit", "updated_at": "2019-12-27T18:11:19.117Z" } ``` ### Get Spend Limit `BetaSpendLimit Beta.Organization.SpendLimits.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/spend_limits/{spend_limit_id}` Retrieve a spend limit by ID. #### Parameters - `SpendLimitRetrieveParams parameters` - `required string spendLimitID` (path parameter) ID of the Spend Limit. #### Returns - `class BetaSpendLimit` A configured spend limit: a cap on metered spend for one scope and period. - `JsonElement Type = "spend_limit"` Object type. Always `spend_limit`. - `required string ID` Unique tagged ID of the spend limit (`spl_...`). - `required string? Amount` Limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD): "50000" is $500.00. `null` means no numeric cap is configured at this scope — see the effective report for whether a limit applies. - `required DateTimeOffset CreatedAt` RFC 3339 datetime at which the spend limit was created. format: date-time - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount`. - `required bool IsEnabled` Read-only. `false` when extra usage is switched off for this organization (`organization` limit); `amount` is kept and applies again when it's switched back on. Always `true` for other limits. - `required BetaSpendLimitPeriod Period` Length of the window the limit resets over. `amount` caps spend within each period. - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required Scope Scope` What the limit applies to. A tagged union on `type`; each variant carries the identifier for its scope. - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required DateTimeOffset UpdatedAt` RFC 3339 datetime at which the spend limit was last modified. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits; SpendLimitRetrieveParams parameters = new() { SpendLimitID = "spend_limit_id" }; var betaSpendLimit = await client.Beta.Organization.SpendLimits.Retrieve(parameters); Console.WriteLine(betaSpendLimit); ``` ##### Response (200) ```json { "id": "id", "amount": "50000", "created_at": "2019-12-27T18:11:19.117Z", "currency": "USD", "is_enabled": true, "period": "daily", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "type": "spend_limit", "updated_at": "2019-12-27T18:11:19.117Z" } ``` ### Delete Spend Limit `SpendLimitDeleteResponse Beta.Organization.SpendLimits.Delete(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/spend_limits/{spend_limit_id}` Delete a spend limit. For a Claude Enterprise organization, this deletes a per-user override, and the member falls back to any inherited spend limit at that period. Its seat-tier, group, and organization-level rows cannot be deleted via this endpoint. A Claude Console organization deletes its organization and workspace limits, but not its `usage_tier` limit. Deleting organization and workspace limits through the API is in an early access preview. #### Parameters - `SpendLimitDeleteParams parameters` - `required string spendLimitID` (path parameter) ID of the Spend Limit. #### Returns - `class SpendLimitDeleteResponse` - `JsonElement Type = "spend_limit_deleted"` - `required string ID` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits; SpendLimitDeleteParams parameters = new() { SpendLimitID = "spend_limit_id" }; var spendLimit = await client.Beta.Organization.SpendLimits.Delete(parameters); Console.WriteLine(spendLimit); ``` ##### Response (200) ```json { "id": "id", "type": "spend_limit_deleted" } ``` ### List Spend Limits `SpendLimitListPage Beta.Organization.SpendLimits.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/spend_limits` List the organization's spend limits. A Claude Console organization's limits, including any read-only `usage_tier` limit, come newest first. Listing them is in an early access preview. To request access, contact your Anthropic account team. A Claude Enterprise organization's limits are grouped by scope type, in the order `organization`, `seat_tier`, `rbac_group`, `organization_service`, `user`; within a type they come in a fixed order that is not creation order. #### Parameters - `SpendLimitListParams parameters` - `long limit` (query parameter) Maximum number of limits per page. Defaults to `20`. minimum: 1, maximum: 1000 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `IReadOnlyList? scopeType` (query parameter) Return only limits with these scope types. Omit for all. A scope type that doesn't apply to the organization gets a 400 error. maxItems: 100 - `Organization("organization")` - `OrganizationService("organization_service")` - `RbacGroup("rbac_group")` - `SeatTier("seat_tier")` - `UsageTier("usage_tier")` - `User("user")` - `Workspace("workspace")` - `string? workspaceID` (query parameter) Return only the limits whose `scope.workspace_id` is this workspace (`wrkspc_...`). Claude Console organizations only; other organizations get a 400 error. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `spend-limit-reads-2026-09-26` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaSpendLimit` A configured spend limit: a cap on metered spend for one scope and period. - `JsonElement Type = "spend_limit"` Object type. Always `spend_limit`. - `required string ID` Unique tagged ID of the spend limit (`spl_...`). - `required string? Amount` Limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD): "50000" is $500.00. `null` means no numeric cap is configured at this scope — see the effective report for whether a limit applies. - `required DateTimeOffset CreatedAt` RFC 3339 datetime at which the spend limit was created. format: date-time - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount`. - `required bool IsEnabled` Read-only. `false` when extra usage is switched off for this organization (`organization` limit); `amount` is kept and applies again when it's switched back on. Always `true` for other limits. - `required BetaSpendLimitPeriod Period` Length of the window the limit resets over. `amount` caps spend within each period. - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required Scope Scope` What the limit applies to. A tagged union on `type`; each variant carries the identifier for its scope. - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required DateTimeOffset UpdatedAt` RFC 3339 datetime at which the spend limit was last modified. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits; SpendLimitListParams parameters = new(); var page = await client.Beta.Organization.SpendLimits.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "id", "amount": "50000", "created_at": "2019-12-27T18:11:19.117Z", "currency": "USD", "is_enabled": true, "period": "daily", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "type": "spend_limit", "updated_at": "2019-12-27T18:11:19.117Z" } ], "next_page": "next_page" } ``` ## Organization › Spend Limits › Effective ### List Effective Spend Limits `EffectiveListPage Beta.Organization.SpendLimits.Effective.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/spend_limits/effective` List each member's effective spend limit and period-to-date spend. Returns one row per (member, period) the member resolves a spend limit for, with the `source` scope the spend limit was inherited from. Paginates by member, so a member's periods never split across pages. Supported for Claude Enterprise organizations only, not for Claude Console organizations. #### Parameters - `EffectiveListParams parameters` - `long limit` (query parameter) Maximum number of members per page. A member's period rows never split across pages, so a page may carry more rows than this. Defaults to `20`. minimum: 1, maximum: 1000 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page` field. - `IReadOnlyList? period` (query parameter) Restrict the report to these limit periods. Omit to return one row per period each member resolves a spend limit for. maxItems: 3 - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `IReadOnlyList? userIds` (query parameter) Restrict the report to these members, by tagged user ID (`user_...`). At most 100 entries. maxItems: 100 #### Returns - `class BetaSpendSummary` Per-member effective-limit report row (`GET /spend_limits/effective`). - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `JsonElement Type = "user_actor"` Actor type. Always `user_actor`. - `required bool Deleted` True only when the underlying account has been deleted. - `required string? EmailAddress` The user's email address. Null when the account is unavailable or has been deleted. - `required string? Name` The user's current display name. Null when the account is unavailable, has been deleted, or has no name set. - `required string UserID` Tagged ID of the user. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `JsonElement Type = "scoped_api_key_actor"` - `required string ScopedApiKeyID` - `required string? Amount` Effective limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD). `null` means no limit applies for this row's `period` — each period resolves independently, so another period may still cap this member. - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount` and `period_to_date_spend`. - `required BetaSpendLimitPeriod Period` Period this row's effective limit and spend are reported for. - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required string PeriodToDateSpend` The member's spend so far in the current period, as a non-negative decimal string in the minor unit of `currency` (cents for USD). May carry fractional minor units up to three decimal places (e.g. `"12050.5"`) — metered usage is not rounded to whole cents. Reads as `"0"` when the spend reading is temporarily unavailable. - `required Scope Scope` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required Source Source` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `class BetaSpendLimitSeatTierScope` - `class BetaSpendLimitRbacGroupScope` - `class BetaSpendLimitOrganizationServiceScope` - `class BetaSpendLimitOrganizationScope` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `required string SpendLimitID` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits.Effective; EffectiveListParams parameters = new(); var page = await client.Beta.Organization.SpendLimits.Effective.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "amount": "50000", "currency": "USD", "period": "daily", "period_to_date_spend": "12050.5", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "source": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_limit_id": "spend_limit_id" } ], "next_page": "next_page" } ``` ## Organization › Spend Limits › Increase Requests ### List Spend Limit Increase Requests `IncreaseRequestListPage Beta.Organization.SpendLimits.IncreaseRequests.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/spend_limit_increase_requests` List spend limit increase requests, most recent first. Pending requests include a live `spend_summary` for the requester. Requests whose requester is no longer a member are excluded. #### Parameters - `IncreaseRequestListParams parameters` - `IReadOnlyList? actorIds` (query parameter) Filter by requester, as `user_...` tagged IDs. - `long limit` (query parameter) minimum: 1, maximum: 1000 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList? status` (query parameter) Filter by status. Omit to return all. - `Approved("approved")` - `Denied("denied")` - `Pending("pending")` #### Returns - `class BetaSpendLimitIncreaseRequest` - `JsonElement Type = "spend_limit_increase_request"` - `required string ID` - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `JsonElement Type = "user_actor"` Actor type. Always `user_actor`. - `required bool Deleted` True only when the underlying account has been deleted. - `required string? EmailAddress` The user's email address. Null when the account is unavailable or has been deleted. - `required string? Name` The user's current display name. Null when the account is unavailable, has been deleted, or has no name set. - `required string UserID` Tagged ID of the user. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `JsonElement Type = "scoped_api_key_actor"` - `required string ScopedApiKeyID` - `required DateTimeOffset CreatedAt` format: date-time - `required BetaSpendLimitPeriod Period` - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required DateTimeOffset? ResolvedAt` format: date-time - `required ResolvedBy? ResolvedBy` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required BetaSpendSummary? SpendSummary` Per-member effective-limit report row (`GET /spend_limits/effective`). - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required string? Amount` Effective limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD). `null` means no limit applies for this row's `period` — each period resolves independently, so another period may still cap this member. - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount` and `period_to_date_spend`. - `required BetaSpendLimitPeriod Period` Period this row's effective limit and spend are reported for. - `required string PeriodToDateSpend` The member's spend so far in the current period, as a non-negative decimal string in the minor unit of `currency` (cents for USD). May carry fractional minor units up to three decimal places (e.g. `"12050.5"`) — metered usage is not rounded to whole cents. Reads as `"0"` when the spend reading is temporarily unavailable. - `required Scope Scope` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required Source Source` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `class BetaSpendLimitSeatTierScope` - `class BetaSpendLimitRbacGroupScope` - `class BetaSpendLimitOrganizationServiceScope` - `class BetaSpendLimitOrganizationScope` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `required string SpendLimitID` - `required BetaSpendLimitIncreaseRequestStatus Status` - `Approved("approved")` - `Denied("denied")` - `Pending("pending")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits.IncreaseRequests; IncreaseRequestListParams parameters = new(); var page = await client.Beta.Organization.SpendLimits.IncreaseRequests.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "id", "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "created_at": "2019-12-27T18:11:19.117Z", "period": "daily", "resolved_at": "2019-12-27T18:11:19.117Z", "resolved_by": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_summary": { "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "amount": "50000", "currency": "USD", "period": "daily", "period_to_date_spend": "12050.5", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "source": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_limit_id": "spend_limit_id" }, "status": "approved", "type": "spend_limit_increase_request" } ], "next_page": "next_page" } ``` ### Get Spend Limit Increase Request `BetaSpendLimitIncreaseRequest Beta.Organization.SpendLimits.IncreaseRequests.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}` Retrieve a spend limit increase request. While `pending`, the response includes a live `spend_summary` for the requester at the request's period. #### Parameters - `IncreaseRequestRetrieveParams parameters` - `required string spendLimitIncreaseRequestID` (path parameter) ID of the spend limit increase request. #### Returns - `class BetaSpendLimitIncreaseRequest` - `JsonElement Type = "spend_limit_increase_request"` - `required string ID` - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `JsonElement Type = "user_actor"` Actor type. Always `user_actor`. - `required bool Deleted` True only when the underlying account has been deleted. - `required string? EmailAddress` The user's email address. Null when the account is unavailable or has been deleted. - `required string? Name` The user's current display name. Null when the account is unavailable, has been deleted, or has no name set. - `required string UserID` Tagged ID of the user. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `JsonElement Type = "scoped_api_key_actor"` - `required string ScopedApiKeyID` - `required DateTimeOffset CreatedAt` format: date-time - `required BetaSpendLimitPeriod Period` - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required DateTimeOffset? ResolvedAt` format: date-time - `required ResolvedBy? ResolvedBy` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required BetaSpendSummary? SpendSummary` Per-member effective-limit report row (`GET /spend_limits/effective`). - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required string? Amount` Effective limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD). `null` means no limit applies for this row's `period` — each period resolves independently, so another period may still cap this member. - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount` and `period_to_date_spend`. - `required BetaSpendLimitPeriod Period` Period this row's effective limit and spend are reported for. - `required string PeriodToDateSpend` The member's spend so far in the current period, as a non-negative decimal string in the minor unit of `currency` (cents for USD). May carry fractional minor units up to three decimal places (e.g. `"12050.5"`) — metered usage is not rounded to whole cents. Reads as `"0"` when the spend reading is temporarily unavailable. - `required Scope Scope` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required Source Source` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `class BetaSpendLimitSeatTierScope` - `class BetaSpendLimitRbacGroupScope` - `class BetaSpendLimitOrganizationServiceScope` - `class BetaSpendLimitOrganizationScope` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `required string SpendLimitID` - `required BetaSpendLimitIncreaseRequestStatus Status` - `Approved("approved")` - `Denied("denied")` - `Pending("pending")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits.IncreaseRequests; IncreaseRequestRetrieveParams parameters = new() { SpendLimitIncreaseRequestID = "spend_limit_increase_request_id" }; var betaSpendLimitIncreaseRequest = await client.Beta.Organization.SpendLimits.IncreaseRequests.Retrieve(parameters); Console.WriteLine(betaSpendLimitIncreaseRequest); ``` ##### Response (200) ```json { "id": "id", "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "created_at": "2019-12-27T18:11:19.117Z", "period": "daily", "resolved_at": "2019-12-27T18:11:19.117Z", "resolved_by": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_summary": { "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "amount": "50000", "currency": "USD", "period": "daily", "period_to_date_spend": "12050.5", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "source": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_limit_id": "spend_limit_id" }, "status": "approved", "type": "spend_limit_increase_request" } ``` ### Approve Spend Limit Increase Request `IncreaseRequestApproveResponse Beta.Organization.SpendLimits.IncreaseRequests.Approve(parameters, cancellationToken = default)` **POST** `/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}/approve` Approve a pending spend limit increase request. Writes a per-user spend limit at `amount` for the requester and transitions the request to `approved`. `period` defaults to the period the member was blocked on. Anthropic emails the requester unless `suppress_notification` is set. #### Parameters - `IncreaseRequestApproveParams parameters` - `required string spendLimitIncreaseRequestID` (path parameter) ID of the spend limit increase request. - `required string amount` New per-user spend limit as a non-negative integer decimal string (minor units). - `BetaSpendLimitPeriod? period` - `bool suppressNotification` #### Returns - `class IncreaseRequestApproveResponse` - `JsonElement Type = "spend_limit_increase_request"` - `required string ID` - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `JsonElement Type = "user_actor"` Actor type. Always `user_actor`. - `required bool Deleted` True only when the underlying account has been deleted. - `required string? EmailAddress` The user's email address. Null when the account is unavailable or has been deleted. - `required string? Name` The user's current display name. Null when the account is unavailable, has been deleted, or has no name set. - `required string UserID` Tagged ID of the user. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `JsonElement Type = "scoped_api_key_actor"` - `required string ScopedApiKeyID` - `required DateTimeOffset CreatedAt` format: date-time - `required BetaSpendLimitPeriod Period` - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required DateTimeOffset? ResolvedAt` format: date-time - `required ResolvedBy? ResolvedBy` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required BetaSpendLimit SpendLimit` A configured spend limit: a cap on metered spend for one scope and period. - `JsonElement Type = "spend_limit"` Object type. Always `spend_limit`. - `required string ID` Unique tagged ID of the spend limit (`spl_...`). - `required string? Amount` Limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD): "50000" is $500.00. `null` means no numeric cap is configured at this scope — see the effective report for whether a limit applies. - `required DateTimeOffset CreatedAt` RFC 3339 datetime at which the spend limit was created. format: date-time - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount`. - `required bool IsEnabled` Read-only. `false` when extra usage is switched off for this organization (`organization` limit); `amount` is kept and applies again when it's switched back on. Always `true` for other limits. - `required BetaSpendLimitPeriod Period` Length of the window the limit resets over. `amount` caps spend within each period. - `required Scope Scope` What the limit applies to. A tagged union on `type`; each variant carries the identifier for its scope. - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required DateTimeOffset UpdatedAt` RFC 3339 datetime at which the spend limit was last modified. format: date-time - `required BetaSpendSummary? SpendSummary` Per-member effective-limit report row (`GET /spend_limits/effective`). - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required string? Amount` Effective limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD). `null` means no limit applies for this row's `period` — each period resolves independently, so another period may still cap this member. - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount` and `period_to_date_spend`. - `required BetaSpendLimitPeriod Period` Period this row's effective limit and spend are reported for. - `required string PeriodToDateSpend` The member's spend so far in the current period, as a non-negative decimal string in the minor unit of `currency` (cents for USD). May carry fractional minor units up to three decimal places (e.g. `"12050.5"`) — metered usage is not rounded to whole cents. Reads as `"0"` when the spend reading is temporarily unavailable. - `required Scope Scope` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `class BetaSpendLimitSeatTierScope` - `class BetaSpendLimitRbacGroupScope` - `class BetaSpendLimitOrganizationServiceScope` - `class BetaSpendLimitOrganizationScope` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `required Source Source` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `class BetaSpendLimitSeatTierScope` - `class BetaSpendLimitRbacGroupScope` - `class BetaSpendLimitOrganizationServiceScope` - `class BetaSpendLimitOrganizationScope` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `required string SpendLimitID` - `required BetaSpendLimitIncreaseRequestStatus Status` - `Approved("approved")` - `Denied("denied")` - `Pending("pending")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits.IncreaseRequests; IncreaseRequestApproveParams parameters = new() { SpendLimitIncreaseRequestID = "spend_limit_increase_request_id", Amount = "50000", }; var response = await client.Beta.Organization.SpendLimits.IncreaseRequests.Approve(parameters); Console.WriteLine(response); ``` ##### Response (200) ```json { "id": "id", "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "created_at": "2019-12-27T18:11:19.117Z", "period": "daily", "resolved_at": "2019-12-27T18:11:19.117Z", "resolved_by": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_limit": { "id": "id", "amount": "50000", "created_at": "2019-12-27T18:11:19.117Z", "currency": "USD", "is_enabled": true, "period": "daily", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "type": "spend_limit", "updated_at": "2019-12-27T18:11:19.117Z" }, "spend_summary": { "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "amount": "50000", "currency": "USD", "period": "daily", "period_to_date_spend": "12050.5", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "source": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_limit_id": "spend_limit_id" }, "status": "approved", "type": "spend_limit_increase_request" } ``` ### Deny Spend Limit Increase Request `BetaSpendLimitIncreaseRequest Beta.Organization.SpendLimits.IncreaseRequests.Deny(parameters, cancellationToken = default)` **POST** `/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}/deny` Deny a pending spend limit increase request. Idempotent on `denied`; denying an already-`approved` request returns 400. Anthropic emails the requester unless `suppress_notification` is set. #### Parameters - `IncreaseRequestDenyParams parameters` - `required string spendLimitIncreaseRequestID` (path parameter) ID of the spend limit increase request. - `bool suppressNotification` #### Returns - `class BetaSpendLimitIncreaseRequest` - `JsonElement Type = "spend_limit_increase_request"` - `required string ID` - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `JsonElement Type = "user_actor"` Actor type. Always `user_actor`. - `required bool Deleted` True only when the underlying account has been deleted. - `required string? EmailAddress` The user's email address. Null when the account is unavailable or has been deleted. - `required string? Name` The user's current display name. Null when the account is unavailable, has been deleted, or has no name set. - `required string UserID` Tagged ID of the user. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `JsonElement Type = "scoped_api_key_actor"` - `required string ScopedApiKeyID` - `required DateTimeOffset CreatedAt` format: date-time - `required BetaSpendLimitPeriod Period` - `Daily("daily")` - `Monthly("monthly")` - `Weekly("weekly")` - `required DateTimeOffset? ResolvedAt` format: date-time - `required ResolvedBy? ResolvedBy` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required BetaSpendSummary? SpendSummary` Per-member effective-limit report row (`GET /spend_limits/effective`). - `required Actor Actor` - `class BetaSpendLimitUserActor` A user within the organization. `name` and `email_address` are null when the underlying account is unavailable or has been deleted; `deleted` is true only for deleted accounts. - `class BetaSpendLimitScopedApiKeyActor` A scoped Admin API key acting on behalf of the organization. - `required string? Amount` Effective limit amount as a non-negative integer decimal string in the minor unit of `currency` (cents for USD). `null` means no limit applies for this row's `period` — each period resolves independently, so another period may still cap this member. - `required string Currency` ISO 4217 code of the organization's billing currency; the unit for `amount` and `period_to_date_spend`. - `required BetaSpendLimitPeriod Period` Period this row's effective limit and spend are reported for. - `required string PeriodToDateSpend` The member's spend so far in the current period, as a non-negative decimal string in the minor unit of `currency` (cents for USD). May carry fractional minor units up to three decimal places (e.g. `"12050.5"`) — metered usage is not rounded to whole cents. Reads as `"0"` when the spend reading is temporarily unavailable. - `required Scope Scope` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `JsonElement Type = "user"` Scope type. Always `user` for this scope. - `required string UserID` Tagged ID of the member the spend limit applies to. - `class BetaSpendLimitSeatTierScope` - `JsonElement Type = "seat_tier"` - `required string SeatTier` - `class BetaSpendLimitRbacGroupScope` - `JsonElement Type = "rbac_group"` - `required string RbacGroupID` - `class BetaSpendLimitOrganizationServiceScope` - `JsonElement Type = "organization_service"` - `required string Service` - `class BetaSpendLimitOrganizationScope` - `JsonElement Type = "organization"` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `JsonElement Type = "workspace"` Scope type. Always `workspace` for this scope. - `required string WorkspaceID` Tagged ID of the workspace the spend limit applies to. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `JsonElement Type = "usage_tier"` Scope type. Always `usage_tier` for this scope. - `required Source Source` - `class BetaSpendLimitUserScope` Scope selecting a single member of the organization. - `class BetaSpendLimitSeatTierScope` - `class BetaSpendLimitRbacGroupScope` - `class BetaSpendLimitOrganizationServiceScope` - `class BetaSpendLimitOrganizationScope` - `class BetaSpendLimitWorkspaceScope` Scope selecting one workspace of a Claude Console organization. - `class BetaSpendLimitUsageTierScope` Scope of the monthly spend cap Anthropic sets for a Claude Console organization from its usage tier, or a higher cap Anthropic granted the organization. Read-only; its `created_at` and `updated_at` are the organization's creation time, so `amount` can change while `updated_at` stays the same. - `required string SpendLimitID` - `required BetaSpendLimitIncreaseRequestStatus Status` - `Approved("approved")` - `Denied("denied")` - `Pending("pending")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.SpendLimits.IncreaseRequests; IncreaseRequestDenyParams parameters = new() { SpendLimitIncreaseRequestID = "spend_limit_increase_request_id" }; var betaSpendLimitIncreaseRequest = await client.Beta.Organization.SpendLimits.IncreaseRequests.Deny(parameters); Console.WriteLine(betaSpendLimitIncreaseRequest); ``` ##### Response (200) ```json { "id": "id", "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "created_at": "2019-12-27T18:11:19.117Z", "period": "daily", "resolved_at": "2019-12-27T18:11:19.117Z", "resolved_by": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_summary": { "actor": { "deleted": true, "email_address": "email_address", "name": "name", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "amount": "50000", "currency": "USD", "period": "daily", "period_to_date_spend": "12050.5", "scope": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "source": { "type": "user", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "spend_limit_id": "spend_limit_id" }, "status": "approved", "type": "spend_limit_increase_request" } ``` ## Organization › RBAC Groups ### Create RBAC Group `BetaRbacGroup Beta.Organization.RbacGroups.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/rbac_groups` Create an RBAC Group in the Claude Enterprise tenant. Groups created via the API have source type `"direct"`. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `RbacGroupCreateParams parameters` - `required string name` Name of the RBAC Group. Not uniqueness-enforced. minLength: 1, maxLength: 255 #### Returns - `class BetaRbacGroup` - `JsonElement Type = "rbac_group"` Object type. For RBAC Groups, this is always `"rbac_group"`. - `required string ID` ID of the RBAC Group. - `required DateTimeOffset CreatedAt` RFC 3339 timestamp of when the RBAC Group was created. format: date-time - `required string Name` Name of the RBAC Group. Not uniqueness-enforced. - `required IReadOnlyList? RoleIds` RBAC Role IDs attached to this RBAC Group. Role attachment is managed in the admin settings and is read-only on this API. `null` means role data was temporarily unavailable — retry to distinguish from an empty list. - `required SourceType SourceType` How the RBAC Group was created: `"direct"` for groups created directly (for example, in the organization's admin settings), `"scim"` for groups provisioned by the identity provider. - `Direct("direct")` - `Scim("scim")` - `required DateTimeOffset UpdatedAt` RFC 3339 timestamp of when the RBAC Group was last updated. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups; RbacGroupCreateParams parameters = new() { Name = "Engineering" }; var betaRbacGroup = await client.Beta.Organization.RbacGroups.Create(parameters); Console.WriteLine(betaRbacGroup); ``` ##### Response (200) ```json { "id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "created_at": "2024-10-30T23:58:27.427722Z", "name": "Engineering", "role_ids": [ "rbac_role_016J8xVtKpDq3Wy9ZmN2hR4s" ], "source_type": "direct", "type": "rbac_group", "updated_at": "2024-10-30T23:58:27.427722Z" } ``` ### List RBAC Groups `RbacGroupListPage Beta.Organization.RbacGroups.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/rbac_groups` List RBAC Groups in the Claude Enterprise tenant. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `RbacGroupListParams parameters` - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. #### Returns - `class BetaRbacGroup` - `JsonElement Type = "rbac_group"` Object type. For RBAC Groups, this is always `"rbac_group"`. - `required string ID` ID of the RBAC Group. - `required DateTimeOffset CreatedAt` RFC 3339 timestamp of when the RBAC Group was created. format: date-time - `required string Name` Name of the RBAC Group. Not uniqueness-enforced. - `required IReadOnlyList? RoleIds` RBAC Role IDs attached to this RBAC Group. Role attachment is managed in the admin settings and is read-only on this API. `null` means role data was temporarily unavailable — retry to distinguish from an empty list. - `required SourceType SourceType` How the RBAC Group was created: `"direct"` for groups created directly (for example, in the organization's admin settings), `"scim"` for groups provisioned by the identity provider. - `Direct("direct")` - `Scim("scim")` - `required DateTimeOffset UpdatedAt` RFC 3339 timestamp of when the RBAC Group was last updated. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups; RbacGroupListParams parameters = new(); var page = await client.Beta.Organization.RbacGroups.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "created_at": "2024-10-30T23:58:27.427722Z", "name": "Engineering", "role_ids": [ "rbac_role_016J8xVtKpDq3Wy9ZmN2hR4s" ], "source_type": "direct", "type": "rbac_group", "updated_at": "2024-10-30T23:58:27.427722Z" } ], "has_more": false, "next_page": "eyJjdXJzb3IiOiAicmJhY19ncm91cF8wMSJ9" } ``` ### Get RBAC Group `BetaRbacGroup Beta.Organization.RbacGroups.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/rbac_groups/{rbac_group_id}` Retrieve an RBAC Group by ID. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `RbacGroupRetrieveParams parameters` - `required string rbacGroupID` (path parameter) ID of the RBAC Group. #### Returns - `class BetaRbacGroup` - `JsonElement Type = "rbac_group"` Object type. For RBAC Groups, this is always `"rbac_group"`. - `required string ID` ID of the RBAC Group. - `required DateTimeOffset CreatedAt` RFC 3339 timestamp of when the RBAC Group was created. format: date-time - `required string Name` Name of the RBAC Group. Not uniqueness-enforced. - `required IReadOnlyList? RoleIds` RBAC Role IDs attached to this RBAC Group. Role attachment is managed in the admin settings and is read-only on this API. `null` means role data was temporarily unavailable — retry to distinguish from an empty list. - `required SourceType SourceType` How the RBAC Group was created: `"direct"` for groups created directly (for example, in the organization's admin settings), `"scim"` for groups provisioned by the identity provider. - `Direct("direct")` - `Scim("scim")` - `required DateTimeOffset UpdatedAt` RFC 3339 timestamp of when the RBAC Group was last updated. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups; RbacGroupRetrieveParams parameters = new() { RbacGroupID = "rbac_group_id" }; var betaRbacGroup = await client.Beta.Organization.RbacGroups.Retrieve(parameters); Console.WriteLine(betaRbacGroup); ``` ##### Response (200) ```json { "id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "created_at": "2024-10-30T23:58:27.427722Z", "name": "Engineering", "role_ids": [ "rbac_role_016J8xVtKpDq3Wy9ZmN2hR4s" ], "source_type": "direct", "type": "rbac_group", "updated_at": "2024-10-30T23:58:27.427722Z" } ``` ### Update RBAC Group `BetaRbacGroup Beta.Organization.RbacGroups.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/rbac_groups/{rbac_group_id}` Update an RBAC Group's name. Groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `RbacGroupUpdateParams parameters` - `required string rbacGroupID` (path parameter) ID of the RBAC Group. - `string? name` Name of the RBAC Group. Not uniqueness-enforced. minLength: 1, maxLength: 255 #### Returns - `class BetaRbacGroup` - `JsonElement Type = "rbac_group"` Object type. For RBAC Groups, this is always `"rbac_group"`. - `required string ID` ID of the RBAC Group. - `required DateTimeOffset CreatedAt` RFC 3339 timestamp of when the RBAC Group was created. format: date-time - `required string Name` Name of the RBAC Group. Not uniqueness-enforced. - `required IReadOnlyList? RoleIds` RBAC Role IDs attached to this RBAC Group. Role attachment is managed in the admin settings and is read-only on this API. `null` means role data was temporarily unavailable — retry to distinguish from an empty list. - `required SourceType SourceType` How the RBAC Group was created: `"direct"` for groups created directly (for example, in the organization's admin settings), `"scim"` for groups provisioned by the identity provider. - `Direct("direct")` - `Scim("scim")` - `required DateTimeOffset UpdatedAt` RFC 3339 timestamp of when the RBAC Group was last updated. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups; RbacGroupUpdateParams parameters = new() { RbacGroupID = "rbac_group_id" }; var betaRbacGroup = await client.Beta.Organization.RbacGroups.Update(parameters); Console.WriteLine(betaRbacGroup); ``` ##### Response (200) ```json { "id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "created_at": "2024-10-30T23:58:27.427722Z", "name": "Engineering", "role_ids": [ "rbac_role_016J8xVtKpDq3Wy9ZmN2hR4s" ], "source_type": "direct", "type": "rbac_group", "updated_at": "2024-10-30T23:58:27.427722Z" } ``` ### Delete RBAC Group `RbacGroupDeleteResponse Beta.Organization.RbacGroups.Delete(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/rbac_groups/{rbac_group_id}` Delete an RBAC Group. Groups provisioned by an identity provider (source type `"scim"`) cannot be deleted via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `RbacGroupDeleteParams parameters` - `required string rbacGroupID` (path parameter) ID of the RBAC Group. #### Returns - `class RbacGroupDeleteResponse` - `JsonElement Type = "rbac_group_deleted"` Deleted object type. For RBAC Groups, this is always `"rbac_group_deleted"`. - `required string ID` ID of the RBAC Group. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups; RbacGroupDeleteParams parameters = new() { RbacGroupID = "rbac_group_id" }; var rbacGroup = await client.Beta.Organization.RbacGroups.Delete(parameters); Console.WriteLine(rbacGroup); ``` ##### Response (200) ```json { "id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "type": "rbac_group_deleted" } ``` ## Organization › RBAC Groups › Members ### List RBAC Group Members `MemberListPage Beta.Organization.RbacGroups.Members.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/rbac_groups/{rbac_group_id}/members` List members of an RBAC Group. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `MemberListParams parameters` - `required string rbacGroupID` (path parameter) ID of the RBAC Group. - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. #### Returns - `class BetaRbacGroupMember` - `JsonElement Type = "rbac_group_member"` Object type. For RBAC Group Members, this is always `"rbac_group_member"`. - `required DateTimeOffset CreatedAt` RFC 3339 timestamp of when the User was added to the RBAC Group. format: date-time - `required string Email` Email of the User. - `required string RbacGroupID` ID of the RBAC Group. - `required string UserID` ID of the User. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups.Members; MemberListParams parameters = new() { RbacGroupID = "rbac_group_id" }; var page = await client.Beta.Organization.RbacGroups.Members.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "created_at": "2024-10-30T23:58:27.427722Z", "email": "user@emaildomain.com", "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "type": "rbac_group_member", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" } ], "has_more": false, "next_page": "eyJjdXJzb3IiOiAicmJhY19ncm91cF8wMSJ9" } ``` ### Add RBAC Group Member `BetaRbacGroupMember Beta.Organization.RbacGroups.Members.Add(parameters, cancellationToken = default)` **POST** `/v1/organizations/rbac_groups/{rbac_group_id}/members` Add a User to an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `MemberAddParams parameters` - `required string rbacGroupID` (path parameter) ID of the RBAC Group. - `required string userID` ID of the User. #### Returns - `class BetaRbacGroupMember` - `JsonElement Type = "rbac_group_member"` Object type. For RBAC Group Members, this is always `"rbac_group_member"`. - `required DateTimeOffset CreatedAt` RFC 3339 timestamp of when the User was added to the RBAC Group. format: date-time - `required string Email` Email of the User. - `required string RbacGroupID` ID of the RBAC Group. - `required string UserID` ID of the User. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups.Members; MemberAddParams parameters = new() { RbacGroupID = "rbac_group_id", UserID = "user_01WCz1FkmYMm4gnmykNKUu3Q", }; var betaRbacGroupMember = await client.Beta.Organization.RbacGroups.Members.Add(parameters); Console.WriteLine(betaRbacGroupMember); ``` ##### Response (200) ```json { "created_at": "2024-10-30T23:58:27.427722Z", "email": "user@emaildomain.com", "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "type": "rbac_group_member", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" } ``` ### Remove RBAC Group Member `MemberRemoveResponse Beta.Organization.RbacGroups.Members.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/rbac_groups/{rbac_group_id}/members/{user_id}` Remove a User from an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. #### Parameters - `MemberRemoveParams parameters` - `required string rbacGroupID` (path parameter) ID of the RBAC Group. - `required string userID` (path parameter) ID of the User. #### Returns - `class MemberRemoveResponse` - `JsonElement Type = "rbac_group_member_deleted"` Deleted object type. For RBAC Group Members, this is always `"rbac_group_member_deleted"`. - `required string RbacGroupID` ID of the RBAC Group. - `required string UserID` ID of the User. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacGroups.Members; MemberRemoveParams parameters = new() { RbacGroupID = "rbac_group_id", UserID = "user_id", }; var member = await client.Beta.Organization.RbacGroups.Members.Remove(parameters); Console.WriteLine(member); ``` ##### Response (200) ```json { "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "type": "rbac_group_member_deleted", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" } ``` ## Organization › RBAC Roles ### List RBAC Roles `RbacRoleListPage Beta.Organization.RbacRoles.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/rbac_roles` List RBAC Roles in the organization. The RBAC Roles API is available to Claude Enterprise organizations only. #### Parameters - `RbacRoleListParams parameters` - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. #### Returns - `class BetaRbacRole` - `JsonElement Type = "rbac_role"` Object type. For RBAC Roles, this is always `"rbac_role"`. - `required string ID` ID of the RBAC Role. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the RBAC Role was created. format: date-time - `required string DisplayName` Name of the RBAC Role. For a role created by Anthropic, this name can differ from the label claude.ai shows, and Anthropic may change the name. To keep a lasting reference to a role, store its `id`. - `required DateTimeOffset UpdatedAt` RFC 3339 datetime string indicating when the RBAC Role was last updated. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacRoles; RbacRoleListParams parameters = new(); var page = await client.Beta.Organization.RbacRoles.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "rbac_role_016J8xVtKpDq3Wy9ZmN2hR4s", "created_at": "2024-10-30T23:58:27.427722Z", "display_name": "Project Editor", "type": "rbac_role", "updated_at": "2024-10-30T23:58:27.427722Z" } ], "has_more": true, "next_page": "eyJjdXJzb3IiOiAicmJhY19yb2xlXzAxIn0" } ``` ### Get RBAC Role `BetaRbacRole Beta.Organization.RbacRoles.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/rbac_roles/{rbac_role_id}` Retrieve an RBAC Role by ID. The RBAC Roles API is available to Claude Enterprise organizations only. #### Parameters - `RbacRoleRetrieveParams parameters` - `required string rbacRoleID` (path parameter) ID of the RBAC Role. #### Returns - `class BetaRbacRole` - `JsonElement Type = "rbac_role"` Object type. For RBAC Roles, this is always `"rbac_role"`. - `required string ID` ID of the RBAC Role. - `required DateTimeOffset CreatedAt` RFC 3339 datetime string indicating when the RBAC Role was created. format: date-time - `required string DisplayName` Name of the RBAC Role. For a role created by Anthropic, this name can differ from the label claude.ai shows, and Anthropic may change the name. To keep a lasting reference to a role, store its `id`. - `required DateTimeOffset UpdatedAt` RFC 3339 datetime string indicating when the RBAC Role was last updated. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacRoles; RbacRoleRetrieveParams parameters = new() { RbacRoleID = "rbac_role_id" }; var betaRbacRole = await client.Beta.Organization.RbacRoles.Retrieve(parameters); Console.WriteLine(betaRbacRole); ``` ##### Response (200) ```json { "id": "rbac_role_016J8xVtKpDq3Wy9ZmN2hR4s", "created_at": "2024-10-30T23:58:27.427722Z", "display_name": "Project Editor", "type": "rbac_role", "updated_at": "2024-10-30T23:58:27.427722Z" } ``` ## Organization › RBAC Roles › Permissions ### List RBAC Role Permissions `PermissionListPage Beta.Organization.RbacRoles.Permissions.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/rbac_roles/{rbac_role_id}/permissions` List the permissions an RBAC Role grants. The RBAC Roles API is available to Claude Enterprise organizations only. #### Parameters - `PermissionListParams parameters` - `required string rbacRoleID` (path parameter) ID of the RBAC Role. - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. #### Returns - `class BetaRbacRolePermission` - `JsonElement Type = "rbac_role_permission"` Object type. For RBAC Role Permissions, this is always `"rbac_role_permission"`. - `required string Action` Action the permission grants on the resource. The vocabulary follows the resource: an `organization` grant carries a product-feature entitlement (for example `chat`), an admin-panel permission entitlement (`permission_*`), or a blanket capability-access mode — `capability_access_all` grants every product-feature entitlement, and `capability_access_all_ga` grants the generally-available subset as it stands at permission-check time; neither mode grants model-access entitlements. A consumer enumerating a role's per-feature grants should treat a blanket row as granting every product-feature entitlement it covers, or it will under-report the role's effective access. A `connector_tool` grant carries a tool-access action (`use` or `always_allow`); a `connector_scope` grant carries the scope action `grant` (the role may receive the named OAuth scope when tokens are minted for the connector); `connector` and `all_connectors` grants carry a tool-access action, the scope action, or an authentication-method action (`interactive` or `managed`). - `required Resource Resource` What the permission applies to. A tagged union: `type` names the kind of resource and determines which identifier fields are present. - `class BetaRbacOrganizationPermissionResource` - `JsonElement Type = "organization"` Kind of resource the permission applies to. - `required string OrganizationID` UUID of the organization the permission applies to. - `class BetaRbacConnectorToolPermissionResource` - `JsonElement Type = "connector_tool"` Kind of resource the permission applies to. - `required string ConnectorID` ID of the connector the permission applies to. - `required string ToolName` Published name of the connector tool the permission applies to. When the published name contains characters outside `[a-zA-Z0-9_-]` (or collides with a reserved form), it is server-encoded into a stable `{prefix}_{32-hex}` form — a shortened readable prefix of the name plus a hash — from which the published name is not recoverable. - `class BetaRbacConnectorScopePermissionResource` - `JsonElement Type = "connector_scope"` Kind of resource the permission applies to. - `required string ConnectorID` ID of the connector the permission applies to. - `required string Scope` OAuth scope the permission names — the role may receive this scope when tokens are minted for the connector. Subject to the same encoding rule as `tool_name`: a scope containing characters outside `[a-zA-Z0-9_-]` (or colliding with a reserved form) appears server-encoded in a stable `{prefix}_{32-hex}` form. OAuth scopes routinely contain `:` and `/`, so most appear encoded. - `class BetaRbacConnectorPermissionResource` - `JsonElement Type = "connector"` Kind of resource the permission applies to. - `required string ConnectorID` ID of the connector the permission applies to. - `class BetaRbacAllConnectorsPermissionResource` - `JsonElement Type = "all_connectors"` Kind of resource the permission applies to. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.RbacRoles.Permissions; PermissionListParams parameters = new() { RbacRoleID = "rbac_role_id" }; var page = await client.Beta.Organization.RbacRoles.Permissions.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "action": "use", "resource": { "organization_id": "3c4f5e6d-7a8b-49c0-9d1e-2f3a4b5c6d7e", "type": "organization" }, "type": "rbac_role_permission" } ], "has_more": true, "next_page": "eyJjdXJzb3IiOiAicmJhY19yb2xlXzAxIn0" } ``` ## Organization › Plugins ### Create Plugin `BetaPlugin Beta.Organization.Plugins.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/plugins` Create an organization-owned Plugin and its first version by uploading the version's files. The upload is `multipart/form-data`: the version's files (`files`, each part sent as `files[]`), with an optional `marketplace_id` and `release_notes`. The manifest's `name` becomes the Plugin's `name`, and `display_name`, `description` and `manifest_version` come from the manifest too. `name` may contain lowercase letters (from any alphabet), digits, and hyphens, up to 64 characters. Uppercase letters, spaces, underscores, and other punctuation are rejected. The `name` must be unique within the marketplace: a name already taken returns a 409 with `error_code` `plugin_name_taken` and, when a Plugin holds it, that Plugin's ID in `details.plugin_id`. A Plugin going into the organization's library marketplace is also refused with a 409 when one of its skills has the name of an organization skill (a skill an administrator uploaded for the whole organization in claude.ai): `error_code` `skill_name_taken`, with that name in `details.skill_name`; rename the skill, or remove the organization skill in claude.ai. A 503 with `error_code` `registration_pending` means the Plugin and its version were stored (their IDs are in `details`) but are not yet usable in claude.ai: do not retry the create (the retry would return `plugin_name_taken`); create a version on the stored Plugin instead, which completes it. For a worked example, see [Create a plugin](https://platform.claude.com/docs/en/manage-claude/plugins-api?sdk_languages=csharp#create-a-plugin) in the Plugins API guide. **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginCreateParams parameters` - `required IReadOnlyList files` The version's files: one part per file, the part's filename being the file's path within the Plugin (for example `skills/review-pr/SKILL.md`), or a single `.zip` or `.plugin` archive holding them all. On the wire each part is named `files[]`, and a part named plain `files` is not read; with cURL, `-F 'files[]=@SKILL.md;filename=skills/review-pr/SKILL.md'`. The files must include the manifest, `.claude-plugin/plugin.json`. - `string marketplaceID` ID of the organization-owned plugin marketplace to create the Plugin in (prefixed `marketplace_`). It must be a `manual` marketplace, one whose Plugins are uploaded rather than synchronized from a repository. When omitted, the Plugin is created in the organization's library marketplace, an organization-owned `manual` marketplace created on first use. - `string releaseNotes` Release notes stored with the version and shown in its version history in claude.ai; up to 5,000 characters. maxLength: 5000 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPlugin` - `JsonElement Type = "plugin"` Always `plugin`. - `required string ID` The Plugin's ID. - `required IReadOnlyList? Components` What the served version contains; null when not enumerated. - `required Type Type` The kind of component. - `Agent("agent")` - `Cli("cli")` - `Command("command")` - `Hook("hook")` - `McpServer("mcp_server")` - `Skill("skill")` - `required string? Description` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `required string Name` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `required BetaPluginContentScan? ContentScan` The served version's content scan; null when it has not been scanned. - `required Assessment? Assessment` The scan's verdict; set only when `status` is `completed`. A `warn` can mean a `fail` that was allowed in claude.ai. - `Fail("fail")` - `Pass("pass")` - `Unknown("unknown")` - `Warn("warn")` - `required string? Reason` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `required Status Status` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run. Once a scan of the version has completed, `content_scan` describes the newest completed scan, even while a later scan runs. While the scan outcome cannot be read, `status` is `errored` instead. - `Completed("completed")` - `Errored("errored")` - `Processing("processing")` - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required CreatedBy? CreatedBy` Who created the Plugin; null when no creator is recorded. - `class BetaPluginUserActor` - `JsonElement Type = "user_actor"` A member of the organization. - `required string? EmailAddress` The member's email address; may be null, for example when they are no longer a member of the organization. - `required string UserID` The member's User ID. - `class BetaPluginApiActor` - `JsonElement Type = "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `required string ApiKeyID` The key's ID. - `required string? Description` The served version's description. - `required string? DisplayName` The served version's display name. - `required string LatestVersionID` The newest version. - `required string? ManifestVersion` The served version's manifest `version`, normalized for display, or `null` (the Plugin Version's `manifest_version` says how and when). - `required string MarketplaceID` The ID of the plugin marketplace the Plugin lives in. - `required string Name` Lowercase identifier, unique within its plugin marketplace. Fixed for an organization-owned Plugin's lifetime; a member-owned Plugin's changes when its owner renames it in claude.ai, while its `id` stays the same. - `required OrganizationInstallationPreference? OrganizationInstallationPreference` Organization-owned Plugin: the organization-wide installation setting every member gets unless an RBAC Group they belong to holds its own — the Plugin's own setting, or its plugin marketplace's default. Null for a member-owned Plugin, which has shares instead. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required bool? OrganizationInstallationPreferenceInherited` Organization-owned Plugin: true while it has no organization-wide setting of its own and `organization_installation_preference` is its plugin marketplace's default. Null for a member-owned Plugin. - `required Owner Owner` Who owns the Plugin: the organization, or the member whose personal plugin marketplace it lives in. - `class BetaPluginOwnerOrganization` - `JsonElement Type = "organization"` The Plugin lives in a plugin marketplace the organization owns. - `class BetaPluginOwnerUser` - `JsonElement Type = "user"` The Plugin lives in one member's personal plugin marketplace. - `required string UserID` The member's User ID. - `required Reach? Reach` How far the served version reaches, or `null` if it is not classified. `remote` means it declares an MCP server or a CLI. `privileged` means it declares no MCP server or CLI, but declares a hook, monitor, language server, or settings, or has a skill, command, or other Markdown file whose frontmatter pre-approves tools (`allowed-tools` with any value other than an empty one or one that names only `AskUserQuestion`, `TodoWrite`, and `ToolSearch`). Otherwise it is `contained`. If the frontmatter of a skill, command, or other Markdown file that could change the value could not be read, or was past a size limit, the version is `null` or `privileged` (or `remote`, if it declares an MCP server or a CLI), not `contained`. The value is normally worked out when a version is stored, under the rules of that time, so an older version can be `null`, or `contained` where the same files stored today would be `privileged` or `null`. - `Contained("contained")` - `Privileged("privileged")` - `Remote("remote")` - `required string ServedVersionID` The version claude.ai serves to members. - `required bool ServedVersionPinned` True once the served version has been pinned, through Update Plugin or in claude.ai. While false, a new version normally becomes the served version when it is stored. While the newest version is not the served version, as when a version saved in claude.ai is waiting for its content scan, `served_version_id` differs from `latest_version_id`. - `required DateTimeOffset UpdatedAt` RFC 3339. Moves on a served-version change (including pinning an unpinned Plugin to the version it already serves) and, normally, on a new version. A version saved in claude.ai that waits for its content scan moves it when it becomes the served version, and not necessarily when it is stored. A change to the Plugin's installation settings or shares does not move it. format: date-time #### Example ```csharp using System; using System.Text; using Anthropic.Models.Beta.Organization.Plugins; PluginCreateParams parameters = new() { Files = [ Encoding.UTF8.GetBytes("Example data") ], }; var betaPlugin = await client.Beta.Organization.Plugins.Create(parameters); Console.WriteLine(betaPlugin); ``` ##### Response (200) ```json { "id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "latest_version_id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "manifest_version": "1.2.0", "marketplace_id": "marketplace_01HxQ3v9KpZ2mTn8RwLc4Ys7", "name": "code-review-helper", "organization_installation_preference": "available", "organization_installation_preference_inherited": true, "owner": { "type": "organization" }, "reach": "contained", "served_version_id": "pluginver_01K9wPcHd4Rm2Tx8Vq6Ln3Sb", "served_version_pinned": true, "type": "plugin", "updated_at": "2026-03-14T09:26:53.589793Z" } ``` ### Get Plugin `BetaPlugin Beta.Organization.Plugins.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugins/{plugin_id}` Retrieve a Plugin by ID. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginRetrieveParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPlugin` - `JsonElement Type = "plugin"` Always `plugin`. - `required string ID` The Plugin's ID. - `required IReadOnlyList? Components` What the served version contains; null when not enumerated. - `required Type Type` The kind of component. - `Agent("agent")` - `Cli("cli")` - `Command("command")` - `Hook("hook")` - `McpServer("mcp_server")` - `Skill("skill")` - `required string? Description` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `required string Name` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `required BetaPluginContentScan? ContentScan` The served version's content scan; null when it has not been scanned. - `required Assessment? Assessment` The scan's verdict; set only when `status` is `completed`. A `warn` can mean a `fail` that was allowed in claude.ai. - `Fail("fail")` - `Pass("pass")` - `Unknown("unknown")` - `Warn("warn")` - `required string? Reason` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `required Status Status` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run. Once a scan of the version has completed, `content_scan` describes the newest completed scan, even while a later scan runs. While the scan outcome cannot be read, `status` is `errored` instead. - `Completed("completed")` - `Errored("errored")` - `Processing("processing")` - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required CreatedBy? CreatedBy` Who created the Plugin; null when no creator is recorded. - `class BetaPluginUserActor` - `JsonElement Type = "user_actor"` A member of the organization. - `required string? EmailAddress` The member's email address; may be null, for example when they are no longer a member of the organization. - `required string UserID` The member's User ID. - `class BetaPluginApiActor` - `JsonElement Type = "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `required string ApiKeyID` The key's ID. - `required string? Description` The served version's description. - `required string? DisplayName` The served version's display name. - `required string LatestVersionID` The newest version. - `required string? ManifestVersion` The served version's manifest `version`, normalized for display, or `null` (the Plugin Version's `manifest_version` says how and when). - `required string MarketplaceID` The ID of the plugin marketplace the Plugin lives in. - `required string Name` Lowercase identifier, unique within its plugin marketplace. Fixed for an organization-owned Plugin's lifetime; a member-owned Plugin's changes when its owner renames it in claude.ai, while its `id` stays the same. - `required OrganizationInstallationPreference? OrganizationInstallationPreference` Organization-owned Plugin: the organization-wide installation setting every member gets unless an RBAC Group they belong to holds its own — the Plugin's own setting, or its plugin marketplace's default. Null for a member-owned Plugin, which has shares instead. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required bool? OrganizationInstallationPreferenceInherited` Organization-owned Plugin: true while it has no organization-wide setting of its own and `organization_installation_preference` is its plugin marketplace's default. Null for a member-owned Plugin. - `required Owner Owner` Who owns the Plugin: the organization, or the member whose personal plugin marketplace it lives in. - `class BetaPluginOwnerOrganization` - `JsonElement Type = "organization"` The Plugin lives in a plugin marketplace the organization owns. - `class BetaPluginOwnerUser` - `JsonElement Type = "user"` The Plugin lives in one member's personal plugin marketplace. - `required string UserID` The member's User ID. - `required Reach? Reach` How far the served version reaches, or `null` if it is not classified. `remote` means it declares an MCP server or a CLI. `privileged` means it declares no MCP server or CLI, but declares a hook, monitor, language server, or settings, or has a skill, command, or other Markdown file whose frontmatter pre-approves tools (`allowed-tools` with any value other than an empty one or one that names only `AskUserQuestion`, `TodoWrite`, and `ToolSearch`). Otherwise it is `contained`. If the frontmatter of a skill, command, or other Markdown file that could change the value could not be read, or was past a size limit, the version is `null` or `privileged` (or `remote`, if it declares an MCP server or a CLI), not `contained`. The value is normally worked out when a version is stored, under the rules of that time, so an older version can be `null`, or `contained` where the same files stored today would be `privileged` or `null`. - `Contained("contained")` - `Privileged("privileged")` - `Remote("remote")` - `required string ServedVersionID` The version claude.ai serves to members. - `required bool ServedVersionPinned` True once the served version has been pinned, through Update Plugin or in claude.ai. While false, a new version normally becomes the served version when it is stored. While the newest version is not the served version, as when a version saved in claude.ai is waiting for its content scan, `served_version_id` differs from `latest_version_id`. - `required DateTimeOffset UpdatedAt` RFC 3339. Moves on a served-version change (including pinning an unpinned Plugin to the version it already serves) and, normally, on a new version. A version saved in claude.ai that waits for its content scan moves it when it becomes the served version, and not necessarily when it is stored. A change to the Plugin's installation settings or shares does not move it. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins; PluginRetrieveParams parameters = new() { PluginID = "plugin_id" }; var betaPlugin = await client.Beta.Organization.Plugins.Retrieve(parameters); Console.WriteLine(betaPlugin); ``` ##### Response (200) ```json { "id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "latest_version_id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "manifest_version": "1.2.0", "marketplace_id": "marketplace_01HxQ3v9KpZ2mTn8RwLc4Ys7", "name": "code-review-helper", "organization_installation_preference": "available", "organization_installation_preference_inherited": true, "owner": { "type": "organization" }, "reach": "contained", "served_version_id": "pluginver_01K9wPcHd4Rm2Tx8Vq6Ln3Sb", "served_version_pinned": true, "type": "plugin", "updated_at": "2026-03-14T09:26:53.589793Z" } ``` ### Update Plugin `BetaPlugin Beta.Organization.Plugins.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/plugins/{plugin_id}` Change which stored version of an organization-owned Plugin is served to members, for example to roll back to an earlier one. This pins the served version: later uploads are stored but no longer change what is served, and pinning cannot currently be undone, here or in claude.ai. Pass the version as `served_version_id`: an earlier one to roll back, a later one to start serving a version that was stored without being served, or the one already served to pin it without changing what is served. No new version is created. When the organization has content scanning enabled, a version whose `content_scan.status` is `processing` is refused with a 409 (`error_code` `scan_pending`; retry once the scan finishes). A version whose `content_scan.status` is `errored`, or whose `content_scan.assessment` is `fail` or `unknown`, is refused with a 400 (`error_code` `scan_failed`); a `warn` is accepted. If the scan outcome cannot be read at that moment, the request fails with a retryable 503 instead. When the Plugin is in the organization's library marketplace, a version other than the one served is also refused with a 409 when one of its skills has a name that an organization skill (one an administrator uploaded for the whole organization in claude.ai) has since taken: `error_code` `skill_name_taken`, with that name in `details.skill_name`. A member-owned Plugin cannot be updated here (403). This endpoint does not write installation settings; they are written at `/v1/organizations/plugins/{plugin_id}/installation_settings/{target}`. **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginUpdateParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `required string servedVersionID` Serve this version of the Plugin (prefixed `pluginver_`) and pin the served version to it; `latest` is not accepted. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPlugin` - `JsonElement Type = "plugin"` Always `plugin`. - `required string ID` The Plugin's ID. - `required IReadOnlyList? Components` What the served version contains; null when not enumerated. - `required Type Type` The kind of component. - `Agent("agent")` - `Cli("cli")` - `Command("command")` - `Hook("hook")` - `McpServer("mcp_server")` - `Skill("skill")` - `required string? Description` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `required string Name` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `required BetaPluginContentScan? ContentScan` The served version's content scan; null when it has not been scanned. - `required Assessment? Assessment` The scan's verdict; set only when `status` is `completed`. A `warn` can mean a `fail` that was allowed in claude.ai. - `Fail("fail")` - `Pass("pass")` - `Unknown("unknown")` - `Warn("warn")` - `required string? Reason` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `required Status Status` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run. Once a scan of the version has completed, `content_scan` describes the newest completed scan, even while a later scan runs. While the scan outcome cannot be read, `status` is `errored` instead. - `Completed("completed")` - `Errored("errored")` - `Processing("processing")` - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required CreatedBy? CreatedBy` Who created the Plugin; null when no creator is recorded. - `class BetaPluginUserActor` - `JsonElement Type = "user_actor"` A member of the organization. - `required string? EmailAddress` The member's email address; may be null, for example when they are no longer a member of the organization. - `required string UserID` The member's User ID. - `class BetaPluginApiActor` - `JsonElement Type = "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `required string ApiKeyID` The key's ID. - `required string? Description` The served version's description. - `required string? DisplayName` The served version's display name. - `required string LatestVersionID` The newest version. - `required string? ManifestVersion` The served version's manifest `version`, normalized for display, or `null` (the Plugin Version's `manifest_version` says how and when). - `required string MarketplaceID` The ID of the plugin marketplace the Plugin lives in. - `required string Name` Lowercase identifier, unique within its plugin marketplace. Fixed for an organization-owned Plugin's lifetime; a member-owned Plugin's changes when its owner renames it in claude.ai, while its `id` stays the same. - `required OrganizationInstallationPreference? OrganizationInstallationPreference` Organization-owned Plugin: the organization-wide installation setting every member gets unless an RBAC Group they belong to holds its own — the Plugin's own setting, or its plugin marketplace's default. Null for a member-owned Plugin, which has shares instead. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required bool? OrganizationInstallationPreferenceInherited` Organization-owned Plugin: true while it has no organization-wide setting of its own and `organization_installation_preference` is its plugin marketplace's default. Null for a member-owned Plugin. - `required Owner Owner` Who owns the Plugin: the organization, or the member whose personal plugin marketplace it lives in. - `class BetaPluginOwnerOrganization` - `JsonElement Type = "organization"` The Plugin lives in a plugin marketplace the organization owns. - `class BetaPluginOwnerUser` - `JsonElement Type = "user"` The Plugin lives in one member's personal plugin marketplace. - `required string UserID` The member's User ID. - `required Reach? Reach` How far the served version reaches, or `null` if it is not classified. `remote` means it declares an MCP server or a CLI. `privileged` means it declares no MCP server or CLI, but declares a hook, monitor, language server, or settings, or has a skill, command, or other Markdown file whose frontmatter pre-approves tools (`allowed-tools` with any value other than an empty one or one that names only `AskUserQuestion`, `TodoWrite`, and `ToolSearch`). Otherwise it is `contained`. If the frontmatter of a skill, command, or other Markdown file that could change the value could not be read, or was past a size limit, the version is `null` or `privileged` (or `remote`, if it declares an MCP server or a CLI), not `contained`. The value is normally worked out when a version is stored, under the rules of that time, so an older version can be `null`, or `contained` where the same files stored today would be `privileged` or `null`. - `Contained("contained")` - `Privileged("privileged")` - `Remote("remote")` - `required string ServedVersionID` The version claude.ai serves to members. - `required bool ServedVersionPinned` True once the served version has been pinned, through Update Plugin or in claude.ai. While false, a new version normally becomes the served version when it is stored. While the newest version is not the served version, as when a version saved in claude.ai is waiting for its content scan, `served_version_id` differs from `latest_version_id`. - `required DateTimeOffset UpdatedAt` RFC 3339. Moves on a served-version change (including pinning an unpinned Plugin to the version it already serves) and, normally, on a new version. A version saved in claude.ai that waits for its content scan moves it when it becomes the served version, and not necessarily when it is stored. A change to the Plugin's installation settings or shares does not move it. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins; PluginUpdateParams parameters = new() { PluginID = "plugin_id", ServedVersionID = "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", }; var betaPlugin = await client.Beta.Organization.Plugins.Update(parameters); Console.WriteLine(betaPlugin); ``` ##### Response (200) ```json { "id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "latest_version_id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "manifest_version": "1.2.0", "marketplace_id": "marketplace_01HxQ3v9KpZ2mTn8RwLc4Ys7", "name": "code-review-helper", "organization_installation_preference": "available", "organization_installation_preference_inherited": true, "owner": { "type": "organization" }, "reach": "contained", "served_version_id": "pluginver_01K9wPcHd4Rm2Tx8Vq6Ln3Sb", "served_version_pinned": true, "type": "plugin", "updated_at": "2026-03-14T09:26:53.589793Z" } ``` ### List Plugins `PluginListPage Beta.Organization.Plugins.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugins` List the Plugins created under the organization, newest first: those in the organization's own plugin marketplaces and those in members' personal plugin marketplaces. Plugins in members' personal marketplaces are listed with the same detail as the organization's own, and their files can be downloaded through the version archive endpoint, which records each such download on the Compliance API activity feed. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginListParams parameters` - `DateTimeOffset? createdAtGt` (query parameter) RFC 3339 timestamp bound; combine [gte], [gt], [lte], [lt]. format: date-time - `DateTimeOffset? createdAtGte` (query parameter) RFC 3339 timestamp bound; combine [gte], [gt], [lte], [lt]. format: date-time - `DateTimeOffset? createdAtLt` (query parameter) RFC 3339 timestamp bound; combine [gte], [gt], [lte], [lt]. format: date-time - `DateTimeOffset? createdAtLte` (query parameter) RFC 3339 timestamp bound; combine [gte], [gt], [lte], [lt]. format: date-time - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `100`. minimum: 1, maximum: 100 - `string? marketplaceID` (query parameter) Only Plugins in this plugin marketplace (prefixed `marketplace_`). - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `OwnerType? ownerType` (query parameter) `organization` for Plugins in the organization's plugin marketplaces, `user` for Plugins in members' personal plugin marketplaces. - `Organization("organization")` - `User("user")` - `string? ownerUserID` (query parameter) Only Plugins in this member's personal plugin marketplaces (prefixed `user_`); a removed member's ID is accepted. - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. maxLength: 2048 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPlugin` - `JsonElement Type = "plugin"` Always `plugin`. - `required string ID` The Plugin's ID. - `required IReadOnlyList? Components` What the served version contains; null when not enumerated. - `required Type Type` The kind of component. - `Agent("agent")` - `Cli("cli")` - `Command("command")` - `Hook("hook")` - `McpServer("mcp_server")` - `Skill("skill")` - `required string? Description` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `required string Name` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `required BetaPluginContentScan? ContentScan` The served version's content scan; null when it has not been scanned. - `required Assessment? Assessment` The scan's verdict; set only when `status` is `completed`. A `warn` can mean a `fail` that was allowed in claude.ai. - `Fail("fail")` - `Pass("pass")` - `Unknown("unknown")` - `Warn("warn")` - `required string? Reason` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `required Status Status` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run. Once a scan of the version has completed, `content_scan` describes the newest completed scan, even while a later scan runs. While the scan outcome cannot be read, `status` is `errored` instead. - `Completed("completed")` - `Errored("errored")` - `Processing("processing")` - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required CreatedBy? CreatedBy` Who created the Plugin; null when no creator is recorded. - `class BetaPluginUserActor` - `JsonElement Type = "user_actor"` A member of the organization. - `required string? EmailAddress` The member's email address; may be null, for example when they are no longer a member of the organization. - `required string UserID` The member's User ID. - `class BetaPluginApiActor` - `JsonElement Type = "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `required string ApiKeyID` The key's ID. - `required string? Description` The served version's description. - `required string? DisplayName` The served version's display name. - `required string LatestVersionID` The newest version. - `required string? ManifestVersion` The served version's manifest `version`, normalized for display, or `null` (the Plugin Version's `manifest_version` says how and when). - `required string MarketplaceID` The ID of the plugin marketplace the Plugin lives in. - `required string Name` Lowercase identifier, unique within its plugin marketplace. Fixed for an organization-owned Plugin's lifetime; a member-owned Plugin's changes when its owner renames it in claude.ai, while its `id` stays the same. - `required OrganizationInstallationPreference? OrganizationInstallationPreference` Organization-owned Plugin: the organization-wide installation setting every member gets unless an RBAC Group they belong to holds its own — the Plugin's own setting, or its plugin marketplace's default. Null for a member-owned Plugin, which has shares instead. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required bool? OrganizationInstallationPreferenceInherited` Organization-owned Plugin: true while it has no organization-wide setting of its own and `organization_installation_preference` is its plugin marketplace's default. Null for a member-owned Plugin. - `required Owner Owner` Who owns the Plugin: the organization, or the member whose personal plugin marketplace it lives in. - `class BetaPluginOwnerOrganization` - `JsonElement Type = "organization"` The Plugin lives in a plugin marketplace the organization owns. - `class BetaPluginOwnerUser` - `JsonElement Type = "user"` The Plugin lives in one member's personal plugin marketplace. - `required string UserID` The member's User ID. - `required Reach? Reach` How far the served version reaches, or `null` if it is not classified. `remote` means it declares an MCP server or a CLI. `privileged` means it declares no MCP server or CLI, but declares a hook, monitor, language server, or settings, or has a skill, command, or other Markdown file whose frontmatter pre-approves tools (`allowed-tools` with any value other than an empty one or one that names only `AskUserQuestion`, `TodoWrite`, and `ToolSearch`). Otherwise it is `contained`. If the frontmatter of a skill, command, or other Markdown file that could change the value could not be read, or was past a size limit, the version is `null` or `privileged` (or `remote`, if it declares an MCP server or a CLI), not `contained`. The value is normally worked out when a version is stored, under the rules of that time, so an older version can be `null`, or `contained` where the same files stored today would be `privileged` or `null`. - `Contained("contained")` - `Privileged("privileged")` - `Remote("remote")` - `required string ServedVersionID` The version claude.ai serves to members. - `required bool ServedVersionPinned` True once the served version has been pinned, through Update Plugin or in claude.ai. While false, a new version normally becomes the served version when it is stored. While the newest version is not the served version, as when a version saved in claude.ai is waiting for its content scan, `served_version_id` differs from `latest_version_id`. - `required DateTimeOffset UpdatedAt` RFC 3339. Moves on a served-version change (including pinning an unpinned Plugin to the version it already serves) and, normally, on a new version. A version saved in claude.ai that waits for its content scan moves it when it becomes the served version, and not necessarily when it is stored. A change to the Plugin's installation settings or shares does not move it. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins; PluginListParams parameters = new(); var page = await client.Beta.Organization.Plugins.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "latest_version_id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "manifest_version": "1.2.0", "marketplace_id": "marketplace_01HxQ3v9KpZ2mTn8RwLc4Ys7", "name": "code-review-helper", "organization_installation_preference": "available", "organization_installation_preference_inherited": true, "owner": { "type": "organization" }, "reach": "contained", "served_version_id": "pluginver_01K9wPcHd4Rm2Tx8Vq6Ln3Sb", "served_version_pinned": true, "type": "plugin", "updated_at": "2026-03-14T09:26:53.589793Z" } ], "next_page": "page_MjAyNi0wOS0xNlQxNDowNTowOVo" } ``` ### Delete Plugin `BetaDeletedPlugin Beta.Organization.Plugins.Delete(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/plugins/{plugin_id}` Permanently delete a Plugin and every version it holds, exactly as when an administrator deletes it in claude.ai. The Plugin may belong to the organization or to a member, including a member who has since left the organization. An organization-owned Plugin's installation settings go with it; a member-owned Plugin's shares are withdrawn and its owner no longer has it. To take an organization-owned Plugin out of use reversibly, set its organization-wide installation setting to `not_available` instead (and remove or change any group settings, which override it for their members). Only a Plugin in a `manual` marketplace can be deleted here; one synchronized from a repository is removed by removing it from the repository (400). **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginDeleteParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaDeletedPlugin` - `JsonElement Type = "plugin_deleted"` Always `plugin_deleted`. - `required string ID` The deleted Plugin's ID. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins; PluginDeleteParams parameters = new() { PluginID = "plugin_id" }; var betaDeletedPlugin = await client.Beta.Organization.Plugins.Delete(parameters); Console.WriteLine(betaDeletedPlugin); ``` ##### Response (200) ```json { "id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "type": "plugin_deleted" } ``` ## Organization › Plugins › Versions ### Create Plugin Version `BetaPluginVersion Beta.Organization.Plugins.Versions.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/plugins/{plugin_id}/versions` Add a version to an organization-owned Plugin by uploading the new version's files; it becomes the version served to members unless the Plugin's served version has been pinned. The upload is the same `multipart/form-data` as creating a Plugin: the version's files (`files`, each part sent as `files[]`) and optional `release_notes`. The uploaded manifest's `name` must equal the Plugin's `name`. Returns the stored version; read the Plugin back to see which version it serves. Only a Plugin in a `manual` marketplace takes uploads; a Plugin synchronized from a repository gets its versions from the repository. When the Plugin is in the organization's library marketplace, a version that adds a skill with the name of an organization skill (a skill an administrator uploaded for the whole organization in claude.ai) is refused with a 409: `error_code` `skill_name_taken`, with that name in `details.skill_name`. A 503 with `error_code` `registration_pending` means the version was stored but is not yet usable; a later version create on the Plugin completes it. For a worked example, see [Create a version](https://platform.claude.com/docs/en/manage-claude/plugins-api?sdk_languages=csharp#create-a-version) in the Plugins API guide. **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `VersionCreateParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `required IReadOnlyList files` The version's files: one part per file, the part's filename being the file's path within the Plugin (for example `skills/review-pr/SKILL.md`), or a single `.zip` or `.plugin` archive holding them all. On the wire each part is named `files[]`, and a part named plain `files` is not read; with cURL, `-F 'files[]=@SKILL.md;filename=skills/review-pr/SKILL.md'`. The files must include the manifest, `.claude-plugin/plugin.json`. - `string releaseNotes` Release notes stored with the version and shown in its version history in claude.ai; up to 5,000 characters. maxLength: 5000 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginVersion` - `JsonElement Type = "plugin_version"` Always `plugin_version`. - `required string ID` The version's ID. - `required IReadOnlyList? Components` What the version contains; null when not enumerated. - `required Type Type` The kind of component. - `Agent("agent")` - `Cli("cli")` - `Command("command")` - `Hook("hook")` - `McpServer("mcp_server")` - `Skill("skill")` - `required string? Description` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `required string Name` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `required BetaPluginContentScan? ContentScan` This version's content scan; null when it has not been scanned. - `required Assessment? Assessment` The scan's verdict; set only when `status` is `completed`. A `warn` can mean a `fail` that was allowed in claude.ai. - `Fail("fail")` - `Pass("pass")` - `Unknown("unknown")` - `Warn("warn")` - `required string? Reason` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `required Status Status` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run. Once a scan of the version has completed, `content_scan` describes the newest completed scan, even while a later scan runs. While the scan outcome cannot be read, `status` is `errored` instead. - `Completed("completed")` - `Errored("errored")` - `Processing("processing")` - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required CreatedBy? CreatedBy` Who uploaded this version; null when not recorded. - `class BetaPluginUserActor` - `JsonElement Type = "user_actor"` A member of the organization. - `required string? EmailAddress` The member's email address; may be null, for example when they are no longer a member of the organization. - `required string UserID` The member's User ID. - `class BetaPluginApiActor` - `JsonElement Type = "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `required string ApiKeyID` The key's ID. - `required string? Description` The manifest's description; null when it declares none. - `required string? DisplayName` The manifest's display name; null when it declares none. - `required string? ManifestVersion` The manifest's `version`, normalized for display: one leading `v` or `V` is dropped, and the result is returned only if it is 1 to 64 characters, starts with a digit, and uses only ASCII letters, digits, `.`, `+`, and `-`; otherwise `null`. For example, `"v1.4.0"` is returned as `"1.4.0"`, and `"latest"` as `null`. For a synchronized plugin, the `version` of its `marketplace.json` entry can take the place of the manifest's `version`. It is also `null` for a version stored before claude.ai began recording this field (August 2026). - `required string PluginID` The Plugin's ID. - `required Reach? Reach` How far the version reaches: `remote`, `privileged`, `contained`, or `null`, as defined on the Plugin's `reach`. - `Contained("contained")` - `Privileged("privileged")` - `Remote("remote")` - `required string? ReleaseNotes` As supplied with the upload; null when none were supplied. #### Example ```csharp using System; using System.Text; using Anthropic.Models.Beta.Organization.Plugins.Versions; VersionCreateParams parameters = new() { PluginID = "plugin_id", Files = [ Encoding.UTF8.GetBytes("Example data") ], }; var betaPluginVersion = await client.Beta.Organization.Plugins.Versions.Create(parameters); Console.WriteLine(betaPluginVersion); ``` ##### Response (200) ```json { "id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "manifest_version": "1.2.0", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "reach": "contained", "release_notes": "Adds a review checklist for database migrations.", "type": "plugin_version" } ``` ### List Plugin Versions `VersionListPage Beta.Organization.Plugins.Versions.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugins/{plugin_id}/versions` List a Plugin's versions, newest first. The first item of the first page is the version the Plugin's `latest_version_id` refers to. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `VersionListParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. maxLength: 2048 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginVersion` - `JsonElement Type = "plugin_version"` Always `plugin_version`. - `required string ID` The version's ID. - `required IReadOnlyList? Components` What the version contains; null when not enumerated. - `required Type Type` The kind of component. - `Agent("agent")` - `Cli("cli")` - `Command("command")` - `Hook("hook")` - `McpServer("mcp_server")` - `Skill("skill")` - `required string? Description` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `required string Name` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `required BetaPluginContentScan? ContentScan` This version's content scan; null when it has not been scanned. - `required Assessment? Assessment` The scan's verdict; set only when `status` is `completed`. A `warn` can mean a `fail` that was allowed in claude.ai. - `Fail("fail")` - `Pass("pass")` - `Unknown("unknown")` - `Warn("warn")` - `required string? Reason` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `required Status Status` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run. Once a scan of the version has completed, `content_scan` describes the newest completed scan, even while a later scan runs. While the scan outcome cannot be read, `status` is `errored` instead. - `Completed("completed")` - `Errored("errored")` - `Processing("processing")` - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required CreatedBy? CreatedBy` Who uploaded this version; null when not recorded. - `class BetaPluginUserActor` - `JsonElement Type = "user_actor"` A member of the organization. - `required string? EmailAddress` The member's email address; may be null, for example when they are no longer a member of the organization. - `required string UserID` The member's User ID. - `class BetaPluginApiActor` - `JsonElement Type = "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `required string ApiKeyID` The key's ID. - `required string? Description` The manifest's description; null when it declares none. - `required string? DisplayName` The manifest's display name; null when it declares none. - `required string? ManifestVersion` The manifest's `version`, normalized for display: one leading `v` or `V` is dropped, and the result is returned only if it is 1 to 64 characters, starts with a digit, and uses only ASCII letters, digits, `.`, `+`, and `-`; otherwise `null`. For example, `"v1.4.0"` is returned as `"1.4.0"`, and `"latest"` as `null`. For a synchronized plugin, the `version` of its `marketplace.json` entry can take the place of the manifest's `version`. It is also `null` for a version stored before claude.ai began recording this field (August 2026). - `required string PluginID` The Plugin's ID. - `required Reach? Reach` How far the version reaches: `remote`, `privileged`, `contained`, or `null`, as defined on the Plugin's `reach`. - `Contained("contained")` - `Privileged("privileged")` - `Remote("remote")` - `required string? ReleaseNotes` As supplied with the upload; null when none were supplied. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins.Versions; VersionListParams parameters = new() { PluginID = "plugin_id" }; var page = await client.Beta.Organization.Plugins.Versions.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "manifest_version": "1.2.0", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "reach": "contained", "release_notes": "Adds a review checklist for database migrations.", "type": "plugin_version" } ], "next_page": "page_MjAyNi0wOS0xNlQxNDowNTowOVo" } ``` ### Get Plugin Version `BetaPluginVersion Beta.Organization.Plugins.Versions.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugins/{plugin_id}/versions/{version}` Retrieve one version of a Plugin by its ID, or the Plugin's newest version. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `VersionRetrieveParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `required string version` (path parameter) ID of the Plugin Version (prefixed `pluginver_`), or `latest` for the newest one. - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginVersion` - `JsonElement Type = "plugin_version"` Always `plugin_version`. - `required string ID` The version's ID. - `required IReadOnlyList? Components` What the version contains; null when not enumerated. - `required Type Type` The kind of component. - `Agent("agent")` - `Cli("cli")` - `Command("command")` - `Hook("hook")` - `McpServer("mcp_server")` - `Skill("skill")` - `required string? Description` What the component declares about itself; always null for MCP servers, hooks, and CLIs. - `required string Name` The component's name: a skill's, command's or agent's name, an MCP server's key in the manifest, the event a hook runs on, or a CLI's executable. - `required BetaPluginContentScan? ContentScan` This version's content scan; null when it has not been scanned. - `required Assessment? Assessment` The scan's verdict; set only when `status` is `completed`. A `warn` can mean a `fail` that was allowed in claude.ai. - `Fail("fail")` - `Pass("pass")` - `Unknown("unknown")` - `Warn("warn")` - `required string? Reason` The primary mechanism behind a `warn` or `fail`, such as `credential-exposure` or `guardrail-tampering`; a mechanism this API does not yet name reads as `other`. Null on a `pass`, whenever `assessment` is null, and when no mechanism is reported for the verdict. - `required Status Status` `processing` while a scan runs, `completed` when it ran to completion, `errored` when it could not run. Once a scan of the version has completed, `content_scan` describes the newest completed scan, even while a later scan runs. While the scan outcome cannot be read, `status` is `errored` instead. - `Completed("completed")` - `Errored("errored")` - `Processing("processing")` - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required CreatedBy? CreatedBy` Who uploaded this version; null when not recorded. - `class BetaPluginUserActor` - `JsonElement Type = "user_actor"` A member of the organization. - `required string? EmailAddress` The member's email address; may be null, for example when they are no longer a member of the organization. - `required string UserID` The member's User ID. - `class BetaPluginApiActor` - `JsonElement Type = "api_actor"` An Admin API key, in the same form the Compliance API activity feed uses for it. - `required string ApiKeyID` The key's ID. - `required string? Description` The manifest's description; null when it declares none. - `required string? DisplayName` The manifest's display name; null when it declares none. - `required string? ManifestVersion` The manifest's `version`, normalized for display: one leading `v` or `V` is dropped, and the result is returned only if it is 1 to 64 characters, starts with a digit, and uses only ASCII letters, digits, `.`, `+`, and `-`; otherwise `null`. For example, `"v1.4.0"` is returned as `"1.4.0"`, and `"latest"` as `null`. For a synchronized plugin, the `version` of its `marketplace.json` entry can take the place of the manifest's `version`. It is also `null` for a version stored before claude.ai began recording this field (August 2026). - `required string PluginID` The Plugin's ID. - `required Reach? Reach` How far the version reaches: `remote`, `privileged`, `contained`, or `null`, as defined on the Plugin's `reach`. - `Contained("contained")` - `Privileged("privileged")` - `Remote("remote")` - `required string? ReleaseNotes` As supplied with the upload; null when none were supplied. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins.Versions; VersionRetrieveParams parameters = new() { PluginID = "plugin_id", Version = "version", }; var betaPluginVersion = await client.Beta.Organization.Plugins.Versions.Retrieve(parameters); Console.WriteLine(betaPluginVersion); ``` ##### Response (200) ```json { "id": "pluginver_01KaZmQpRsTuVwXyZ2b4c6d8", "components": [ { "description": "description", "name": "review-pr", "type": "skill" } ], "content_scan": { "assessment": "warn", "reason": "credential-exposure", "status": "completed" }, "created_at": "2026-03-14T09:26:53.589793Z", "created_by": { "email_address": "user@example.com", "type": "user_actor", "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q" }, "description": "Reviews pull requests against your team's conventions.", "display_name": "Code Review Helper", "manifest_version": "1.2.0", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "reach": "contained", "release_notes": "Adds a review checklist for database migrations.", "type": "plugin_version" } ``` ### Download Plugin Version Archive `HttpResponse Beta.Organization.Plugins.Versions.Download(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugins/{plugin_id}/versions/{version}/content` Download one version's `.zip` archive, exactly as stored. Each download of a Plugin from a member's personal plugin marketplace is recorded on the Compliance API activity feed. The response body is the archive (`Content-Type: application/zip`), sent as an attachment whose filename is derived from the Plugin's name; name saved files from the IDs in the request path, since that filename is not unique. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every read scope above (`read:plugins`, `read:org_audit`, and `read:compliance_org_data`) can download the files of plugins in members' personal marketplaces, including files that claude.ai's admin settings do not show, and a `read:org_audit` or `read:compliance_org_data` key created for all of your parent organization's linked organizations can do this in any organization under it that has access to this API, by passing `organization_id`. Each such download records a `claude_plugin_archive_accessed` event on the Compliance API activity feed, identifying the key, the plugin, the version, and the member. Downloads of organization-owned plugins are not recorded. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `VersionDownloadParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `required string version` (path parameter) ID of the Plugin Version (prefixed `pluginver_`). `latest` is not accepted here. - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins.Versions; VersionDownloadParams parameters = new() { PluginID = "plugin_id", Version = "version", }; var response = await client.Beta.Organization.Plugins.Versions.Download(parameters); Console.WriteLine(response); ``` ## Organization › Plugins › Installation Settings ### List Plugin Installation Settings `InstallationSettingListPage Beta.Organization.Plugins.InstallationSettings.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugins/{plugin_id}/installation_settings` List an organization-owned Plugin's installation settings, which say which members it is for, most recently created first. The list holds the Plugin's own organization-wide setting (absent while the Plugin inherits its marketplace's default) and each RBAC Group's own setting. A member-owned Plugin has shares instead, so this path returns 404 for one. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `InstallationSettingListParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `100`. minimum: 1, maximum: 100 - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. maxLength: 2048 - `TargetType? targetType` (query parameter) Only settings for this kind of target: `organization` (the organization-wide setting) or `rbac_group` (an RBAC Group's). - `Organization("organization")` - `RbacGroup("rbac_group")` - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginInstallationSetting` The installation setting an organization-owned Plugin holds for one target. It has no ID of its own: it is addressed by the Plugin's ID and the target. - `JsonElement Type = "plugin_installation_setting"` Always `plugin_installation_setting`. - `required DateTimeOffset CreatedAt` When the target was first given a setting for this Plugin. format: date-time - `required InstallationPreference InstallationPreference` The setting the target holds for this Plugin. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required string PluginID` The Plugin's ID. - `required Target Target` Whose setting this is: `organization` (the Plugin's own organization-wide setting) or `rbac_group` (one RBAC Group's own setting); `organization_member` does not occur here. - `class BetaPluginTargetOrganization` - `JsonElement Type = "organization"` Every member of the organization. - `class BetaPluginTargetRbacGroup` - `JsonElement Type = "rbac_group"` An RBAC Group. - `required string RbacGroupID` The RBAC Group's ID. - `class BetaPluginTargetOrganizationMember` - `JsonElement Type = "organization_member"` One member of the organization. - `required string UserID` The member's User ID. - `required DateTimeOffset UpdatedAt` When its setting last changed. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins.InstallationSettings; InstallationSettingListParams parameters = new() { PluginID = "plugin_id" }; var page = await client.Beta.Organization.Plugins.InstallationSettings.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "created_at": "2026-03-14T09:26:53.589793Z", "installation_preference": "required", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "target": { "type": "organization" }, "type": "plugin_installation_setting", "updated_at": "2026-03-14T09:26:53.589793Z" } ], "next_page": "page_MjAyNi0wOS0xNlQxNDowNTowOVo" } ``` ### Set Plugin Installation Setting `BetaPluginInstallationSetting Beta.Organization.Plugins.InstallationSettings.Set(parameters, cancellationToken = default)` **POST** `/v1/organizations/plugins/{plugin_id}/installation_settings/{target}` Set or change an organization-owned Plugin's installation setting for the whole organization or for one RBAC Group. Writing the value a target already holds of its own changes nothing. A member-owned Plugin has shares instead of installation settings, so this path returns 404 for one. Send a Plugin's installation-setting writes one at a time. If several writes for the same Plugin arrive at the same time, the server handles them one after another and can answer some of them with `503` instead of applying them. That `503` carries `x-should-retry: true`, and the write is safe to repeat: wait a second or two, then send it again. **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `InstallationSettingSetParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `required string target` (path parameter) The target whose setting is written: the literal `organization` for the Plugin's organization-wide setting, or an RBAC Group's ID (prefixed `rbac_group_`) for that group's own setting. Writing the `organization` target stops the Plugin from inheriting its marketplace's default, even when the value written equals that default. - `required InstallationPreference installationPreference` The installation setting the target is to hold for this Plugin: one of `required`, `auto_install`, `available`, `not_available`. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginInstallationSetting` The installation setting an organization-owned Plugin holds for one target. It has no ID of its own: it is addressed by the Plugin's ID and the target. - `JsonElement Type = "plugin_installation_setting"` Always `plugin_installation_setting`. - `required DateTimeOffset CreatedAt` When the target was first given a setting for this Plugin. format: date-time - `required InstallationPreference InstallationPreference` The setting the target holds for this Plugin. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required string PluginID` The Plugin's ID. - `required Target Target` Whose setting this is: `organization` (the Plugin's own organization-wide setting) or `rbac_group` (one RBAC Group's own setting); `organization_member` does not occur here. - `class BetaPluginTargetOrganization` - `JsonElement Type = "organization"` Every member of the organization. - `class BetaPluginTargetRbacGroup` - `JsonElement Type = "rbac_group"` An RBAC Group. - `required string RbacGroupID` The RBAC Group's ID. - `class BetaPluginTargetOrganizationMember` - `JsonElement Type = "organization_member"` One member of the organization. - `required string UserID` The member's User ID. - `required DateTimeOffset UpdatedAt` When its setting last changed. format: date-time #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins.InstallationSettings; InstallationSettingSetParams parameters = new() { PluginID = "plugin_id", Target = "target", InstallationPreference = InstallationPreference.Required, }; var betaPluginInstallationSetting = await client.Beta.Organization.Plugins.InstallationSettings.Set(parameters); Console.WriteLine(betaPluginInstallationSetting); ``` ##### Response (200) ```json { "created_at": "2026-03-14T09:26:53.589793Z", "installation_preference": "required", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "target": { "type": "organization" }, "type": "plugin_installation_setting", "updated_at": "2026-03-14T09:26:53.589793Z" } ``` ### Remove Plugin Installation Setting `BetaDeletedPluginInstallationSetting Beta.Organization.Plugins.InstallationSettings.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/plugins/{plugin_id}/installation_settings/{target}` Remove an organization-owned Plugin's own installation setting for the whole organization or for one RBAC Group. Removing the `organization` target returns the Plugin to its marketplace's default installation setting and leaves the groups' settings in place. Removing a group's setting makes the group's members fall back to the Plugin's organization-wide setting or to the settings of their other groups. A target that holds no setting of its own returns 404 (a Plugin that already inherits its marketplace's default holds no `organization` setting), and so does a member-owned Plugin. A removal counts as one of the Plugin's installation-setting writes: send all of those writes one at a time. If several arrive for the same Plugin at the same time, the server handles them one after another and can answer some of them with `503` and `x-should-retry: true` instead of applying them; wait a second or two and send the removal again. A `404` on the repeat means the setting is already gone. **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `InstallationSettingRemoveParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `required string target` (path parameter) The target whose own setting is removed: the literal `organization` for the Plugin's organization-wide setting, or an RBAC Group's ID (prefixed `rbac_group_`) for that group's own setting. Removing the `organization` setting returns the Plugin to its marketplace's default. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaDeletedPluginInstallationSetting` Confirmation that one target's installation setting was removed, naming the Plugin and the target in place of an ID. - `JsonElement Type = "plugin_installation_setting_deleted"` Always `plugin_installation_setting_deleted`. - `required string PluginID` The Plugin's ID. - `required Target Target` Whose setting was removed. - `class BetaPluginTargetOrganization` - `JsonElement Type = "organization"` Every member of the organization. - `class BetaPluginTargetRbacGroup` - `JsonElement Type = "rbac_group"` An RBAC Group. - `required string RbacGroupID` The RBAC Group's ID. - `class BetaPluginTargetOrganizationMember` - `JsonElement Type = "organization_member"` One member of the organization. - `required string UserID` The member's User ID. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins.InstallationSettings; InstallationSettingRemoveParams parameters = new() { PluginID = "plugin_id", Target = "target", }; var betaDeletedPluginInstallationSetting = await client.Beta.Organization.Plugins.InstallationSettings.Remove(parameters); Console.WriteLine(betaDeletedPluginInstallationSetting); ``` ##### Response (200) ```json { "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "target": { "rbac_group_id": "rbac_group_012rppKaSVsmTo6NqRDXQXNF", "type": "rbac_group" }, "type": "plugin_installation_setting_deleted" } ``` ## Organization › Plugins › Shares ### List Plugin Shares `ShareListPage Beta.Organization.Plugins.Shares.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugins/{plugin_id}/shares` List the shares the owner of a member-owned Plugin has given — to every member of the organization, to an RBAC Group, or to one member — most recently granted first. Shares are read-only in this API: members give and withdraw them in claude.ai, and who gave a share is recorded on the Compliance API activity feed rather than on the share. An organization-owned Plugin has installation settings instead, so this path returns 404 for one. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `ShareListParams parameters` - `required string pluginID` (path parameter) ID of the Plugin (prefixed `plugin_`). - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `100`. minimum: 1, maximum: 100 - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. maxLength: 2048 - `TargetType? targetType` (query parameter) Only shares with this kind of target: `organization` (every member), `rbac_group` (one RBAC Group), or `organization_member` (one member). - `Organization("organization")` - `OrganizationMember("organization_member")` - `RbacGroup("rbac_group")` - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginShare` One share the owner of a member-owned Plugin has given. Shares are read-only in this API and have no ID of their own; who gave a share is recorded on the Compliance API activity feed, not here. - `JsonElement Type = "plugin_share"` Always `plugin_share`. - `required DateTimeOffset GrantedAt` When the share was given; a share whose role is later changed in claude.ai is re-granted and carries the time of that change. format: date-time - `required string PluginID` The Plugin's ID. - `required Target Target` Who the Plugin is shared with: `organization` (every member), `rbac_group` (one RBAC Group), or `organization_member` (one member). - `class BetaPluginTargetOrganization` - `JsonElement Type = "organization"` Every member of the organization. - `class BetaPluginTargetRbacGroup` - `JsonElement Type = "rbac_group"` An RBAC Group. - `required string RbacGroupID` The RBAC Group's ID. - `class BetaPluginTargetOrganizationMember` - `JsonElement Type = "organization_member"` One member of the organization. - `required string UserID` The member's User ID. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Plugins.Shares; ShareListParams parameters = new() { PluginID = "plugin_id" }; var page = await client.Beta.Organization.Plugins.Shares.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "granted_at": "2026-03-14T09:26:53.589793Z", "plugin_id": "plugin_01JyHfbRkZvD1gW7oTqXc3Ne", "target": { "type": "organization" }, "type": "plugin_share" } ], "next_page": "page_MjAyNi0wOS0xNlQxNDowNTowOVo" } ``` ## Organization › Plugin Marketplaces ### List Plugin Marketplaces `PluginMarketplaceListPage Beta.Organization.PluginMarketplaces.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugin_marketplaces` List the plugin marketplaces Plugins live in, newest first: the organization's own and its members' personal ones. Plugin marketplaces are created, connected to a repository and deleted in claude.ai, not through this API. The organization's library marketplace, the organization-owned `manual` marketplace that uploads go to when no marketplace is named, is created the first time something is put in it and is listed from then on. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginMarketplaceListParams parameters` - `long limit` (query parameter) Number of items to return per page. Defaults to `20`. Ranges from `1` to `1000`. minimum: 1, maximum: 1000 - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `OwnerType? ownerType` (query parameter) `organization` for the organization's plugin marketplaces, `user` for members' personal plugin marketplaces. - `Organization("organization")` - `User("user")` - `string? page` (query parameter) Optionally set to the `next_page` token from the previous response. maxLength: 2048 - `Source? source` (query parameter) Only plugin marketplaces with this `source`: `manual` for those whose Plugins are uploaded; `github`, `gitlab` or `public_git` for those synchronized from a Git repository. `directory` (Anthropic's catalog) is never listed here. - `Directory("directory")` - `GitHub("github")` - `Gitlab("gitlab")` - `Manual("manual")` - `PublicGit("public_git")` - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginMarketplace` - `JsonElement Type = "plugin_marketplace"` Always `plugin_marketplace`. - `required string ID` The plugin marketplace's ID, prefixed `marketplace_`. - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required DefaultInstallationPreference? DefaultInstallationPreference` Organization plugin marketplace: the organization-wide setting every Plugin in it with no setting of its own gets. Null for a member's personal plugin marketplace. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required DateTimeOffset? LastSyncEndedAt` RFC 3339. When the most recent synchronization attempt to finish did so, whatever its outcome; for a repository plugin marketplace no synchronization has run on yet, when it was created. Null for a plugin marketplace that is not synchronized from a repository. format: date-time - `required string? LastSyncReadSha` The commit the last synchronization attempt that reached the repository read, whether or not its content was then accepted (see `sync_status`); an attempt that ends `failed_auth` or `failed_transient` leaves it unchanged. Null until an attempt has first read the repository, and for a plugin marketplace that is not synchronized from a repository. - `required string Name` Fixed for the plugin marketplace's lifetime. - `required Owner Owner` The organization, or the member whose personal plugin marketplace it is. - `class BetaPluginOwnerOrganization` - `JsonElement Type = "organization"` The Plugin lives in a plugin marketplace the organization owns. - `class BetaPluginOwnerUser` - `JsonElement Type = "user"` The Plugin lives in one member's personal plugin marketplace. - `required string UserID` The member's User ID. - `required Source Source` Where the plugin marketplace's Plugins come from: `manual` when they are uploaded; `github`, `gitlab` or `public_git` when they are synchronized from the Git repository the owner connected, into which nothing can be uploaded; `directory` is Anthropic's own catalog, which this API does not list. A value this API does not yet name is returned as stored. - `Directory("directory")` - `GitHub("github")` - `Gitlab("gitlab")` - `Manual("manual")` - `PublicGit("public_git")` - `required SyncStatus? SyncStatus` Outcome of the plugin marketplace's most recent synchronization: one of `success`, `in_progress`, `failed_content`, `failed_transient`, `failed_auth`, `failed_limits`; a value this API does not yet name is returned as stored. Null until a synchronization is first attempted — so always for a `manual` plugin marketplace. - `FailedAuth("failed_auth")` - `FailedContent("failed_content")` - `FailedLimits("failed_limits")` - `FailedTransient("failed_transient")` - `InProgress("in_progress")` - `Success("success")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.PluginMarketplaces; PluginMarketplaceListParams parameters = new(); var page = await client.Beta.Organization.PluginMarketplaces.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "marketplace_01HxQ3v9KpZ2mTn8RwLc4Ys7", "created_at": "2026-03-14T09:26:53.589793Z", "default_installation_preference": "available", "last_sync_ended_at": "2026-03-14T09:26:53.589793Z", "last_sync_read_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8", "name": "engineering-tools", "owner": { "type": "organization" }, "source": "github", "sync_status": "success", "type": "plugin_marketplace" } ], "next_page": "page_MjAyNi0wOS0xNlQxNDowNTowOVo" } ``` ### Get Plugin Marketplace `BetaPluginMarketplace Beta.Organization.PluginMarketplaces.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/plugin_marketplaces/{marketplace_id}` Retrieve a plugin marketplace by ID. **Accepted credentials:** an Admin API key with the `read:plugins` or `read:org_audit` scope, or a Compliance Access Key with the `read:compliance_org_data` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginMarketplaceRetrieveParams parameters` - `required string marketplaceID` (path parameter) ID of the plugin marketplace (prefixed `marketplace_`). - `string? organizationID` (query parameter) For a `read:org_audit` or `read:compliance_org_data` key created for all of a parent organization's linked organizations: a child organization of that parent to read instead of the organization the key was created in, given as the organization's UUID or its `org_`-prefixed ID. A value that is neither returns a 400; an organization that is not a child of the key's parent, or where the Plugins API is not available, returns a 404. Any other key may pass only its own organization's ID here; another organization returns a 404. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginMarketplace` - `JsonElement Type = "plugin_marketplace"` Always `plugin_marketplace`. - `required string ID` The plugin marketplace's ID, prefixed `marketplace_`. - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required DefaultInstallationPreference? DefaultInstallationPreference` Organization plugin marketplace: the organization-wide setting every Plugin in it with no setting of its own gets. Null for a member's personal plugin marketplace. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required DateTimeOffset? LastSyncEndedAt` RFC 3339. When the most recent synchronization attempt to finish did so, whatever its outcome; for a repository plugin marketplace no synchronization has run on yet, when it was created. Null for a plugin marketplace that is not synchronized from a repository. format: date-time - `required string? LastSyncReadSha` The commit the last synchronization attempt that reached the repository read, whether or not its content was then accepted (see `sync_status`); an attempt that ends `failed_auth` or `failed_transient` leaves it unchanged. Null until an attempt has first read the repository, and for a plugin marketplace that is not synchronized from a repository. - `required string Name` Fixed for the plugin marketplace's lifetime. - `required Owner Owner` The organization, or the member whose personal plugin marketplace it is. - `class BetaPluginOwnerOrganization` - `JsonElement Type = "organization"` The Plugin lives in a plugin marketplace the organization owns. - `class BetaPluginOwnerUser` - `JsonElement Type = "user"` The Plugin lives in one member's personal plugin marketplace. - `required string UserID` The member's User ID. - `required Source Source` Where the plugin marketplace's Plugins come from: `manual` when they are uploaded; `github`, `gitlab` or `public_git` when they are synchronized from the Git repository the owner connected, into which nothing can be uploaded; `directory` is Anthropic's own catalog, which this API does not list. A value this API does not yet name is returned as stored. - `Directory("directory")` - `GitHub("github")` - `Gitlab("gitlab")` - `Manual("manual")` - `PublicGit("public_git")` - `required SyncStatus? SyncStatus` Outcome of the plugin marketplace's most recent synchronization: one of `success`, `in_progress`, `failed_content`, `failed_transient`, `failed_auth`, `failed_limits`; a value this API does not yet name is returned as stored. Null until a synchronization is first attempted — so always for a `manual` plugin marketplace. - `FailedAuth("failed_auth")` - `FailedContent("failed_content")` - `FailedLimits("failed_limits")` - `FailedTransient("failed_transient")` - `InProgress("in_progress")` - `Success("success")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.PluginMarketplaces; PluginMarketplaceRetrieveParams parameters = new() { MarketplaceID = "marketplace_id" }; var betaPluginMarketplace = await client.Beta.Organization.PluginMarketplaces.Retrieve(parameters); Console.WriteLine(betaPluginMarketplace); ``` ##### Response (200) ```json { "id": "marketplace_01HxQ3v9KpZ2mTn8RwLc4Ys7", "created_at": "2026-03-14T09:26:53.589793Z", "default_installation_preference": "available", "last_sync_ended_at": "2026-03-14T09:26:53.589793Z", "last_sync_read_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8", "name": "engineering-tools", "owner": { "type": "organization" }, "source": "github", "sync_status": "success", "type": "plugin_marketplace" } ``` ### Update Plugin Marketplace `BetaPluginMarketplace Beta.Organization.PluginMarketplaces.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/plugin_marketplaces/{marketplace_id}` Set the default installation setting of one of the organization's own plugin marketplaces. Every Plugin in it without a setting of its own gets this default as its organization-wide setting, including Plugins added later. Pass it as `default_installation_preference`. A member's personal marketplace cannot be updated here (403). **Accepted credentials:** an Admin API key with the `write:plugins` scope. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginMarketplaceUpdateParams parameters` - `required string marketplaceID` (path parameter) ID of the plugin marketplace (prefixed `marketplace_`). - `required DefaultInstallationPreference defaultInstallationPreference` The organization-wide installation setting every Plugin in the marketplace without one of its own gets: one of `required`, `auto_install`, `available`, `not_available`. Once set it can be changed but not removed. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginMarketplace` - `JsonElement Type = "plugin_marketplace"` Always `plugin_marketplace`. - `required string ID` The plugin marketplace's ID, prefixed `marketplace_`. - `required DateTimeOffset CreatedAt` RFC 3339. format: date-time - `required DefaultInstallationPreference? DefaultInstallationPreference` Organization plugin marketplace: the organization-wide setting every Plugin in it with no setting of its own gets. Null for a member's personal plugin marketplace. One of `required`, `auto_install`, `available`, `not_available`; a value this API does not yet name is returned as stored. - `AutoInstall("auto_install")` - `Available("available")` - `NotAvailable("not_available")` - `Required("required")` - `required DateTimeOffset? LastSyncEndedAt` RFC 3339. When the most recent synchronization attempt to finish did so, whatever its outcome; for a repository plugin marketplace no synchronization has run on yet, when it was created. Null for a plugin marketplace that is not synchronized from a repository. format: date-time - `required string? LastSyncReadSha` The commit the last synchronization attempt that reached the repository read, whether or not its content was then accepted (see `sync_status`); an attempt that ends `failed_auth` or `failed_transient` leaves it unchanged. Null until an attempt has first read the repository, and for a plugin marketplace that is not synchronized from a repository. - `required string Name` Fixed for the plugin marketplace's lifetime. - `required Owner Owner` The organization, or the member whose personal plugin marketplace it is. - `class BetaPluginOwnerOrganization` - `JsonElement Type = "organization"` The Plugin lives in a plugin marketplace the organization owns. - `class BetaPluginOwnerUser` - `JsonElement Type = "user"` The Plugin lives in one member's personal plugin marketplace. - `required string UserID` The member's User ID. - `required Source Source` Where the plugin marketplace's Plugins come from: `manual` when they are uploaded; `github`, `gitlab` or `public_git` when they are synchronized from the Git repository the owner connected, into which nothing can be uploaded; `directory` is Anthropic's own catalog, which this API does not list. A value this API does not yet name is returned as stored. - `Directory("directory")` - `GitHub("github")` - `Gitlab("gitlab")` - `Manual("manual")` - `PublicGit("public_git")` - `required SyncStatus? SyncStatus` Outcome of the plugin marketplace's most recent synchronization: one of `success`, `in_progress`, `failed_content`, `failed_transient`, `failed_auth`, `failed_limits`; a value this API does not yet name is returned as stored. Null until a synchronization is first attempted — so always for a `manual` plugin marketplace. - `FailedAuth("failed_auth")` - `FailedContent("failed_content")` - `FailedLimits("failed_limits")` - `FailedTransient("failed_transient")` - `InProgress("in_progress")` - `Success("success")` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.PluginMarketplaces; PluginMarketplaceUpdateParams parameters = new() { MarketplaceID = "marketplace_id", DefaultInstallationPreference = DefaultInstallationPreference.Available, }; var betaPluginMarketplace = await client.Beta.Organization.PluginMarketplaces.Update(parameters); Console.WriteLine(betaPluginMarketplace); ``` ##### Response (200) ```json { "id": "marketplace_01HxQ3v9KpZ2mTn8RwLc4Ys7", "created_at": "2026-03-14T09:26:53.589793Z", "default_installation_preference": "available", "last_sync_ended_at": "2026-03-14T09:26:53.589793Z", "last_sync_read_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8", "name": "engineering-tools", "owner": { "type": "organization" }, "source": "github", "sync_status": "success", "type": "plugin_marketplace" } ``` ### Validate Plugin Marketplace Repository `BetaPluginMarketplaceValidationReport Beta.Organization.PluginMarketplaces.ValidateRepository(parameters, cancellationToken = default)` **POST** `/v1/organizations/plugin_marketplaces/validate_repository` Check whether a plugin marketplace held in a public GitHub repository would synchronize into claude.ai, without connecting or storing it. To check a `.zip` of the marketplace directory instead, use Validate Plugin Marketplace Archive. The report says whether `marketplace.json` is well-formed, which plugins a synchronization would skip and why, and which plugins would synchronize only in part, with some files left out. A repository that is missing, private, or has no such branch or commit is reported, not refused: the response is a report with `valid: false`. Plugin sources outside the marketplace are fetched anonymously from GitHub, so a private one is reported as not found or as needing a GitHub sign-in; a source on any other host is not fetched here, and the report notes that it will be checked when the marketplace actually synchronizes. Nothing is recorded on the Compliance API activity feed. For a worked example, see [Validate marketplace content](https://platform.claude.com/docs/en/manage-claude/plugins-api?sdk_languages=csharp#validate-marketplace-content) in the Plugins API guide. **Accepted credentials:** an Admin API key with the `read:plugins` or `write:plugins` scope; `read:org_audit` and `read:compliance_org_data` do not grant it. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginMarketplaceValidateRepositoryParams parameters` - `required string repositoryUrl` The `https://` URL of a public repository on github.com that holds the marketplace. A URL longer than 2,048 characters, on any other host or scheme, with a port other than 443 or 80, with credentials in it, or that does not name exactly `owner/repo` (a trailing `.git` or `/` is accepted) is a 400. A private or missing repository is reported in the response, not refused. minLength: 1 - `string? ref` The branch to validate the tip of, or the full 40-character SHA of the commit to validate. When omitted, the branch a synchronization would read (usually the repository's default branch); if that is not the default branch, the report's `ref` says which branch was read. An empty string, a value longer than 255 characters, or one that contains `..` or a character other than ASCII letters, digits, `.`, `_`, `-`, `+`, and `/`, is a 400. Any other value that is not a 40-character SHA is read as a branch name; if the repository has no such branch, the response is a report with `valid: false`, not a 400. minLength: 1 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginMarketplaceValidationReport` The outcome of validating plugin marketplace content: a report, not a stored object, so nothing in it can be retrieved afterwards. - `JsonElement Type = "plugin_marketplace_validation_report"` Always `plugin_marketplace_validation_report`. - `required string? CommitSha` The full SHA of the commit that was validated: for a repository, the commit that was read; for an uploaded archive, the commit recorded in the archive's comment (as a Git host's download writes it; not verified), else null. - `required string? ManifestError` Set when nothing could be validated: the repository or archive could not be read, or marketplace.json is missing, malformed or over a limit. Null otherwise. - `required string? ManifestErrorCode` A stable identifier for `manifest_error`; null when that is. - `required IReadOnlyList PluginErrors` One entry per plugin a synchronization would skip entirely, keyed by the plugin's name in marketplace.json. - `required string Error` Why the plugin would be skipped by a synchronization. - `required string ErrorCode` A stable identifier for the reason — the value to branch on. - `required string Name` The plugin's name, as its entry in marketplace.json declares it. - `required IReadOnlyList PluginWarnings` One entry per plugin that would synchronize with some of its contents left out, keyed by the plugin's name in marketplace.json. - `required string Name` The plugin's name, as its entry in marketplace.json declares it. - `required IReadOnlyList Warnings` The parts of the plugin a synchronization would leave out. - `required string ErrorCode` A stable identifier for the kind of warning. - `required string Message` What would be left out, and why. - `required string? Ref` For a repository, the branch that was read by name: the one requested, or else the branch a synchronization of this repository is set to read. Null when no branch is named or set and the repository's default branch was read, for a request by commit SHA, and for an uploaded archive. - `required long TotalPluginCount` How many plugins marketplace.json declares; 0 when it could not be read. - `required bool Valid` True when marketplace.json is well-formed and no plugin would be skipped; warnings never make it false. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.PluginMarketplaces; PluginMarketplaceValidateRepositoryParams parameters = new() { RepositoryUrl = "https://github.com/example-org/example-marketplace" }; var betaPluginMarketplaceValidationReport = await client.Beta.Organization.PluginMarketplaces.ValidateRepository(parameters); Console.WriteLine(betaPluginMarketplaceValidationReport); ``` ##### Response (200) ```json { "commit_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8", "manifest_error": "manifest_error", "manifest_error_code": "marketplace_sync_manifest_not_found", "plugin_errors": [ { "error": "error", "error_code": "marketplace_sync_plugin_missing_manifest", "name": "name" } ], "plugin_warnings": [ { "name": "name", "warnings": [ { "error_code": "marketplace_sync_zipball_symlink_dangling", "message": "message" } ] } ], "ref": "main", "total_plugin_count": 0, "type": "plugin_marketplace_validation_report", "valid": false } ``` ### Validate Plugin Marketplace Archive `BetaPluginMarketplaceValidationReport Beta.Organization.PluginMarketplaces.ValidateArchive(parameters, cancellationToken = default)` **POST** `/v1/organizations/plugin_marketplaces/validate_archive` Check whether a plugin marketplace, uploaded as a `.zip` of the marketplace directory, would synchronize into claude.ai, without connecting or storing it. To check a public GitHub repository instead, use Validate Plugin Marketplace Repository. The report says whether `marketplace.json` is well-formed, which plugins a synchronization would skip and why, and which plugins would synchronize only in part, with some files left out. An archive that cannot be read as a marketplace is reported, not refused: the response is a report with `valid: false`. Plugin sources outside the marketplace are fetched anonymously from GitHub, so a private one is reported as not found or as needing a GitHub sign-in; a source on any other host is not fetched here, and the report notes that it will be checked when the marketplace actually synchronizes. Nothing is recorded on the Compliance API activity feed. For a worked example, see [Validate marketplace content](https://platform.claude.com/docs/en/manage-claude/plugins-api?sdk_languages=csharp#validate-marketplace-content) in the Plugins API guide. **Accepted credentials:** an Admin API key with the `read:plugins` or `write:plugins` scope; `read:org_audit` and `read:compliance_org_data` do not grant it. Every request must include the beta header `anthropic-beta: ce-plugins-2026-09-01`. A request without it returns `404`, exactly as if the endpoint did not exist. The Plugins API is in beta and is available to Claude Enterprise organizations only. It is not available to Claude Platform (Claude Console) organizations, or to organizations with HIPAA readiness enabled. #### Parameters - `PluginMarketplaceValidateArchiveParams parameters` - `required string archive` A .zip of the marketplace directory (its contents at the root, or wrapped in one folder as a Git host's download produces), sent as a file part with a filename; DEFLATE- or STORE-compressed, at most 32 MB. A part sent without a filename, a second archive part, or any other form field is a 400; a larger archive is a 413. format: binary - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `ce-plugins-2026-09-01` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaPluginMarketplaceValidationReport` The outcome of validating plugin marketplace content: a report, not a stored object, so nothing in it can be retrieved afterwards. - `JsonElement Type = "plugin_marketplace_validation_report"` Always `plugin_marketplace_validation_report`. - `required string? CommitSha` The full SHA of the commit that was validated: for a repository, the commit that was read; for an uploaded archive, the commit recorded in the archive's comment (as a Git host's download writes it; not verified), else null. - `required string? ManifestError` Set when nothing could be validated: the repository or archive could not be read, or marketplace.json is missing, malformed or over a limit. Null otherwise. - `required string? ManifestErrorCode` A stable identifier for `manifest_error`; null when that is. - `required IReadOnlyList PluginErrors` One entry per plugin a synchronization would skip entirely, keyed by the plugin's name in marketplace.json. - `required string Error` Why the plugin would be skipped by a synchronization. - `required string ErrorCode` A stable identifier for the reason — the value to branch on. - `required string Name` The plugin's name, as its entry in marketplace.json declares it. - `required IReadOnlyList PluginWarnings` One entry per plugin that would synchronize with some of its contents left out, keyed by the plugin's name in marketplace.json. - `required string Name` The plugin's name, as its entry in marketplace.json declares it. - `required IReadOnlyList Warnings` The parts of the plugin a synchronization would leave out. - `required string ErrorCode` A stable identifier for the kind of warning. - `required string Message` What would be left out, and why. - `required string? Ref` For a repository, the branch that was read by name: the one requested, or else the branch a synchronization of this repository is set to read. Null when no branch is named or set and the repository's default branch was read, for a request by commit SHA, and for an uploaded archive. - `required long TotalPluginCount` How many plugins marketplace.json declares; 0 when it could not be read. - `required bool Valid` True when marketplace.json is well-formed and no plugin would be skipped; warnings never make it false. #### Example ```csharp using System; using System.Text; using Anthropic.Models.Beta.Organization.PluginMarketplaces; PluginMarketplaceValidateArchiveParams parameters = new() { Archive = Encoding.UTF8.GetBytes("Example data") }; var betaPluginMarketplaceValidationReport = await client.Beta.Organization.PluginMarketplaces.ValidateArchive(parameters); Console.WriteLine(betaPluginMarketplaceValidationReport); ``` ##### Response (200) ```json { "commit_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8", "manifest_error": "manifest_error", "manifest_error_code": "marketplace_sync_manifest_not_found", "plugin_errors": [ { "error": "error", "error_code": "marketplace_sync_plugin_missing_manifest", "name": "name" } ], "plugin_warnings": [ { "name": "name", "warnings": [ { "error_code": "marketplace_sync_zipball_symlink_dangling", "message": "message" } ] } ], "ref": "main", "total_plugin_count": 0, "type": "plugin_marketplace_validation_report", "valid": false } ``` ## Organization › Telemetry Destinations ### Create a Telemetry Destination `BetaTelemetryDestination Beta.Organization.TelemetryDestinations.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/telemetry_destinations` Register an OpenTelemetry destination for the organization. The destination starts in state `enabled`. An organization can have at most 10 destinations, including disabled ones. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#add-a-destination) to learn more about adding a destination. #### Parameters - `TelemetryDestinationCreateParams parameters` - `required string endpointUrl` The base URL of your collector's OTLP/HTTP endpoint, for example `https://gateway.example.com`. The URL must use `https` and a hostname, not an IP address. The port, if given, must be 443. The URL must not contain a query string, a fragment, or a username and password. At most 2,048 characters. A path prefix, such as `/otlp`, is allowed. Don't include the per-signal path (`/v1/traces`), because the API appends it on delivery. If your collector takes traces on another path, also set `traces.endpoint_url`. minLength: 1, maxLength: 2048 - `required BetaTelemetryDestinationWorkspacesParams workspaces` Which of the organization's workspaces the destination covers. - `string? displayName` Human-readable name for the destination. Optional. 1 to 255 characters. - `IReadOnlyDictionary headers` Request headers that the API sends with every delivery, typically your collector's authentication header (for example `authorization`). The API stores the values encrypted and never returns them. Reads show only `header_names`. At most 20 headers. Names are at most 128 characters. Two names can't differ only in case. Values are printable ASCII, at most 4,096 characters, and can't begin or end with a space. Names and values together are at most 16,384 bytes. Reserved names are rejected, for example `host`, `cookie`, `user-agent`, and names that start with `content-`, `proxy-`, `x-forwarded-`, or `anthropic-`. For this check, `_` in a name counts as `-`. - `BetaTelemetryDestinationTracesParams traces` The settings for the traces that the destination receives. If you leave it out, every setting takes its default. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaTelemetryDestination` An OpenTelemetry destination: an OTLP/HTTP endpoint, the request headers sent with every delivery to it, what the exported spans contain, and which workspaces it covers. A destination belongs to an organization. A workspace's spans go to every enabled destination that covers it. - `JsonElement Type = "telemetry_destination"` - `required string ID` The unique ID of the destination (`tdst_...`). - `required DateTimeOffset CreatedAt` Time the destination was created. format: date-time - `required BetaTelemetryDestinationDeliveryHealth DeliveryHealth` The most recent delivery results for this destination. - `required string? LastError` A message that describes the most recent failed delivery to the destination, or `null` if no delivery has failed yet. Examples are `temporary DNS failure`, `TLS failure`, `timeout`, `connection failure`, `invalid address`, `HTTP error (status 503)`, and `redirect (status 301)`. The message is `invalid address` both for a hostname that doesn't exist and for an address that isn't publicly routable. It never contains the endpoint's response body, a header value, a network address, or TLS details. `last_error` and `last_error_at` always change together. A later successful delivery doesn't clear them. If `last_success_at` is later than `last_error_at`, a delivery has succeeded since this failure. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#delivery-errors) to learn the likely cause of each error. - `required DateTimeOffset? LastErrorAt` Time of the failure that `last_error` describes. Changes together with `last_error`. Null until a delivery first fails. format: date-time - `required DateTimeOffset? LastSuccessAt` Time of the most recent successful delivery to the destination, or `null` if no delivery has succeeded yet. format: date-time - `required string? DisplayName` Human-readable name for the destination. Null when none was set. - `required string EndpointUrl` The base URL of the destination's OTLP/HTTP endpoint, exactly as registered. The API appends the per-signal path, such as `/v1/traces`, on delivery, unless `traces.endpoint_url` is set. - `required IReadOnlyList HeaderNames` Names of the registered request headers. Header values are write-only and are never returned. - `required BetaTelemetryDestinationState State` Whether the destination receives deliveries. - `class BetaTelemetryDestinationStateEnabled` The telemetry destination receives the spans of the workspaces that it covers. - `JsonElement Type = "enabled"` - `class BetaTelemetryDestinationStateDisabled` The API doesn't deliver anything to the telemetry destination. Spans produced while it is disabled aren't delivered later. - `JsonElement Type = "disabled"` - `required BetaTelemetryDestinationDisabledReason Reason` Whether a caller or the API disabled the destination and, when the API did, why. Read-only. - `class BetaTelemetryDestinationDisabledReasonCaller` A caller disabled the destination with an update that set `state` to `disabled`. - `JsonElement Type = "caller"` - `class BetaTelemetryDestinationDisabledReasonSustainedFailure` The API disabled the destination because deliveries to it failed, with no successful delivery in between, for longer than a threshold that Anthropic configures and that is not part of this contract. The reason is `invalid_address` instead when the most recent failed delivery failed with an invalid address. - `JsonElement Type = "sustained_failure"` - `class BetaTelemetryDestinationDisabledReasonInvalidAddress` The API disabled the destination because deliveries to it failed for longer than the same threshold as for `sustained_failure`, and the most recent failed delivery failed with an invalid address: the DNS answer says that the endpoint's hostname doesn't exist or doesn't have an address, or the address that the API would connect to isn't publicly routable or is reserved, for example a loopback, link-local, private-network, or cloud-metadata address. The API doesn't connect to such an address, and retries the delivery a bounded number of times as it does after a timeout. A timeout or a server failure of the DNS lookup is a temporary DNS failure instead, not an invalid address. - `JsonElement Type = "invalid_address"` - `class BetaTelemetryDestinationDisabledReasonRedirect` The API disabled the destination because the endpoint answered a delivery with a 3xx status. Redirects are never followed, and one such answer disables the destination at once. - `JsonElement Type = "redirect"` - `required BetaTelemetryDestinationTraces Traces` The destination's settings for the traces it receives. - `required BetaTelemetryDestinationContentMode ContentMode` What the exported spans contain. - `MetadataOnly("metadata_only")` The spans contain identifiers, timing, status, token counts, and similar metadata. They don't contain prompt text, completion text, or tool inputs and outputs. - `Content("content")` The spans contain the same metadata as `metadata_only`, plus message and tool content. An organization with a data-handling restriction, such as under HIPAA, can't choose this mode. The API exports only metadata for such an organization, even to a destination that already has `content`. - `required bool Enabled` Whether the destination receives traces. A destination whose `enabled` is false keeps its other settings. - `required string? EndpointUrl` The full URL that the API posts traces to, exactly as registered, or `null` if the destination doesn't have one. When it is `null`, the API posts traces to `endpoint_url` with `/v1/traces` appended. - `required int? MaxContentBytes` The most bytes of content that one exported span can contain, or `null` if only the API's maximum applies. Content means model prompts and responses, and tool inputs and outputs. The API shortens longer content to this size before it delivers the span. A destination whose `content_mode` is `metadata_only` keeps this value. It applies once `content_mode` is `content`. format: int32 - `required DateTimeOffset UpdatedAt` Time of the last change to the destination's configuration or state. Changes to `delivery_health` don't change it. An update that sets a header value always changes it, even when the value is the same as before. Adding or removing a single workspace on the destination's list doesn't change it. An update that changes the list does. format: date-time - `required BetaTelemetryDestinationWorkspaces Workspaces` Which of the organization's workspaces the destination covers. - `class BetaTelemetryDestinationWorkspacesAll` The destination covers every workspace of the organization, including the default workspace, archived workspaces, and workspaces created later. It doesn't have a list. - `JsonElement Type = "all"` - `class BetaTelemetryDestinationWorkspacesInclude` The destination covers the workspaces on its list, and no others. - `JsonElement Type = "include"` - `class BetaTelemetryDestinationWorkspacesExclude` The destination covers every workspace of the organization except the workspaces on its list. A workspace created later is covered until it is added to the list. - `JsonElement Type = "exclude"` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations; TelemetryDestinationCreateParams parameters = new() { EndpointUrl = "x", Workspaces = new BetaTelemetryDestinationWorkspacesAllParams(), }; var betaTelemetryDestination = await client.Beta.Organization.TelemetryDestinations.Create(parameters); Console.WriteLine(betaTelemetryDestination); ``` ##### Response (200) ```json { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "delivery_health": { "last_error": "last_error", "last_error_at": "2019-12-27T18:11:19.117Z", "last_success_at": "2019-12-27T18:11:19.117Z" }, "display_name": "display_name", "endpoint_url": "endpoint_url", "header_names": [ "string" ], "state": { "type": "enabled" }, "traces": { "content_mode": "metadata_only", "enabled": true, "endpoint_url": "endpoint_url", "max_content_bytes": 0 }, "type": "telemetry_destination", "updated_at": "2019-12-27T18:11:19.117Z", "workspaces": { "type": "all" } } ``` ### List Telemetry Destinations `TelemetryDestinationListPage Beta.Organization.TelemetryDestinations.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/telemetry_destinations` List the organization's destinations, newest first, optionally only those that cover given workspaces. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#set-up-api-tracing) to learn more about destinations. #### Parameters - `TelemetryDestinationListParams parameters` - `int limit` (query parameter) Number of destinations to return per page, between 1 and 1,000. Defaults to 20. format: int32 - `string page` (query parameter) Opaque cursor from a previous response's `next_page`. Leave it out to get the first page. - `IReadOnlyList workspaceIds` (query parameter) Return only the destinations that cover at least one of these workspaces (`wrkspc_...`). Send at most 100 IDs, as `workspace_ids[]`. A destination covers a workspace when its `workspaces.type` is `all`, when its `include` list has the workspace, or when its `exclude` list doesn't have it. Destinations in either state can match. An ID that isn't the ID of one of the organization's workspaces doesn't match any destination, not even one whose type is `all`. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaTelemetryDestination` An OpenTelemetry destination: an OTLP/HTTP endpoint, the request headers sent with every delivery to it, what the exported spans contain, and which workspaces it covers. A destination belongs to an organization. A workspace's spans go to every enabled destination that covers it. - `JsonElement Type = "telemetry_destination"` - `required string ID` The unique ID of the destination (`tdst_...`). - `required DateTimeOffset CreatedAt` Time the destination was created. format: date-time - `required BetaTelemetryDestinationDeliveryHealth DeliveryHealth` The most recent delivery results for this destination. - `required string? LastError` A message that describes the most recent failed delivery to the destination, or `null` if no delivery has failed yet. Examples are `temporary DNS failure`, `TLS failure`, `timeout`, `connection failure`, `invalid address`, `HTTP error (status 503)`, and `redirect (status 301)`. The message is `invalid address` both for a hostname that doesn't exist and for an address that isn't publicly routable. It never contains the endpoint's response body, a header value, a network address, or TLS details. `last_error` and `last_error_at` always change together. A later successful delivery doesn't clear them. If `last_success_at` is later than `last_error_at`, a delivery has succeeded since this failure. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#delivery-errors) to learn the likely cause of each error. - `required DateTimeOffset? LastErrorAt` Time of the failure that `last_error` describes. Changes together with `last_error`. Null until a delivery first fails. format: date-time - `required DateTimeOffset? LastSuccessAt` Time of the most recent successful delivery to the destination, or `null` if no delivery has succeeded yet. format: date-time - `required string? DisplayName` Human-readable name for the destination. Null when none was set. - `required string EndpointUrl` The base URL of the destination's OTLP/HTTP endpoint, exactly as registered. The API appends the per-signal path, such as `/v1/traces`, on delivery, unless `traces.endpoint_url` is set. - `required IReadOnlyList HeaderNames` Names of the registered request headers. Header values are write-only and are never returned. - `required BetaTelemetryDestinationState State` Whether the destination receives deliveries. - `class BetaTelemetryDestinationStateEnabled` The telemetry destination receives the spans of the workspaces that it covers. - `JsonElement Type = "enabled"` - `class BetaTelemetryDestinationStateDisabled` The API doesn't deliver anything to the telemetry destination. Spans produced while it is disabled aren't delivered later. - `JsonElement Type = "disabled"` - `required BetaTelemetryDestinationDisabledReason Reason` Whether a caller or the API disabled the destination and, when the API did, why. Read-only. - `class BetaTelemetryDestinationDisabledReasonCaller` A caller disabled the destination with an update that set `state` to `disabled`. - `JsonElement Type = "caller"` - `class BetaTelemetryDestinationDisabledReasonSustainedFailure` The API disabled the destination because deliveries to it failed, with no successful delivery in between, for longer than a threshold that Anthropic configures and that is not part of this contract. The reason is `invalid_address` instead when the most recent failed delivery failed with an invalid address. - `JsonElement Type = "sustained_failure"` - `class BetaTelemetryDestinationDisabledReasonInvalidAddress` The API disabled the destination because deliveries to it failed for longer than the same threshold as for `sustained_failure`, and the most recent failed delivery failed with an invalid address: the DNS answer says that the endpoint's hostname doesn't exist or doesn't have an address, or the address that the API would connect to isn't publicly routable or is reserved, for example a loopback, link-local, private-network, or cloud-metadata address. The API doesn't connect to such an address, and retries the delivery a bounded number of times as it does after a timeout. A timeout or a server failure of the DNS lookup is a temporary DNS failure instead, not an invalid address. - `JsonElement Type = "invalid_address"` - `class BetaTelemetryDestinationDisabledReasonRedirect` The API disabled the destination because the endpoint answered a delivery with a 3xx status. Redirects are never followed, and one such answer disables the destination at once. - `JsonElement Type = "redirect"` - `required BetaTelemetryDestinationTraces Traces` The destination's settings for the traces it receives. - `required BetaTelemetryDestinationContentMode ContentMode` What the exported spans contain. - `MetadataOnly("metadata_only")` The spans contain identifiers, timing, status, token counts, and similar metadata. They don't contain prompt text, completion text, or tool inputs and outputs. - `Content("content")` The spans contain the same metadata as `metadata_only`, plus message and tool content. An organization with a data-handling restriction, such as under HIPAA, can't choose this mode. The API exports only metadata for such an organization, even to a destination that already has `content`. - `required bool Enabled` Whether the destination receives traces. A destination whose `enabled` is false keeps its other settings. - `required string? EndpointUrl` The full URL that the API posts traces to, exactly as registered, or `null` if the destination doesn't have one. When it is `null`, the API posts traces to `endpoint_url` with `/v1/traces` appended. - `required int? MaxContentBytes` The most bytes of content that one exported span can contain, or `null` if only the API's maximum applies. Content means model prompts and responses, and tool inputs and outputs. The API shortens longer content to this size before it delivers the span. A destination whose `content_mode` is `metadata_only` keeps this value. It applies once `content_mode` is `content`. format: int32 - `required DateTimeOffset UpdatedAt` Time of the last change to the destination's configuration or state. Changes to `delivery_health` don't change it. An update that sets a header value always changes it, even when the value is the same as before. Adding or removing a single workspace on the destination's list doesn't change it. An update that changes the list does. format: date-time - `required BetaTelemetryDestinationWorkspaces Workspaces` Which of the organization's workspaces the destination covers. - `class BetaTelemetryDestinationWorkspacesAll` The destination covers every workspace of the organization, including the default workspace, archived workspaces, and workspaces created later. It doesn't have a list. - `JsonElement Type = "all"` - `class BetaTelemetryDestinationWorkspacesInclude` The destination covers the workspaces on its list, and no others. - `JsonElement Type = "include"` - `class BetaTelemetryDestinationWorkspacesExclude` The destination covers every workspace of the organization except the workspaces on its list. A workspace created later is covered until it is added to the list. - `JsonElement Type = "exclude"` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations; TelemetryDestinationListParams parameters = new(); var page = await client.Beta.Organization.TelemetryDestinations.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "delivery_health": { "last_error": "last_error", "last_error_at": "2019-12-27T18:11:19.117Z", "last_success_at": "2019-12-27T18:11:19.117Z" }, "display_name": "display_name", "endpoint_url": "endpoint_url", "header_names": [ "string" ], "state": { "type": "enabled" }, "traces": { "content_mode": "metadata_only", "enabled": true, "endpoint_url": "endpoint_url", "max_content_bytes": 0 }, "type": "telemetry_destination", "updated_at": "2019-12-27T18:11:19.117Z", "workspaces": { "type": "all" } } ], "next_page": "next_page" } ``` ### Retrieve a Telemetry Destination `BetaTelemetryDestination Beta.Organization.TelemetryDestinations.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/telemetry_destinations/{destination_id}` Read a destination's configuration, state, and most recent delivery results. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#delivery-and-health) to learn how the API delivers spans and when it disables a destination. #### Parameters - `TelemetryDestinationRetrieveParams parameters` - `required string destinationID` (path parameter) ID of the destination (`tdst_...`). - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaTelemetryDestination` An OpenTelemetry destination: an OTLP/HTTP endpoint, the request headers sent with every delivery to it, what the exported spans contain, and which workspaces it covers. A destination belongs to an organization. A workspace's spans go to every enabled destination that covers it. - `JsonElement Type = "telemetry_destination"` - `required string ID` The unique ID of the destination (`tdst_...`). - `required DateTimeOffset CreatedAt` Time the destination was created. format: date-time - `required BetaTelemetryDestinationDeliveryHealth DeliveryHealth` The most recent delivery results for this destination. - `required string? LastError` A message that describes the most recent failed delivery to the destination, or `null` if no delivery has failed yet. Examples are `temporary DNS failure`, `TLS failure`, `timeout`, `connection failure`, `invalid address`, `HTTP error (status 503)`, and `redirect (status 301)`. The message is `invalid address` both for a hostname that doesn't exist and for an address that isn't publicly routable. It never contains the endpoint's response body, a header value, a network address, or TLS details. `last_error` and `last_error_at` always change together. A later successful delivery doesn't clear them. If `last_success_at` is later than `last_error_at`, a delivery has succeeded since this failure. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#delivery-errors) to learn the likely cause of each error. - `required DateTimeOffset? LastErrorAt` Time of the failure that `last_error` describes. Changes together with `last_error`. Null until a delivery first fails. format: date-time - `required DateTimeOffset? LastSuccessAt` Time of the most recent successful delivery to the destination, or `null` if no delivery has succeeded yet. format: date-time - `required string? DisplayName` Human-readable name for the destination. Null when none was set. - `required string EndpointUrl` The base URL of the destination's OTLP/HTTP endpoint, exactly as registered. The API appends the per-signal path, such as `/v1/traces`, on delivery, unless `traces.endpoint_url` is set. - `required IReadOnlyList HeaderNames` Names of the registered request headers. Header values are write-only and are never returned. - `required BetaTelemetryDestinationState State` Whether the destination receives deliveries. - `class BetaTelemetryDestinationStateEnabled` The telemetry destination receives the spans of the workspaces that it covers. - `JsonElement Type = "enabled"` - `class BetaTelemetryDestinationStateDisabled` The API doesn't deliver anything to the telemetry destination. Spans produced while it is disabled aren't delivered later. - `JsonElement Type = "disabled"` - `required BetaTelemetryDestinationDisabledReason Reason` Whether a caller or the API disabled the destination and, when the API did, why. Read-only. - `class BetaTelemetryDestinationDisabledReasonCaller` A caller disabled the destination with an update that set `state` to `disabled`. - `JsonElement Type = "caller"` - `class BetaTelemetryDestinationDisabledReasonSustainedFailure` The API disabled the destination because deliveries to it failed, with no successful delivery in between, for longer than a threshold that Anthropic configures and that is not part of this contract. The reason is `invalid_address` instead when the most recent failed delivery failed with an invalid address. - `JsonElement Type = "sustained_failure"` - `class BetaTelemetryDestinationDisabledReasonInvalidAddress` The API disabled the destination because deliveries to it failed for longer than the same threshold as for `sustained_failure`, and the most recent failed delivery failed with an invalid address: the DNS answer says that the endpoint's hostname doesn't exist or doesn't have an address, or the address that the API would connect to isn't publicly routable or is reserved, for example a loopback, link-local, private-network, or cloud-metadata address. The API doesn't connect to such an address, and retries the delivery a bounded number of times as it does after a timeout. A timeout or a server failure of the DNS lookup is a temporary DNS failure instead, not an invalid address. - `JsonElement Type = "invalid_address"` - `class BetaTelemetryDestinationDisabledReasonRedirect` The API disabled the destination because the endpoint answered a delivery with a 3xx status. Redirects are never followed, and one such answer disables the destination at once. - `JsonElement Type = "redirect"` - `required BetaTelemetryDestinationTraces Traces` The destination's settings for the traces it receives. - `required BetaTelemetryDestinationContentMode ContentMode` What the exported spans contain. - `MetadataOnly("metadata_only")` The spans contain identifiers, timing, status, token counts, and similar metadata. They don't contain prompt text, completion text, or tool inputs and outputs. - `Content("content")` The spans contain the same metadata as `metadata_only`, plus message and tool content. An organization with a data-handling restriction, such as under HIPAA, can't choose this mode. The API exports only metadata for such an organization, even to a destination that already has `content`. - `required bool Enabled` Whether the destination receives traces. A destination whose `enabled` is false keeps its other settings. - `required string? EndpointUrl` The full URL that the API posts traces to, exactly as registered, or `null` if the destination doesn't have one. When it is `null`, the API posts traces to `endpoint_url` with `/v1/traces` appended. - `required int? MaxContentBytes` The most bytes of content that one exported span can contain, or `null` if only the API's maximum applies. Content means model prompts and responses, and tool inputs and outputs. The API shortens longer content to this size before it delivers the span. A destination whose `content_mode` is `metadata_only` keeps this value. It applies once `content_mode` is `content`. format: int32 - `required DateTimeOffset UpdatedAt` Time of the last change to the destination's configuration or state. Changes to `delivery_health` don't change it. An update that sets a header value always changes it, even when the value is the same as before. Adding or removing a single workspace on the destination's list doesn't change it. An update that changes the list does. format: date-time - `required BetaTelemetryDestinationWorkspaces Workspaces` Which of the organization's workspaces the destination covers. - `class BetaTelemetryDestinationWorkspacesAll` The destination covers every workspace of the organization, including the default workspace, archived workspaces, and workspaces created later. It doesn't have a list. - `JsonElement Type = "all"` - `class BetaTelemetryDestinationWorkspacesInclude` The destination covers the workspaces on its list, and no others. - `JsonElement Type = "include"` - `class BetaTelemetryDestinationWorkspacesExclude` The destination covers every workspace of the organization except the workspaces on its list. A workspace created later is covered until it is added to the list. - `JsonElement Type = "exclude"` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations; TelemetryDestinationRetrieveParams parameters = new() { DestinationID = "destination_id" }; var betaTelemetryDestination = await client.Beta.Organization.TelemetryDestinations.Retrieve(parameters); Console.WriteLine(betaTelemetryDestination); ``` ##### Response (200) ```json { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "delivery_health": { "last_error": "last_error", "last_error_at": "2019-12-27T18:11:19.117Z", "last_success_at": "2019-12-27T18:11:19.117Z" }, "display_name": "display_name", "endpoint_url": "endpoint_url", "header_names": [ "string" ], "state": { "type": "enabled" }, "traces": { "content_mode": "metadata_only", "enabled": true, "endpoint_url": "endpoint_url", "max_content_bytes": 0 }, "type": "telemetry_destination", "updated_at": "2019-12-27T18:11:19.117Z", "workspaces": { "type": "all" } } ``` ### Update a Telemetry Destination `BetaTelemetryDestination Beta.Organization.TelemetryDestinations.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/telemetry_destinations/{destination_id}` Change a telemetry destination's settings, its state, or which workspaces it covers. Send at least one field. Omitted fields keep their stored values, except the registered headers, which a change of the endpoint's hostname or port removes. Only `display_name`, `traces`, `traces.endpoint_url`, `traces.content_mode`, `traces.max_content_bytes`, and individual `headers` values accept `null`. If another request changes the destination while the update runs, the API returns a 409 `conflict_error`. Read the destination again, then retry the update. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#delivery-and-health) to learn more about changing a destination. #### Parameters - `TelemetryDestinationUpdateParams parameters` - `required string destinationID` (path parameter) ID of the destination (`tdst_...`). - `string? displayName` New human-readable name, 1 to 255 characters. Null clears it. - `string endpointUrl` The new base URL of the destination's OTLP/HTTP endpoint. The same rules as on create apply. A change of hostname or port first removes every registered header, so send the headers for the new endpoint in the same request. When the destination has a `traces.endpoint_url`, such a change must also set `traces.endpoint_url` to a URL with the new hostname and port, or to `null`. A change of the path alone keeps the headers. maxLength: 2048 - `IReadOnlyDictionary? headers` Headers to set or remove. The API merges them into the destination's headers by name. Names compare case-insensitively. A string value sets or replaces that header. A `null` value removes it. Headers that you omit don't change. The field itself can't be `null`. A request that sets a header value must also include `endpoint_url`. The current URL is accepted. The resulting set must stay within the same limits as on create. When the request sets a value, each stored value that it doesn't set counts as 4,096 bytes toward the 16,384-byte limit, because you can't read its real length. So to change one header of a destination that has four or more other headers, send the values of the others again in the same request. - `BetaTelemetryDestinationStateParams state` Whether the destination receives deliveries after the update. The field can't be `null`. - `BetaTelemetryDestinationTracesParams? traces` The traces settings to change. Omitted settings keep their stored values. `null` sets every traces setting to its create default. - `BetaTelemetryDestinationWorkspacesParams workspaces` The new workspace scope, in the same form as on create. The field can't be `null`. The API refuses an update that changes the type or sends `workspace_ids` while the destination's list has more than 750 workspaces. Remove workspaces one at a time until 750 or fewer remain, then send the update again. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaTelemetryDestination` An OpenTelemetry destination: an OTLP/HTTP endpoint, the request headers sent with every delivery to it, what the exported spans contain, and which workspaces it covers. A destination belongs to an organization. A workspace's spans go to every enabled destination that covers it. - `JsonElement Type = "telemetry_destination"` - `required string ID` The unique ID of the destination (`tdst_...`). - `required DateTimeOffset CreatedAt` Time the destination was created. format: date-time - `required BetaTelemetryDestinationDeliveryHealth DeliveryHealth` The most recent delivery results for this destination. - `required string? LastError` A message that describes the most recent failed delivery to the destination, or `null` if no delivery has failed yet. Examples are `temporary DNS failure`, `TLS failure`, `timeout`, `connection failure`, `invalid address`, `HTTP error (status 503)`, and `redirect (status 301)`. The message is `invalid address` both for a hostname that doesn't exist and for an address that isn't publicly routable. It never contains the endpoint's response body, a header value, a network address, or TLS details. `last_error` and `last_error_at` always change together. A later successful delivery doesn't clear them. If `last_success_at` is later than `last_error_at`, a delivery has succeeded since this failure. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#delivery-errors) to learn the likely cause of each error. - `required DateTimeOffset? LastErrorAt` Time of the failure that `last_error` describes. Changes together with `last_error`. Null until a delivery first fails. format: date-time - `required DateTimeOffset? LastSuccessAt` Time of the most recent successful delivery to the destination, or `null` if no delivery has succeeded yet. format: date-time - `required string? DisplayName` Human-readable name for the destination. Null when none was set. - `required string EndpointUrl` The base URL of the destination's OTLP/HTTP endpoint, exactly as registered. The API appends the per-signal path, such as `/v1/traces`, on delivery, unless `traces.endpoint_url` is set. - `required IReadOnlyList HeaderNames` Names of the registered request headers. Header values are write-only and are never returned. - `required BetaTelemetryDestinationState State` Whether the destination receives deliveries. - `class BetaTelemetryDestinationStateEnabled` The telemetry destination receives the spans of the workspaces that it covers. - `JsonElement Type = "enabled"` - `class BetaTelemetryDestinationStateDisabled` The API doesn't deliver anything to the telemetry destination. Spans produced while it is disabled aren't delivered later. - `JsonElement Type = "disabled"` - `required BetaTelemetryDestinationDisabledReason Reason` Whether a caller or the API disabled the destination and, when the API did, why. Read-only. - `class BetaTelemetryDestinationDisabledReasonCaller` A caller disabled the destination with an update that set `state` to `disabled`. - `JsonElement Type = "caller"` - `class BetaTelemetryDestinationDisabledReasonSustainedFailure` The API disabled the destination because deliveries to it failed, with no successful delivery in between, for longer than a threshold that Anthropic configures and that is not part of this contract. The reason is `invalid_address` instead when the most recent failed delivery failed with an invalid address. - `JsonElement Type = "sustained_failure"` - `class BetaTelemetryDestinationDisabledReasonInvalidAddress` The API disabled the destination because deliveries to it failed for longer than the same threshold as for `sustained_failure`, and the most recent failed delivery failed with an invalid address: the DNS answer says that the endpoint's hostname doesn't exist or doesn't have an address, or the address that the API would connect to isn't publicly routable or is reserved, for example a loopback, link-local, private-network, or cloud-metadata address. The API doesn't connect to such an address, and retries the delivery a bounded number of times as it does after a timeout. A timeout or a server failure of the DNS lookup is a temporary DNS failure instead, not an invalid address. - `JsonElement Type = "invalid_address"` - `class BetaTelemetryDestinationDisabledReasonRedirect` The API disabled the destination because the endpoint answered a delivery with a 3xx status. Redirects are never followed, and one such answer disables the destination at once. - `JsonElement Type = "redirect"` - `required BetaTelemetryDestinationTraces Traces` The destination's settings for the traces it receives. - `required BetaTelemetryDestinationContentMode ContentMode` What the exported spans contain. - `MetadataOnly("metadata_only")` The spans contain identifiers, timing, status, token counts, and similar metadata. They don't contain prompt text, completion text, or tool inputs and outputs. - `Content("content")` The spans contain the same metadata as `metadata_only`, plus message and tool content. An organization with a data-handling restriction, such as under HIPAA, can't choose this mode. The API exports only metadata for such an organization, even to a destination that already has `content`. - `required bool Enabled` Whether the destination receives traces. A destination whose `enabled` is false keeps its other settings. - `required string? EndpointUrl` The full URL that the API posts traces to, exactly as registered, or `null` if the destination doesn't have one. When it is `null`, the API posts traces to `endpoint_url` with `/v1/traces` appended. - `required int? MaxContentBytes` The most bytes of content that one exported span can contain, or `null` if only the API's maximum applies. Content means model prompts and responses, and tool inputs and outputs. The API shortens longer content to this size before it delivers the span. A destination whose `content_mode` is `metadata_only` keeps this value. It applies once `content_mode` is `content`. format: int32 - `required DateTimeOffset UpdatedAt` Time of the last change to the destination's configuration or state. Changes to `delivery_health` don't change it. An update that sets a header value always changes it, even when the value is the same as before. Adding or removing a single workspace on the destination's list doesn't change it. An update that changes the list does. format: date-time - `required BetaTelemetryDestinationWorkspaces Workspaces` Which of the organization's workspaces the destination covers. - `class BetaTelemetryDestinationWorkspacesAll` The destination covers every workspace of the organization, including the default workspace, archived workspaces, and workspaces created later. It doesn't have a list. - `JsonElement Type = "all"` - `class BetaTelemetryDestinationWorkspacesInclude` The destination covers the workspaces on its list, and no others. - `JsonElement Type = "include"` - `class BetaTelemetryDestinationWorkspacesExclude` The destination covers every workspace of the organization except the workspaces on its list. A workspace created later is covered until it is added to the list. - `JsonElement Type = "exclude"` #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations; TelemetryDestinationUpdateParams parameters = new() { DestinationID = "destination_id" }; var betaTelemetryDestination = await client.Beta.Organization.TelemetryDestinations.Update(parameters); Console.WriteLine(betaTelemetryDestination); ``` ##### Response (200) ```json { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "delivery_health": { "last_error": "last_error", "last_error_at": "2019-12-27T18:11:19.117Z", "last_success_at": "2019-12-27T18:11:19.117Z" }, "display_name": "display_name", "endpoint_url": "endpoint_url", "header_names": [ "string" ], "state": { "type": "enabled" }, "traces": { "content_mode": "metadata_only", "enabled": true, "endpoint_url": "endpoint_url", "max_content_bytes": 0 }, "type": "telemetry_destination", "updated_at": "2019-12-27T18:11:19.117Z", "workspaces": { "type": "all" } } ``` ### Delete a Telemetry Destination `BetaDeletedTelemetryDestination Beta.Organization.TelemetryDestinations.Delete(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/telemetry_destinations/{destination_id}` Delete a destination and its workspace list. The API stops sending spans to the destination. The spans of the workspaces it covered still go to the other destinations that cover them. A deleted destination can't be read, listed, or restored. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#delivery-and-health) to learn more about managing a destination. #### Parameters - `TelemetryDestinationDeleteParams parameters` - `required string destinationID` (path parameter) ID of the destination (`tdst_...`). - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaDeletedTelemetryDestination` Confirmation that a destination was deleted. - `JsonElement Type = "telemetry_destination_deleted"` - `required string ID` ID of the deleted destination (`tdst_...`). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations; TelemetryDestinationDeleteParams parameters = new() { DestinationID = "destination_id" }; var betaDeletedTelemetryDestination = await client.Beta.Organization.TelemetryDestinations.Delete(parameters); Console.WriteLine(betaDeletedTelemetryDestination); ``` ##### Response (200) ```json { "id": "id", "type": "telemetry_destination_deleted" } ``` ### Test a Telemetry Destination `BetaTelemetryDestinationTestResponse Beta.Organization.TelemetryDestinations.Test(parameters, cancellationToken = default)` **POST** `/v1/organizations/telemetry_destinations/{destination_id}/test` Send one test span, named `anthropic.test`, to the destination with its registered headers, once and without retries, and report the destination's answer. The response is 200 whether or not the destination answered with a 2xx status: its `result` has the type `success`, or the type `failure` and the reason in `error`. The destination's configuration, `state` and `delivery_health` do not change. A disabled destination can be tested too. Wait 10 seconds between tests of one destination; a request that comes sooner may be answered with status 429. #### Parameters - `TelemetryDestinationTestParams parameters` - `required string destinationID` (path parameter) ID of the destination to test (starts with `tdst_`). - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaTelemetryDestinationTestResponse` The result of one test span sent to a destination. - `JsonElement Type = "telemetry_destination_test"` - `required BetaTelemetryDestinationTestResult Result` How the test went: `success` when the destination answered with a 2xx status, else `failure` with the reason. - `class BetaTelemetryDestinationTestSuccess` The destination answered the test span with a 2xx status. - `JsonElement Type = "success"` - `class BetaTelemetryDestinationTestFailure` The test span was not delivered. - `JsonElement Type = "failure"` - `required string Error` A message that describes why the test span was not delivered, including the HTTP status code when the destination returned one. Examples: `HTTP error (status 403)`, `timeout`, `TLS failure`. It has the same form as the destination's `delivery_health.last_error` and never contains the destination's response body, any header value, a network address, or TLS details. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations; TelemetryDestinationTestParams parameters = new() { DestinationID = "destination_id" }; var betaTelemetryDestinationTestResponse = await client.Beta.Organization.TelemetryDestinations.Test(parameters); Console.WriteLine(betaTelemetryDestinationTestResponse); ``` ##### Response (200) ```json { "result": { "type": "success" }, "type": "telemetry_destination_test" } ``` ## Organization › Telemetry Destinations › Workspaces ### List Telemetry Destination Workspaces `WorkspaceListPage Beta.Organization.TelemetryDestinations.Workspaces.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/telemetry_destinations/{destination_id}/workspaces` List the workspaces on a destination's workspace list, newest entry first. A destination whose `workspaces.type` is `all` doesn't have a list, so its page is empty. The list includes archived workspaces. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#choose-workspaces-for-a-destination) to learn more about choosing the workspaces of a destination. #### Parameters - `WorkspaceListParams parameters` - `required string destinationID` (path parameter) ID of the destination (`tdst_...`). - `int limit` (query parameter) Number of entries to return per page, between 1 and 1,000. Defaults to 20. format: int32 - `string page` (query parameter) Opaque cursor from a previous response's `next_page`. Leave it out to get the first page. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaTelemetryDestinationWorkspace` A workspace on a telemetry destination's workspace list. Under `include`, the destination covers the workspace. Under `exclude`, the destination covers every workspace except this one. The entry doesn't have an `id`. Its `telemetry_destination_id` and `workspace_id` together identify it. - `JsonElement Type = "telemetry_destination_workspace"` - `required DateTimeOffset CreatedAt` Time the workspace was added to the list. format: date-time - `required string TelemetryDestinationID` ID of the telemetry destination (`tdst_...`). - `required string WorkspaceID` ID of the workspace (`wrkspc_...`). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations.Workspaces; WorkspaceListParams parameters = new() { DestinationID = "destination_id" }; var page = await client.Beta.Organization.TelemetryDestinations.Workspaces.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "created_at": "2019-12-27T18:11:19.117Z", "telemetry_destination_id": "telemetry_destination_id", "type": "telemetry_destination_workspace", "workspace_id": "workspace_id" } ], "next_page": "next_page" } ``` ### Add a Telemetry Destination Workspace `BetaTelemetryDestinationWorkspace Beta.Organization.TelemetryDestinations.Workspaces.Add(parameters, cancellationToken = default)` **POST** `/v1/organizations/telemetry_destinations/{destination_id}/workspaces/{workspace_id}` Add one workspace to a destination's workspace list. Under `include` the workspace's spans start going to the destination. Under `exclude` they stop. A list holds at most 1,000 workspaces. Adding a workspace that is already on the list changes nothing and returns the existing entry. An archived workspace that isn't on the list yet can't be added. A destination whose `workspaces.type` is `all` doesn't have a list, so the API returns 400. To change which workspaces such a destination covers, update its `workspaces`. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#choose-workspaces-for-a-destination) to learn more about choosing the workspaces of a destination. #### Parameters - `WorkspaceAddParams parameters` - `required string destinationID` (path parameter) ID of the destination (`tdst_...`). - `required string workspaceID` (path parameter) ID of the workspace to add (`wrkspc_...`). - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaTelemetryDestinationWorkspace` A workspace on a telemetry destination's workspace list. Under `include`, the destination covers the workspace. Under `exclude`, the destination covers every workspace except this one. The entry doesn't have an `id`. Its `telemetry_destination_id` and `workspace_id` together identify it. - `JsonElement Type = "telemetry_destination_workspace"` - `required DateTimeOffset CreatedAt` Time the workspace was added to the list. format: date-time - `required string TelemetryDestinationID` ID of the telemetry destination (`tdst_...`). - `required string WorkspaceID` ID of the workspace (`wrkspc_...`). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations.Workspaces; WorkspaceAddParams parameters = new() { DestinationID = "destination_id", WorkspaceID = "workspace_id", }; var betaTelemetryDestinationWorkspace = await client.Beta.Organization.TelemetryDestinations.Workspaces.Add(parameters); Console.WriteLine(betaTelemetryDestinationWorkspace); ``` ##### Response (200) ```json { "created_at": "2019-12-27T18:11:19.117Z", "telemetry_destination_id": "telemetry_destination_id", "type": "telemetry_destination_workspace", "workspace_id": "workspace_id" } ``` ### Remove a Telemetry Destination Workspace `BetaDeletedTelemetryDestinationWorkspace Beta.Organization.TelemetryDestinations.Workspaces.Remove(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/telemetry_destinations/{destination_id}/workspaces/{workspace_id}` Remove one workspace from a destination's workspace list. Under `include` the workspace's spans stop going to the destination. Under `exclude` they start. An archived workspace can be removed too. The API returns 404 when the workspace isn't on the list. A destination whose `workspaces.type` is `all` doesn't have a list, so the API returns 400. See the [OpenTelemetry export guide](https://platform.claude.com/docs/en/manage-claude/opentelemetry?sdk_languages=csharp#choose-workspaces-for-a-destination) to learn more about choosing the workspaces of a destination. #### Parameters - `WorkspaceRemoveParams parameters` - `required string destinationID` (path parameter) ID of the destination (`tdst_...`). - `required string workspaceID` (path parameter) ID of the workspace to remove (`wrkspc_...`). - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `telemetry-destinations-2026-08-11` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaDeletedTelemetryDestinationWorkspace` Confirmation that a workspace was removed from a destination's list. - `JsonElement Type = "telemetry_destination_workspace_deleted"` - `required string TelemetryDestinationID` ID of the telemetry destination (`tdst_...`). - `required string WorkspaceID` ID of the workspace that was removed (`wrkspc_...`). #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.TelemetryDestinations.Workspaces; WorkspaceRemoveParams parameters = new() { DestinationID = "destination_id", WorkspaceID = "workspace_id", }; var betaDeletedTelemetryDestinationWorkspace = await client.Beta.Organization.TelemetryDestinations.Workspaces.Remove(parameters); Console.WriteLine(betaDeletedTelemetryDestinationWorkspace); ``` ##### Response (200) ```json { "telemetry_destination_id": "telemetry_destination_id", "type": "telemetry_destination_workspace_deleted", "workspace_id": "workspace_id" } ``` ## Organization › Webhooks ### Create Organization Webhook Endpoint `BetaNewOrganizationWebhookEndpoint Beta.Organization.Webhooks.Create(parameters, cancellationToken = default)` **POST** `/v1/organizations/webhooks` Create an organization webhook endpoint. An organization webhook endpoint belongs to the organization rather than to one of its workspaces. An organization can have at most 32 organization webhook endpoints, enabled or disabled. The response includes the endpoint's signing secret. No read returns it, so store it when you receive it. Every request must include the beta header `anthropic-beta: webhooks-2026-10-07`. A request without it returns `404`, exactly as if this API did not exist. Anthropic turns organization webhook endpoints on for each organization; until yours is on, requests also return `404`. Organization webhook endpoints are in beta and are not available to organizations with HIPAA readiness enabled. #### Parameters - `WebhookCreateParams parameters` - `required IReadOnlyList enabledEvents` The event types to deliver to the endpoint. Must list at least one. - `UserProfileEnforcementActionOpened("user_profile.enforcement_action_opened")` - `UserProfileEnforcementActionResolved("user_profile.enforcement_action_resolved")` - `required string url` The HTTPS URL that deliveries are sent to. minLength: 1 - `string description` Notes about the endpoint. - `string name` A short label for the endpoint. - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `webhooks-2026-10-07` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaNewOrganizationWebhookEndpoint` A new organization webhook endpoint, with its signing secret. - `required string ID` ID of the webhook endpoint. - `required DateTimeOffset CreatedAt` When the endpoint was created, in RFC 3339 format. format: date-time - `required string Description` Notes about the endpoint. An empty string when none were given. - `required string DisabledReason` Why Anthropic disabled the endpoint automatically. An empty string when the endpoint is enabled, or when you disabled it. - `required IReadOnlyList EnabledEvents` The event types delivered to the endpoint. - `UserProfileEnforcementActionOpened("user_profile.enforcement_action_opened")` - `UserProfileEnforcementActionResolved("user_profile.enforcement_action_resolved")` - `required string Name` A short label for the endpoint. An empty string when none was given. - `required string SigningSecret` The secret Anthropic signs deliveries to the endpoint with (prefix `whsec_`). No other response returns it, so store it now. To replace it, regenerate the signing secret. - `required BetaOrganizationWebhookEndpointState State` Whether deliveries are sent to the endpoint. - `Disabled("disabled")` - `Enabled("enabled")` - `required DateTimeOffset UpdatedAt` When the endpoint was last changed, in RFC 3339 format. format: date-time - `required string Url` The HTTPS URL that deliveries are sent to. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Webhooks; WebhookCreateParams parameters = new() { EnabledEvents = [ EnabledEvent.UserProfileEnforcementActionOpened ], UrlValue = "x", }; var betaNewOrganizationWebhookEndpoint = await client.Beta.Organization.Webhooks.Create(parameters); Console.WriteLine(betaNewOrganizationWebhookEndpoint); ``` ##### Response (200) ```json { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "description": "description", "disabled_reason": "disabled_reason", "enabled_events": [ "user_profile.enforcement_action_opened" ], "name": "name", "signing_secret": "signing_secret", "state": "disabled", "updated_at": "2019-12-27T18:11:19.117Z", "url": "url" } ``` ### List Organization Webhook Endpoints `WebhookListPage Beta.Organization.Webhooks.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/webhooks` List the organization's webhook endpoints. An organization webhook endpoint belongs to the organization rather than to one of its workspaces. The list does not include webhook endpoints that belong to a workspace. Every request must include the beta header `anthropic-beta: webhooks-2026-10-07`. A request without it returns `404`, exactly as if this API did not exist. Anthropic turns organization webhook endpoints on for each organization; until yours is on, requests also return `404`. Organization webhook endpoints are in beta and are not available to organizations with HIPAA readiness enabled. #### Parameters - `WebhookListParams parameters` - `string? afterID` (query parameter) ID of the object to use as a cursor for pagination. When provided, returns the page of results immediately after this object. - `string? beforeID` (query parameter) ID of a webhook endpoint to use as a cursor. Returns the first `limit` endpoints that come before it in list order, not the `limit` endpoints just before it. - `long limit` (query parameter) Number of items to return per page, up to `100`. The default, `0`, means `20`. minimum: 0, maximum: 100 - `Order? order` (query parameter) Sort order by `created_at`. Defaults to `desc`, newest first. - `Asc("asc")` - `Desc("desc")` - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `webhooks-2026-10-07` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaOrganizationWebhookEndpoint` A webhook endpoint that belongs to the organization rather than to one of its workspaces. - `required string ID` ID of the webhook endpoint. - `required DateTimeOffset CreatedAt` When the endpoint was created, in RFC 3339 format. format: date-time - `required string Description` Notes about the endpoint. An empty string when none were given. - `required string DisabledReason` Why Anthropic disabled the endpoint automatically. An empty string when the endpoint is enabled, or when you disabled it. - `required IReadOnlyList EnabledEvents` The event types delivered to the endpoint. - `UserProfileEnforcementActionOpened("user_profile.enforcement_action_opened")` - `UserProfileEnforcementActionResolved("user_profile.enforcement_action_resolved")` - `required string Name` A short label for the endpoint. An empty string when none was given. - `required BetaOrganizationWebhookEndpointState State` Whether deliveries are sent to the endpoint. - `Disabled("disabled")` - `Enabled("enabled")` - `required DateTimeOffset UpdatedAt` When the endpoint was last changed, in RFC 3339 format. format: date-time - `required string Url` The HTTPS URL that deliveries are sent to. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Webhooks; WebhookListParams parameters = new(); var page = await client.Beta.Organization.Webhooks.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ##### Response (200) ```json { "data": [ { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "description": "description", "disabled_reason": "disabled_reason", "enabled_events": [ "user_profile.enforcement_action_opened" ], "name": "name", "state": "disabled", "updated_at": "2019-12-27T18:11:19.117Z", "url": "url" } ], "has_more": true, "first_id": "first_id", "last_id": "last_id" } ``` ### Get Organization Webhook Endpoint `BetaOrganizationWebhookEndpoint Beta.Organization.Webhooks.Retrieve(parameters, cancellationToken = default)` **GET** `/v1/organizations/webhooks/{webhook_endpoint_id}` Retrieve an organization webhook endpoint by ID. Every request must include the beta header `anthropic-beta: webhooks-2026-10-07`. A request without it returns `404`, exactly as if this API did not exist. Anthropic turns organization webhook endpoints on for each organization; until yours is on, requests also return `404`. Organization webhook endpoints are in beta and are not available to organizations with HIPAA readiness enabled. #### Parameters - `WebhookRetrieveParams parameters` - `required string webhookEndpointID` (path parameter) ID of the webhook endpoint. maxLength: 2048 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `webhooks-2026-10-07` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaOrganizationWebhookEndpoint` A webhook endpoint that belongs to the organization rather than to one of its workspaces. - `required string ID` ID of the webhook endpoint. - `required DateTimeOffset CreatedAt` When the endpoint was created, in RFC 3339 format. format: date-time - `required string Description` Notes about the endpoint. An empty string when none were given. - `required string DisabledReason` Why Anthropic disabled the endpoint automatically. An empty string when the endpoint is enabled, or when you disabled it. - `required IReadOnlyList EnabledEvents` The event types delivered to the endpoint. - `UserProfileEnforcementActionOpened("user_profile.enforcement_action_opened")` - `UserProfileEnforcementActionResolved("user_profile.enforcement_action_resolved")` - `required string Name` A short label for the endpoint. An empty string when none was given. - `required BetaOrganizationWebhookEndpointState State` Whether deliveries are sent to the endpoint. - `Disabled("disabled")` - `Enabled("enabled")` - `required DateTimeOffset UpdatedAt` When the endpoint was last changed, in RFC 3339 format. format: date-time - `required string Url` The HTTPS URL that deliveries are sent to. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Webhooks; WebhookRetrieveParams parameters = new() { WebhookEndpointID = "webhook_endpoint_id" }; var betaOrganizationWebhookEndpoint = await client.Beta.Organization.Webhooks.Retrieve(parameters); Console.WriteLine(betaOrganizationWebhookEndpoint); ``` ##### Response (200) ```json { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "description": "description", "disabled_reason": "disabled_reason", "enabled_events": [ "user_profile.enforcement_action_opened" ], "name": "name", "state": "disabled", "updated_at": "2019-12-27T18:11:19.117Z", "url": "url" } ``` ### Update Organization Webhook Endpoint `BetaOrganizationWebhookEndpoint Beta.Organization.Webhooks.Update(parameters, cancellationToken = default)` **POST** `/v1/organizations/webhooks/{webhook_endpoint_id}` Update an organization webhook endpoint. Only the fields you send are changed. Every request must include the beta header `anthropic-beta: webhooks-2026-10-07`. A request without it returns `404`, exactly as if this API did not exist. Anthropic turns organization webhook endpoints on for each organization; until yours is on, requests also return `404`. Organization webhook endpoints are in beta and are not available to organizations with HIPAA readiness enabled. #### Parameters - `WebhookUpdateParams parameters` - `required string webhookEndpointID` (path parameter) ID of the webhook endpoint. maxLength: 2048 - `string description` Notes about the endpoint. - `IReadOnlyList enabledEvents` The event types to deliver to the endpoint. Replaces the whole set; an empty list leaves it unchanged. - `UserProfileEnforcementActionOpened("user_profile.enforcement_action_opened")` - `UserProfileEnforcementActionResolved("user_profile.enforcement_action_resolved")` - `string name` A short label for the endpoint. - `State state` `disabled` stops deliveries. `enabled` resumes them and clears `disabled_reason`. Events that happen while the endpoint is disabled are never delivered. - `Disabled("disabled")` - `Enabled("enabled")` - `string url` The HTTPS URL that deliveries are sent to. minLength: 1 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `webhooks-2026-10-07` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaOrganizationWebhookEndpoint` A webhook endpoint that belongs to the organization rather than to one of its workspaces. - `required string ID` ID of the webhook endpoint. - `required DateTimeOffset CreatedAt` When the endpoint was created, in RFC 3339 format. format: date-time - `required string Description` Notes about the endpoint. An empty string when none were given. - `required string DisabledReason` Why Anthropic disabled the endpoint automatically. An empty string when the endpoint is enabled, or when you disabled it. - `required IReadOnlyList EnabledEvents` The event types delivered to the endpoint. - `UserProfileEnforcementActionOpened("user_profile.enforcement_action_opened")` - `UserProfileEnforcementActionResolved("user_profile.enforcement_action_resolved")` - `required string Name` A short label for the endpoint. An empty string when none was given. - `required BetaOrganizationWebhookEndpointState State` Whether deliveries are sent to the endpoint. - `Disabled("disabled")` - `Enabled("enabled")` - `required DateTimeOffset UpdatedAt` When the endpoint was last changed, in RFC 3339 format. format: date-time - `required string Url` The HTTPS URL that deliveries are sent to. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Webhooks; WebhookUpdateParams parameters = new() { WebhookEndpointID = "webhook_endpoint_id" }; var betaOrganizationWebhookEndpoint = await client.Beta.Organization.Webhooks.Update(parameters); Console.WriteLine(betaOrganizationWebhookEndpoint); ``` ##### Response (200) ```json { "id": "id", "created_at": "2019-12-27T18:11:19.117Z", "description": "description", "disabled_reason": "disabled_reason", "enabled_events": [ "user_profile.enforcement_action_opened" ], "name": "name", "state": "disabled", "updated_at": "2019-12-27T18:11:19.117Z", "url": "url" } ``` ### Delete Organization Webhook Endpoint `BetaDeletedOrganizationWebhookEndpoint Beta.Organization.Webhooks.Delete(parameters, cancellationToken = default)` **DELETE** `/v1/organizations/webhooks/{webhook_endpoint_id}` Delete an organization webhook endpoint. Every request must include the beta header `anthropic-beta: webhooks-2026-10-07`. A request without it returns `404`, exactly as if this API did not exist. Anthropic turns organization webhook endpoints on for each organization; until yours is on, requests also return `404`. Organization webhook endpoints are in beta and are not available to organizations with HIPAA readiness enabled. #### Parameters - `WebhookDeleteParams parameters` - `required string webhookEndpointID` (path parameter) ID of the webhook endpoint. maxLength: 2048 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `webhooks-2026-10-07` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaDeletedOrganizationWebhookEndpoint` A deleted organization webhook endpoint. - `JsonElement Type = "webhook_endpoint_deleted"` Always `webhook_endpoint_deleted`. - `required string ID` ID of the deleted webhook endpoint. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Webhooks; WebhookDeleteParams parameters = new() { WebhookEndpointID = "webhook_endpoint_id" }; var betaDeletedOrganizationWebhookEndpoint = await client.Beta.Organization.Webhooks.Delete(parameters); Console.WriteLine(betaDeletedOrganizationWebhookEndpoint); ``` ##### Response (200) ```json { "id": "id", "type": "webhook_endpoint_deleted" } ``` ### Regenerate Organization Webhook Endpoint Signing Secret `BetaOrganizationWebhookEndpointSigningSecret Beta.Organization.Webhooks.RegenerateSigningSecret(parameters, cancellationToken = default)` **POST** `/v1/organizations/webhooks/{webhook_endpoint_id}/regenerate_signing_secret` Replace an organization webhook endpoint's signing secret. The old secret stops working immediately. The new secret is returned only in this response. Every request must include the beta header `anthropic-beta: webhooks-2026-10-07`. A request without it returns `404`, exactly as if this API did not exist. Anthropic turns organization webhook endpoints on for each organization; until yours is on, requests also return `404`. Organization webhook endpoints are in beta and are not available to organizations with HIPAA readiness enabled. #### Parameters - `WebhookRegenerateSigningSecretParams parameters` - `required string webhookEndpointID` (path parameter) ID of the webhook endpoint. maxLength: 2048 - `IReadOnlyList betas` (header parameter) This endpoint is in beta: requests must send `webhooks-2026-10-07` in this header. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` #### Returns - `class BetaOrganizationWebhookEndpointSigningSecret` An organization webhook endpoint's new signing secret. - `required string SigningSecret` The new signing secret. Deliveries are signed with it from now on, and no other response returns it. #### Example ```csharp using System; using Anthropic.Models.Beta.Organization.Webhooks; WebhookRegenerateSigningSecretParams parameters = new() { WebhookEndpointID = "webhook_endpoint_id" }; var betaOrganizationWebhookEndpointSigningSecret = await client.Beta.Organization.Webhooks.RegenerateSigningSecret(parameters); Console.WriteLine(betaOrganizationWebhookEndpointSigningSecret); ``` ##### Response (200) ```json { "signing_secret": "signing_secret" } ```