--- title: Agents url: https://platform.claude.com/docs/en/api/python/beta/agents --- # Agents ## Create Agent `beta.agents.create(**kwargs) -> BetaManagedAgentsAgent` **POST** `/v1/agents` Create Agent ### Parameters - `model: Model` Model identifier. Accepts the [model string](https://platform.claude.com/docs/en/about-claude/models/overview?sdk_languages=python#latest-models-comparison), e.g. `claude-opus-5`, or a `model_config` object for additional configuration control - `Union[Literal["claude-haiku-5-5", "claude-sonnet-5-5", "claude-opus-5-5", 14 more], str]` - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `class BetaManagedAgentsModelConfigParams` An object that defines additional configuration control over model use - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. Accepts a bare level string (`"high"`) or `{"type": "high"}`. On create, omitting it resolves the per-model default; on update, omitting it leaves the stored value unchanged. - `"low"` Low effort. Favors latency over reasoning depth. - `"medium"` Medium effort. Balances latency and reasoning depth. - `"high"` High effort. Favors reasoning depth. - `"xhigh"` Extra-high effort. Not all models accept this level. - `"max"` Maximum effort. Favors reasoning depth over latency. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. On update, `model` is whole-object replacement — omitting inference_geo clears it. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. Defaults to `standard`. - `"standard"` - `"fast"` - `name: str` Human-readable name for the agent. minLength: 1, maxLength: 256 - `description: Optional[str]` Description of what the agent does. maxLength: 2048 - `mcp_servers: Optional[Iterable[BetaManagedAgentsURLMCPServerParams]]` MCP servers this agent connects to. Maximum 20. Names must be unique within the array. Every server must be referenced by an `mcp_toolset` in `tools`; unreferenced servers are rejected. See the [MCP connector guide](https://platform.claude.com/docs/en/managed-agents/mcp-connector?sdk_languages=python). - `type: Literal["url"]` - `name: str` Unique name for this server, referenced by mcp_toolset configurations. 1-255 characters. minLength: 1, maxLength: 255 - `url: str` Endpoint URL for the MCP server. maxLength: 2048 - `metadata: Optional[Dict[str, str]]` Arbitrary key-value metadata. Maximum 16 pairs, keys up to 64 chars, values up to 512 chars. - `multiagent: Optional[BetaManagedAgentsMultiagentParams]` Multiagent orchestration configuration. - `class BetaManagedAgentsMultiagentCoordinatorParams` A coordinator topology: the session's primary thread orchestrates work by spawning session threads, each running an agent drawn from the `agents` roster. - `type: Literal["coordinator"]` - `agents: List[BetaManagedAgentsMultiagentRosterEntryParams]` Agents the coordinator may spawn as session threads. 1–20 entries. Each entry is an agent ID string, a versioned `{"type":"agent","id","version"}` reference, or `{"type":"self"}` to allow recursive self-invocation. Entries must reference distinct agents (after resolving `self` and string forms); at most one `self`. Referenced agents must exist, must not be archived, and must not themselves have `multiagent` set (depth limit 1). - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` - `class BetaManagedAgentsAdvisorParams` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. At most one per roster; the entry occupies the roster name `anthropic.advisor`. - `type: Literal["advisor"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 - `class BetaManagedAgentsMultiagent20261001Params` Multiagent configuration with three members, each enabled or disabled on its own. On an update, if the agent's stored `multiagent` also has type `multiagent_20261001`, this configuration is merged into the stored one, level by level, instead of replacing it. A key that the update omits keeps its stored value. A key sent as null takes its default, on create as well, so `"workflows": null` enables workflows. An object sent with a `type` other than the stored one replaces the stored object, and the keys that it omits take their defaults. A `predefined_agents` list that is sent replaces the stored list. Every object that is sent needs its `type`, and an enabled `advisor` needs its `model`. Other validation applies to the merged result. - `type: Literal["multiagent_20261001"]` - `advisor: Optional[BetaManagedAgentsMultiagentAdvisorParams]` Whether the session's primary thread can consult an advisor model. Defaults to disabled. - `class BetaManagedAgentsMultiagentAdvisorEnabledParams` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 - `class BetaManagedAgentsMultiagentAdvisorDisabledParams` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: Optional[BetaManagedAgentsMultiagentSubagentsParams]` Whether the agent can spawn session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentSubagentsEnabledParams` The agent can spawn session threads. Each thread runs a predefined agent, which is a saved agent in `predefined_agents`, or an inline agent, which the agent defines when it spawns the thread and which is not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether the agent can define inline agents when it spawns session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that this agent can spawn as session threads. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `workflows.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `class BetaManagedAgentsMultiagentSubagentsDisabledParams` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: Optional[BetaManagedAgentsMultiagentWorkflowsParams]` Whether the agent can start workflow runs. Defaults to enabled. - `class BetaManagedAgentsMultiagentWorkflowsEnabledParams` The agent can start workflow runs. Each run follows a plan, a program that the agent writes. A plan can use predefined agents, which are the saved agents in `predefined_agents`, and inline agents, which it defines itself and which are not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether a run's plan can define inline agents. Defaults to enabled. - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that a run's plan can use. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `subagents.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `class BetaManagedAgentsMultiagentWorkflowsDisabledParams` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `skills: Optional[Iterable[BetaManagedAgentsSkillParams]]` Skills available to the agent. - `class BetaManagedAgentsAnthropicSkillParams` An Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` Identifier of the Anthropic skill (e.g., "xlsx"). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 - `class BetaManagedAgentsCustomSkillParams` A user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` Tagged ID of the custom skill (e.g., "skill_01XJ5..."). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 - `system: Optional[str]` System prompt for the agent. maxLength: 100000 - `tools: Optional[Iterable[Tool]]` Tool configurations available to the agent. Maximum of 256 tools across all toolsets allowed. - `class BetaManagedAgentsAgentToolset20260401Params` Configuration for built-in agent tools. Use this to enable or disable groups of tools available to the agent. - `type: Literal["agent_toolset_20260401"]` - `configs: Optional[List[BetaManagedAgentsAgentToolConfigParams]]` Per-tool configuration overrides. - `class BetaManagedAgentsBashToolConfigParams` Configuration override for the bash tool. - `type: Optional[Literal["bash"]]` - `name: Literal["bash"]` Must be "bash". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfigParams` Configuration override for the edit tool. - `type: Optional[Literal["edit"]]` - `name: Literal["edit"]` Must be "edit". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfigParams` Configuration override for the read tool. - `type: Optional[Literal["read"]]` - `name: Literal["read"]` Must be "read". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfigParams` Configuration override for the write tool. - `type: Optional[Literal["write"]]` - `name: Literal["write"]` Must be "write". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfigParams` Configuration override for the glob tool. - `type: Optional[Literal["glob"]]` - `name: Literal["glob"]` Must be "glob". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfigParams` Configuration override for the grep tool. - `type: Optional[Literal["grep"]]` - `name: Literal["grep"]` Must be "grep". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfigParams` Configuration override for the web_fetch tool. - `type: Optional[Literal["web_fetch"]]` - `name: Literal["web_fetch"]` Must be "web_fetch". - `allowed_domains: Optional[List[str]]` Only fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `max_content_tokens: Optional[int]` Maximum number of tokens of fetched text content to include in context per call. Does not apply to binary content such as PDFs. format: int32 - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSourcesParams]` Which sources contribute URLs the tool may fetch. Omit to allow every source. - `client_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which custom tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be a custom tool in the same tools array. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be "web_search" or "web_fetch". - `user_input: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceUserInput, null]]` Whether URLs in the text of user messages may be fetched: "all" (the default) or "none". - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `class BetaManagedAgentsWebSearchToolConfigParams` Configuration override for the web_search tool. - `type: Optional[Literal["web_search"]]` - `name: Literal["web_search"]` Must be "web_search". - `allowed_domains: Optional[List[str]]` Only return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: Optional[BetaManagedAgentsAgentToolsetDefaultConfigParams]` Default configuration applied to all tools in this set. - `enabled: Optional[bool]` Whether tools are enabled and available to Claude by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolsetParams` Configuration for tools from an MCP server defined in `mcp_servers`. - `type: Literal["mcp_toolset"]` - `mcp_server_name: str` Name of the MCP server. Must match a server name from the mcp_servers array. 1-255 characters. minLength: 1, maxLength: 255 - `configs: Optional[List[BetaManagedAgentsMCPToolConfigParams]]` Per-tool configuration overrides. - `name: str` Name of the MCP tool to configure. 1-128 characters. minLength: 1, maxLength: 128 - `enabled: Optional[bool]` Whether this tool is enabled. Overrides the `default_config` setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Overrides the `default_config` setting. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: Optional[BetaManagedAgentsMCPToolsetDefaultConfigParams]` Default configuration for all tools from this server. - `enabled: Optional[bool]` Whether tools are enabled by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools from this server. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsCustomToolParams` A custom tool that is executed by the API client rather than the agent. When the agent calls this tool, an `agent.custom_tool_use` event is emitted and the session goes idle, waiting for the client to provide the result via a `user.custom_tool_result` event. - `type: Literal["custom"]` - `description: str` Description of what the tool does, shown to the agent to help it decide when to use the tool. minLength: 1 - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema defining the expected input parameters for the tool. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` Unique name for the tool. 1-128 characters; letters, digits, underscores, and hyphens. minLength: 1, maxLength: 128 - `betas: Optional[List[AnthropicBetaParam]]` (header parameter) Optional header to specify the beta version(s) you want to use. - `str` - `"message-batches-2024-09-24"` - `"prompt-caching-2024-07-31"` - `"computer-use-2024-10-22"` - `"computer-use-2025-01-24"` - `"pdfs-2024-09-25"` - `"token-counting-2024-11-01"` - `"token-efficient-tools-2025-02-19"` - `"output-128k-2025-02-19"` - `"files-api-2025-04-14"` - `"mcp-client-2025-04-04"` - `"mcp-client-2025-11-20"` - `"dev-full-thinking-2025-05-14"` - `"interleaved-thinking-2025-05-14"` - `"code-execution-2025-05-22"` - `"extended-cache-ttl-2025-04-11"` - `"context-1m-2025-08-07"` - `"context-management-2025-06-27"` - `"model-context-window-exceeded-2025-08-26"` - `"skills-2025-10-02"` - `"fast-mode-2026-02-01"` - `"output-300k-2026-03-24"` - `"user-profiles-2026-03-24"` - `"user-profiles-2026-08-18"` - `"user-profiles-2026-09-04"` - `"advisor-tool-2026-03-01"` - `"managed-agents-2026-04-01"` - `"cache-diagnosis-2026-04-07"` - `"dreaming-2026-04-21"` - `"thinking-token-count-2026-05-13"` - `"server-side-fallback-2026-06-01"` - `"server-side-fallback-2026-07-01"` - `"fallback-credit-2026-06-01"` - `"fallback-credit-2026-07-01"` - `"agent-memory-2026-07-22"` - `"mid-conversation-tool-changes-2026-07-01"` - `"compact-2026-01-12"` - `"computer-use-2025-11-24"` - `"mcp-tunnels-2026-06-22"` - `"structured-outputs-2025-11-13"` - `"task-budgets-2026-03-13"` - `"thinking-display-updates-2026-08-18"` - `"ce-user-management-2026-07-13"` - `"mid-conversation-output-config-2026-07-01"` - `"thinking-binding-controls-2026-08-01"` - `"mid-conversation-system-clear-at-2026-08-21"` - `"compact-2026-09-04"` - `"inline-tools-2026-09-15"` - `"mcp-client-2026-09-15"` - `"ce-plugins-2026-09-01"` - `"spend-limit-reads-2026-09-26"` - `workspace_id: Optional[str]` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `class BetaManagedAgentsAgent` A Managed Agents `agent`. - `type: Literal["agent"]` - `id: str` - `archived_at: Optional[datetime]` When the agent was archived. Null if not archived. format: date-time - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `metadata: Dict[str, str]` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagent]` Multiagent orchestration configuration. Null when the agent is single-threaded. - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `version: int` The agent's current version. Starts at 1 and increments when the agent is modified. format: int32 ### Example ```python import os from anthropic import Anthropic client = Anthropic( api_key=os.environ.get( "ANTHROPIC_API_KEY" ), # This is the default and can be omitted ) beta_managed_agents_agent = client.beta.agents.create( model="claude-opus-5", name="My First Agent", ) print(beta_managed_agents_agent.id) ``` #### Response (200) ```json { "id": "agent_011CZkYpogX7uDKUyvBTophP", "archived_at": null, "created_at": "2026-03-15T10:00:00Z", "description": "A general-purpose starter agent.", "mcp_servers": [ { "name": "example-mcp", "type": "url", "url": "https://example-server.modelcontextprotocol.io/sse" } ], "metadata": { "foo": "bar" }, "model": { "id": "claude-opus-5", "effort": { "type": "low" }, "inference_geo": "inference_geo", "speed": "standard" }, "multiagent": { "advisor": { "type": "disabled" }, "subagents": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" }, "type": "multiagent_20261001", "workflows": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" } }, "name": "My First Agent", "skills": [ { "skill_id": "xlsx", "type": "anthropic", "version": "1" }, { "skill_id": "skill_011CZkZFNu9hAbo3jZPRgTmx", "type": "custom", "version": "2" } ], "system": "You are a general-purpose agent that can research, write code, run commands, and use connected tools to complete the user's task end to end.", "tools": [ { "configs": [ { "enabled": true, "name": "bash", "permission_policy": { "type": "always_allow" }, "type": "bash" } ], "default_config": { "enabled": true, "permission_policy": { "type": "always_ask" } }, "type": "agent_toolset_20260401" } ], "type": "agent", "updated_at": "2026-03-15T10:00:00Z", "version": 1 } ``` ## List Agents `beta.agents.list(**kwargs) -> SyncPageCursor[BetaManagedAgentsAgent]` **GET** `/v1/agents` List Agents ### Parameters - `created_at_gte: Optional[Union[str, datetime]]` (query parameter) Return agents created at or after this time (inclusive). format: date-time - `created_at_lte: Optional[Union[str, datetime]]` (query parameter) Return agents created at or before this time (inclusive). format: date-time - `include_archived: Optional[bool]` (query parameter) Include archived agents in results. Defaults to false. - `limit: Optional[int]` (query parameter) Maximum results per page. Default 20, maximum 100. format: int32 - `page: Optional[str]` (query parameter) Opaque pagination cursor from a previous response. - `betas: Optional[List[AnthropicBetaParam]]` (header parameter) Optional header to specify the beta version(s) you want to use. - `str` - `"message-batches-2024-09-24"` - `"prompt-caching-2024-07-31"` - `"computer-use-2024-10-22"` - `"computer-use-2025-01-24"` - `"pdfs-2024-09-25"` - `"token-counting-2024-11-01"` - `"token-efficient-tools-2025-02-19"` - `"output-128k-2025-02-19"` - `"files-api-2025-04-14"` - `"mcp-client-2025-04-04"` - `"mcp-client-2025-11-20"` - `"dev-full-thinking-2025-05-14"` - `"interleaved-thinking-2025-05-14"` - `"code-execution-2025-05-22"` - `"extended-cache-ttl-2025-04-11"` - `"context-1m-2025-08-07"` - `"context-management-2025-06-27"` - `"model-context-window-exceeded-2025-08-26"` - `"skills-2025-10-02"` - `"fast-mode-2026-02-01"` - `"output-300k-2026-03-24"` - `"user-profiles-2026-03-24"` - `"user-profiles-2026-08-18"` - `"user-profiles-2026-09-04"` - `"advisor-tool-2026-03-01"` - `"managed-agents-2026-04-01"` - `"cache-diagnosis-2026-04-07"` - `"dreaming-2026-04-21"` - `"thinking-token-count-2026-05-13"` - `"server-side-fallback-2026-06-01"` - `"server-side-fallback-2026-07-01"` - `"fallback-credit-2026-06-01"` - `"fallback-credit-2026-07-01"` - `"agent-memory-2026-07-22"` - `"mid-conversation-tool-changes-2026-07-01"` - `"compact-2026-01-12"` - `"computer-use-2025-11-24"` - `"mcp-tunnels-2026-06-22"` - `"structured-outputs-2025-11-13"` - `"task-budgets-2026-03-13"` - `"thinking-display-updates-2026-08-18"` - `"ce-user-management-2026-07-13"` - `"mid-conversation-output-config-2026-07-01"` - `"thinking-binding-controls-2026-08-01"` - `"mid-conversation-system-clear-at-2026-08-21"` - `"compact-2026-09-04"` - `"inline-tools-2026-09-15"` - `"mcp-client-2026-09-15"` - `"ce-plugins-2026-09-01"` - `"spend-limit-reads-2026-09-26"` - `workspace_id: Optional[str]` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `class BetaManagedAgentsAgent` A Managed Agents `agent`. - `type: Literal["agent"]` - `id: str` - `archived_at: Optional[datetime]` When the agent was archived. Null if not archived. format: date-time - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `metadata: Dict[str, str]` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagent]` Multiagent orchestration configuration. Null when the agent is single-threaded. - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `version: int` The agent's current version. Starts at 1 and increments when the agent is modified. format: int32 ### Example ```python import os from anthropic import Anthropic client = Anthropic( api_key=os.environ.get( "ANTHROPIC_API_KEY" ), # This is the default and can be omitted ) page = client.beta.agents.list() page = page.data[0] print(page.id) ``` #### Response (200) ```json { "data": [ { "id": "agent_011CZkYpogX7uDKUyvBTophP", "archived_at": null, "created_at": "2026-03-15T10:00:00Z", "description": "A general-purpose starter agent.", "mcp_servers": [ { "name": "example-mcp", "type": "url", "url": "https://example-server.modelcontextprotocol.io/sse" } ], "metadata": { "foo": "bar" }, "model": { "id": "claude-opus-5", "effort": { "type": "low" }, "inference_geo": "inference_geo", "speed": "standard" }, "multiagent": { "advisor": { "type": "disabled" }, "subagents": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" }, "type": "multiagent_20261001", "workflows": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" } }, "name": "My First Agent", "skills": [ { "skill_id": "xlsx", "type": "anthropic", "version": "1" }, { "skill_id": "skill_011CZkZFNu9hAbo3jZPRgTmx", "type": "custom", "version": "2" } ], "system": "You are a general-purpose agent that can research, write code, run commands, and use connected tools to complete the user's task end to end.", "tools": [ { "configs": [ { "enabled": true, "name": "bash", "permission_policy": { "type": "always_allow" }, "type": "bash" } ], "default_config": { "enabled": true, "permission_policy": { "type": "always_ask" } }, "type": "agent_toolset_20260401" } ], "type": "agent", "updated_at": "2026-03-15T10:00:00Z", "version": 1 } ], "next_page": "next_page" } ``` ## Get Agent `beta.agents.retrieve(agent_id, **kwargs) -> BetaManagedAgentsAgent` **GET** `/v1/agents/{agent_id}` Get Agent ### Parameters - `agent_id: str` (path parameter) Unique identifier of the agent to retrieve. - `version: Optional[int]` (query parameter) Agent version. Omit for the most recent version. Must be at least 1 if specified. format: int32 - `betas: Optional[List[AnthropicBetaParam]]` (header parameter) Optional header to specify the beta version(s) you want to use. - `str` - `"message-batches-2024-09-24"` - `"prompt-caching-2024-07-31"` - `"computer-use-2024-10-22"` - `"computer-use-2025-01-24"` - `"pdfs-2024-09-25"` - `"token-counting-2024-11-01"` - `"token-efficient-tools-2025-02-19"` - `"output-128k-2025-02-19"` - `"files-api-2025-04-14"` - `"mcp-client-2025-04-04"` - `"mcp-client-2025-11-20"` - `"dev-full-thinking-2025-05-14"` - `"interleaved-thinking-2025-05-14"` - `"code-execution-2025-05-22"` - `"extended-cache-ttl-2025-04-11"` - `"context-1m-2025-08-07"` - `"context-management-2025-06-27"` - `"model-context-window-exceeded-2025-08-26"` - `"skills-2025-10-02"` - `"fast-mode-2026-02-01"` - `"output-300k-2026-03-24"` - `"user-profiles-2026-03-24"` - `"user-profiles-2026-08-18"` - `"user-profiles-2026-09-04"` - `"advisor-tool-2026-03-01"` - `"managed-agents-2026-04-01"` - `"cache-diagnosis-2026-04-07"` - `"dreaming-2026-04-21"` - `"thinking-token-count-2026-05-13"` - `"server-side-fallback-2026-06-01"` - `"server-side-fallback-2026-07-01"` - `"fallback-credit-2026-06-01"` - `"fallback-credit-2026-07-01"` - `"agent-memory-2026-07-22"` - `"mid-conversation-tool-changes-2026-07-01"` - `"compact-2026-01-12"` - `"computer-use-2025-11-24"` - `"mcp-tunnels-2026-06-22"` - `"structured-outputs-2025-11-13"` - `"task-budgets-2026-03-13"` - `"thinking-display-updates-2026-08-18"` - `"ce-user-management-2026-07-13"` - `"mid-conversation-output-config-2026-07-01"` - `"thinking-binding-controls-2026-08-01"` - `"mid-conversation-system-clear-at-2026-08-21"` - `"compact-2026-09-04"` - `"inline-tools-2026-09-15"` - `"mcp-client-2026-09-15"` - `"ce-plugins-2026-09-01"` - `"spend-limit-reads-2026-09-26"` - `workspace_id: Optional[str]` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `class BetaManagedAgentsAgent` A Managed Agents `agent`. - `type: Literal["agent"]` - `id: str` - `archived_at: Optional[datetime]` When the agent was archived. Null if not archived. format: date-time - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `metadata: Dict[str, str]` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagent]` Multiagent orchestration configuration. Null when the agent is single-threaded. - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `version: int` The agent's current version. Starts at 1 and increments when the agent is modified. format: int32 ### Example ```python import os from anthropic import Anthropic client = Anthropic( api_key=os.environ.get( "ANTHROPIC_API_KEY" ), # This is the default and can be omitted ) beta_managed_agents_agent = client.beta.agents.retrieve( agent_id="agent_011CZkYpogX7uDKUyvBTophP", ) print(beta_managed_agents_agent.id) ``` #### Response (200) ```json { "id": "agent_011CZkYpogX7uDKUyvBTophP", "archived_at": null, "created_at": "2026-03-15T10:00:00Z", "description": "A general-purpose starter agent.", "mcp_servers": [ { "name": "example-mcp", "type": "url", "url": "https://example-server.modelcontextprotocol.io/sse" } ], "metadata": { "foo": "bar" }, "model": { "id": "claude-opus-5", "effort": { "type": "low" }, "inference_geo": "inference_geo", "speed": "standard" }, "multiagent": { "advisor": { "type": "disabled" }, "subagents": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" }, "type": "multiagent_20261001", "workflows": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" } }, "name": "My First Agent", "skills": [ { "skill_id": "xlsx", "type": "anthropic", "version": "1" }, { "skill_id": "skill_011CZkZFNu9hAbo3jZPRgTmx", "type": "custom", "version": "2" } ], "system": "You are a general-purpose agent that can research, write code, run commands, and use connected tools to complete the user's task end to end.", "tools": [ { "configs": [ { "enabled": true, "name": "bash", "permission_policy": { "type": "always_allow" }, "type": "bash" } ], "default_config": { "enabled": true, "permission_policy": { "type": "always_ask" } }, "type": "agent_toolset_20260401" } ], "type": "agent", "updated_at": "2026-03-15T10:00:00Z", "version": 1 } ``` ## Update Agent `beta.agents.update(agent_id, **kwargs) -> BetaManagedAgentsAgent` **POST** `/v1/agents/{agent_id}` Update Agent ### Parameters - `agent_id: str` (path parameter) Unique identifier of the agent to update. - `description: Optional[str]` Description. Omit to preserve; send empty string or null to clear. maxLength: 2048 - `mcp_servers: Optional[Iterable[BetaManagedAgentsURLMCPServerParams]]` MCP servers. Full replacement. Omit to preserve; send empty array or `null` to clear. Names must be unique. Maximum 20. Every server must be referenced by an `mcp_toolset` in the agent's resulting `tools`; unreferenced servers are rejected. See the [MCP connector guide](https://platform.claude.com/docs/en/managed-agents/mcp-connector?sdk_languages=python). - `type: Literal["url"]` - `name: str` Unique name for this server, referenced by mcp_toolset configurations. 1-255 characters. minLength: 1, maxLength: 255 - `url: str` Endpoint URL for the MCP server. maxLength: 2048 - `metadata: Optional[Dict[str, Optional[str]]]` Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omit the field to preserve. The stored bag is limited to 16 keys (up to 64 chars each) with values up to 512 chars. - `model: Optional[Model]` Model identifier. Accepts the [model string](https://platform.claude.com/docs/en/about-claude/models/overview?sdk_languages=python#latest-models-comparison), e.g. `claude-opus-5`, or a `model_config` object for additional configuration control. Omit to preserve. Cannot be cleared. - `Union[Literal["claude-haiku-5-5", "claude-sonnet-5-5", "claude-opus-5-5", 14 more], str]` - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `class BetaManagedAgentsModelConfigParams` An object that defines additional configuration control over model use - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. Accepts a bare level string (`"high"`) or `{"type": "high"}`. On create, omitting it resolves the per-model default; on update, omitting it leaves the stored value unchanged. - `"low"` Low effort. Favors latency over reasoning depth. - `"medium"` Medium effort. Balances latency and reasoning depth. - `"high"` High effort. Favors reasoning depth. - `"xhigh"` Extra-high effort. Not all models accept this level. - `"max"` Maximum effort. Favors reasoning depth over latency. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. On update, `model` is whole-object replacement — omitting inference_geo clears it. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. Defaults to `standard`. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagentParams]` Multiagent orchestration configuration. Full replacement. Omit to preserve; send null to clear. - `class BetaManagedAgentsMultiagentCoordinatorParams` A coordinator topology: the session's primary thread orchestrates work by spawning session threads, each running an agent drawn from the `agents` roster. - `type: Literal["coordinator"]` - `agents: List[BetaManagedAgentsMultiagentRosterEntryParams]` Agents the coordinator may spawn as session threads. 1–20 entries. Each entry is an agent ID string, a versioned `{"type":"agent","id","version"}` reference, or `{"type":"self"}` to allow recursive self-invocation. Entries must reference distinct agents (after resolving `self` and string forms); at most one `self`. Referenced agents must exist, must not be archived, and must not themselves have `multiagent` set (depth limit 1). - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` - `class BetaManagedAgentsAdvisorParams` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. At most one per roster; the entry occupies the roster name `anthropic.advisor`. - `type: Literal["advisor"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 - `class BetaManagedAgentsMultiagent20261001Params` Multiagent configuration with three members, each enabled or disabled on its own. On an update, if the agent's stored `multiagent` also has type `multiagent_20261001`, this configuration is merged into the stored one, level by level, instead of replacing it. A key that the update omits keeps its stored value. A key sent as null takes its default, on create as well, so `"workflows": null` enables workflows. An object sent with a `type` other than the stored one replaces the stored object, and the keys that it omits take their defaults. A `predefined_agents` list that is sent replaces the stored list. Every object that is sent needs its `type`, and an enabled `advisor` needs its `model`. Other validation applies to the merged result. - `type: Literal["multiagent_20261001"]` - `advisor: Optional[BetaManagedAgentsMultiagentAdvisorParams]` Whether the session's primary thread can consult an advisor model. Defaults to disabled. - `class BetaManagedAgentsMultiagentAdvisorEnabledParams` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 - `class BetaManagedAgentsMultiagentAdvisorDisabledParams` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: Optional[BetaManagedAgentsMultiagentSubagentsParams]` Whether the agent can spawn session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentSubagentsEnabledParams` The agent can spawn session threads. Each thread runs a predefined agent, which is a saved agent in `predefined_agents`, or an inline agent, which the agent defines when it spawns the thread and which is not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether the agent can define inline agents when it spawns session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that this agent can spawn as session threads. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `workflows.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `class BetaManagedAgentsMultiagentSubagentsDisabledParams` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: Optional[BetaManagedAgentsMultiagentWorkflowsParams]` Whether the agent can start workflow runs. Defaults to enabled. - `class BetaManagedAgentsMultiagentWorkflowsEnabledParams` The agent can start workflow runs. Each run follows a plan, a program that the agent writes. A plan can use predefined agents, which are the saved agents in `predefined_agents`, and inline agents, which it defines itself and which are not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether a run's plan can define inline agents. Defaults to enabled. - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that a run's plan can use. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `subagents.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `class BetaManagedAgentsMultiagentWorkflowsDisabledParams` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: Optional[str]` Human-readable name. Must be non-empty. Omit to preserve. Cannot be cleared. maxLength: 256 - `skills: Optional[Iterable[BetaManagedAgentsSkillParams]]` Skills. Full replacement. Omit to preserve; send empty array or null to clear. - `class BetaManagedAgentsAnthropicSkillParams` An Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` Identifier of the Anthropic skill (e.g., "xlsx"). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 - `class BetaManagedAgentsCustomSkillParams` A user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` Tagged ID of the custom skill (e.g., "skill_01XJ5..."). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 - `system: Optional[str]` System prompt. Omit to preserve; send empty string or null to clear. maxLength: 100000 - `tools: Optional[Iterable[Tool]]` Tool configurations available to the agent. Full replacement. Omit to preserve; send empty array or null to clear. Maximum of 256 tools across all toolsets allowed. - `class BetaManagedAgentsAgentToolset20260401Params` Configuration for built-in agent tools. Use this to enable or disable groups of tools available to the agent. - `type: Literal["agent_toolset_20260401"]` - `configs: Optional[List[BetaManagedAgentsAgentToolConfigParams]]` Per-tool configuration overrides. - `class BetaManagedAgentsBashToolConfigParams` Configuration override for the bash tool. - `type: Optional[Literal["bash"]]` - `name: Literal["bash"]` Must be "bash". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfigParams` Configuration override for the edit tool. - `type: Optional[Literal["edit"]]` - `name: Literal["edit"]` Must be "edit". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfigParams` Configuration override for the read tool. - `type: Optional[Literal["read"]]` - `name: Literal["read"]` Must be "read". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfigParams` Configuration override for the write tool. - `type: Optional[Literal["write"]]` - `name: Literal["write"]` Must be "write". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfigParams` Configuration override for the glob tool. - `type: Optional[Literal["glob"]]` - `name: Literal["glob"]` Must be "glob". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfigParams` Configuration override for the grep tool. - `type: Optional[Literal["grep"]]` - `name: Literal["grep"]` Must be "grep". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfigParams` Configuration override for the web_fetch tool. - `type: Optional[Literal["web_fetch"]]` - `name: Literal["web_fetch"]` Must be "web_fetch". - `allowed_domains: Optional[List[str]]` Only fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `max_content_tokens: Optional[int]` Maximum number of tokens of fetched text content to include in context per call. Does not apply to binary content such as PDFs. format: int32 - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSourcesParams]` Which sources contribute URLs the tool may fetch. Omit to allow every source. - `client_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which custom tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be a custom tool in the same tools array. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be "web_search" or "web_fetch". - `user_input: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceUserInput, null]]` Whether URLs in the text of user messages may be fetched: "all" (the default) or "none". - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `class BetaManagedAgentsWebSearchToolConfigParams` Configuration override for the web_search tool. - `type: Optional[Literal["web_search"]]` - `name: Literal["web_search"]` Must be "web_search". - `allowed_domains: Optional[List[str]]` Only return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: Optional[BetaManagedAgentsAgentToolsetDefaultConfigParams]` Default configuration applied to all tools in this set. - `enabled: Optional[bool]` Whether tools are enabled and available to Claude by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolsetParams` Configuration for tools from an MCP server defined in `mcp_servers`. - `type: Literal["mcp_toolset"]` - `mcp_server_name: str` Name of the MCP server. Must match a server name from the mcp_servers array. 1-255 characters. minLength: 1, maxLength: 255 - `configs: Optional[List[BetaManagedAgentsMCPToolConfigParams]]` Per-tool configuration overrides. - `name: str` Name of the MCP tool to configure. 1-128 characters. minLength: 1, maxLength: 128 - `enabled: Optional[bool]` Whether this tool is enabled. Overrides the `default_config` setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Overrides the `default_config` setting. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: Optional[BetaManagedAgentsMCPToolsetDefaultConfigParams]` Default configuration for all tools from this server. - `enabled: Optional[bool]` Whether tools are enabled by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools from this server. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsCustomToolParams` A custom tool that is executed by the API client rather than the agent. When the agent calls this tool, an `agent.custom_tool_use` event is emitted and the session goes idle, waiting for the client to provide the result via a `user.custom_tool_result` event. - `type: Literal["custom"]` - `description: str` Description of what the tool does, shown to the agent to help it decide when to use the tool. minLength: 1 - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema defining the expected input parameters for the tool. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` Unique name for the tool. 1-128 characters; letters, digits, underscores, and hyphens. minLength: 1, maxLength: 128 - `version: Optional[int]` The agent's current version, used to prevent concurrent overwrites. Obtain this value from a create or retrieve response. Must be at least 1 if specified. When supplied, the request fails if it does not match the server's current version; omit to apply the update unconditionally. format: int32 - `betas: Optional[List[AnthropicBetaParam]]` (header parameter) Optional header to specify the beta version(s) you want to use. - `str` - `"message-batches-2024-09-24"` - `"prompt-caching-2024-07-31"` - `"computer-use-2024-10-22"` - `"computer-use-2025-01-24"` - `"pdfs-2024-09-25"` - `"token-counting-2024-11-01"` - `"token-efficient-tools-2025-02-19"` - `"output-128k-2025-02-19"` - `"files-api-2025-04-14"` - `"mcp-client-2025-04-04"` - `"mcp-client-2025-11-20"` - `"dev-full-thinking-2025-05-14"` - `"interleaved-thinking-2025-05-14"` - `"code-execution-2025-05-22"` - `"extended-cache-ttl-2025-04-11"` - `"context-1m-2025-08-07"` - `"context-management-2025-06-27"` - `"model-context-window-exceeded-2025-08-26"` - `"skills-2025-10-02"` - `"fast-mode-2026-02-01"` - `"output-300k-2026-03-24"` - `"user-profiles-2026-03-24"` - `"user-profiles-2026-08-18"` - `"user-profiles-2026-09-04"` - `"advisor-tool-2026-03-01"` - `"managed-agents-2026-04-01"` - `"cache-diagnosis-2026-04-07"` - `"dreaming-2026-04-21"` - `"thinking-token-count-2026-05-13"` - `"server-side-fallback-2026-06-01"` - `"server-side-fallback-2026-07-01"` - `"fallback-credit-2026-06-01"` - `"fallback-credit-2026-07-01"` - `"agent-memory-2026-07-22"` - `"mid-conversation-tool-changes-2026-07-01"` - `"compact-2026-01-12"` - `"computer-use-2025-11-24"` - `"mcp-tunnels-2026-06-22"` - `"structured-outputs-2025-11-13"` - `"task-budgets-2026-03-13"` - `"thinking-display-updates-2026-08-18"` - `"ce-user-management-2026-07-13"` - `"mid-conversation-output-config-2026-07-01"` - `"thinking-binding-controls-2026-08-01"` - `"mid-conversation-system-clear-at-2026-08-21"` - `"compact-2026-09-04"` - `"inline-tools-2026-09-15"` - `"mcp-client-2026-09-15"` - `"ce-plugins-2026-09-01"` - `"spend-limit-reads-2026-09-26"` - `workspace_id: Optional[str]` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `class BetaManagedAgentsAgent` A Managed Agents `agent`. - `type: Literal["agent"]` - `id: str` - `archived_at: Optional[datetime]` When the agent was archived. Null if not archived. format: date-time - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `metadata: Dict[str, str]` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagent]` Multiagent orchestration configuration. Null when the agent is single-threaded. - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `version: int` The agent's current version. Starts at 1 and increments when the agent is modified. format: int32 ### Example ```python import os from anthropic import Anthropic client = Anthropic( api_key=os.environ.get( "ANTHROPIC_API_KEY" ), # This is the default and can be omitted ) beta_managed_agents_agent = client.beta.agents.update( agent_id="agent_011CZkYpogX7uDKUyvBTophP", description="updated", ) print(beta_managed_agents_agent.id) ``` #### Response (200) ```json { "id": "agent_011CZkYpogX7uDKUyvBTophP", "archived_at": null, "created_at": "2026-03-15T10:00:00Z", "description": "A general-purpose starter agent.", "mcp_servers": [ { "name": "example-mcp", "type": "url", "url": "https://example-server.modelcontextprotocol.io/sse" } ], "metadata": { "foo": "bar" }, "model": { "id": "claude-opus-5", "effort": { "type": "low" }, "inference_geo": "inference_geo", "speed": "standard" }, "multiagent": { "advisor": { "type": "disabled" }, "subagents": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" }, "type": "multiagent_20261001", "workflows": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" } }, "name": "My First Agent", "skills": [ { "skill_id": "xlsx", "type": "anthropic", "version": "1" }, { "skill_id": "skill_011CZkZFNu9hAbo3jZPRgTmx", "type": "custom", "version": "2" } ], "system": "You are a general-purpose agent that can research, write code, run commands, and use connected tools to complete the user's task end to end.", "tools": [ { "configs": [ { "enabled": true, "name": "bash", "permission_policy": { "type": "always_allow" }, "type": "bash" } ], "default_config": { "enabled": true, "permission_policy": { "type": "always_ask" } }, "type": "agent_toolset_20260401" } ], "type": "agent", "updated_at": "2026-03-15T10:00:00Z", "version": 1 } ``` ## Archive Agent `beta.agents.archive(agent_id, **kwargs) -> BetaManagedAgentsAgent` **POST** `/v1/agents/{agent_id}/archive` Archive Agent ### Parameters - `agent_id: str` (path parameter) Unique identifier of the agent to archive. - `betas: Optional[List[AnthropicBetaParam]]` (header parameter) Optional header to specify the beta version(s) you want to use. - `str` - `"message-batches-2024-09-24"` - `"prompt-caching-2024-07-31"` - `"computer-use-2024-10-22"` - `"computer-use-2025-01-24"` - `"pdfs-2024-09-25"` - `"token-counting-2024-11-01"` - `"token-efficient-tools-2025-02-19"` - `"output-128k-2025-02-19"` - `"files-api-2025-04-14"` - `"mcp-client-2025-04-04"` - `"mcp-client-2025-11-20"` - `"dev-full-thinking-2025-05-14"` - `"interleaved-thinking-2025-05-14"` - `"code-execution-2025-05-22"` - `"extended-cache-ttl-2025-04-11"` - `"context-1m-2025-08-07"` - `"context-management-2025-06-27"` - `"model-context-window-exceeded-2025-08-26"` - `"skills-2025-10-02"` - `"fast-mode-2026-02-01"` - `"output-300k-2026-03-24"` - `"user-profiles-2026-03-24"` - `"user-profiles-2026-08-18"` - `"user-profiles-2026-09-04"` - `"advisor-tool-2026-03-01"` - `"managed-agents-2026-04-01"` - `"cache-diagnosis-2026-04-07"` - `"dreaming-2026-04-21"` - `"thinking-token-count-2026-05-13"` - `"server-side-fallback-2026-06-01"` - `"server-side-fallback-2026-07-01"` - `"fallback-credit-2026-06-01"` - `"fallback-credit-2026-07-01"` - `"agent-memory-2026-07-22"` - `"mid-conversation-tool-changes-2026-07-01"` - `"compact-2026-01-12"` - `"computer-use-2025-11-24"` - `"mcp-tunnels-2026-06-22"` - `"structured-outputs-2025-11-13"` - `"task-budgets-2026-03-13"` - `"thinking-display-updates-2026-08-18"` - `"ce-user-management-2026-07-13"` - `"mid-conversation-output-config-2026-07-01"` - `"thinking-binding-controls-2026-08-01"` - `"mid-conversation-system-clear-at-2026-08-21"` - `"compact-2026-09-04"` - `"inline-tools-2026-09-15"` - `"mcp-client-2026-09-15"` - `"ce-plugins-2026-09-01"` - `"spend-limit-reads-2026-09-26"` - `workspace_id: Optional[str]` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. ### Returns - `class BetaManagedAgentsAgent` A Managed Agents `agent`. - `type: Literal["agent"]` - `id: str` - `archived_at: Optional[datetime]` When the agent was archived. Null if not archived. format: date-time - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `metadata: Dict[str, str]` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagent]` Multiagent orchestration configuration. Null when the agent is single-threaded. - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `version: int` The agent's current version. Starts at 1 and increments when the agent is modified. format: int32 ### Example ```python import os from anthropic import Anthropic client = Anthropic( api_key=os.environ.get( "ANTHROPIC_API_KEY" ), # This is the default and can be omitted ) beta_managed_agents_agent = client.beta.agents.archive( agent_id="agent_011CZkYpogX7uDKUyvBTophP", ) print(beta_managed_agents_agent.id) ``` #### Response (200) ```json { "id": "agent_011CZkYpogX7uDKUyvBTophP", "archived_at": null, "created_at": "2026-03-15T10:00:00Z", "description": "A general-purpose starter agent.", "mcp_servers": [ { "name": "example-mcp", "type": "url", "url": "https://example-server.modelcontextprotocol.io/sse" } ], "metadata": { "foo": "bar" }, "model": { "id": "claude-opus-5", "effort": { "type": "low" }, "inference_geo": "inference_geo", "speed": "standard" }, "multiagent": { "advisor": { "type": "disabled" }, "subagents": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" }, "type": "multiagent_20261001", "workflows": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" } }, "name": "My First Agent", "skills": [ { "skill_id": "xlsx", "type": "anthropic", "version": "1" }, { "skill_id": "skill_011CZkZFNu9hAbo3jZPRgTmx", "type": "custom", "version": "2" } ], "system": "You are a general-purpose agent that can research, write code, run commands, and use connected tools to complete the user's task end to end.", "tools": [ { "configs": [ { "enabled": true, "name": "bash", "permission_policy": { "type": "always_allow" }, "type": "bash" } ], "default_config": { "enabled": true, "permission_policy": { "type": "always_ask" } }, "type": "agent_toolset_20260401" } ], "type": "agent", "updated_at": "2026-03-15T10:00:00Z", "version": 1 } ``` ## Domain types ### Beta Managed Agents Advisor - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. ### Beta Managed Agents Agent - `class BetaManagedAgentsAgent` A Managed Agents `agent`. - `type: Literal["agent"]` - `id: str` - `archived_at: Optional[datetime]` When the agent was archived. Null if not archived. format: date-time - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `metadata: Dict[str, str]` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagent]` Multiagent orchestration configuration. Null when the agent is single-threaded. - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `version: int` The agent's current version. Starts at 1 and increments when the agent is modified. format: int32 ### Beta Managed Agents Agent Reference - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 ### Beta Managed Agents Agent Tool Config - `type BetaManagedAgentsAgentToolConfig = ...` Configuration for a specific agent tool. - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 ### Beta Managed Agents Agent Tool Config Params - `type BetaManagedAgentsAgentToolConfigParams = ...` Configuration override for a specific tool within a toolset. - `class BetaManagedAgentsBashToolConfigParams` Configuration override for the bash tool. - `type: Optional[Literal["bash"]]` - `name: Literal["bash"]` Must be "bash". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfigParams` Configuration override for the edit tool. - `type: Optional[Literal["edit"]]` - `name: Literal["edit"]` Must be "edit". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfigParams` Configuration override for the read tool. - `type: Optional[Literal["read"]]` - `name: Literal["read"]` Must be "read". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfigParams` Configuration override for the write tool. - `type: Optional[Literal["write"]]` - `name: Literal["write"]` Must be "write". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfigParams` Configuration override for the glob tool. - `type: Optional[Literal["glob"]]` - `name: Literal["glob"]` Must be "glob". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfigParams` Configuration override for the grep tool. - `type: Optional[Literal["grep"]]` - `name: Literal["grep"]` Must be "grep". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfigParams` Configuration override for the web_fetch tool. - `type: Optional[Literal["web_fetch"]]` - `name: Literal["web_fetch"]` Must be "web_fetch". - `allowed_domains: Optional[List[str]]` Only fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `max_content_tokens: Optional[int]` Maximum number of tokens of fetched text content to include in context per call. Does not apply to binary content such as PDFs. format: int32 - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSourcesParams]` Which sources contribute URLs the tool may fetch. Omit to allow every source. - `client_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which custom tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be a custom tool in the same tools array. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be "web_search" or "web_fetch". - `user_input: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceUserInput, null]]` Whether URLs in the text of user messages may be fetched: "all" (the default) or "none". - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `class BetaManagedAgentsWebSearchToolConfigParams` Configuration override for the web_search tool. - `type: Optional[Literal["web_search"]]` - `name: Literal["web_search"]` Must be "web_search". - `allowed_domains: Optional[List[str]]` Only return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 ### Beta Managed Agents Agent Toolset Default Config - `class BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Agent Toolset Default Config Params - `class BetaManagedAgentsAgentToolsetDefaultConfigParams` Default configuration for all tools in a toolset. - `enabled: Optional[bool]` Whether tools are enabled and available to Claude by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Agent Toolset20260401 - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. ### Beta Managed Agents Agent Toolset20260401 Bash Input - `class BetaManagedAgentsAgentToolset20260401BashInput` Input payload for the `bash` tool of the `agent_toolset_20260401` toolset. All fields are optional; a normal invocation supplies `command`, while `restart=true` (with no `command`) reboots the runner-side bash session. - `command: Optional[str]` Shell command to execute. Omit only when `restart` is true. - `restart: Optional[bool]` When true, restart the persistent bash session instead of running a command. Subsequent calls without `restart` will run against the fresh session. - `timeout_ms: Optional[int]` Per-call timeout in milliseconds. Defaults to the runner-wide tool timeout when omitted or zero. minimum: 0 ### Beta Managed Agents Agent Toolset20260401 Edit Input - `class BetaManagedAgentsAgentToolset20260401EditInput` Input payload for the `edit` tool. Performs a string replacement in the named file; by default `old_string` must occur exactly once. - `file_path: str` Path of the file to edit. - `new_string: str` Replacement text. - `old_string: str` Substring to find and replace. - `replace_all: Optional[bool]` When true, replace every occurrence of `old_string` instead of requiring a unique match. ### Beta Managed Agents Agent Toolset20260401 Glob Input - `class BetaManagedAgentsAgentToolset20260401GlobInput` Input payload for the `glob` tool. Returns paths matching a doublestar glob pattern, newest first. - `pattern: str` Doublestar glob pattern (e.g. `**/*.go`). Absolute patterns are only permitted when the runner is configured to allow them. - `path: Optional[str]` Optional directory root to search under. Defaults to the runner's working directory. ### Beta Managed Agents Agent Toolset20260401 Grep Input - `class BetaManagedAgentsAgentToolset20260401GrepInput` Input payload for the `grep` tool. Searches file contents for a regular expression, returning matching lines. - `pattern: str` Regular expression to search for. - `path: Optional[str]` Optional directory root to search under. Defaults to the runner's working directory. ### Beta Managed Agents Agent Toolset20260401 Params - `class BetaManagedAgentsAgentToolset20260401Params` Configuration for built-in agent tools. Use this to enable or disable groups of tools available to the agent. - `type: Literal["agent_toolset_20260401"]` - `configs: Optional[List[BetaManagedAgentsAgentToolConfigParams]]` Per-tool configuration overrides. - `class BetaManagedAgentsBashToolConfigParams` Configuration override for the bash tool. - `type: Optional[Literal["bash"]]` - `name: Literal["bash"]` Must be "bash". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfigParams` Configuration override for the edit tool. - `type: Optional[Literal["edit"]]` - `name: Literal["edit"]` Must be "edit". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfigParams` Configuration override for the read tool. - `type: Optional[Literal["read"]]` - `name: Literal["read"]` Must be "read". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfigParams` Configuration override for the write tool. - `type: Optional[Literal["write"]]` - `name: Literal["write"]` Must be "write". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfigParams` Configuration override for the glob tool. - `type: Optional[Literal["glob"]]` - `name: Literal["glob"]` Must be "glob". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfigParams` Configuration override for the grep tool. - `type: Optional[Literal["grep"]]` - `name: Literal["grep"]` Must be "grep". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfigParams` Configuration override for the web_fetch tool. - `type: Optional[Literal["web_fetch"]]` - `name: Literal["web_fetch"]` Must be "web_fetch". - `allowed_domains: Optional[List[str]]` Only fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `max_content_tokens: Optional[int]` Maximum number of tokens of fetched text content to include in context per call. Does not apply to binary content such as PDFs. format: int32 - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSourcesParams]` Which sources contribute URLs the tool may fetch. Omit to allow every source. - `client_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which custom tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be a custom tool in the same tools array. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be "web_search" or "web_fetch". - `user_input: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceUserInput, null]]` Whether URLs in the text of user messages may be fetched: "all" (the default) or "none". - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `class BetaManagedAgentsWebSearchToolConfigParams` Configuration override for the web_search tool. - `type: Optional[Literal["web_search"]]` - `name: Literal["web_search"]` Must be "web_search". - `allowed_domains: Optional[List[str]]` Only return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: Optional[BetaManagedAgentsAgentToolsetDefaultConfigParams]` Default configuration applied to all tools in this set. - `enabled: Optional[bool]` Whether tools are enabled and available to Claude by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. ### Beta Managed Agents Agent Toolset20260401 Read Input - `class BetaManagedAgentsAgentToolset20260401ReadInput` Input payload for the `read` tool. Reads file contents relative to the runner's working directory (or absolute when the runner permits). - `file_path: str` Path of the file to read. - `view_range: Optional[List[int]]` Optional `[start_line, end_line]` 1-indexed inclusive range. When omitted the entire file is returned. `end_line` of 0 or negative means "to end of file". minItems: 2, maxItems: 2 ### Beta Managed Agents Agent Toolset20260401 Write Input - `class BetaManagedAgentsAgentToolset20260401WriteInput` Input payload for the `write` tool. Writes (overwriting) the entire file contents. - `content: str` Full file contents to write. - `file_path: str` Path of the file to write. ### Beta Managed Agents Always Allow Policy - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` ### Beta Managed Agents Always Ask Policy - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` ### Beta Managed Agents Anthropic Skill - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` ### Beta Managed Agents Anthropic Skill Params - `class BetaManagedAgentsAnthropicSkillParams` An Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` Identifier of the Anthropic skill (e.g., "xlsx"). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 ### Beta Managed Agents Auto Policy - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Bash Tool Config - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Bash Tool Config Params - `class BetaManagedAgentsBashToolConfigParams` Configuration override for the bash tool. - `type: Optional[Literal["bash"]]` - `name: Literal["bash"]` Must be "bash". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Custom Skill - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` ### Beta Managed Agents Custom Skill Params - `class BetaManagedAgentsCustomSkillParams` A user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` Tagged ID of the custom skill (e.g., "skill_01XJ5..."). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 ### Beta Managed Agents Custom Tool - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` ### Beta Managed Agents Custom Tool Input Schema - `class BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` ### Beta Managed Agents Custom Tool Params - `class BetaManagedAgentsCustomToolParams` A custom tool that is executed by the API client rather than the agent. When the agent calls this tool, an `agent.custom_tool_use` event is emitted and the session goes idle, waiting for the client to provide the result via a `user.custom_tool_result` event. - `type: Literal["custom"]` - `description: str` Description of what the tool does, shown to the agent to help it decide when to use the tool. minLength: 1 - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema defining the expected input parameters for the tool. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` Unique name for the tool. 1-128 characters; letters, digits, underscores, and hyphens. minLength: 1, maxLength: 128 ### Beta Managed Agents Edit Tool Config - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Edit Tool Config Params - `class BetaManagedAgentsEditToolConfigParams` Configuration override for the edit tool. - `type: Optional[Literal["edit"]]` - `name: Literal["edit"]` Must be "edit". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Effort High - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` ### Beta Managed Agents Effort Low - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` ### Beta Managed Agents Effort Max - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` ### Beta Managed Agents Effort Medium - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` ### Beta Managed Agents Effort Xhigh - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` ### Beta Managed Agents Glob Tool Config - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Glob Tool Config Params - `class BetaManagedAgentsGlobToolConfigParams` Configuration override for the glob tool. - `type: Optional[Literal["glob"]]` - `name: Literal["glob"]` Must be "glob". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Grep Tool Config - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Grep Tool Config Params - `class BetaManagedAgentsGrepToolConfigParams` Configuration override for the grep tool. - `type: Optional[Literal["grep"]]` - `name: Literal["grep"]` Must be "grep". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents MCP Server URL Definition - `class BetaManagedAgentsMCPServerURLDefinition` URL-based MCP server connection as returned in API responses. - `type: Literal["url"]` - `name: str` - `url: str` ### Beta Managed Agents MCP Tool Config - `class BetaManagedAgentsMCPToolConfig` Resolved configuration for a specific MCP tool. - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents MCP Tool Config Params - `class BetaManagedAgentsMCPToolConfigParams` Configuration override for a specific MCP tool. - `name: str` Name of the MCP tool to configure. 1-128 characters. minLength: 1, maxLength: 128 - `enabled: Optional[bool]` Whether this tool is enabled. Overrides the `default_config` setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Overrides the `default_config` setting. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents MCP Toolset - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` ### Beta Managed Agents MCP Toolset Default Config - `class BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents MCP Toolset Default Config Params - `class BetaManagedAgentsMCPToolsetDefaultConfigParams` Default configuration for all tools from an MCP server. - `enabled: Optional[bool]` Whether tools are enabled by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools from this server. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents MCP Toolset Params - `class BetaManagedAgentsMCPToolsetParams` Configuration for tools from an MCP server defined in `mcp_servers`. - `type: Literal["mcp_toolset"]` - `mcp_server_name: str` Name of the MCP server. Must match a server name from the mcp_servers array. 1-255 characters. minLength: 1, maxLength: 255 - `configs: Optional[List[BetaManagedAgentsMCPToolConfigParams]]` Per-tool configuration overrides. - `name: str` Name of the MCP tool to configure. 1-128 characters. minLength: 1, maxLength: 128 - `enabled: Optional[bool]` Whether this tool is enabled. Overrides the `default_config` setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Overrides the `default_config` setting. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `default_config: Optional[BetaManagedAgentsMCPToolsetDefaultConfigParams]` Default configuration for all tools from this server. - `enabled: Optional[bool]` Whether tools are enabled by default. Defaults to true if not specified. - `permission_policy: Optional[PermissionPolicy]` Default permission policy for tools from this server. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. ### Beta Managed Agents Model - `type BetaManagedAgentsModel = Union[Literal["claude-haiku-5-5", "claude-sonnet-5-5", "claude-opus-5-5", 14 more], str]` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` ### Beta Managed Agents Model Config - `class BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` ### Beta Managed Agents Model Config Params - `class BetaManagedAgentsModelConfigParams` An object that defines additional configuration control over model use - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. Accepts a bare level string (`"high"`) or `{"type": "high"}`. On create, omitting it resolves the per-model default; on update, omitting it leaves the stored value unchanged. - `"low"` Low effort. Favors latency over reasoning depth. - `"medium"` Medium effort. Balances latency and reasoning depth. - `"high"` High effort. Favors reasoning depth. - `"xhigh"` Extra-high effort. Not all models accept this level. - `"max"` Maximum effort. Favors reasoning depth over latency. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. On update, `model` is whole-object replacement — omitting inference_geo clears it. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. Defaults to `standard`. - `"standard"` - `"fast"` ### Beta Managed Agents Multiagent Advisor - `type BetaManagedAgentsMultiagentAdvisor = ...` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Advisor Disabled - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Advisor Disabled Params - `class BetaManagedAgentsMultiagentAdvisorDisabledParams` The agent has no advisor. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Advisor Enabled - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. ### Beta Managed Agents Multiagent Advisor Enabled Params - `class BetaManagedAgentsMultiagentAdvisorEnabledParams` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 ### Beta Managed Agents Multiagent Advisor Params - `type BetaManagedAgentsMultiagentAdvisorParams = ...` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabledParams` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 - `class BetaManagedAgentsMultiagentAdvisorDisabledParams` The agent has no advisor. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Coordinator - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. ### Beta Managed Agents Multiagent Coordinator Params - `class BetaManagedAgentsMultiagentCoordinatorParams` A coordinator topology: the session's primary thread orchestrates work by spawning session threads, each running an agent drawn from the `agents` roster. - `type: Literal["coordinator"]` - `agents: List[BetaManagedAgentsMultiagentRosterEntryParams]` Agents the coordinator may spawn as session threads. 1–20 entries. Each entry is an agent ID string, a versioned `{"type":"agent","id","version"}` reference, or `{"type":"self"}` to allow recursive self-invocation. Entries must reference distinct agents (after resolving `self` and string forms); at most one `self`. Referenced agents must exist, must not be archived, and must not themselves have `multiagent` set (depth limit 1). - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` - `class BetaManagedAgentsAdvisorParams` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. At most one per roster; the entry occupies the roster name `anthropic.advisor`. - `type: Literal["advisor"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 ### Beta Managed Agents Multiagent Inline Agents - `type BetaManagedAgentsMultiagentInlineAgents = ...` Whether the agent can define inline agents. The agent defines an inline agent itself, in a workflow run's plan or when it spawns a session thread, and the inline agent is not saved. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Inline Agents Disabled - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Inline Agents Disabled Params - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Inline Agents Enabled - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` ### Beta Managed Agents Multiagent Inline Agents Enabled Params - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` ### Beta Managed Agents Multiagent Inline Agents Params - `type BetaManagedAgentsMultiagentInlineAgentsParams = ...` Whether the agent can define inline agents. The agent defines an inline agent itself, in a workflow run's plan or when it spawns a session thread, and the inline agent is not saved. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Predefined Agent Params - `type BetaManagedAgentsMultiagentPredefinedAgentParams = ...` One agent in a `predefined_agents` list. It is an agent ID string, an `agent` reference with an optional `version`, or `self` for the agent that owns this configuration. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` ### Beta Managed Agents Multiagent Self Params - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` ### Beta Managed Agents Multiagent Subagents - `type BetaManagedAgentsMultiagentSubagents = ...` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Subagents Disabled - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Subagents Disabled Params - `class BetaManagedAgentsMultiagentSubagentsDisabledParams` The agent cannot spawn session threads. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Subagents Enabled - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 ### Beta Managed Agents Multiagent Subagents Enabled Params - `class BetaManagedAgentsMultiagentSubagentsEnabledParams` The agent can spawn session threads. Each thread runs a predefined agent, which is a saved agent in `predefined_agents`, or an inline agent, which the agent defines when it spawns the thread and which is not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether the agent can define inline agents when it spawns session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that this agent can spawn as session threads. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `workflows.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` ### Beta Managed Agents Multiagent Subagents Params - `type BetaManagedAgentsMultiagentSubagentsParams = ...` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabledParams` The agent can spawn session threads. Each thread runs a predefined agent, which is a saved agent in `predefined_agents`, or an inline agent, which the agent defines when it spawns the thread and which is not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether the agent can define inline agents when it spawns session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that this agent can spawn as session threads. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `workflows.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` - `class BetaManagedAgentsMultiagentSubagentsDisabledParams` The agent cannot spawn session threads. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Workflows - `type BetaManagedAgentsMultiagentWorkflows = ...` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Workflows Disabled - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Workflows Disabled Params - `class BetaManagedAgentsMultiagentWorkflowsDisabledParams` The agent cannot start workflow runs. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent Workflows Enabled - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 ### Beta Managed Agents Multiagent Workflows Enabled Params - `class BetaManagedAgentsMultiagentWorkflowsEnabledParams` The agent can start workflow runs. Each run follows a plan, a program that the agent writes. A plan can use predefined agents, which are the saved agents in `predefined_agents`, and inline agents, which it defines itself and which are not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether a run's plan can define inline agents. Defaults to enabled. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that a run's plan can use. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `subagents.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` ### Beta Managed Agents Multiagent Workflows Params - `type BetaManagedAgentsMultiagentWorkflowsParams = ...` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabledParams` The agent can start workflow runs. Each run follows a plan, a program that the agent writes. A plan can use predefined agents, which are the saved agents in `predefined_agents`, and inline agents, which it defines itself and which are not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether a run's plan can define inline agents. Defaults to enabled. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that a run's plan can use. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `subagents.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` - `class BetaManagedAgentsMultiagentWorkflowsDisabledParams` The agent cannot start workflow runs. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent20261001 - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` ### Beta Managed Agents Multiagent20261001 Params - `class BetaManagedAgentsMultiagent20261001Params` Multiagent configuration with three members, each enabled or disabled on its own. On an update, if the agent's stored `multiagent` also has type `multiagent_20261001`, this configuration is merged into the stored one, level by level, instead of replacing it. A key that the update omits keeps its stored value. A key sent as null takes its default, on create as well, so `"workflows": null` enables workflows. An object sent with a `type` other than the stored one replaces the stored object, and the keys that it omits take their defaults. A `predefined_agents` list that is sent replaces the stored list. Every object that is sent needs its `type`, and an enabled `advisor` needs its `model`. Other validation applies to the merged result. - `type: Literal["multiagent_20261001"]` - `advisor: Optional[BetaManagedAgentsMultiagentAdvisorParams]` Whether the session's primary thread can consult an advisor model. Defaults to disabled. - `class BetaManagedAgentsMultiagentAdvisorEnabledParams` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` A Claude model id. The model must be permitted as an advisor for this agent's model. minLength: 1, maxLength: 256 - `class BetaManagedAgentsMultiagentAdvisorDisabledParams` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: Optional[BetaManagedAgentsMultiagentSubagentsParams]` Whether the agent can spawn session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentSubagentsEnabledParams` The agent can spawn session threads. Each thread runs a predefined agent, which is a saved agent in `predefined_agents`, or an inline agent, which the agent defines when it spawns the thread and which is not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether the agent can define inline agents when it spawns session threads. Defaults to enabled. - `class BetaManagedAgentsMultiagentInlineAgentsEnabledParams` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabledParams` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that this agent can spawn as session threads. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `workflows.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `type: Literal["agent"]` - `id: str` The `agent` ID. minLength: 1, maxLength: 128 - `version: Optional[int]` The specific `agent` version to use. Omit to use the latest version. Must be at least 1 if specified. format: int32 - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `type: Literal["self"]` - `class BetaManagedAgentsMultiagentSubagentsDisabledParams` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: Optional[BetaManagedAgentsMultiagentWorkflowsParams]` Whether the agent can start workflow runs. Defaults to enabled. - `class BetaManagedAgentsMultiagentWorkflowsEnabledParams` The agent can start workflow runs. Each run follows a plan, a program that the agent writes. A plan can use predefined agents, which are the saved agents in `predefined_agents`, and inline agents, which it defines itself and which are not saved. If `inline_agents` is disabled, `predefined_agents` must name at least one agent. - `type: Literal["enabled"]` - `inline_agents: Optional[BetaManagedAgentsMultiagentInlineAgentsParams]` Whether a run's plan can define inline agents. Defaults to enabled. - `predefined_agents: Optional[List[BetaManagedAgentsMultiagentPredefinedAgentParams]]` Predefined agents that a run's plan can use. At most 20. Defaults to null. Null and an empty list both mean no predefined agents. This list is separate from `subagents.predefined_agents`, and an agent in one list is not added to the other. - `str` - `class BetaManagedAgentsAgentParams` Specification for an Agent. Provide a specific `version` or use the short-form `agent="agent_id"` for the most recent version - `class BetaManagedAgentsMultiagentSelfParams` Sentinel roster entry meaning "the agent that owns this configuration". Resolved server-side to a concrete agent reference. - `class BetaManagedAgentsMultiagentWorkflowsDisabledParams` The agent cannot start workflow runs. - `type: Literal["disabled"]` ### Beta Managed Agents Read Tool Config - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Read Tool Config Params - `class BetaManagedAgentsReadToolConfigParams` Configuration override for the read tool. - `type: Optional[Literal["read"]]` - `name: Literal["read"]` Must be "read". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Session Thread Agent - `class BetaManagedAgentsSessionThreadAgent` Resolved `agent` definition for a single `session_thread`. Snapshot of the agent at thread creation time. The multiagent roster is not repeated here; read it from `Session.agent`. - `type: Literal["agent"]` - `id: str` - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `version: int` format: int32 ### Beta Managed Agents Skill Params - `type BetaManagedAgentsSkillParams = ...` Skill to load in the session container. - `class BetaManagedAgentsAnthropicSkillParams` An Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` Identifier of the Anthropic skill (e.g., "xlsx"). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 - `class BetaManagedAgentsCustomSkillParams` A user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` Tagged ID of the custom skill (e.g., "skill_01XJ5..."). minLength: 1, maxLength: 64 - `version: Optional[str]` Version to pin. Defaults to latest if omitted. minLength: 1, maxLength: 64 ### Beta Managed Agents URL MCP Server Params - `class BetaManagedAgentsURLMCPServerParams` URL-based MCP server connection. - `type: Literal["url"]` - `name: str` Unique name for this server, referenced by mcp_toolset configurations. 1-255 characters. minLength: 1, maxLength: 255 - `url: str` Endpoint URL for the MCP server. maxLength: 2048 ### Beta Managed Agents User Location - `class BetaManagedAgentsUserLocation` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 ### Beta Managed Agents Web Fetch Tool Config - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 ### Beta Managed Agents Web Fetch Tool Config Params - `class BetaManagedAgentsWebFetchToolConfigParams` Configuration override for the web_fetch tool. - `type: Optional[Literal["web_fetch"]]` - `name: Literal["web_fetch"]` Must be "web_fetch". - `allowed_domains: Optional[List[str]]` Only fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `max_content_tokens: Optional[int]` Maximum number of tokens of fetched text content to include in context per call. Does not apply to binary content such as PDFs. format: int32 - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `url_sources: Optional[BetaManagedAgentsWebFetchURLSourcesParams]` Which sources contribute URLs the tool may fetch. Omit to allow every source. - `client_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which custom tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be a custom tool in the same tools array. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be "web_search" or "web_fetch". - `user_input: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceUserInput, null]]` Whether URLs in the text of user messages may be fetched: "all" (the default) or "none". - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. ### Beta Managed Agents Web Fetch URL Source All - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` ### Beta Managed Agents Web Fetch URL Source Except - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 ### Beta Managed Agents Web Fetch URL Source None - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` ### Beta Managed Agents Web Fetch URL Source Only - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 ### Beta Managed Agents Web Fetch URL Source Shorthand - `type BetaManagedAgentsWebFetchURLSourceShorthand = Literal["all", "none"]` String form of a url_sources value that has no field other than its type: "all" means {"type": "all"} and "none" means {"type": "none"}. - `"all"` - `"none"` ### Beta Managed Agents Web Fetch URL Source Tool Filter - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 ### Beta Managed Agents Web Fetch URL Source Tool Filter Params - `type BetaManagedAgentsWebFetchURLSourceToolFilterParams = Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter]` Which tools' results contribute URLs that may be fetched. Accepts the string "all" or "none", or an object whose type is "all", "none", "only" or "except". Responses use the object form. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 ### Beta Managed Agents Web Fetch URL Source Tool Reference - `class BetaManagedAgentsWebFetchURLSourceToolReference` Names one tool in an only or except list. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 ### Beta Managed Agents Web Fetch URL Source User Input - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` ### Beta Managed Agents Web Fetch URL Source User Input Params - `type BetaManagedAgentsWebFetchURLSourceUserInputParams = Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Accepts the string "all" or "none", or the object {"type": "all"} or {"type": "none"}. Responses use the object form. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` ### Beta Managed Agents Web Fetch URL Sources - `class BetaManagedAgentsWebFetchURLSources` Which sources contribute URLs the web_fetch tool may fetch. A key that is null was not set and allows every URL from that source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. ### Beta Managed Agents Web Fetch URL Sources Params - `class BetaManagedAgentsWebFetchURLSourcesParams` Which sources contribute URLs the web_fetch tool may fetch. When web_fetch is limited to URLs the conversation has already shown the model (in a user message, a custom tool's result, or an earlier web_search or web_fetch result), each key narrows one of those sources and defaults to "all". Setting all three keys to "none" is rejected. - `client_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which custom tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be a custom tool in the same tools array. - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceToolFilter = ...` Which tools' results contribute URLs that may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceToolFilter, null]]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched: "all" (the default), "none", or an only or except list. Each name in a list must be "web_search" or "web_fetch". - `user_input: Optional[Union[BetaManagedAgentsWebFetchURLSourceShorthand, BetaManagedAgentsWebFetchURLSourceUserInput, null]]` Whether URLs in the text of user messages may be fetched: "all" (the default) or "none". - `Literal["all", "none"]` - `"all"` - `"none"` - `type BetaManagedAgentsWebFetchURLSourceUserInput = ...` Whether URLs in the text of user messages may be fetched. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. ### Beta Managed Agents Web Search Tool Config - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 ### Beta Managed Agents Web Search Tool Config Params - `class BetaManagedAgentsWebSearchToolConfigParams` Configuration override for the web_search tool. - `type: Optional[Literal["web_search"]]` - `name: Literal["web_search"]` Must be "web_search". - `allowed_domains: Optional[List[str]]` Only return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains. - `blocked_domains: Optional[List[str]]` Never return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains. - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 ### Beta Managed Agents Write Tool Config - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ### Beta Managed Agents Write Tool Config Params - `class BetaManagedAgentsWriteToolConfigParams` Configuration override for the write tool. - `type: Optional[Literal["write"]]` - `name: Literal["write"]` Must be "write". - `enabled: Optional[bool]` Whether this tool is enabled and available to Claude. Overrides the default_config setting. - `permission_policy: Optional[PermissionPolicy]` Permission policy for this tool. Controls whether tool calls are auto-approved or require confirmation. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` ## Agents › Versions ### List Agent Versions `beta.agents.versions.list(agent_id, **kwargs) -> SyncPageCursor[BetaManagedAgentsAgent]` **GET** `/v1/agents/{agent_id}/versions` List Agent Versions #### Parameters - `agent_id: str` (path parameter) Agent ID to list versions for. - `limit: Optional[int]` (query parameter) Maximum results per page. Default 20, maximum 100. format: int32 - `page: Optional[str]` (query parameter) Opaque pagination cursor. - `betas: Optional[List[AnthropicBetaParam]]` (header parameter) Optional header to specify the beta version(s) you want to use. - `str` - `"message-batches-2024-09-24"` - `"prompt-caching-2024-07-31"` - `"computer-use-2024-10-22"` - `"computer-use-2025-01-24"` - `"pdfs-2024-09-25"` - `"token-counting-2024-11-01"` - `"token-efficient-tools-2025-02-19"` - `"output-128k-2025-02-19"` - `"files-api-2025-04-14"` - `"mcp-client-2025-04-04"` - `"mcp-client-2025-11-20"` - `"dev-full-thinking-2025-05-14"` - `"interleaved-thinking-2025-05-14"` - `"code-execution-2025-05-22"` - `"extended-cache-ttl-2025-04-11"` - `"context-1m-2025-08-07"` - `"context-management-2025-06-27"` - `"model-context-window-exceeded-2025-08-26"` - `"skills-2025-10-02"` - `"fast-mode-2026-02-01"` - `"output-300k-2026-03-24"` - `"user-profiles-2026-03-24"` - `"user-profiles-2026-08-18"` - `"user-profiles-2026-09-04"` - `"advisor-tool-2026-03-01"` - `"managed-agents-2026-04-01"` - `"cache-diagnosis-2026-04-07"` - `"dreaming-2026-04-21"` - `"thinking-token-count-2026-05-13"` - `"server-side-fallback-2026-06-01"` - `"server-side-fallback-2026-07-01"` - `"fallback-credit-2026-06-01"` - `"fallback-credit-2026-07-01"` - `"agent-memory-2026-07-22"` - `"mid-conversation-tool-changes-2026-07-01"` - `"compact-2026-01-12"` - `"computer-use-2025-11-24"` - `"mcp-tunnels-2026-06-22"` - `"structured-outputs-2025-11-13"` - `"task-budgets-2026-03-13"` - `"thinking-display-updates-2026-08-18"` - `"ce-user-management-2026-07-13"` - `"mid-conversation-output-config-2026-07-01"` - `"thinking-binding-controls-2026-08-01"` - `"mid-conversation-system-clear-at-2026-08-21"` - `"compact-2026-09-04"` - `"inline-tools-2026-09-15"` - `"mcp-client-2026-09-15"` - `"ce-plugins-2026-09-01"` - `"spend-limit-reads-2026-09-26"` - `workspace_id: Optional[str]` (header parameter) Optional header to select the Workspace for this request. The value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`). Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace. #### Returns - `class BetaManagedAgentsAgent` A Managed Agents `agent`. - `type: Literal["agent"]` - `id: str` - `archived_at: Optional[datetime]` When the agent was archived. Null if not archived. format: date-time - `created_at: datetime` A timestamp in RFC 3339 format format: date-time - `description: Optional[str]` - `mcp_servers: List[BetaManagedAgentsMCPServerURLDefinition]` - `type: Literal["url"]` - `name: str` - `url: str` - `metadata: Dict[str, str]` - `model: BetaManagedAgentsModelConfig` Model identifier and configuration. - `id: BetaManagedAgentsModel` The model that will power your agent. See [models](https://docs.anthropic.com/en/docs/models-overview) for additional details and options. - `"claude-haiku-5-5"` Fastest model for high-volume, real-time tasks - `"claude-sonnet-5-5"` Efficient model for coding and agents - `"claude-opus-5-5"` Powerful intelligence for coding, knowledge work, and long-running agents - `"claude-fable-5-1"` Frontier intelligence for ambitious tasks across coding, scientific discovery, and enterprise workflows - `"claude-sonnet-5"` Efficient model for coding and agents - `"claude-fable-5"` Next generation of intelligence for the hardest knowledge work and coding problems - `"claude-opus-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-8"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-7"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-6"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-6"` Best combination of speed and intelligence - `"claude-haiku-4-5"` - `"claude-haiku-4-5-20251001"` - `"claude-opus-4-5"` Powerful intelligence for long-running agents and coding - `"claude-opus-4-5-20251101"` Powerful intelligence for long-running agents and coding - `"claude-sonnet-4-5"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `"claude-sonnet-4-5-20250929"` **Deprecated**: Will reach end-of-life on November 30, 2026. Please migrate to claude-sonnet-5-5. Visit https://docs.anthropic.com/en/docs/resources/model-deprecations for more information. High-performance model for agents and coding - `str` - `effort: Optional[Effort]` How hard Claude works on each inference call. One of `low`, `medium`, `high`, `xhigh`, `max`. Always present; resolved to the per-model default at save time when not supplied. - `class BetaManagedAgentsEffortLow` Low effort. Favors latency over reasoning depth. - `type: Literal["low"]` - `class BetaManagedAgentsEffortMedium` Medium effort. Balances latency and reasoning depth. - `type: Literal["medium"]` - `class BetaManagedAgentsEffortHigh` High effort. Favors reasoning depth. - `type: Literal["high"]` - `class BetaManagedAgentsEffortXhigh` Extra-high effort. Not all models accept this level. - `type: Literal["xhigh"]` - `class BetaManagedAgentsEffortMax` Maximum effort. Favors reasoning depth over latency. - `type: Literal["max"]` - `inference_geo: Optional[str]` Geographic region for model inference. When unset, requests fall through to the workspace's default_inference_geo. - `speed: Optional[Literal["standard", "fast"]]` Inference speed mode. `fast` provides significantly faster output token generation at premium pricing. Defaults to `standard`. Not all models support `fast`; invalid combinations are rejected at create time. - `"standard"` - `"fast"` - `multiagent: Optional[BetaManagedAgentsMultiagent]` Multiagent orchestration configuration. Null when the agent is single-threaded. - `class BetaManagedAgentsMultiagentCoordinator` Resolved coordinator topology with a concrete agent roster. - `type: Literal["coordinator"]` - `agents: List[Agent]` Agents the coordinator may spawn as session threads, each resolved to a specific version. - `class BetaManagedAgentsAgentReference` A resolved agent reference with a concrete version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsAdvisor` Platform advisor roster entry: a model the session's primary thread may consult mid-turn. - `type: Literal["advisor"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagent20261001` Resolved multiagent configuration with three members, each enabled or disabled on its own. - `type: Literal["multiagent_20261001"]` - `advisor: BetaManagedAgentsMultiagentAdvisor` Whether the session's primary thread can consult an advisor model. - `class BetaManagedAgentsMultiagentAdvisorEnabled` The session's primary thread can consult `model` mid-turn. - `type: Literal["enabled"]` - `model: str` The advisor model id. - `class BetaManagedAgentsMultiagentAdvisorDisabled` The agent has no advisor. - `type: Literal["disabled"]` - `subagents: BetaManagedAgentsMultiagentSubagents` Whether the agent can spawn session threads. - `class BetaManagedAgentsMultiagentSubagentsEnabled` The agent can spawn session threads. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether the agent can define inline agents, which are not saved, when it spawns session threads. - `class BetaManagedAgentsMultiagentInlineAgentsEnabled` The agent can define inline agents. - `type: Literal["enabled"]` - `class BetaManagedAgentsMultiagentInlineAgentsDisabled` The agent cannot define inline agents. - `type: Literal["disabled"]` - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that this agent can spawn as session threads, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentSubagentsDisabled` The agent cannot spawn session threads. - `type: Literal["disabled"]` - `workflows: BetaManagedAgentsMultiagentWorkflows` Whether the agent can start workflow runs. - `class BetaManagedAgentsMultiagentWorkflowsEnabled` The agent can start workflow runs. - `type: Literal["enabled"]` - `inline_agents: BetaManagedAgentsMultiagentInlineAgents` Whether a run's plan can define inline agents, which are not saved. - `predefined_agents: List[BetaManagedAgentsAgentReference]` Predefined agents, which are saved agents that a run's plan can use, each resolved to a specific version. - `type: Literal["agent"]` - `id: str` - `version: int` format: int32 - `class BetaManagedAgentsMultiagentWorkflowsDisabled` The agent cannot start workflow runs. - `type: Literal["disabled"]` - `name: str` - `skills: List[Skill]` - `class BetaManagedAgentsAnthropicSkill` A resolved Anthropic-managed skill. - `type: Literal["anthropic"]` - `skill_id: str` - `version: str` - `class BetaManagedAgentsCustomSkill` A resolved user-created custom skill. - `type: Literal["custom"]` - `skill_id: str` - `version: str` - `system: Optional[str]` - `tools: List[Tool]` - `class BetaManagedAgentsAgentToolset20260401` - `type: Literal["agent_toolset_20260401"]` - `configs: List[BetaManagedAgentsAgentToolConfig]` - `class BetaManagedAgentsBashToolConfig` Configuration for the bash tool. - `type: Literal["bash"]` - `enabled: bool` - `name: Literal["bash"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `type: Literal["always_allow"]` - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `type: Literal["always_ask"]` - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `type: Literal["auto"]` - `class BetaManagedAgentsEditToolConfig` Configuration for the edit tool. - `type: Literal["edit"]` - `enabled: bool` - `name: Literal["edit"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsReadToolConfig` Configuration for the read tool. - `type: Literal["read"]` - `enabled: bool` - `name: Literal["read"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWriteToolConfig` Configuration for the write tool. - `type: Literal["write"]` - `enabled: bool` - `name: Literal["write"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGlobToolConfig` Configuration for the glob tool. - `type: Literal["glob"]` - `enabled: bool` - `name: Literal["glob"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsGrepToolConfig` Configuration for the grep tool. - `type: Literal["grep"]` - `enabled: bool` - `name: Literal["grep"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsWebFetchToolConfig` Configuration for the web_fetch tool. - `type: Literal["web_fetch"]` - `enabled: bool` - `name: Literal["web_fetch"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `url_sources: Optional[BetaManagedAgentsWebFetchURLSources]` Which sources contribute URLs the tool may fetch, always in the object form. Null when not set, which allows every source. - `client_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which custom tools' results contribute URLs that may be fetched. Null when not set, which allows every custom tool's results. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `type: Literal["all"]` - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `type: Literal["none"]` - `class BetaManagedAgentsWebFetchURLSourceOnly` Only the named tools' results contribute URLs that may be fetched. - `type: Literal["only"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "none" to allow no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `class BetaManagedAgentsWebFetchURLSourceExcept` Every tool's results contribute URLs that may be fetched, except the named tools' results. - `type: Literal["except"]` - `tools: List[BetaManagedAgentsWebFetchURLSourceToolReference]` The tools whose results do not contribute. Between 1 and 128 entries, each with a different name. An empty list is rejected; use "all" to leave out no tool's results. - `type: Literal["tool_reference"]` Must be "tool_reference". - `name: str` Name of the tool. Compared exactly, so upper and lower case letters are different. minLength: 1, maxLength: 128 - `server_tool_results: Optional[BetaManagedAgentsWebFetchURLSourceToolFilter]` Which of the web_search and web_fetch tools' results contribute URLs that may be fetched. Null when not set, which allows both. - `user_input: Optional[BetaManagedAgentsWebFetchURLSourceUserInput]` Whether URLs in the text of user messages may be fetched. Null when not set, which allows them. - `class BetaManagedAgentsWebFetchURLSourceAll` Every URL from this source may be fetched. This is the default. - `class BetaManagedAgentsWebFetchURLSourceNone` This source contributes no URLs that may be fetched. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `max_content_tokens: Optional[int]` format: int32 - `class BetaManagedAgentsWebSearchToolConfig` Configuration for the web_search tool. - `type: Literal["web_search"]` - `enabled: bool` - `name: Literal["web_search"]` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `allowed_domains: Optional[List[str]]` - `blocked_domains: Optional[List[str]]` - `user_location: Optional[BetaManagedAgentsUserLocation]` Approximate user location for search result localization. - `type: Literal["approximate"]` Location precision. Only "approximate" is supported. - `city: Optional[str]` City name. minLength: 1, maxLength: 255 - `country: Optional[str]` Two-letter ISO 3166-1 country code, uppercase. - `region: Optional[str]` Region or state name. minLength: 1, maxLength: 255 - `timezone: Optional[str]` IANA timezone identifier, e.g. "America/Los_Angeles". minLength: 1, maxLength: 255 - `default_config: BetaManagedAgentsAgentToolsetDefaultConfig` Resolved default configuration for agent tools. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `class BetaManagedAgentsMCPToolset` - `type: Literal["mcp_toolset"]` - `configs: List[BetaManagedAgentsMCPToolConfig]` - `enabled: bool` - `name: str` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `default_config: BetaManagedAgentsMCPToolsetDefaultConfig` Resolved default configuration for all tools from an MCP server. - `enabled: bool` - `permission_policy: PermissionPolicy` Permission policy for tool execution. - `class BetaManagedAgentsAlwaysAllowPolicy` Tool calls are automatically approved without user confirmation. - `class BetaManagedAgentsAlwaysAskPolicy` Tool calls require user confirmation before execution. - `class BetaManagedAgentsAutoPolicy` The server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask. - `mcp_server_name: str` - `class BetaManagedAgentsCustomTool` A custom tool as returned in API responses. - `type: Literal["custom"]` - `description: str` - `input_schema: BetaManagedAgentsCustomToolInputSchema` JSON Schema for custom tool input parameters. - `type: Literal["object"]` - `properties: Optional[Dict[str, object]]` - `required: Optional[List[str]]` - `name: str` - `updated_at: datetime` A timestamp in RFC 3339 format format: date-time - `version: int` The agent's current version. Starts at 1 and increments when the agent is modified. format: int32 #### Example ```python import os from anthropic import Anthropic client = Anthropic( api_key=os.environ.get( "ANTHROPIC_API_KEY" ), # This is the default and can be omitted ) page = client.beta.agents.versions.list( agent_id="agent_011CZkYpogX7uDKUyvBTophP", ) page = page.data[0] print(page.id) ``` ##### Response (200) ```json { "data": [ { "id": "agent_011CZkYpogX7uDKUyvBTophP", "archived_at": null, "created_at": "2026-03-15T10:00:00Z", "description": "A general-purpose starter agent.", "mcp_servers": [ { "name": "example-mcp", "type": "url", "url": "https://example-server.modelcontextprotocol.io/sse" } ], "metadata": { "foo": "bar" }, "model": { "id": "claude-opus-5", "effort": { "type": "low" }, "inference_geo": "inference_geo", "speed": "standard" }, "multiagent": { "advisor": { "type": "disabled" }, "subagents": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" }, "type": "multiagent_20261001", "workflows": { "inline_agents": { "type": "enabled" }, "predefined_agents": [ { "id": "agent_011CZkYqphY8vELVzwCUpqiQ", "type": "agent", "version": 1 } ], "type": "enabled" } }, "name": "My First Agent", "skills": [ { "skill_id": "xlsx", "type": "anthropic", "version": "1" }, { "skill_id": "skill_011CZkZFNu9hAbo3jZPRgTmx", "type": "custom", "version": "2" } ], "system": "You are a general-purpose agent that can research, write code, run commands, and use connected tools to complete the user's task end to end.", "tools": [ { "configs": [ { "enabled": true, "name": "bash", "permission_policy": { "type": "always_allow" }, "type": "bash" } ], "default_config": { "enabled": true, "permission_policy": { "type": "always_ask" } }, "type": "agent_toolset_20260401" } ], "type": "agent", "updated_at": "2026-03-15T10:00:00Z", "version": 1 } ], "next_page": "next_page" } ```