Claude Platform Docs

To enable the Compliance API, see the setup guide.

Set up the Compliance API

Listar Artifacts de Código

GET/v1/compliance/apps/code/artifacts

Lista Artifacts do Claude Code pertencentes a organizações sob a organização pai.

Os resultados são ordenados por identificador de Artifact. As páginas podem ser curtas ou vazias enquanto next_page ainda estiver definido — continue até que next_page esteja ausente. Os Artifacts são ordenados por identificador (não por data de criação): um Artifact publicado durante uma exportação pode ficar antes do cursor e ser omitido, então, para uma exportação completa em um ponto no tempo, enumere novamente após a publicação cessar.

Artifacts pertencentes a uma organização filha que foi excluída não são retornados.

Query parameters
limit: optional number

Maximum results (default: 20, max: 100)

default20
maximum100
minimum1
organization_ids: optional array of string

Filter by organization IDs (accepts org_... or organization UUID, up to 500). Enumerate IDs via GET /v1/compliance/organizations.

maxItems500
page: optional string

Opaque pagination token from a previous response's next_page field. Pass this to retrieve the next page of results. Clients should treat this value as an opaque string and not attempt to parse or interpret its contents, as the format may change without notice.

updated_at: optional object{ gt, gte, lt, lte }
gt: optional string

Return only Artifacts updated after this time (RFC 3339 format). See updated_at.gte for the completeness caveat.

formatdate-time
gte: optional string

Return only Artifacts updated at or after this time (RFC 3339 format). Time filters match an eventually-consistent index and Artifacts published before this field was recorded never match — omit the time filter for compliance-complete enumeration. For incremental export, apply a generous overlap margin between windows and dedupe by id: adjacent tiling silently misses items whose index update lagged their publish.

formatdate-time
lt: optional string

Return only Artifacts updated before this time (RFC 3339 format). Multiple time operators are AND-ed to the tightest bound. See updated_at.gte for the completeness caveat.

formatdate-time
lte: optional string

Return only Artifacts updated at or before this time (RFC 3339 format). See updated_at.gte for the completeness caveat.

formatdate-time
user_ids: optional array of string

Filter by owner user IDs (up to 200). Enumerate IDs via GET /v1/compliance/organizations/{org_uuid}/users.

maxItems200
Headers
"x-api-key": optional string
Returns
data: array of object{ id, organization_uuid, owner_user_id, 5 more }

Page of Artifacts

id: string

Artifact identifier (tagged ID)

organization_uuid: string

Organization UUID this Artifact belongs to

owner_user_id: string or null

Artifact owner's user identifier (tagged ID), or null for Artifacts published by an agent session rather than a user account. When set, it survives after the owner's account is deleted or the owner leaves every organization under the parent.

published_version_id: string or null

Identifier of the version a non-owner viewer would render when read_mode permits them — the version the owner has pinned for non-owner readers if one is pinned, otherwise the owner's latest. When read_mode is owner no non-owner renders any version; the field still reports which version would be served were read_mode widened.

read_mode: "org" or "owner" or "public" or "users"

Who can view this Artifact: only its owner, a named set of users, every member of its organization, or anyone on the internet (public)

One of the following:
"org"
"owner"
"public"
"users"
updated_at: string or null

Artifact last update timestamp, or null for Artifacts published before this field was recorded

formatdate-time
user: object{ id, email_address } or null

The user who owns a Code Artifact.

Fields that reference this type are null when the Artifact was published by an agent session rather than a user account, when the owner's account has been deleted, or when the owner is no longer a member of an organization the key may read.

id: string

User identifier (tagged ID)

email_address: string

User's email address

versions: array of object{ id, created_at, name }

Up to roughly 20 most-recently-published versions of this Artifact (older versions are not retained). Metadata only — use GET /v1/compliance/apps/code/artifacts/{artifact_id}/versions/{version_id} to download a version's content.

id: string

Opaque version identifier

created_at: string or null

When this version was published

formatdate-time
name: string

Artifact title at this version. Falls back to the version identifier when the title for an older version is no longer retained.

has_more: boolean

Whether next_page is set. May be true for a page whose next page is empty — continue until next_page is absent.

next_page: string or null

Token to retrieve the next page. Use this as the 'page' parameter in your next request

Listar Artifacts de Código
cURL
curl https://api.anthropic.com/v1/compliance/apps/code/artifacts \
    -H "Authorization: Bearer $ANTHROPIC_COMPLIANCE_API_KEY"
Returns Examples
Response 200
{
  "data": [
    {
      "id": "cart_01Tu9VwXyZaBcDeFgHiJkLmN",
      "organization_uuid": "a1b2c3d4-e5f6-4789-a012-3456789abcde",
      "owner_user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
      "published_version_id": "1741803761-9f3a",
      "read_mode": "org",
      "updated_at": "2025-03-14T09:05:17.456789Z",
      "user": {
        "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
        "email_address": "jane.doe@example.com"
      },
      "versions": [
        {
          "id": "1741803761-9f3a",
          "created_at": "2025-03-12T18:22:41.123456Z",
          "name": "Team dashboard"
        }
      ]
    }
  ],
  "has_more": true,
  "next_page": "cGFnZV90b2tlbl9leGFtcGxlXzE3MzQ1Njc4OTA="
}