颁发者

创建联合颁发者

beta.organization.federation.issuers.create(**kwargs) -> BetaFederationIssuer

POST/v1/organizations/federation_issuers

需要具有 org:admin 作用域的 OAuth 访问令牌，可通过 ant auth login --scope org:admin 或工作负载身份联合规则获取；不接受 Admin API 密钥。请参阅使用 Admin API 管理 WIF。

列出联合颁发者

beta.organization.federation.issuers.list(**kwargs) -> PageCursor<BetaFederationIssuer>

GET/v1/organizations/federation_issuers

获取联合颁发者

beta.organization.federation.issuers.retrieve(federation_issuer_id, **kwargs) -> BetaFederationIssuer

GET/v1/organizations/federation_issuers/{federation_issuer_id}

更新联合颁发者

beta.organization.federation.issuers.update(federation_issuer_id, **kwargs) -> BetaFederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}

归档联合颁发者

beta.organization.federation.issuers.archive(federation_issuer_id, **kwargs) -> BetaFederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

class BetaFederationIssuer { type: :federation_issuer, id, archived_at, 12 more }

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

class BetaFederationIssuerPollStatus { consecutive_failures, last_fetched_at, next_poll_at }

Status of automatic JWKS polling for a federation issuer.

Anthropic periodically fetches the issuer's signing keys in the background. These fields summarize the most recent fetches so the health of the JWKS endpoint can be monitored.

consecutive_failures: Integer

Consecutive fetch failures since the last success.

last_fetched_at: Time

When the last successful fetch completed.

formatdate-time

next_poll_at: Time

When the next fetch is scheduled. Null if paused.

formatdate-time

class BetaJWKSDiscovery { type: :discovery, ca_cert_pem, discovery_base }

JWKS via the issuer's OIDC discovery document.

type: :discovery

ca_cert_pem: String

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

discovery_base: String

Set when the discovery URL differs from issuer_url.

class BetaJWKSExplicitURL { type: :explicit_url, url, ca_cert_pem }

JWKS fetched from a fixed endpoint.

type: :explicit_url

url: String

JWKS endpoint.

minLength1

ca_cert_pem: String

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

class BetaJWKSInline { type: :inline, keys }

JWKS supplied directly; no network fetch.

type: :inline

keys: Array[Hash[Symbol, untyped]]

Inline JWK objects.

minItems1