--- title: Credentials url: https://platform.claude.com/docs/en/api/go/beta/vaults/credentials --- # Credentials ## Create Credential `client.Beta.Vaults.Credentials.New(ctx, vaultID, params) (*BetaManagedAgentsCredential, error)` **POST** `/v1/vaults/{vault_id}/credentials` Create Credential ### Parameters - `vaultID string` (path parameter) Identifier of the vault to create the credential in. - `params BetaVaultCredentialNewParams` - `Auth BetaVaultCredentialNewParamsAuthUnion` Authentication configuration for the credential. - `type BetaManagedAgentsMCPOAuthCreateParams` Parameters for creating an MCP OAuth credential. - `Type BetaManagedAgentsMCPOAuthCreateParamsType` - `AccessToken string` OAuth access token. minLength: 1, maxLength: 8192 - `MCPServerURL string` URL of the MCP server this credential authenticates against. minLength: 1, maxLength: 2047 - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshParams Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. minLength: 1, maxLength: 1024 - `RefreshToken string` OAuth refresh token. minLength: 1, maxLength: 8192 - `TokenEndpoint string` Token endpoint URL used to refresh the access token. minLength: 1, maxLength: 2047 - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshParamsTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneParam` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneParamType` - `type BetaManagedAgentsTokenEndpointAuthBasicParam` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 - `type BetaManagedAgentsTokenEndpointAuthPostParam` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 - `Resource string Optional` OAuth resource indicator. minLength: 1, maxLength: 2047 - `Scope string Optional` OAuth scope for the refresh request. minLength: 1, maxLength: 8192 - `type BetaManagedAgentsStaticBearerCreateParams` Parameters for creating a static bearer token credential. - `Type BetaManagedAgentsStaticBearerCreateParamsType` - `Token string` Static bearer token value. minLength: 1, maxLength: 8192 - `MCPServerURL string` URL of the MCP server this credential authenticates against. minLength: 1, maxLength: 2047 - `type BetaManagedAgentsEnvironmentVariableCreateParams` Parameters for creating an environment variable credential. - `Type BetaManagedAgentsEnvironmentVariableCreateParamsType` - `Networking BetaManagedAgentsCredentialNetworkingParamsUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingParams` Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingParamsType` - `type BetaManagedAgentsLimitedCredentialNetworkingParams` Substitute the secret only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingParamsType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries. - `SecretName string` Name of the environment variable. Immutable after create. minLength: 1, maxLength: 255 - `SecretValue string` Secret value. Write-only; never returned in responses. minLength: 1, maxLength: 4096 - `InjectionLocation BetaManagedAgentsInjectionLocationParams Optional` Where in the outbound request the secret value may be substituted. - `Body bool Optional` Substitute when the placeholder appears in the request body. - `Header bool Optional` Substitute when the placeholder appears in a request header value. - `DisplayName param.Opt[string] Optional` Human-readable name for the credential. Up to 255 characters. maxLength: 255 - `Metadata map[string, string] Optional` Arbitrary key-value metadata to attach to the credential. Maximum 16 pairs, keys up to 64 chars, values up to 512 chars. - `Betas []AnthropicBeta Optional` (header parameter) This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this header. - `const AnthropicBetaMessageBatches2024_09_24 AnthropicBeta = "message-batches-2024-09-24"` - `const AnthropicBetaPromptCaching2024_07_31 AnthropicBeta = "prompt-caching-2024-07-31"` - `const AnthropicBetaComputerUse2024_10_22 AnthropicBeta = "computer-use-2024-10-22"` - `const AnthropicBetaComputerUse2025_01_24 AnthropicBeta = "computer-use-2025-01-24"` - `const AnthropicBetaPDFs2024_09_25 AnthropicBeta = "pdfs-2024-09-25"` - `const AnthropicBetaTokenCounting2024_11_01 AnthropicBeta = "token-counting-2024-11-01"` - `const AnthropicBetaTokenEfficientTools2025_02_19 AnthropicBeta = "token-efficient-tools-2025-02-19"` - `const AnthropicBetaOutput128k2025_02_19 AnthropicBeta = "output-128k-2025-02-19"` - `const AnthropicBetaFilesAPI2025_04_14 AnthropicBeta = "files-api-2025-04-14"` - `const AnthropicBetaMCPClient2025_04_04 AnthropicBeta = "mcp-client-2025-04-04"` - `const AnthropicBetaMCPClient2025_11_20 AnthropicBeta = "mcp-client-2025-11-20"` - `const AnthropicBetaDevFullThinking2025_05_14 AnthropicBeta = "dev-full-thinking-2025-05-14"` - `const AnthropicBetaInterleavedThinking2025_05_14 AnthropicBeta = "interleaved-thinking-2025-05-14"` - `const AnthropicBetaCodeExecution2025_05_22 AnthropicBeta = "code-execution-2025-05-22"` - `const AnthropicBetaExtendedCacheTTL2025_04_11 AnthropicBeta = "extended-cache-ttl-2025-04-11"` - `const AnthropicBetaContext1m2025_08_07 AnthropicBeta = "context-1m-2025-08-07"` - `const AnthropicBetaContextManagement2025_06_27 AnthropicBeta = "context-management-2025-06-27"` - `const AnthropicBetaModelContextWindowExceeded2025_08_26 AnthropicBeta = "model-context-window-exceeded-2025-08-26"` - `const AnthropicBetaSkills2025_10_02 AnthropicBeta = "skills-2025-10-02"` - `const AnthropicBetaFastMode2026_02_01 AnthropicBeta = "fast-mode-2026-02-01"` - `const AnthropicBetaOutput300k2026_03_24 AnthropicBeta = "output-300k-2026-03-24"` - `const AnthropicBetaUserProfiles2026_03_24 AnthropicBeta = "user-profiles-2026-03-24"` - `const AnthropicBetaUserProfiles2026_08_18 AnthropicBeta = "user-profiles-2026-08-18"` - `const AnthropicBetaUserProfiles2026_09_04 AnthropicBeta = "user-profiles-2026-09-04"` - `const AnthropicBetaAdvisorTool2026_03_01 AnthropicBeta = "advisor-tool-2026-03-01"` - `const AnthropicBetaManagedAgents2026_04_01 AnthropicBeta = "managed-agents-2026-04-01"` - `const AnthropicBetaCacheDiagnosis2026_04_07 AnthropicBeta = "cache-diagnosis-2026-04-07"` - `const AnthropicBetaDreaming2026_04_21 AnthropicBeta = "dreaming-2026-04-21"` - `const AnthropicBetaThinkingTokenCount2026_05_13 AnthropicBeta = "thinking-token-count-2026-05-13"` - `const AnthropicBetaServerSideFallback2026_06_01 AnthropicBeta = "server-side-fallback-2026-06-01"` - `const AnthropicBetaServerSideFallback2026_07_01 AnthropicBeta = "server-side-fallback-2026-07-01"` - `const AnthropicBetaFallbackCredit2026_06_01 AnthropicBeta = "fallback-credit-2026-06-01"` - `const AnthropicBetaFallbackCredit2026_07_01 AnthropicBeta = "fallback-credit-2026-07-01"` - `const AnthropicBetaAgentMemory2026_07_22 AnthropicBeta = "agent-memory-2026-07-22"` - `const AnthropicBetaMidConversationToolChanges2026_07_01 AnthropicBeta = "mid-conversation-tool-changes-2026-07-01"` - `const AnthropicBetaCompact2026_01_12 AnthropicBeta = "compact-2026-01-12"` - `const AnthropicBetaComputerUse2025_11_24 AnthropicBeta = "computer-use-2025-11-24"` - `const AnthropicBetaMCPTunnels2026_06_22 AnthropicBeta = "mcp-tunnels-2026-06-22"` - `const AnthropicBetaStructuredOutputs2025_11_13 AnthropicBeta = "structured-outputs-2025-11-13"` - `const AnthropicBetaTaskBudgets2026_03_13 AnthropicBeta = "task-budgets-2026-03-13"` - `const AnthropicBetaThinkingDisplayUpdates2026_08_18 AnthropicBeta = "thinking-display-updates-2026-08-18"` - `const AnthropicBetaCEUserManagement2026_07_13 AnthropicBeta = "ce-user-management-2026-07-13"` - `const AnthropicBetaMidConversationOutputConfig2026_07_01 AnthropicBeta = "mid-conversation-output-config-2026-07-01"` - `const AnthropicBetaThinkingBindingControls2026_08_01 AnthropicBeta = "thinking-binding-controls-2026-08-01"` - `const AnthropicBetaMidConversationSystemClearAt2026_08_21 AnthropicBeta = "mid-conversation-system-clear-at-2026-08-21"` - `const AnthropicBetaCompact2026_09_04 AnthropicBeta = "compact-2026-09-04"` - `const AnthropicBetaInlineTools2026_09_15 AnthropicBeta = "inline-tools-2026-09-15"` - `const AnthropicBetaMCPClient2026_09_15 AnthropicBeta = "mcp-client-2026-09-15"` - `const AnthropicBetaCEPlugins2026_09_01 AnthropicBeta = "ce-plugins-2026-09-01"` - `const AnthropicBetaSpendLimitReads2026_09_26 AnthropicBeta = "spend-limit-reads-2026-09-26"` - `const AnthropicBetaTelemetryDestinations2026_08_11 AnthropicBeta = "telemetry-destinations-2026-08-11"` - `WorkspaceID param.Opt[string] Optional` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `type BetaManagedAgentsCredential` A credential stored in a vault. Sensitive fields are never returned in responses. - `Type BetaManagedAgentsCredentialType` - `ID string` Unique identifier for the credential. - `ArchivedAt Time` When the credential was archived. Null if not archived. format: date-time - `Auth BetaManagedAgentsCredentialAuthUnion` Authentication configuration for this credential. - `type BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `Type BetaManagedAgentsMCPOAuthAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshResponse Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. - `type BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `Type BetaManagedAgentsStaticBearerAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `type BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `Type BetaManagedAgentsEnvironmentVariableAuthResponseType` - `InjectionLocation BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. - `Networking BetaManagedAgentsEnvironmentVariableAuthResponseNetworkingUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType` - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `SecretName string` Name of the environment variable. - `CreatedAt Time` A timestamp in RFC 3339 format format: date-time - `Metadata map[string, string]` Arbitrary key-value metadata attached to the credential. - `UpdatedAt Time` A timestamp in RFC 3339 format format: date-time - `VaultID string` Identifier of the vault this credential belongs to. - `DisplayName string Optional` Human-readable name for the credential. ### Example ```go package main import ( "context" "fmt" "github.com/anthropics/anthropic-sdk-go" "github.com/anthropics/anthropic-sdk-go/option" ) func main() { client := anthropic.NewClient( option.WithAPIKey("my-anthropic-api-key"), ) betaManagedAgentsCredential, err := client.Beta.Vaults.Credentials.New( context.TODO(), "vlt_011CZkZDLs7fYzm1hXNPeRjv", anthropic.BetaVaultCredentialNewParams{ Auth: anthropic.BetaVaultCredentialNewParamsAuthUnion{ OfStaticBearer: &anthropic.BetaManagedAgentsStaticBearerCreateParams{ Token: "bearer_exampletoken", MCPServerURL: "https://example-server.modelcontextprotocol.io/sse", Type: anthropic.BetaManagedAgentsStaticBearerCreateParamsTypeStaticBearer, }, }, }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", betaManagedAgentsCredential.ID) } ``` #### Response (200) ```json { "id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "archived_at": null, "auth": { "mcp_server_url": "https://example-server.modelcontextprotocol.io/sse", "type": "static_bearer" }, "created_at": "2026-03-15T10:00:00Z", "metadata": { "environment": "production" }, "type": "vault_credential", "updated_at": "2026-03-15T10:00:00Z", "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv", "display_name": "Example credential" } ``` ## List Credentials `client.Beta.Vaults.Credentials.List(ctx, vaultID, params) (*PageCursor[BetaManagedAgentsCredential], error)` **GET** `/v1/vaults/{vault_id}/credentials` List Credentials ### Parameters - `vaultID string` (path parameter) Identifier of the vault to list credentials for. - `params BetaVaultCredentialListParams` - `IncludeArchived param.Opt[bool] Optional` (query parameter) Whether to include archived credentials in the results. - `Limit param.Opt[int64] Optional` (query parameter) Maximum number of credentials to return per page. Defaults to 20, maximum 100. format: int32 - `Page param.Opt[string] Optional` (query parameter) Opaque pagination token from a previous `list_credentials` response. - `Betas []AnthropicBeta Optional` (header parameter) This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this header. - `const AnthropicBetaMessageBatches2024_09_24 AnthropicBeta = "message-batches-2024-09-24"` - `const AnthropicBetaPromptCaching2024_07_31 AnthropicBeta = "prompt-caching-2024-07-31"` - `const AnthropicBetaComputerUse2024_10_22 AnthropicBeta = "computer-use-2024-10-22"` - `const AnthropicBetaComputerUse2025_01_24 AnthropicBeta = "computer-use-2025-01-24"` - `const AnthropicBetaPDFs2024_09_25 AnthropicBeta = "pdfs-2024-09-25"` - `const AnthropicBetaTokenCounting2024_11_01 AnthropicBeta = "token-counting-2024-11-01"` - `const AnthropicBetaTokenEfficientTools2025_02_19 AnthropicBeta = "token-efficient-tools-2025-02-19"` - `const AnthropicBetaOutput128k2025_02_19 AnthropicBeta = "output-128k-2025-02-19"` - `const AnthropicBetaFilesAPI2025_04_14 AnthropicBeta = "files-api-2025-04-14"` - `const AnthropicBetaMCPClient2025_04_04 AnthropicBeta = "mcp-client-2025-04-04"` - `const AnthropicBetaMCPClient2025_11_20 AnthropicBeta = "mcp-client-2025-11-20"` - `const AnthropicBetaDevFullThinking2025_05_14 AnthropicBeta = "dev-full-thinking-2025-05-14"` - `const AnthropicBetaInterleavedThinking2025_05_14 AnthropicBeta = "interleaved-thinking-2025-05-14"` - `const AnthropicBetaCodeExecution2025_05_22 AnthropicBeta = "code-execution-2025-05-22"` - `const AnthropicBetaExtendedCacheTTL2025_04_11 AnthropicBeta = "extended-cache-ttl-2025-04-11"` - `const AnthropicBetaContext1m2025_08_07 AnthropicBeta = "context-1m-2025-08-07"` - `const AnthropicBetaContextManagement2025_06_27 AnthropicBeta = "context-management-2025-06-27"` - `const AnthropicBetaModelContextWindowExceeded2025_08_26 AnthropicBeta = "model-context-window-exceeded-2025-08-26"` - `const AnthropicBetaSkills2025_10_02 AnthropicBeta = "skills-2025-10-02"` - `const AnthropicBetaFastMode2026_02_01 AnthropicBeta = "fast-mode-2026-02-01"` - `const AnthropicBetaOutput300k2026_03_24 AnthropicBeta = "output-300k-2026-03-24"` - `const AnthropicBetaUserProfiles2026_03_24 AnthropicBeta = "user-profiles-2026-03-24"` - `const AnthropicBetaUserProfiles2026_08_18 AnthropicBeta = "user-profiles-2026-08-18"` - `const AnthropicBetaUserProfiles2026_09_04 AnthropicBeta = "user-profiles-2026-09-04"` - `const AnthropicBetaAdvisorTool2026_03_01 AnthropicBeta = "advisor-tool-2026-03-01"` - `const AnthropicBetaManagedAgents2026_04_01 AnthropicBeta = "managed-agents-2026-04-01"` - `const AnthropicBetaCacheDiagnosis2026_04_07 AnthropicBeta = "cache-diagnosis-2026-04-07"` - `const AnthropicBetaDreaming2026_04_21 AnthropicBeta = "dreaming-2026-04-21"` - `const AnthropicBetaThinkingTokenCount2026_05_13 AnthropicBeta = "thinking-token-count-2026-05-13"` - `const AnthropicBetaServerSideFallback2026_06_01 AnthropicBeta = "server-side-fallback-2026-06-01"` - `const AnthropicBetaServerSideFallback2026_07_01 AnthropicBeta = "server-side-fallback-2026-07-01"` - `const AnthropicBetaFallbackCredit2026_06_01 AnthropicBeta = "fallback-credit-2026-06-01"` - `const AnthropicBetaFallbackCredit2026_07_01 AnthropicBeta = "fallback-credit-2026-07-01"` - `const AnthropicBetaAgentMemory2026_07_22 AnthropicBeta = "agent-memory-2026-07-22"` - `const AnthropicBetaMidConversationToolChanges2026_07_01 AnthropicBeta = "mid-conversation-tool-changes-2026-07-01"` - `const AnthropicBetaCompact2026_01_12 AnthropicBeta = "compact-2026-01-12"` - `const AnthropicBetaComputerUse2025_11_24 AnthropicBeta = "computer-use-2025-11-24"` - `const AnthropicBetaMCPTunnels2026_06_22 AnthropicBeta = "mcp-tunnels-2026-06-22"` - `const AnthropicBetaStructuredOutputs2025_11_13 AnthropicBeta = "structured-outputs-2025-11-13"` - `const AnthropicBetaTaskBudgets2026_03_13 AnthropicBeta = "task-budgets-2026-03-13"` - `const AnthropicBetaThinkingDisplayUpdates2026_08_18 AnthropicBeta = "thinking-display-updates-2026-08-18"` - `const AnthropicBetaCEUserManagement2026_07_13 AnthropicBeta = "ce-user-management-2026-07-13"` - `const AnthropicBetaMidConversationOutputConfig2026_07_01 AnthropicBeta = "mid-conversation-output-config-2026-07-01"` - `const AnthropicBetaThinkingBindingControls2026_08_01 AnthropicBeta = "thinking-binding-controls-2026-08-01"` - `const AnthropicBetaMidConversationSystemClearAt2026_08_21 AnthropicBeta = "mid-conversation-system-clear-at-2026-08-21"` - `const AnthropicBetaCompact2026_09_04 AnthropicBeta = "compact-2026-09-04"` - `const AnthropicBetaInlineTools2026_09_15 AnthropicBeta = "inline-tools-2026-09-15"` - `const AnthropicBetaMCPClient2026_09_15 AnthropicBeta = "mcp-client-2026-09-15"` - `const AnthropicBetaCEPlugins2026_09_01 AnthropicBeta = "ce-plugins-2026-09-01"` - `const AnthropicBetaSpendLimitReads2026_09_26 AnthropicBeta = "spend-limit-reads-2026-09-26"` - `const AnthropicBetaTelemetryDestinations2026_08_11 AnthropicBeta = "telemetry-destinations-2026-08-11"` - `WorkspaceID param.Opt[string] Optional` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `type BetaManagedAgentsCredential` A credential stored in a vault. Sensitive fields are never returned in responses. - `Type BetaManagedAgentsCredentialType` - `ID string` Unique identifier for the credential. - `ArchivedAt Time` When the credential was archived. Null if not archived. format: date-time - `Auth BetaManagedAgentsCredentialAuthUnion` Authentication configuration for this credential. - `type BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `Type BetaManagedAgentsMCPOAuthAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshResponse Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. - `type BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `Type BetaManagedAgentsStaticBearerAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `type BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `Type BetaManagedAgentsEnvironmentVariableAuthResponseType` - `InjectionLocation BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. - `Networking BetaManagedAgentsEnvironmentVariableAuthResponseNetworkingUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType` - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `SecretName string` Name of the environment variable. - `CreatedAt Time` A timestamp in RFC 3339 format format: date-time - `Metadata map[string, string]` Arbitrary key-value metadata attached to the credential. - `UpdatedAt Time` A timestamp in RFC 3339 format format: date-time - `VaultID string` Identifier of the vault this credential belongs to. - `DisplayName string Optional` Human-readable name for the credential. ### Example ```go package main import ( "context" "fmt" "github.com/anthropics/anthropic-sdk-go" "github.com/anthropics/anthropic-sdk-go/option" ) func main() { client := anthropic.NewClient( option.WithAPIKey("my-anthropic-api-key"), ) page, err := client.Beta.Vaults.Credentials.List( context.TODO(), "vlt_011CZkZDLs7fYzm1hXNPeRjv", anthropic.BetaVaultCredentialListParams{}, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", page) } ``` #### Response (200) ```json { "data": [ { "id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "archived_at": null, "auth": { "mcp_server_url": "https://example-server.modelcontextprotocol.io/sse", "type": "static_bearer" }, "created_at": "2026-03-15T10:00:00Z", "metadata": { "environment": "production" }, "type": "vault_credential", "updated_at": "2026-03-15T10:00:00Z", "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv", "display_name": "Example credential" } ], "next_page": "page_MjAyNS0wNS0xNFQwMDowMDowMFo=" } ``` ## Get Credential `client.Beta.Vaults.Credentials.Get(ctx, credentialID, params) (*BetaManagedAgentsCredential, error)` **GET** `/v1/vaults/{vault_id}/credentials/{credential_id}` Get Credential ### Parameters - `credentialID string` (path parameter) Unique identifier of the credential to retrieve. - `params BetaVaultCredentialGetParams` - `VaultID string` (path parameter) Identifier of the vault containing the credential. - `Betas []AnthropicBeta Optional` (header parameter) This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this header. - `const AnthropicBetaMessageBatches2024_09_24 AnthropicBeta = "message-batches-2024-09-24"` - `const AnthropicBetaPromptCaching2024_07_31 AnthropicBeta = "prompt-caching-2024-07-31"` - `const AnthropicBetaComputerUse2024_10_22 AnthropicBeta = "computer-use-2024-10-22"` - `const AnthropicBetaComputerUse2025_01_24 AnthropicBeta = "computer-use-2025-01-24"` - `const AnthropicBetaPDFs2024_09_25 AnthropicBeta = "pdfs-2024-09-25"` - `const AnthropicBetaTokenCounting2024_11_01 AnthropicBeta = "token-counting-2024-11-01"` - `const AnthropicBetaTokenEfficientTools2025_02_19 AnthropicBeta = "token-efficient-tools-2025-02-19"` - `const AnthropicBetaOutput128k2025_02_19 AnthropicBeta = "output-128k-2025-02-19"` - `const AnthropicBetaFilesAPI2025_04_14 AnthropicBeta = "files-api-2025-04-14"` - `const AnthropicBetaMCPClient2025_04_04 AnthropicBeta = "mcp-client-2025-04-04"` - `const AnthropicBetaMCPClient2025_11_20 AnthropicBeta = "mcp-client-2025-11-20"` - `const AnthropicBetaDevFullThinking2025_05_14 AnthropicBeta = "dev-full-thinking-2025-05-14"` - `const AnthropicBetaInterleavedThinking2025_05_14 AnthropicBeta = "interleaved-thinking-2025-05-14"` - `const AnthropicBetaCodeExecution2025_05_22 AnthropicBeta = "code-execution-2025-05-22"` - `const AnthropicBetaExtendedCacheTTL2025_04_11 AnthropicBeta = "extended-cache-ttl-2025-04-11"` - `const AnthropicBetaContext1m2025_08_07 AnthropicBeta = "context-1m-2025-08-07"` - `const AnthropicBetaContextManagement2025_06_27 AnthropicBeta = "context-management-2025-06-27"` - `const AnthropicBetaModelContextWindowExceeded2025_08_26 AnthropicBeta = "model-context-window-exceeded-2025-08-26"` - `const AnthropicBetaSkills2025_10_02 AnthropicBeta = "skills-2025-10-02"` - `const AnthropicBetaFastMode2026_02_01 AnthropicBeta = "fast-mode-2026-02-01"` - `const AnthropicBetaOutput300k2026_03_24 AnthropicBeta = "output-300k-2026-03-24"` - `const AnthropicBetaUserProfiles2026_03_24 AnthropicBeta = "user-profiles-2026-03-24"` - `const AnthropicBetaUserProfiles2026_08_18 AnthropicBeta = "user-profiles-2026-08-18"` - `const AnthropicBetaUserProfiles2026_09_04 AnthropicBeta = "user-profiles-2026-09-04"` - `const AnthropicBetaAdvisorTool2026_03_01 AnthropicBeta = "advisor-tool-2026-03-01"` - `const AnthropicBetaManagedAgents2026_04_01 AnthropicBeta = "managed-agents-2026-04-01"` - `const AnthropicBetaCacheDiagnosis2026_04_07 AnthropicBeta = "cache-diagnosis-2026-04-07"` - `const AnthropicBetaDreaming2026_04_21 AnthropicBeta = "dreaming-2026-04-21"` - `const AnthropicBetaThinkingTokenCount2026_05_13 AnthropicBeta = "thinking-token-count-2026-05-13"` - `const AnthropicBetaServerSideFallback2026_06_01 AnthropicBeta = "server-side-fallback-2026-06-01"` - `const AnthropicBetaServerSideFallback2026_07_01 AnthropicBeta = "server-side-fallback-2026-07-01"` - `const AnthropicBetaFallbackCredit2026_06_01 AnthropicBeta = "fallback-credit-2026-06-01"` - `const AnthropicBetaFallbackCredit2026_07_01 AnthropicBeta = "fallback-credit-2026-07-01"` - `const AnthropicBetaAgentMemory2026_07_22 AnthropicBeta = "agent-memory-2026-07-22"` - `const AnthropicBetaMidConversationToolChanges2026_07_01 AnthropicBeta = "mid-conversation-tool-changes-2026-07-01"` - `const AnthropicBetaCompact2026_01_12 AnthropicBeta = "compact-2026-01-12"` - `const AnthropicBetaComputerUse2025_11_24 AnthropicBeta = "computer-use-2025-11-24"` - `const AnthropicBetaMCPTunnels2026_06_22 AnthropicBeta = "mcp-tunnels-2026-06-22"` - `const AnthropicBetaStructuredOutputs2025_11_13 AnthropicBeta = "structured-outputs-2025-11-13"` - `const AnthropicBetaTaskBudgets2026_03_13 AnthropicBeta = "task-budgets-2026-03-13"` - `const AnthropicBetaThinkingDisplayUpdates2026_08_18 AnthropicBeta = "thinking-display-updates-2026-08-18"` - `const AnthropicBetaCEUserManagement2026_07_13 AnthropicBeta = "ce-user-management-2026-07-13"` - `const AnthropicBetaMidConversationOutputConfig2026_07_01 AnthropicBeta = "mid-conversation-output-config-2026-07-01"` - `const AnthropicBetaThinkingBindingControls2026_08_01 AnthropicBeta = "thinking-binding-controls-2026-08-01"` - `const AnthropicBetaMidConversationSystemClearAt2026_08_21 AnthropicBeta = "mid-conversation-system-clear-at-2026-08-21"` - `const AnthropicBetaCompact2026_09_04 AnthropicBeta = "compact-2026-09-04"` - `const AnthropicBetaInlineTools2026_09_15 AnthropicBeta = "inline-tools-2026-09-15"` - `const AnthropicBetaMCPClient2026_09_15 AnthropicBeta = "mcp-client-2026-09-15"` - `const AnthropicBetaCEPlugins2026_09_01 AnthropicBeta = "ce-plugins-2026-09-01"` - `const AnthropicBetaSpendLimitReads2026_09_26 AnthropicBeta = "spend-limit-reads-2026-09-26"` - `const AnthropicBetaTelemetryDestinations2026_08_11 AnthropicBeta = "telemetry-destinations-2026-08-11"` - `WorkspaceID param.Opt[string] Optional` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `type BetaManagedAgentsCredential` A credential stored in a vault. Sensitive fields are never returned in responses. - `Type BetaManagedAgentsCredentialType` - `ID string` Unique identifier for the credential. - `ArchivedAt Time` When the credential was archived. Null if not archived. format: date-time - `Auth BetaManagedAgentsCredentialAuthUnion` Authentication configuration for this credential. - `type BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `Type BetaManagedAgentsMCPOAuthAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshResponse Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. - `type BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `Type BetaManagedAgentsStaticBearerAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `type BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `Type BetaManagedAgentsEnvironmentVariableAuthResponseType` - `InjectionLocation BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. - `Networking BetaManagedAgentsEnvironmentVariableAuthResponseNetworkingUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType` - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `SecretName string` Name of the environment variable. - `CreatedAt Time` A timestamp in RFC 3339 format format: date-time - `Metadata map[string, string]` Arbitrary key-value metadata attached to the credential. - `UpdatedAt Time` A timestamp in RFC 3339 format format: date-time - `VaultID string` Identifier of the vault this credential belongs to. - `DisplayName string Optional` Human-readable name for the credential. ### Example ```go package main import ( "context" "fmt" "github.com/anthropics/anthropic-sdk-go" "github.com/anthropics/anthropic-sdk-go/option" ) func main() { client := anthropic.NewClient( option.WithAPIKey("my-anthropic-api-key"), ) betaManagedAgentsCredential, err := client.Beta.Vaults.Credentials.Get( context.TODO(), "vcrd_011CZkZEMt8gZan2iYPQfSkw", anthropic.BetaVaultCredentialGetParams{ VaultID: "vlt_011CZkZDLs7fYzm1hXNPeRjv", }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", betaManagedAgentsCredential.ID) } ``` #### Response (200) ```json { "id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "archived_at": null, "auth": { "mcp_server_url": "https://example-server.modelcontextprotocol.io/sse", "type": "static_bearer" }, "created_at": "2026-03-15T10:00:00Z", "metadata": { "environment": "production" }, "type": "vault_credential", "updated_at": "2026-03-15T10:00:00Z", "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv", "display_name": "Example credential" } ``` ## Update Credential `client.Beta.Vaults.Credentials.Update(ctx, credentialID, params) (*BetaManagedAgentsCredential, error)` **POST** `/v1/vaults/{vault_id}/credentials/{credential_id}` Update Credential ### Parameters - `credentialID string` (path parameter) Unique identifier of the credential to update. - `params BetaVaultCredentialUpdateParams` - `VaultID string` (path parameter) Identifier of the vault containing the credential. - `Auth BetaVaultCredentialUpdateParamsAuthUnion Optional` Updated authentication configuration. The `type` is immutable; the variant sent must match the stored credential's type. - `type BetaManagedAgentsMCPOAuthUpdateParams` Parameters for updating an MCP OAuth credential. The `mcp_server_url` is immutable. - `Type BetaManagedAgentsMCPOAuthUpdateParamsType` - `AccessToken string Optional` Updated OAuth access token. minLength: 1, maxLength: 8192 - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshUpdateParams Optional` Updated refresh token configuration. - `RefreshToken string Optional` Updated OAuth refresh token. minLength: 1, maxLength: 8192 - `Scope string Optional` Updated OAuth scope for the refresh request. maxLength: 8192 - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshUpdateParamsTokenEndpointAuthUnion Optional` - `type BetaManagedAgentsTokenEndpointAuthBasicUpdateParam` Updated HTTP Basic authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthBasicUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 - `type BetaManagedAgentsTokenEndpointAuthPostUpdateParam` Updated POST body authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthPostUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 - `type BetaManagedAgentsStaticBearerUpdateParams` Parameters for updating a static bearer token credential. The `mcp_server_url` is immutable. - `Type BetaManagedAgentsStaticBearerUpdateParamsType` - `Token string Optional` Updated static bearer token value. minLength: 1, maxLength: 8192 - `type BetaManagedAgentsEnvironmentVariableUpdateParams` Parameters for updating an environment variable credential. `secret_name` is immutable. - `Type BetaManagedAgentsEnvironmentVariableUpdateParamsType` - `InjectionLocation BetaManagedAgentsInjectionLocationUpdateParams Optional` Updated injection location. - `Body bool Optional` Substitute when the placeholder appears in the request body. - `Header bool Optional` Substitute when the placeholder appears in a request header value. - `Networking BetaManagedAgentsCredentialNetworkingParamsUnion Optional` Updated networking scope. Full replacement. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingParams` Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingParamsType` - `type BetaManagedAgentsLimitedCredentialNetworkingParams` Substitute the secret only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingParamsType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries. - `SecretValue string Optional` Updated secret value. minLength: 1, maxLength: 4096 - `DisplayName param.Opt[string] Optional` Updated human-readable name for the credential. 1-255 characters. minLength: 1, maxLength: 255 - `Metadata map[string, string] Optional` Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omitted keys are preserved. - `Betas []AnthropicBeta Optional` (header parameter) This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this header. - `const AnthropicBetaMessageBatches2024_09_24 AnthropicBeta = "message-batches-2024-09-24"` - `const AnthropicBetaPromptCaching2024_07_31 AnthropicBeta = "prompt-caching-2024-07-31"` - `const AnthropicBetaComputerUse2024_10_22 AnthropicBeta = "computer-use-2024-10-22"` - `const AnthropicBetaComputerUse2025_01_24 AnthropicBeta = "computer-use-2025-01-24"` - `const AnthropicBetaPDFs2024_09_25 AnthropicBeta = "pdfs-2024-09-25"` - `const AnthropicBetaTokenCounting2024_11_01 AnthropicBeta = "token-counting-2024-11-01"` - `const AnthropicBetaTokenEfficientTools2025_02_19 AnthropicBeta = "token-efficient-tools-2025-02-19"` - `const AnthropicBetaOutput128k2025_02_19 AnthropicBeta = "output-128k-2025-02-19"` - `const AnthropicBetaFilesAPI2025_04_14 AnthropicBeta = "files-api-2025-04-14"` - `const AnthropicBetaMCPClient2025_04_04 AnthropicBeta = "mcp-client-2025-04-04"` - `const AnthropicBetaMCPClient2025_11_20 AnthropicBeta = "mcp-client-2025-11-20"` - `const AnthropicBetaDevFullThinking2025_05_14 AnthropicBeta = "dev-full-thinking-2025-05-14"` - `const AnthropicBetaInterleavedThinking2025_05_14 AnthropicBeta = "interleaved-thinking-2025-05-14"` - `const AnthropicBetaCodeExecution2025_05_22 AnthropicBeta = "code-execution-2025-05-22"` - `const AnthropicBetaExtendedCacheTTL2025_04_11 AnthropicBeta = "extended-cache-ttl-2025-04-11"` - `const AnthropicBetaContext1m2025_08_07 AnthropicBeta = "context-1m-2025-08-07"` - `const AnthropicBetaContextManagement2025_06_27 AnthropicBeta = "context-management-2025-06-27"` - `const AnthropicBetaModelContextWindowExceeded2025_08_26 AnthropicBeta = "model-context-window-exceeded-2025-08-26"` - `const AnthropicBetaSkills2025_10_02 AnthropicBeta = "skills-2025-10-02"` - `const AnthropicBetaFastMode2026_02_01 AnthropicBeta = "fast-mode-2026-02-01"` - `const AnthropicBetaOutput300k2026_03_24 AnthropicBeta = "output-300k-2026-03-24"` - `const AnthropicBetaUserProfiles2026_03_24 AnthropicBeta = "user-profiles-2026-03-24"` - `const AnthropicBetaUserProfiles2026_08_18 AnthropicBeta = "user-profiles-2026-08-18"` - `const AnthropicBetaUserProfiles2026_09_04 AnthropicBeta = "user-profiles-2026-09-04"` - `const AnthropicBetaAdvisorTool2026_03_01 AnthropicBeta = "advisor-tool-2026-03-01"` - `const AnthropicBetaManagedAgents2026_04_01 AnthropicBeta = "managed-agents-2026-04-01"` - `const AnthropicBetaCacheDiagnosis2026_04_07 AnthropicBeta = "cache-diagnosis-2026-04-07"` - `const AnthropicBetaDreaming2026_04_21 AnthropicBeta = "dreaming-2026-04-21"` - `const AnthropicBetaThinkingTokenCount2026_05_13 AnthropicBeta = "thinking-token-count-2026-05-13"` - `const AnthropicBetaServerSideFallback2026_06_01 AnthropicBeta = "server-side-fallback-2026-06-01"` - `const AnthropicBetaServerSideFallback2026_07_01 AnthropicBeta = "server-side-fallback-2026-07-01"` - `const AnthropicBetaFallbackCredit2026_06_01 AnthropicBeta = "fallback-credit-2026-06-01"` - `const AnthropicBetaFallbackCredit2026_07_01 AnthropicBeta = "fallback-credit-2026-07-01"` - `const AnthropicBetaAgentMemory2026_07_22 AnthropicBeta = "agent-memory-2026-07-22"` - `const AnthropicBetaMidConversationToolChanges2026_07_01 AnthropicBeta = "mid-conversation-tool-changes-2026-07-01"` - `const AnthropicBetaCompact2026_01_12 AnthropicBeta = "compact-2026-01-12"` - `const AnthropicBetaComputerUse2025_11_24 AnthropicBeta = "computer-use-2025-11-24"` - `const AnthropicBetaMCPTunnels2026_06_22 AnthropicBeta = "mcp-tunnels-2026-06-22"` - `const AnthropicBetaStructuredOutputs2025_11_13 AnthropicBeta = "structured-outputs-2025-11-13"` - `const AnthropicBetaTaskBudgets2026_03_13 AnthropicBeta = "task-budgets-2026-03-13"` - `const AnthropicBetaThinkingDisplayUpdates2026_08_18 AnthropicBeta = "thinking-display-updates-2026-08-18"` - `const AnthropicBetaCEUserManagement2026_07_13 AnthropicBeta = "ce-user-management-2026-07-13"` - `const AnthropicBetaMidConversationOutputConfig2026_07_01 AnthropicBeta = "mid-conversation-output-config-2026-07-01"` - `const AnthropicBetaThinkingBindingControls2026_08_01 AnthropicBeta = "thinking-binding-controls-2026-08-01"` - `const AnthropicBetaMidConversationSystemClearAt2026_08_21 AnthropicBeta = "mid-conversation-system-clear-at-2026-08-21"` - `const AnthropicBetaCompact2026_09_04 AnthropicBeta = "compact-2026-09-04"` - `const AnthropicBetaInlineTools2026_09_15 AnthropicBeta = "inline-tools-2026-09-15"` - `const AnthropicBetaMCPClient2026_09_15 AnthropicBeta = "mcp-client-2026-09-15"` - `const AnthropicBetaCEPlugins2026_09_01 AnthropicBeta = "ce-plugins-2026-09-01"` - `const AnthropicBetaSpendLimitReads2026_09_26 AnthropicBeta = "spend-limit-reads-2026-09-26"` - `const AnthropicBetaTelemetryDestinations2026_08_11 AnthropicBeta = "telemetry-destinations-2026-08-11"` - `WorkspaceID param.Opt[string] Optional` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `type BetaManagedAgentsCredential` A credential stored in a vault. Sensitive fields are never returned in responses. - `Type BetaManagedAgentsCredentialType` - `ID string` Unique identifier for the credential. - `ArchivedAt Time` When the credential was archived. Null if not archived. format: date-time - `Auth BetaManagedAgentsCredentialAuthUnion` Authentication configuration for this credential. - `type BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `Type BetaManagedAgentsMCPOAuthAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshResponse Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. - `type BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `Type BetaManagedAgentsStaticBearerAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `type BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `Type BetaManagedAgentsEnvironmentVariableAuthResponseType` - `InjectionLocation BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. - `Networking BetaManagedAgentsEnvironmentVariableAuthResponseNetworkingUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType` - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `SecretName string` Name of the environment variable. - `CreatedAt Time` A timestamp in RFC 3339 format format: date-time - `Metadata map[string, string]` Arbitrary key-value metadata attached to the credential. - `UpdatedAt Time` A timestamp in RFC 3339 format format: date-time - `VaultID string` Identifier of the vault this credential belongs to. - `DisplayName string Optional` Human-readable name for the credential. ### Example ```go package main import ( "context" "fmt" "github.com/anthropics/anthropic-sdk-go" "github.com/anthropics/anthropic-sdk-go/option" ) func main() { client := anthropic.NewClient( option.WithAPIKey("my-anthropic-api-key"), ) betaManagedAgentsCredential, err := client.Beta.Vaults.Credentials.Update( context.TODO(), "vcrd_011CZkZEMt8gZan2iYPQfSkw", anthropic.BetaVaultCredentialUpdateParams{ VaultID: "vlt_011CZkZDLs7fYzm1hXNPeRjv", }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", betaManagedAgentsCredential.ID) } ``` #### Response (200) ```json { "id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "archived_at": null, "auth": { "mcp_server_url": "https://example-server.modelcontextprotocol.io/sse", "type": "static_bearer" }, "created_at": "2026-03-15T10:00:00Z", "metadata": { "environment": "production" }, "type": "vault_credential", "updated_at": "2026-03-15T10:00:00Z", "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv", "display_name": "Example credential" } ``` ## Delete Credential `client.Beta.Vaults.Credentials.Delete(ctx, credentialID, params) (*BetaManagedAgentsDeletedCredential, error)` **DELETE** `/v1/vaults/{vault_id}/credentials/{credential_id}` Delete Credential ### Parameters - `credentialID string` (path parameter) Unique identifier of the credential to delete. - `params BetaVaultCredentialDeleteParams` - `VaultID string` (path parameter) Identifier of the vault containing the credential. - `Betas []AnthropicBeta Optional` (header parameter) This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this header. - `const AnthropicBetaMessageBatches2024_09_24 AnthropicBeta = "message-batches-2024-09-24"` - `const AnthropicBetaPromptCaching2024_07_31 AnthropicBeta = "prompt-caching-2024-07-31"` - `const AnthropicBetaComputerUse2024_10_22 AnthropicBeta = "computer-use-2024-10-22"` - `const AnthropicBetaComputerUse2025_01_24 AnthropicBeta = "computer-use-2025-01-24"` - `const AnthropicBetaPDFs2024_09_25 AnthropicBeta = "pdfs-2024-09-25"` - `const AnthropicBetaTokenCounting2024_11_01 AnthropicBeta = "token-counting-2024-11-01"` - `const AnthropicBetaTokenEfficientTools2025_02_19 AnthropicBeta = "token-efficient-tools-2025-02-19"` - `const AnthropicBetaOutput128k2025_02_19 AnthropicBeta = "output-128k-2025-02-19"` - `const AnthropicBetaFilesAPI2025_04_14 AnthropicBeta = "files-api-2025-04-14"` - `const AnthropicBetaMCPClient2025_04_04 AnthropicBeta = "mcp-client-2025-04-04"` - `const AnthropicBetaMCPClient2025_11_20 AnthropicBeta = "mcp-client-2025-11-20"` - `const AnthropicBetaDevFullThinking2025_05_14 AnthropicBeta = "dev-full-thinking-2025-05-14"` - `const AnthropicBetaInterleavedThinking2025_05_14 AnthropicBeta = "interleaved-thinking-2025-05-14"` - `const AnthropicBetaCodeExecution2025_05_22 AnthropicBeta = "code-execution-2025-05-22"` - `const AnthropicBetaExtendedCacheTTL2025_04_11 AnthropicBeta = "extended-cache-ttl-2025-04-11"` - `const AnthropicBetaContext1m2025_08_07 AnthropicBeta = "context-1m-2025-08-07"` - `const AnthropicBetaContextManagement2025_06_27 AnthropicBeta = "context-management-2025-06-27"` - `const AnthropicBetaModelContextWindowExceeded2025_08_26 AnthropicBeta = "model-context-window-exceeded-2025-08-26"` - `const AnthropicBetaSkills2025_10_02 AnthropicBeta = "skills-2025-10-02"` - `const AnthropicBetaFastMode2026_02_01 AnthropicBeta = "fast-mode-2026-02-01"` - `const AnthropicBetaOutput300k2026_03_24 AnthropicBeta = "output-300k-2026-03-24"` - `const AnthropicBetaUserProfiles2026_03_24 AnthropicBeta = "user-profiles-2026-03-24"` - `const AnthropicBetaUserProfiles2026_08_18 AnthropicBeta = "user-profiles-2026-08-18"` - `const AnthropicBetaUserProfiles2026_09_04 AnthropicBeta = "user-profiles-2026-09-04"` - `const AnthropicBetaAdvisorTool2026_03_01 AnthropicBeta = "advisor-tool-2026-03-01"` - `const AnthropicBetaManagedAgents2026_04_01 AnthropicBeta = "managed-agents-2026-04-01"` - `const AnthropicBetaCacheDiagnosis2026_04_07 AnthropicBeta = "cache-diagnosis-2026-04-07"` - `const AnthropicBetaDreaming2026_04_21 AnthropicBeta = "dreaming-2026-04-21"` - `const AnthropicBetaThinkingTokenCount2026_05_13 AnthropicBeta = "thinking-token-count-2026-05-13"` - `const AnthropicBetaServerSideFallback2026_06_01 AnthropicBeta = "server-side-fallback-2026-06-01"` - `const AnthropicBetaServerSideFallback2026_07_01 AnthropicBeta = "server-side-fallback-2026-07-01"` - `const AnthropicBetaFallbackCredit2026_06_01 AnthropicBeta = "fallback-credit-2026-06-01"` - `const AnthropicBetaFallbackCredit2026_07_01 AnthropicBeta = "fallback-credit-2026-07-01"` - `const AnthropicBetaAgentMemory2026_07_22 AnthropicBeta = "agent-memory-2026-07-22"` - `const AnthropicBetaMidConversationToolChanges2026_07_01 AnthropicBeta = "mid-conversation-tool-changes-2026-07-01"` - `const AnthropicBetaCompact2026_01_12 AnthropicBeta = "compact-2026-01-12"` - `const AnthropicBetaComputerUse2025_11_24 AnthropicBeta = "computer-use-2025-11-24"` - `const AnthropicBetaMCPTunnels2026_06_22 AnthropicBeta = "mcp-tunnels-2026-06-22"` - `const AnthropicBetaStructuredOutputs2025_11_13 AnthropicBeta = "structured-outputs-2025-11-13"` - `const AnthropicBetaTaskBudgets2026_03_13 AnthropicBeta = "task-budgets-2026-03-13"` - `const AnthropicBetaThinkingDisplayUpdates2026_08_18 AnthropicBeta = "thinking-display-updates-2026-08-18"` - `const AnthropicBetaCEUserManagement2026_07_13 AnthropicBeta = "ce-user-management-2026-07-13"` - `const AnthropicBetaMidConversationOutputConfig2026_07_01 AnthropicBeta = "mid-conversation-output-config-2026-07-01"` - `const AnthropicBetaThinkingBindingControls2026_08_01 AnthropicBeta = "thinking-binding-controls-2026-08-01"` - `const AnthropicBetaMidConversationSystemClearAt2026_08_21 AnthropicBeta = "mid-conversation-system-clear-at-2026-08-21"` - `const AnthropicBetaCompact2026_09_04 AnthropicBeta = "compact-2026-09-04"` - `const AnthropicBetaInlineTools2026_09_15 AnthropicBeta = "inline-tools-2026-09-15"` - `const AnthropicBetaMCPClient2026_09_15 AnthropicBeta = "mcp-client-2026-09-15"` - `const AnthropicBetaCEPlugins2026_09_01 AnthropicBeta = "ce-plugins-2026-09-01"` - `const AnthropicBetaSpendLimitReads2026_09_26 AnthropicBeta = "spend-limit-reads-2026-09-26"` - `const AnthropicBetaTelemetryDestinations2026_08_11 AnthropicBeta = "telemetry-destinations-2026-08-11"` - `WorkspaceID param.Opt[string] Optional` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `type BetaManagedAgentsDeletedCredential` Confirmation of a deleted credential. - `Type BetaManagedAgentsDeletedCredentialType` - `ID string` Unique identifier of the deleted credential. ### Example ```go package main import ( "context" "fmt" "github.com/anthropics/anthropic-sdk-go" "github.com/anthropics/anthropic-sdk-go/option" ) func main() { client := anthropic.NewClient( option.WithAPIKey("my-anthropic-api-key"), ) betaManagedAgentsDeletedCredential, err := client.Beta.Vaults.Credentials.Delete( context.TODO(), "vcrd_011CZkZEMt8gZan2iYPQfSkw", anthropic.BetaVaultCredentialDeleteParams{ VaultID: "vlt_011CZkZDLs7fYzm1hXNPeRjv", }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", betaManagedAgentsDeletedCredential.ID) } ``` #### Response (200) ```json { "id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "type": "vault_credential_deleted" } ``` ## Archive Credential `client.Beta.Vaults.Credentials.Archive(ctx, credentialID, params) (*BetaManagedAgentsCredential, error)` **POST** `/v1/vaults/{vault_id}/credentials/{credential_id}/archive` Archive Credential ### Parameters - `credentialID string` (path parameter) Unique identifier of the credential to archive. - `params BetaVaultCredentialArchiveParams` - `VaultID string` (path parameter) Identifier of the vault containing the credential. - `Betas []AnthropicBeta Optional` (header parameter) This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this header. - `const AnthropicBetaMessageBatches2024_09_24 AnthropicBeta = "message-batches-2024-09-24"` - `const AnthropicBetaPromptCaching2024_07_31 AnthropicBeta = "prompt-caching-2024-07-31"` - `const AnthropicBetaComputerUse2024_10_22 AnthropicBeta = "computer-use-2024-10-22"` - `const AnthropicBetaComputerUse2025_01_24 AnthropicBeta = "computer-use-2025-01-24"` - `const AnthropicBetaPDFs2024_09_25 AnthropicBeta = "pdfs-2024-09-25"` - `const AnthropicBetaTokenCounting2024_11_01 AnthropicBeta = "token-counting-2024-11-01"` - `const AnthropicBetaTokenEfficientTools2025_02_19 AnthropicBeta = "token-efficient-tools-2025-02-19"` - `const AnthropicBetaOutput128k2025_02_19 AnthropicBeta = "output-128k-2025-02-19"` - `const AnthropicBetaFilesAPI2025_04_14 AnthropicBeta = "files-api-2025-04-14"` - `const AnthropicBetaMCPClient2025_04_04 AnthropicBeta = "mcp-client-2025-04-04"` - `const AnthropicBetaMCPClient2025_11_20 AnthropicBeta = "mcp-client-2025-11-20"` - `const AnthropicBetaDevFullThinking2025_05_14 AnthropicBeta = "dev-full-thinking-2025-05-14"` - `const AnthropicBetaInterleavedThinking2025_05_14 AnthropicBeta = "interleaved-thinking-2025-05-14"` - `const AnthropicBetaCodeExecution2025_05_22 AnthropicBeta = "code-execution-2025-05-22"` - `const AnthropicBetaExtendedCacheTTL2025_04_11 AnthropicBeta = "extended-cache-ttl-2025-04-11"` - `const AnthropicBetaContext1m2025_08_07 AnthropicBeta = "context-1m-2025-08-07"` - `const AnthropicBetaContextManagement2025_06_27 AnthropicBeta = "context-management-2025-06-27"` - `const AnthropicBetaModelContextWindowExceeded2025_08_26 AnthropicBeta = "model-context-window-exceeded-2025-08-26"` - `const AnthropicBetaSkills2025_10_02 AnthropicBeta = "skills-2025-10-02"` - `const AnthropicBetaFastMode2026_02_01 AnthropicBeta = "fast-mode-2026-02-01"` - `const AnthropicBetaOutput300k2026_03_24 AnthropicBeta = "output-300k-2026-03-24"` - `const AnthropicBetaUserProfiles2026_03_24 AnthropicBeta = "user-profiles-2026-03-24"` - `const AnthropicBetaUserProfiles2026_08_18 AnthropicBeta = "user-profiles-2026-08-18"` - `const AnthropicBetaUserProfiles2026_09_04 AnthropicBeta = "user-profiles-2026-09-04"` - `const AnthropicBetaAdvisorTool2026_03_01 AnthropicBeta = "advisor-tool-2026-03-01"` - `const AnthropicBetaManagedAgents2026_04_01 AnthropicBeta = "managed-agents-2026-04-01"` - `const AnthropicBetaCacheDiagnosis2026_04_07 AnthropicBeta = "cache-diagnosis-2026-04-07"` - `const AnthropicBetaDreaming2026_04_21 AnthropicBeta = "dreaming-2026-04-21"` - `const AnthropicBetaThinkingTokenCount2026_05_13 AnthropicBeta = "thinking-token-count-2026-05-13"` - `const AnthropicBetaServerSideFallback2026_06_01 AnthropicBeta = "server-side-fallback-2026-06-01"` - `const AnthropicBetaServerSideFallback2026_07_01 AnthropicBeta = "server-side-fallback-2026-07-01"` - `const AnthropicBetaFallbackCredit2026_06_01 AnthropicBeta = "fallback-credit-2026-06-01"` - `const AnthropicBetaFallbackCredit2026_07_01 AnthropicBeta = "fallback-credit-2026-07-01"` - `const AnthropicBetaAgentMemory2026_07_22 AnthropicBeta = "agent-memory-2026-07-22"` - `const AnthropicBetaMidConversationToolChanges2026_07_01 AnthropicBeta = "mid-conversation-tool-changes-2026-07-01"` - `const AnthropicBetaCompact2026_01_12 AnthropicBeta = "compact-2026-01-12"` - `const AnthropicBetaComputerUse2025_11_24 AnthropicBeta = "computer-use-2025-11-24"` - `const AnthropicBetaMCPTunnels2026_06_22 AnthropicBeta = "mcp-tunnels-2026-06-22"` - `const AnthropicBetaStructuredOutputs2025_11_13 AnthropicBeta = "structured-outputs-2025-11-13"` - `const AnthropicBetaTaskBudgets2026_03_13 AnthropicBeta = "task-budgets-2026-03-13"` - `const AnthropicBetaThinkingDisplayUpdates2026_08_18 AnthropicBeta = "thinking-display-updates-2026-08-18"` - `const AnthropicBetaCEUserManagement2026_07_13 AnthropicBeta = "ce-user-management-2026-07-13"` - `const AnthropicBetaMidConversationOutputConfig2026_07_01 AnthropicBeta = "mid-conversation-output-config-2026-07-01"` - `const AnthropicBetaThinkingBindingControls2026_08_01 AnthropicBeta = "thinking-binding-controls-2026-08-01"` - `const AnthropicBetaMidConversationSystemClearAt2026_08_21 AnthropicBeta = "mid-conversation-system-clear-at-2026-08-21"` - `const AnthropicBetaCompact2026_09_04 AnthropicBeta = "compact-2026-09-04"` - `const AnthropicBetaInlineTools2026_09_15 AnthropicBeta = "inline-tools-2026-09-15"` - `const AnthropicBetaMCPClient2026_09_15 AnthropicBeta = "mcp-client-2026-09-15"` - `const AnthropicBetaCEPlugins2026_09_01 AnthropicBeta = "ce-plugins-2026-09-01"` - `const AnthropicBetaSpendLimitReads2026_09_26 AnthropicBeta = "spend-limit-reads-2026-09-26"` - `const AnthropicBetaTelemetryDestinations2026_08_11 AnthropicBeta = "telemetry-destinations-2026-08-11"` - `WorkspaceID param.Opt[string] Optional` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `type BetaManagedAgentsCredential` A credential stored in a vault. Sensitive fields are never returned in responses. - `Type BetaManagedAgentsCredentialType` - `ID string` Unique identifier for the credential. - `ArchivedAt Time` When the credential was archived. Null if not archived. format: date-time - `Auth BetaManagedAgentsCredentialAuthUnion` Authentication configuration for this credential. - `type BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `Type BetaManagedAgentsMCPOAuthAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshResponse Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. - `type BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `Type BetaManagedAgentsStaticBearerAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `type BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `Type BetaManagedAgentsEnvironmentVariableAuthResponseType` - `InjectionLocation BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. - `Networking BetaManagedAgentsEnvironmentVariableAuthResponseNetworkingUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType` - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `SecretName string` Name of the environment variable. - `CreatedAt Time` A timestamp in RFC 3339 format format: date-time - `Metadata map[string, string]` Arbitrary key-value metadata attached to the credential. - `UpdatedAt Time` A timestamp in RFC 3339 format format: date-time - `VaultID string` Identifier of the vault this credential belongs to. - `DisplayName string Optional` Human-readable name for the credential. ### Example ```go package main import ( "context" "fmt" "github.com/anthropics/anthropic-sdk-go" "github.com/anthropics/anthropic-sdk-go/option" ) func main() { client := anthropic.NewClient( option.WithAPIKey("my-anthropic-api-key"), ) betaManagedAgentsCredential, err := client.Beta.Vaults.Credentials.Archive( context.TODO(), "vcrd_011CZkZEMt8gZan2iYPQfSkw", anthropic.BetaVaultCredentialArchiveParams{ VaultID: "vlt_011CZkZDLs7fYzm1hXNPeRjv", }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", betaManagedAgentsCredential.ID) } ``` #### Response (200) ```json { "id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "archived_at": null, "auth": { "mcp_server_url": "https://example-server.modelcontextprotocol.io/sse", "type": "static_bearer" }, "created_at": "2026-03-15T10:00:00Z", "metadata": { "environment": "production" }, "type": "vault_credential", "updated_at": "2026-03-15T10:00:00Z", "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv", "display_name": "Example credential" } ``` ## Validate Credential `client.Beta.Vaults.Credentials.MCPOAuthValidate(ctx, credentialID, params) (*BetaManagedAgentsCredentialValidation, error)` **POST** `/v1/vaults/{vault_id}/credentials/{credential_id}/mcp_oauth_validate` Validate Credential ### Parameters - `credentialID string` (path parameter) Unique identifier of the credential to validate. - `params BetaVaultCredentialMCPOAuthValidateParams` - `VaultID string` (path parameter) Identifier of the vault containing the credential. - `Betas []AnthropicBeta Optional` (header parameter) This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this header. - `const AnthropicBetaMessageBatches2024_09_24 AnthropicBeta = "message-batches-2024-09-24"` - `const AnthropicBetaPromptCaching2024_07_31 AnthropicBeta = "prompt-caching-2024-07-31"` - `const AnthropicBetaComputerUse2024_10_22 AnthropicBeta = "computer-use-2024-10-22"` - `const AnthropicBetaComputerUse2025_01_24 AnthropicBeta = "computer-use-2025-01-24"` - `const AnthropicBetaPDFs2024_09_25 AnthropicBeta = "pdfs-2024-09-25"` - `const AnthropicBetaTokenCounting2024_11_01 AnthropicBeta = "token-counting-2024-11-01"` - `const AnthropicBetaTokenEfficientTools2025_02_19 AnthropicBeta = "token-efficient-tools-2025-02-19"` - `const AnthropicBetaOutput128k2025_02_19 AnthropicBeta = "output-128k-2025-02-19"` - `const AnthropicBetaFilesAPI2025_04_14 AnthropicBeta = "files-api-2025-04-14"` - `const AnthropicBetaMCPClient2025_04_04 AnthropicBeta = "mcp-client-2025-04-04"` - `const AnthropicBetaMCPClient2025_11_20 AnthropicBeta = "mcp-client-2025-11-20"` - `const AnthropicBetaDevFullThinking2025_05_14 AnthropicBeta = "dev-full-thinking-2025-05-14"` - `const AnthropicBetaInterleavedThinking2025_05_14 AnthropicBeta = "interleaved-thinking-2025-05-14"` - `const AnthropicBetaCodeExecution2025_05_22 AnthropicBeta = "code-execution-2025-05-22"` - `const AnthropicBetaExtendedCacheTTL2025_04_11 AnthropicBeta = "extended-cache-ttl-2025-04-11"` - `const AnthropicBetaContext1m2025_08_07 AnthropicBeta = "context-1m-2025-08-07"` - `const AnthropicBetaContextManagement2025_06_27 AnthropicBeta = "context-management-2025-06-27"` - `const AnthropicBetaModelContextWindowExceeded2025_08_26 AnthropicBeta = "model-context-window-exceeded-2025-08-26"` - `const AnthropicBetaSkills2025_10_02 AnthropicBeta = "skills-2025-10-02"` - `const AnthropicBetaFastMode2026_02_01 AnthropicBeta = "fast-mode-2026-02-01"` - `const AnthropicBetaOutput300k2026_03_24 AnthropicBeta = "output-300k-2026-03-24"` - `const AnthropicBetaUserProfiles2026_03_24 AnthropicBeta = "user-profiles-2026-03-24"` - `const AnthropicBetaUserProfiles2026_08_18 AnthropicBeta = "user-profiles-2026-08-18"` - `const AnthropicBetaUserProfiles2026_09_04 AnthropicBeta = "user-profiles-2026-09-04"` - `const AnthropicBetaAdvisorTool2026_03_01 AnthropicBeta = "advisor-tool-2026-03-01"` - `const AnthropicBetaManagedAgents2026_04_01 AnthropicBeta = "managed-agents-2026-04-01"` - `const AnthropicBetaCacheDiagnosis2026_04_07 AnthropicBeta = "cache-diagnosis-2026-04-07"` - `const AnthropicBetaDreaming2026_04_21 AnthropicBeta = "dreaming-2026-04-21"` - `const AnthropicBetaThinkingTokenCount2026_05_13 AnthropicBeta = "thinking-token-count-2026-05-13"` - `const AnthropicBetaServerSideFallback2026_06_01 AnthropicBeta = "server-side-fallback-2026-06-01"` - `const AnthropicBetaServerSideFallback2026_07_01 AnthropicBeta = "server-side-fallback-2026-07-01"` - `const AnthropicBetaFallbackCredit2026_06_01 AnthropicBeta = "fallback-credit-2026-06-01"` - `const AnthropicBetaFallbackCredit2026_07_01 AnthropicBeta = "fallback-credit-2026-07-01"` - `const AnthropicBetaAgentMemory2026_07_22 AnthropicBeta = "agent-memory-2026-07-22"` - `const AnthropicBetaMidConversationToolChanges2026_07_01 AnthropicBeta = "mid-conversation-tool-changes-2026-07-01"` - `const AnthropicBetaCompact2026_01_12 AnthropicBeta = "compact-2026-01-12"` - `const AnthropicBetaComputerUse2025_11_24 AnthropicBeta = "computer-use-2025-11-24"` - `const AnthropicBetaMCPTunnels2026_06_22 AnthropicBeta = "mcp-tunnels-2026-06-22"` - `const AnthropicBetaStructuredOutputs2025_11_13 AnthropicBeta = "structured-outputs-2025-11-13"` - `const AnthropicBetaTaskBudgets2026_03_13 AnthropicBeta = "task-budgets-2026-03-13"` - `const AnthropicBetaThinkingDisplayUpdates2026_08_18 AnthropicBeta = "thinking-display-updates-2026-08-18"` - `const AnthropicBetaCEUserManagement2026_07_13 AnthropicBeta = "ce-user-management-2026-07-13"` - `const AnthropicBetaMidConversationOutputConfig2026_07_01 AnthropicBeta = "mid-conversation-output-config-2026-07-01"` - `const AnthropicBetaThinkingBindingControls2026_08_01 AnthropicBeta = "thinking-binding-controls-2026-08-01"` - `const AnthropicBetaMidConversationSystemClearAt2026_08_21 AnthropicBeta = "mid-conversation-system-clear-at-2026-08-21"` - `const AnthropicBetaCompact2026_09_04 AnthropicBeta = "compact-2026-09-04"` - `const AnthropicBetaInlineTools2026_09_15 AnthropicBeta = "inline-tools-2026-09-15"` - `const AnthropicBetaMCPClient2026_09_15 AnthropicBeta = "mcp-client-2026-09-15"` - `const AnthropicBetaCEPlugins2026_09_01 AnthropicBeta = "ce-plugins-2026-09-01"` - `const AnthropicBetaSpendLimitReads2026_09_26 AnthropicBeta = "spend-limit-reads-2026-09-26"` - `const AnthropicBetaTelemetryDestinations2026_08_11 AnthropicBeta = "telemetry-destinations-2026-08-11"` - `WorkspaceID param.Opt[string] Optional` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `type BetaManagedAgentsCredentialValidation` Result of live-probing a credential against its configured MCP server. - `Type BetaManagedAgentsCredentialValidationType` - `CredentialID string` Unique identifier of the credential that was validated. - `HasRefreshToken bool` Whether the credential has a refresh token configured. - `MCPProbe BetaManagedAgentsMCPProbe` Details of the failing MCP probe step. Null when the probe succeeded. - `HTTPResponse BetaManagedAgentsRefreshHTTPResponse` The captured HTTP error response. Null when no HTTP response was received (timeout, DNS, TLS). - `Body string` Response body. May be truncated and has sensitive values scrubbed. - `BodyTruncated bool` Whether `body` was truncated. - `ContentType string` Value of the `Content-Type` response header. - `StatusCode int64` HTTP status code. format: int32 - `Method string` The MCP method that failed (for example `initialize` or `tools/list`). - `Refresh BetaManagedAgentsRefreshObject` Details of the refresh-token exchange attempted on a 401. Null when no refresh was attempted. - `HTTPResponse BetaManagedAgentsRefreshHTTPResponse` The captured HTTP error response from the token endpoint. Populated only when `status` is `failed`. - `Status BetaManagedAgentsRefreshObjectStatus` Outcome of the refresh attempt. - `const BetaManagedAgentsRefreshObjectStatusSucceeded BetaManagedAgentsRefreshObjectStatus = "succeeded"` The token endpoint returned a new access token. - `const BetaManagedAgentsRefreshObjectStatusFailed BetaManagedAgentsRefreshObjectStatus = "failed"` The token endpoint returned an error response. See `http_response` for detail. - `const BetaManagedAgentsRefreshObjectStatusConnectError BetaManagedAgentsRefreshObjectStatus = "connect_error"` The token endpoint could not be reached (DNS, TLS, or connection error). - `const BetaManagedAgentsRefreshObjectStatusNoRefreshToken BetaManagedAgentsRefreshObjectStatus = "no_refresh_token"` No refresh token is stored for the credential, so no exchange was attempted. - `Status BetaManagedAgentsCredentialValidationStatus` Overall verdict of the validation probe. - `const BetaManagedAgentsCredentialValidationStatusValid BetaManagedAgentsCredentialValidationStatus = "valid"` The credential successfully authenticated against its MCP server. - `const BetaManagedAgentsCredentialValidationStatusInvalid BetaManagedAgentsCredentialValidationStatus = "invalid"` The probe reached the MCP server and was rejected, and a refresh (if attempted) did not recover it. - `const BetaManagedAgentsCredentialValidationStatusUnknown BetaManagedAgentsCredentialValidationStatus = "unknown"` The probe could not determine validity — for example, a transport error or a successful refresh that was not re-probed. - `ValidatedAt Time` When the validation probe was performed. format: date-time - `VaultID string` Identifier of the vault containing the credential. ### Example ```go package main import ( "context" "fmt" "github.com/anthropics/anthropic-sdk-go" "github.com/anthropics/anthropic-sdk-go/option" ) func main() { client := anthropic.NewClient( option.WithAPIKey("my-anthropic-api-key"), ) betaManagedAgentsCredentialValidation, err := client.Beta.Vaults.Credentials.MCPOAuthValidate( context.TODO(), "vcrd_011CZkZEMt8gZan2iYPQfSkw", anthropic.BetaVaultCredentialMCPOAuthValidateParams{ VaultID: "vlt_011CZkZDLs7fYzm1hXNPeRjv", }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", betaManagedAgentsCredentialValidation.CredentialID) } ``` #### Response (200) ```json { "credential_id": "vcrd_011CZkZEMt8gZan2iYPQfSkw", "has_refresh_token": true, "mcp_probe": { "http_response": { "body": "body", "body_truncated": true, "content_type": "content_type", "status_code": 0 }, "method": "method" }, "refresh": { "http_response": { "body": "body", "body_truncated": true, "content_type": "content_type", "status_code": 0 }, "status": "succeeded" }, "status": "valid", "type": "vault_credential_validation", "validated_at": "2026-03-15T10:00:00Z", "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv" } ``` ## Domain types ### Beta Managed Agents Credential - `type BetaManagedAgentsCredential` A credential stored in a vault. Sensitive fields are never returned in responses. - `Type BetaManagedAgentsCredentialType` - `ID string` Unique identifier for the credential. - `ArchivedAt Time` When the credential was archived. Null if not archived. format: date-time - `Auth BetaManagedAgentsCredentialAuthUnion` Authentication configuration for this credential. - `type BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `Type BetaManagedAgentsMCPOAuthAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshResponse Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. - `type BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `Type BetaManagedAgentsStaticBearerAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `type BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `Type BetaManagedAgentsEnvironmentVariableAuthResponseType` - `InjectionLocation BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. - `Networking BetaManagedAgentsEnvironmentVariableAuthResponseNetworkingUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType` - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `SecretName string` Name of the environment variable. - `CreatedAt Time` A timestamp in RFC 3339 format format: date-time - `Metadata map[string, string]` Arbitrary key-value metadata attached to the credential. - `UpdatedAt Time` A timestamp in RFC 3339 format format: date-time - `VaultID string` Identifier of the vault this credential belongs to. - `DisplayName string Optional` Human-readable name for the credential. ### Beta Managed Agents Credential Networking Params - `type BetaManagedAgentsCredentialNetworkingParamsUnion interface{…}` - `type BetaManagedAgentsUnrestrictedCredentialNetworkingParams` Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingParamsType` - `type BetaManagedAgentsLimitedCredentialNetworkingParams` Substitute the secret only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingParamsType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries. ### Beta Managed Agents Credential Validation - `type BetaManagedAgentsCredentialValidation` Result of live-probing a credential against its configured MCP server. - `Type BetaManagedAgentsCredentialValidationType` - `CredentialID string` Unique identifier of the credential that was validated. - `HasRefreshToken bool` Whether the credential has a refresh token configured. - `MCPProbe BetaManagedAgentsMCPProbe` Details of the failing MCP probe step. Null when the probe succeeded. - `HTTPResponse BetaManagedAgentsRefreshHTTPResponse` The captured HTTP error response. Null when no HTTP response was received (timeout, DNS, TLS). - `Body string` Response body. May be truncated and has sensitive values scrubbed. - `BodyTruncated bool` Whether `body` was truncated. - `ContentType string` Value of the `Content-Type` response header. - `StatusCode int64` HTTP status code. format: int32 - `Method string` The MCP method that failed (for example `initialize` or `tools/list`). - `Refresh BetaManagedAgentsRefreshObject` Details of the refresh-token exchange attempted on a 401. Null when no refresh was attempted. - `HTTPResponse BetaManagedAgentsRefreshHTTPResponse` The captured HTTP error response from the token endpoint. Populated only when `status` is `failed`. - `Status BetaManagedAgentsRefreshObjectStatus` Outcome of the refresh attempt. - `const BetaManagedAgentsRefreshObjectStatusSucceeded BetaManagedAgentsRefreshObjectStatus = "succeeded"` The token endpoint returned a new access token. - `const BetaManagedAgentsRefreshObjectStatusFailed BetaManagedAgentsRefreshObjectStatus = "failed"` The token endpoint returned an error response. See `http_response` for detail. - `const BetaManagedAgentsRefreshObjectStatusConnectError BetaManagedAgentsRefreshObjectStatus = "connect_error"` The token endpoint could not be reached (DNS, TLS, or connection error). - `const BetaManagedAgentsRefreshObjectStatusNoRefreshToken BetaManagedAgentsRefreshObjectStatus = "no_refresh_token"` No refresh token is stored for the credential, so no exchange was attempted. - `Status BetaManagedAgentsCredentialValidationStatus` Overall verdict of the validation probe. - `const BetaManagedAgentsCredentialValidationStatusValid BetaManagedAgentsCredentialValidationStatus = "valid"` The credential successfully authenticated against its MCP server. - `const BetaManagedAgentsCredentialValidationStatusInvalid BetaManagedAgentsCredentialValidationStatus = "invalid"` The probe reached the MCP server and was rejected, and a refresh (if attempted) did not recover it. - `const BetaManagedAgentsCredentialValidationStatusUnknown BetaManagedAgentsCredentialValidationStatus = "unknown"` The probe could not determine validity — for example, a transport error or a successful refresh that was not re-probed. - `ValidatedAt Time` When the validation probe was performed. format: date-time - `VaultID string` Identifier of the vault containing the credential. ### Beta Managed Agents Credential Validation Status - `type BetaManagedAgentsCredentialValidationStatus string` Overall verdict of a credential validation probe. - `const BetaManagedAgentsCredentialValidationStatusValid BetaManagedAgentsCredentialValidationStatus = "valid"` The credential successfully authenticated against its MCP server. - `const BetaManagedAgentsCredentialValidationStatusInvalid BetaManagedAgentsCredentialValidationStatus = "invalid"` The probe reached the MCP server and was rejected, and a refresh (if attempted) did not recover it. - `const BetaManagedAgentsCredentialValidationStatusUnknown BetaManagedAgentsCredentialValidationStatus = "unknown"` The probe could not determine validity — for example, a transport error or a successful refresh that was not re-probed. ### Beta Managed Agents Deleted Credential - `type BetaManagedAgentsDeletedCredential` Confirmation of a deleted credential. - `Type BetaManagedAgentsDeletedCredentialType` - `ID string` Unique identifier of the deleted credential. ### Beta Managed Agents Environment Variable Auth Response - `type BetaManagedAgentsEnvironmentVariableAuthResponse` Environment variable credential details. The secret value is never returned. - `Type BetaManagedAgentsEnvironmentVariableAuthResponseType` - `InjectionLocation BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. - `Networking BetaManagedAgentsEnvironmentVariableAuthResponseNetworkingUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType` - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. - `SecretName string` Name of the environment variable. ### Beta Managed Agents Environment Variable Create Params - `type BetaManagedAgentsEnvironmentVariableCreateParams` Parameters for creating an environment variable credential. - `Type BetaManagedAgentsEnvironmentVariableCreateParamsType` - `Networking BetaManagedAgentsCredentialNetworkingParamsUnion` Outbound hosts the secret value is substituted on. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingParams` Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingParamsType` - `type BetaManagedAgentsLimitedCredentialNetworkingParams` Substitute the secret only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingParamsType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries. - `SecretName string` Name of the environment variable. Immutable after create. minLength: 1, maxLength: 255 - `SecretValue string` Secret value. Write-only; never returned in responses. minLength: 1, maxLength: 4096 - `InjectionLocation BetaManagedAgentsInjectionLocationParams Optional` Where in the outbound request the secret value may be substituted. - `Body bool Optional` Substitute when the placeholder appears in the request body. - `Header bool Optional` Substitute when the placeholder appears in a request header value. ### Beta Managed Agents Environment Variable Update Params - `type BetaManagedAgentsEnvironmentVariableUpdateParams` Parameters for updating an environment variable credential. `secret_name` is immutable. - `Type BetaManagedAgentsEnvironmentVariableUpdateParamsType` - `InjectionLocation BetaManagedAgentsInjectionLocationUpdateParams Optional` Updated injection location. - `Body bool Optional` Substitute when the placeholder appears in the request body. - `Header bool Optional` Substitute when the placeholder appears in a request header value. - `Networking BetaManagedAgentsCredentialNetworkingParamsUnion Optional` Updated networking scope. Full replacement. - `type BetaManagedAgentsUnrestrictedCredentialNetworkingParams` Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingParamsType` - `type BetaManagedAgentsLimitedCredentialNetworkingParams` Substitute the secret only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingParamsType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries. - `SecretValue string Optional` Updated secret value. minLength: 1, maxLength: 4096 ### Beta Managed Agents Injection Location Params - `type BetaManagedAgentsInjectionLocationParams` Where in the outbound request the secret value may be substituted. - `Body bool Optional` Substitute when the placeholder appears in the request body. - `Header bool Optional` Substitute when the placeholder appears in a request header value. ### Beta Managed Agents Injection Location Response - `type BetaManagedAgentsInjectionLocationResponse` Where in the outbound request the secret value is substituted. - `Body bool` Whether the placeholder is substituted in the request body. - `Header bool` Whether the placeholder is substituted in request header values. ### Beta Managed Agents Injection Location Update Params - `type BetaManagedAgentsInjectionLocationUpdateParams` Updated injection location. - `Body bool Optional` Substitute when the placeholder appears in the request body. - `Header bool Optional` Substitute when the placeholder appears in a request header value. ### Beta Managed Agents Limited Credential Networking Params - `type BetaManagedAgentsLimitedCredentialNetworkingParams` Substitute the secret only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingParamsType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries. ### Beta Managed Agents Limited Credential Networking Response - `type BetaManagedAgentsLimitedCredentialNetworkingResponse` The secret is substituted only on requests to the listed hosts. - `Type BetaManagedAgentsLimitedCredentialNetworkingResponseType` - `AllowedHosts []string` Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. ### Beta Managed Agents MCP OAuth Auth Response - `type BetaManagedAgentsMCPOAuthAuthResponse` OAuth credential details for an MCP server. - `Type BetaManagedAgentsMCPOAuthAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshResponse Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. ### Beta Managed Agents MCP OAuth Create Params - `type BetaManagedAgentsMCPOAuthCreateParams` Parameters for creating an MCP OAuth credential. - `Type BetaManagedAgentsMCPOAuthCreateParamsType` - `AccessToken string` OAuth access token. minLength: 1, maxLength: 8192 - `MCPServerURL string` URL of the MCP server this credential authenticates against. minLength: 1, maxLength: 2047 - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshParams Optional` Refresh token configuration, if the credential supports token refresh. - `ClientID string` OAuth client ID. minLength: 1, maxLength: 1024 - `RefreshToken string` OAuth refresh token. minLength: 1, maxLength: 8192 - `TokenEndpoint string` Token endpoint URL used to refresh the access token. minLength: 1, maxLength: 2047 - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshParamsTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneParam` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneParamType` - `type BetaManagedAgentsTokenEndpointAuthBasicParam` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 - `type BetaManagedAgentsTokenEndpointAuthPostParam` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 - `Resource string Optional` OAuth resource indicator. minLength: 1, maxLength: 2047 - `Scope string Optional` OAuth scope for the refresh request. minLength: 1, maxLength: 8192 ### Beta Managed Agents MCP OAuth Refresh Params - `type BetaManagedAgentsMCPOAuthRefreshParams` OAuth refresh token parameters for creating a credential with refresh support. - `ClientID string` OAuth client ID. minLength: 1, maxLength: 1024 - `RefreshToken string` OAuth refresh token. minLength: 1, maxLength: 8192 - `TokenEndpoint string` Token endpoint URL used to refresh the access token. minLength: 1, maxLength: 2047 - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshParamsTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneParam` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneParamType` - `type BetaManagedAgentsTokenEndpointAuthBasicParam` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 - `type BetaManagedAgentsTokenEndpointAuthPostParam` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 - `Resource string Optional` OAuth resource indicator. minLength: 1, maxLength: 2047 - `Scope string Optional` OAuth scope for the refresh request. minLength: 1, maxLength: 8192 ### Beta Managed Agents MCP OAuth Refresh Response - `type BetaManagedAgentsMCPOAuthRefreshResponse` OAuth refresh token configuration returned in credential responses. - `ClientID string` OAuth client ID. - `TokenEndpoint string` Token endpoint URL used to refresh the access token. - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshResponseTokenEndpointAuthUnion` - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` - `Resource string Optional` OAuth resource indicator. - `Scope string Optional` OAuth scope for the refresh request. ### Beta Managed Agents MCP OAuth Refresh Update Params - `type BetaManagedAgentsMCPOAuthRefreshUpdateParams` Parameters for updating OAuth refresh token configuration. - `RefreshToken string Optional` Updated OAuth refresh token. minLength: 1, maxLength: 8192 - `Scope string Optional` Updated OAuth scope for the refresh request. maxLength: 8192 - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshUpdateParamsTokenEndpointAuthUnion Optional` - `type BetaManagedAgentsTokenEndpointAuthBasicUpdateParam` Updated HTTP Basic authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthBasicUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 - `type BetaManagedAgentsTokenEndpointAuthPostUpdateParam` Updated POST body authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthPostUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 ### Beta Managed Agents MCP OAuth Update Params - `type BetaManagedAgentsMCPOAuthUpdateParams` Parameters for updating an MCP OAuth credential. The `mcp_server_url` is immutable. - `Type BetaManagedAgentsMCPOAuthUpdateParamsType` - `AccessToken string Optional` Updated OAuth access token. minLength: 1, maxLength: 8192 - `ExpiresAt Time Optional` A timestamp in RFC 3339 format format: date-time - `Refresh BetaManagedAgentsMCPOAuthRefreshUpdateParams Optional` Updated refresh token configuration. - `RefreshToken string Optional` Updated OAuth refresh token. minLength: 1, maxLength: 8192 - `Scope string Optional` Updated OAuth scope for the refresh request. maxLength: 8192 - `TokenEndpointAuth BetaManagedAgentsMCPOAuthRefreshUpdateParamsTokenEndpointAuthUnion Optional` - `type BetaManagedAgentsTokenEndpointAuthBasicUpdateParam` Updated HTTP Basic authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthBasicUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 - `type BetaManagedAgentsTokenEndpointAuthPostUpdateParam` Updated POST body authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthPostUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 ### Beta Managed Agents MCP Probe - `type BetaManagedAgentsMCPProbe` The failing step of an MCP validation probe. - `HTTPResponse BetaManagedAgentsRefreshHTTPResponse` The captured HTTP error response. Null when no HTTP response was received (timeout, DNS, TLS). - `Body string` Response body. May be truncated and has sensitive values scrubbed. - `BodyTruncated bool` Whether `body` was truncated. - `ContentType string` Value of the `Content-Type` response header. - `StatusCode int64` HTTP status code. format: int32 - `Method string` The MCP method that failed (for example `initialize` or `tools/list`). ### Beta Managed Agents Refresh HTTP Response - `type BetaManagedAgentsRefreshHTTPResponse` An HTTP response captured during a credential validation probe. - `Body string` Response body. May be truncated and has sensitive values scrubbed. - `BodyTruncated bool` Whether `body` was truncated. - `ContentType string` Value of the `Content-Type` response header. - `StatusCode int64` HTTP status code. format: int32 ### Beta Managed Agents Refresh Object - `type BetaManagedAgentsRefreshObject` Outcome of a refresh-token exchange attempted during credential validation. - `HTTPResponse BetaManagedAgentsRefreshHTTPResponse` The captured HTTP error response from the token endpoint. Populated only when `status` is `failed`. - `Body string` Response body. May be truncated and has sensitive values scrubbed. - `BodyTruncated bool` Whether `body` was truncated. - `ContentType string` Value of the `Content-Type` response header. - `StatusCode int64` HTTP status code. format: int32 - `Status BetaManagedAgentsRefreshObjectStatus` Outcome of the refresh attempt. - `const BetaManagedAgentsRefreshObjectStatusSucceeded BetaManagedAgentsRefreshObjectStatus = "succeeded"` The token endpoint returned a new access token. - `const BetaManagedAgentsRefreshObjectStatusFailed BetaManagedAgentsRefreshObjectStatus = "failed"` The token endpoint returned an error response. See `http_response` for detail. - `const BetaManagedAgentsRefreshObjectStatusConnectError BetaManagedAgentsRefreshObjectStatus = "connect_error"` The token endpoint could not be reached (DNS, TLS, or connection error). - `const BetaManagedAgentsRefreshObjectStatusNoRefreshToken BetaManagedAgentsRefreshObjectStatus = "no_refresh_token"` No refresh token is stored for the credential, so no exchange was attempted. ### Beta Managed Agents Static Bearer Auth Response - `type BetaManagedAgentsStaticBearerAuthResponse` Static bearer token credential details for an MCP server. - `Type BetaManagedAgentsStaticBearerAuthResponseType` - `MCPServerURL string` URL of the MCP server this credential authenticates against. ### Beta Managed Agents Static Bearer Create Params - `type BetaManagedAgentsStaticBearerCreateParams` Parameters for creating a static bearer token credential. - `Type BetaManagedAgentsStaticBearerCreateParamsType` - `Token string` Static bearer token value. minLength: 1, maxLength: 8192 - `MCPServerURL string` URL of the MCP server this credential authenticates against. minLength: 1, maxLength: 2047 ### Beta Managed Agents Static Bearer Update Params - `type BetaManagedAgentsStaticBearerUpdateParams` Parameters for updating a static bearer token credential. The `mcp_server_url` is immutable. - `Type BetaManagedAgentsStaticBearerUpdateParamsType` - `Token string Optional` Updated static bearer token value. minLength: 1, maxLength: 8192 ### Beta Managed Agents Token Endpoint Auth Basic Param - `type BetaManagedAgentsTokenEndpointAuthBasicParam` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 ### Beta Managed Agents Token Endpoint Auth Basic Response - `type BetaManagedAgentsTokenEndpointAuthBasicResponse` Token endpoint uses HTTP Basic authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthBasicResponseType` ### Beta Managed Agents Token Endpoint Auth Basic Update Param - `type BetaManagedAgentsTokenEndpointAuthBasicUpdateParam` Updated HTTP Basic authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthBasicUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 ### Beta Managed Agents Token Endpoint Auth None Param - `type BetaManagedAgentsTokenEndpointAuthNoneParam` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneParamType` ### Beta Managed Agents Token Endpoint Auth None Response - `type BetaManagedAgentsTokenEndpointAuthNoneResponse` Token endpoint requires no client authentication. - `Type BetaManagedAgentsTokenEndpointAuthNoneResponseType` ### Beta Managed Agents Token Endpoint Auth Post Param - `type BetaManagedAgentsTokenEndpointAuthPostParam` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostParamType` - `ClientSecret string` OAuth client secret. minLength: 1, maxLength: 512 ### Beta Managed Agents Token Endpoint Auth Post Response - `type BetaManagedAgentsTokenEndpointAuthPostResponse` Token endpoint uses POST body authentication with client credentials. - `Type BetaManagedAgentsTokenEndpointAuthPostResponseType` ### Beta Managed Agents Token Endpoint Auth Post Update Param - `type BetaManagedAgentsTokenEndpointAuthPostUpdateParam` Updated POST body authentication parameters for the token endpoint. - `Type BetaManagedAgentsTokenEndpointAuthPostUpdateParamType` - `ClientSecret string Optional` Updated OAuth client secret. minLength: 1, maxLength: 512 ### Beta Managed Agents Unrestricted Credential Networking Params - `type BetaManagedAgentsUnrestrictedCredentialNetworkingParams` Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingParamsType` ### Beta Managed Agents Unrestricted Credential Networking Response - `type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse` The secret is substituted on any host the session's Environment network policy permits egress to. - `Type BetaManagedAgentsUnrestrictedCredentialNetworkingResponseType`