Issuers

Create Federation Issuer

$client->beta->organization->federation->issuers->create(string issuerURL, string name, ?bool checkJTI, ?JWKS jwks, ?int maxJWTLifetimeSeconds, ?list<AnthropicBeta> betas): BetaFederationIssuer

POST/v1/organizations/federation_issuers

Requires an OAuth access token with the org:admin scope, from ant auth login --scope org:admin or a workload identity federation rule; Admin API keys are not accepted. See Manage WIF with the Admin API.

List Federation Issuers

$client->beta->organization->federation->issuers->list(?bool includeArchived, ?int limit, ?string page, ?list<AnthropicBeta> betas): PageCursor<BetaFederationIssuer>

GET/v1/organizations/federation_issuers

Get Federation Issuer

$client->beta->organization->federation->issuers->retrieve(string federationIssuerID, ?list<AnthropicBeta> betas): BetaFederationIssuer

GET/v1/organizations/federation_issuers/{federation_issuer_id}

Update Federation Issuer

$client->beta->organization->federation->issuers->update(string federationIssuerID, ?bool checkJTI, ?string issuerURL, ?JWKS jwks, ?bool jwksPollingDisabled, ?int maxJWTLifetimeSeconds, ?string name, ?list<AnthropicBeta> betas): BetaFederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}

Archive Federation Issuer

$client->beta->organization->federation->issuers->archive(string federationIssuerID, ?list<AnthropicBeta> betas): BetaFederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

class BetaFederationIssuer { $type = 'federation_issuer'; $id; $archivedAt; /* 12 more */ }

class BetaFederationIssuerPollStatus { $consecutiveFailures; $lastFetchedAt; $nextPollAt; }

int consecutiveFailures

Consecutive fetch failures since the last success.

?\Datetime lastFetchedAt

When the last successful fetch completed.

?\Datetime nextPollAt

When the next fetch is scheduled. Null if paused.

class BetaJWKSDiscovery { $type = 'discovery'; $caCertPEM; $discoveryBase; }

"discovery" type

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

?string discoveryBase

Set when the discovery URL differs from issuer_url.

class BetaJWKSExplicitURL { $type = 'explicit_url'; $url; $caCertPEM; }

"explicit_url" type

string url

JWKS endpoint.

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

class BetaJWKSInline { $type = 'inline'; $keys; }

"inline" type

list<array<string,mixed>> keys

Inline JWK objects.