openapi: 3.2.0 info: title: Anthropic Vaults API servers: - url: https://api.anthropic.com tags: - name: Vaults paths: /v1/vaults/{vault_id}/archive?beta=true: post: operationId: BetaArchiveVault summary: Archive Vault parameters: - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsVault' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults /v1/vaults/{vault_id}/credentials/{credential_id}/archive?beta=true: post: operationId: BetaArchiveCredential summary: Archive Credential parameters: - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv - name: credential_id in: path required: true schema: type: string description: Path parameter credential_id example: vcrd_011CZkZEMt8gZan2iYOQfSkw responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsCredential' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults /v1/vaults/{vault_id}/credentials/{credential_id}/mcp_oauth_validate?beta=true: post: operationId: BetaValidateCredential summary: Validate Credential parameters: - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv - name: credential_id in: path required: true schema: type: string description: Path parameter credential_id example: vcrd_011CZkZEMt8gZan2iYOQfSkw responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsCredentialValidation' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults /v1/vaults/{vault_id}/credentials/{credential_id}?beta=true: get: operationId: BetaGetCredential summary: Get Credential parameters: - name: x-api-key in: header required: false schema: type: string - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv - name: credential_id in: path required: true schema: type: string description: Path parameter credential_id example: vcrd_011CZkZEMt8gZan2iYOQfSkw responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsCredential' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults post: operationId: BetaUpdateCredential summary: Update Credential parameters: - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv - name: credential_id in: path required: true schema: type: string x-stainless-cli-data-alias: id description: Path parameter credential_id example: vcrd_011CZkZEMt8gZan2iYOQfSkw requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsUpdateCredentialRequestBody' responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsCredential' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults delete: operationId: BetaDeleteCredential summary: Delete Credential parameters: - name: x-api-key in: header required: false schema: type: string - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv - name: credential_id in: path required: true schema: type: string description: Path parameter credential_id example: vcrd_011CZkZEMt8gZan2iYOQfSkw responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsDeletedCredential' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults /v1/vaults/{vault_id}/credentials?beta=true: post: operationId: BetaCreateCredential summary: Create Credential parameters: - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsCreateCredentialRequestBody' responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsCredential' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults get: operationId: BetaListCredentials summary: List Credentials parameters: - name: x-api-key in: header required: false schema: type: string - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv - name: limit in: query required: false schema: type: integer format: int32 description: Maximum number of credentials to return per page. Defaults to 20, maximum 100. - name: page in: query required: false schema: type: string description: Opaque pagination token from a previous `list_credentials` response. - name: include_archived in: query required: false schema: type: boolean description: Whether to include archived credentials in the results. responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsListCredentialsResponse' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults /v1/vaults/{vault_id}?beta=true: get: operationId: BetaGetVault summary: Get Vault parameters: - name: x-api-key in: header required: false schema: type: string - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsVault' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults post: operationId: BetaUpdateVault summary: Update Vault parameters: - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string x-stainless-cli-data-alias: id description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsUpdateVaultRequestBody' responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsVault' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults delete: operationId: BetaDeleteVault summary: Delete Vault parameters: - name: x-api-key in: header required: false schema: type: string - name: anthropic-version in: header required: false schema: type: string - name: anthropic-beta in: header required: false schema: type: string items: type: string x-stainless-override-schema: x-stainless-param: betas x-stainless-extend-default: true type: array description: Optional header to specify the beta version(s) you want to use. items: $ref: '#/components/schemas/AnthropicBeta' - name: vault_id in: path required: true schema: type: string description: Path parameter vault_id example: vlt_011CZkZDLs7fYzm1hXNPeRjv responses: '200': description: Successful response (OK) content: application/json: schema: $ref: '#/components/schemas/BetaManagedAgentsDeletedVault' '400': description: Invalid argument - The client specified an invalid argument content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '401': description: Unauthenticated - The request does not have valid authentication credentials content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '403': description: Permission denied - The caller does not have permission to execute the specified operation content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '404': description: Not found - Some requested entity was not found content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '408': description: Deadline exceeded - The deadline expired before the operation could complete content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '409': description: Aborted - The operation was aborted due to concurrency issue content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '412': description: Failed precondition - Operation was rejected because the system is not in required state content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '413': description: Out of range - Operation was attempted past the valid range content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '429': description: Resource exhausted - Some resource has been exhausted (rate limiting) content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '431': description: Request header fields too large - Request metadata was too large content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '499': description: Cancelled - The operation was cancelled by the client content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '500': description: Internal - Internal server error content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '501': description: Unimplemented - The operation is not implemented or supported content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '503': description: Unavailable - The service is currently unavailable content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' '504': description: Deadline exceeded - Upstream service did not respond in time content: application/json: schema: $ref: '#/components/schemas/BetaErrorResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 tags: - Vaults components: schemas: BetaGatewayTimeoutError: properties: message: default: Request timeout title: Message type: string type: const: timeout_error default: timeout_error title: Type type: string required: - message - type title: GatewayTimeoutError type: object BetaManagedAgentsCredentialUpdateAuth: description: Updated authentication details for a credential. type: object discriminator: propertyName: type mapping: mcp_oauth: '#/components/schemas/BetaManagedAgentsMcpOauthUpdateParams' static_bearer: '#/components/schemas/BetaManagedAgentsStaticBearerUpdateParams' environment_variable: '#/components/schemas/BetaManagedAgentsEnvironmentVariableUpdateParams' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsMcpOauthUpdateParams' - $ref: '#/components/schemas/BetaManagedAgentsStaticBearerUpdateParams' - $ref: '#/components/schemas/BetaManagedAgentsEnvironmentVariableUpdateParams' BetaTimestamp: description: A timestamp in RFC 3339 format type: string format: date-time BetaOverloadedError: properties: message: default: Overloaded title: Message type: string type: const: overloaded_error default: overloaded_error title: Type type: string required: - message - type title: OverloadedError type: object BetaManagedAgentsUnrestrictedCredentialNetworkingParams: description: Substitute the secret on any host the session's Environment network policy permits egress to. The Environment's network policy is the only boundary on where the secret can reach. type: object additionalProperties: false required: - type properties: type: type: string enum: - unrestricted BetaBillingError: properties: message: default: Billing error title: Message type: string type: const: billing_error default: billing_error title: Type type: string required: - message - type title: BillingError type: object BetaManagedAgentsTokenEndpointAuthNoneParam: description: Token endpoint requires no client authentication. type: object additionalProperties: false required: - type properties: type: type: string enum: - none BetaManagedAgentsStaticBearerAuthResponse: description: Static bearer token credential details for an MCP server. type: object additionalProperties: false required: - type - mcp_server_url properties: type: type: string enum: - static_bearer examples: - static_bearer mcp_server_url: description: URL of the MCP server this credential authenticates against. type: string examples: - https://example-server.modelcontextprotocol.io/sse example: type: static_bearer mcp_server_url: https://example-server.modelcontextprotocol.io/sse BetaManagedAgentsListCredentialsResponse: description: Response containing a paginated list of credentials. type: object additionalProperties: false properties: data: description: List of credentials. type: array items: $ref: '#/components/schemas/BetaManagedAgentsCredential' examples: - - type: vault_credential id: vcrd_011CZkZEMt8gZan2iYOQfSkw vault_id: vlt_011CZkZDLs7fYzm1hXNPeRjv display_name: Example credential metadata: environment: production created_at: '2026-03-15T10:00:00Z' updated_at: '2026-03-15T10:00:00Z' archived_at: null auth: type: static_bearer mcp_server_url: https://example-server.modelcontextprotocol.io/sse next_page: description: Pagination token for the next page, or null if no more results. anyOf: - type: string - type: 'null' examples: - page_MjAyNS0wNS0xNFQwMDowMDowMFo= example: data: - type: vault_credential id: vcrd_011CZkZEMt8gZan2iYOQfSkw vault_id: vlt_011CZkZDLs7fYzm1hXNPeRjv display_name: Example credential metadata: environment: production created_at: '2026-03-15T10:00:00Z' updated_at: '2026-03-15T10:00:00Z' archived_at: null auth: type: static_bearer mcp_server_url: https://example-server.modelcontextprotocol.io/sse next_page: page_MjAyNS0wNS0xNFQwMDowMDowMFo= BetaManagedAgentsLimitedCredentialNetworkingParams: description: Substitute the secret only on requests to the listed hosts. type: object additionalProperties: false required: - type - allowed_hosts properties: type: type: string enum: - limited allowed_hosts: description: Hostnames on which the secret will be substituted. Each entry is a bare hostname (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At most 16 entries. type: array items: type: string BetaManagedAgentsTokenEndpointAuthPostResponse: description: Token endpoint uses POST body authentication with client credentials. type: object additionalProperties: false required: - type properties: type: type: string enum: - client_secret_post BetaManagedAgentsDeletedCredential: description: Confirmation of a deleted credential. type: object additionalProperties: false required: - type - id properties: type: type: string enum: - vault_credential_deleted examples: - vault_credential_deleted id: description: Unique identifier of the deleted credential. type: string examples: - vcrd_011CZkZEMt8gZan2iYOQfSkw example: type: vault_credential_deleted id: vcrd_011CZkZEMt8gZan2iYOQfSkw BetaManagedAgentsTokenEndpointAuthBasicUpdateParam: description: Updated HTTP Basic authentication parameters for the token endpoint. type: object additionalProperties: false required: - type properties: type: type: string enum: - client_secret_basic client_secret: description: Updated OAuth client secret. anyOf: - type: string minLength: 1 maxLength: 512 - type: 'null' BetaManagedAgentsUpdateCredentialRequestBody: type: object additionalProperties: false properties: display_name: description: Updated human-readable name for the credential. 1-255 characters. anyOf: - type: string minLength: 1 maxLength: 255 - type: 'null' examples: - Example credential metadata: description: Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omitted keys are preserved. anyOf: - type: object additionalProperties: anyOf: - type: string - type: 'null' - type: 'null' examples: - environment: production auth: description: Updated authentication configuration. The `type` is immutable; the variant sent must match the stored credential's type. allOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialUpdateAuth' example: display_name: Example credential metadata: environment: production BetaManagedAgentsMcpOauthRefreshResponse: description: OAuth refresh token configuration returned in credential responses. type: object additionalProperties: false required: - token_endpoint - client_id - token_endpoint_auth properties: token_endpoint: description: Token endpoint URL used to refresh the access token. type: string client_id: description: OAuth client ID. type: string resource: description: OAuth resource indicator. anyOf: - type: string - type: 'null' scope: description: OAuth scope for the refresh request. anyOf: - type: string - type: 'null' token_endpoint_auth: type: object discriminator: propertyName: type mapping: none: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthNoneResponse' client_secret_basic: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthBasicResponse' client_secret_post: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthPostResponse' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthNoneResponse' - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthBasicResponse' - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthPostResponse' BetaManagedAgentsCredentialValidation: description: Result of live-probing a credential against its configured MCP server. type: object additionalProperties: false required: - type - credential_id - vault_id - status - validated_at - has_refresh_token - mcp_probe - refresh properties: type: type: string enum: - vault_credential_validation examples: - vault_credential_validation credential_id: description: Unique identifier of the credential that was validated. type: string examples: - vcrd_011CZkZEMt8gZan2iYOQfSkw vault_id: description: Identifier of the vault containing the credential. type: string examples: - vlt_011CZkZDLs7fYzm1hXNPeRjv status: description: Overall verdict of the validation probe. allOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialValidationStatus' examples: - valid validated_at: description: When the validation probe was performed. allOf: - $ref: '#/components/schemas/BetaTimestamp' examples: - '2026-03-15T10:00:00Z' has_refresh_token: description: Whether the credential has a refresh token configured. type: boolean examples: - true mcp_probe: description: Details of the failing MCP probe step. Null when the probe succeeded. anyOf: - $ref: '#/components/schemas/BetaManagedAgentsMcpProbe' - type: 'null' examples: - null refresh: description: Details of the refresh-token exchange attempted on a 401. Null when no refresh was attempted. anyOf: - $ref: '#/components/schemas/BetaManagedAgentsRefreshObject' - type: 'null' examples: - null example: type: vault_credential_validation credential_id: vcrd_011CZkZEMt8gZan2iYOQfSkw vault_id: vlt_011CZkZDLs7fYzm1hXNPeRjv status: valid validated_at: '2026-03-15T10:00:00Z' has_refresh_token: true mcp_probe: null refresh: null BetaManagedAgentsMcpOauthRefreshUpdateParams: description: Parameters for updating OAuth refresh token configuration. type: object additionalProperties: false properties: refresh_token: description: Updated OAuth refresh token. anyOf: - type: string minLength: 1 maxLength: 4096 - type: 'null' scope: description: Updated OAuth scope for the refresh request. anyOf: - type: string maxLength: 8192 - type: 'null' token_endpoint_auth: type: object discriminator: propertyName: type mapping: client_secret_basic: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthBasicUpdateParam' client_secret_post: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthPostUpdateParam' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthBasicUpdateParam' - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthPostUpdateParam' BetaAuthenticationError: properties: message: default: Authentication error title: Message type: string type: const: authentication_error default: authentication_error title: Type type: string required: - message - type title: AuthenticationError type: object BetaManagedAgentsInjectionLocationUpdateParams: description: Updated injection location. type: object additionalProperties: false properties: header: description: Substitute when the placeholder appears in a request header value. type: boolean body: description: Substitute when the placeholder appears in the request body. type: boolean BetaNotFoundError: properties: message: default: Not found title: Message type: string type: const: not_found_error default: not_found_error title: Type type: string required: - message - type title: NotFoundError type: object BetaManagedAgentsTokenEndpointAuthPostParam: description: Token endpoint uses POST body authentication with client credentials. type: object additionalProperties: false required: - type - client_secret properties: type: type: string enum: - client_secret_post client_secret: description: OAuth client secret. type: string minLength: 1 maxLength: 512 BetaManagedAgentsCredential: description: A credential stored in a vault. Sensitive fields are never returned in responses. type: object additionalProperties: false required: - type - id - vault_id - metadata - created_at - updated_at - archived_at - auth properties: type: type: string enum: - vault_credential examples: - vault_credential id: description: Unique identifier for the credential. type: string examples: - vcrd_011CZkZEMt8gZan2iYOQfSkw vault_id: description: Identifier of the vault this credential belongs to. type: string examples: - vlt_011CZkZDLs7fYzm1hXNPeRjv display_name: description: Human-readable name for the credential. anyOf: - type: string - type: 'null' examples: - Example credential metadata: description: Arbitrary key-value metadata attached to the credential. type: object additionalProperties: type: string examples: - environment: production created_at: $ref: '#/components/schemas/BetaTimestamp' examples: - '2026-03-15T10:00:00Z' updated_at: $ref: '#/components/schemas/BetaTimestamp' examples: - '2026-03-15T10:00:00Z' archived_at: description: When the credential was archived. Null if not archived. anyOf: - $ref: '#/components/schemas/BetaTimestamp' - type: 'null' examples: - null auth: description: Authentication configuration for this credential. allOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialAuth' examples: - type: static_bearer mcp_server_url: https://example-server.modelcontextprotocol.io/sse example: type: vault_credential id: vcrd_011CZkZEMt8gZan2iYOQfSkw vault_id: vlt_011CZkZDLs7fYzm1hXNPeRjv display_name: Example credential metadata: environment: production created_at: '2026-03-15T10:00:00Z' updated_at: '2026-03-15T10:00:00Z' archived_at: null auth: type: static_bearer mcp_server_url: https://example-server.modelcontextprotocol.io/sse BetaManagedAgentsMcpOauthUpdateParams: description: Parameters for updating an MCP OAuth credential. The `mcp_server_url` is immutable. type: object additionalProperties: false required: - type properties: type: type: string enum: - mcp_oauth access_token: description: Updated OAuth access token. anyOf: - type: string minLength: 1 maxLength: 8192 - type: 'null' expires_at: anyOf: - $ref: '#/components/schemas/BetaTimestamp' - type: 'null' refresh: description: Updated refresh token configuration. anyOf: - $ref: '#/components/schemas/BetaManagedAgentsMcpOauthRefreshUpdateParams' - type: 'null' BetaManagedAgentsDeletedVault: description: Confirmation of a deleted vault. type: object additionalProperties: false required: - type - id properties: type: type: string enum: - vault_deleted examples: - vault_deleted id: description: Unique identifier of the deleted vault. type: string examples: - vlt_011CZkZDLs7fYzm1hXNPeRjv example: type: vault_deleted id: vlt_011CZkZDLs7fYzm1hXNPeRjv BetaManagedAgentsCredentialNetworkingResponse: type: object discriminator: propertyName: type mapping: unrestricted: '#/components/schemas/BetaManagedAgentsUnrestrictedCredentialNetworkingResponse' limited: '#/components/schemas/BetaManagedAgentsLimitedCredentialNetworkingResponse' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsUnrestrictedCredentialNetworkingResponse' - $ref: '#/components/schemas/BetaManagedAgentsLimitedCredentialNetworkingResponse' BetaManagedAgentsCredentialValidationStatus: type: string description: Overall verdict of a credential validation probe. enum: - valid - invalid - unknown BetaInvalidRequestError: properties: message: default: Invalid request title: Message type: string type: const: invalid_request_error default: invalid_request_error title: Type type: string required: - message - type title: InvalidRequestError type: object BetaPermissionError: properties: message: default: Permission denied title: Message type: string type: const: permission_error default: permission_error title: Type type: string required: - message - type title: PermissionError type: object BetaManagedAgentsEnvironmentVariableUpdateParams: description: Parameters for updating an environment variable credential. `secret_name` is immutable. type: object additionalProperties: false required: - type properties: type: type: string enum: - environment_variable secret_value: description: Updated secret value. anyOf: - type: string minLength: 1 maxLength: 4096 - type: 'null' networking: description: Updated networking scope. Full replacement. anyOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialNetworkingParams' - type: 'null' injection_location: description: Updated injection location. allOf: - $ref: '#/components/schemas/BetaManagedAgentsInjectionLocationUpdateParams' x-anthropic-beta-required: - managed-agents-2026-04-01 BetaManagedAgentsCredentialAuth: description: Authentication details for a credential. type: object discriminator: propertyName: type mapping: mcp_oauth: '#/components/schemas/BetaManagedAgentsMcpOauthAuthResponse' static_bearer: '#/components/schemas/BetaManagedAgentsStaticBearerAuthResponse' environment_variable: '#/components/schemas/BetaManagedAgentsEnvironmentVariableAuthResponse' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsMcpOauthAuthResponse' - $ref: '#/components/schemas/BetaManagedAgentsStaticBearerAuthResponse' - $ref: '#/components/schemas/BetaManagedAgentsEnvironmentVariableAuthResponse' example: type: static_bearer mcp_server_url: https://example-server.modelcontextprotocol.io/sse BetaManagedAgentsMcpOauthAuthResponse: description: OAuth credential details for an MCP server. type: object additionalProperties: false required: - type - mcp_server_url properties: type: type: string enum: - mcp_oauth mcp_server_url: description: URL of the MCP server this credential authenticates against. type: string expires_at: anyOf: - $ref: '#/components/schemas/BetaTimestamp' - type: 'null' refresh: description: Refresh token configuration, if the credential supports token refresh. anyOf: - $ref: '#/components/schemas/BetaManagedAgentsMcpOauthRefreshResponse' - type: 'null' BetaManagedAgentsUnrestrictedCredentialNetworkingResponse: description: The secret is substituted on any host the session's Environment network policy permits egress to. type: object additionalProperties: false required: - type properties: type: type: string enum: - unrestricted BetaManagedAgentsStaticBearerCreateParams: description: Parameters for creating a static bearer token credential. type: object additionalProperties: false required: - type - token - mcp_server_url properties: type: type: string enum: - static_bearer examples: - static_bearer token: description: Static bearer token value. type: string minLength: 1 maxLength: 8192 examples: - bearer_exampletoken mcp_server_url: description: URL of the MCP server this credential authenticates against. type: string minLength: 1 maxLength: 2047 examples: - https://example-server.modelcontextprotocol.io/sse example: type: static_bearer token: bearer_exampletoken mcp_server_url: https://example-server.modelcontextprotocol.io/sse BetaManagedAgentsStaticBearerUpdateParams: description: Parameters for updating a static bearer token credential. The `mcp_server_url` is immutable. type: object additionalProperties: false required: - type properties: type: type: string enum: - static_bearer token: description: Updated static bearer token value. anyOf: - type: string minLength: 1 maxLength: 8192 - type: 'null' BetaManagedAgentsTokenEndpointAuthBasicParam: description: Token endpoint uses HTTP Basic authentication with client credentials. type: object additionalProperties: false required: - type - client_secret properties: type: type: string enum: - client_secret_basic client_secret: description: OAuth client secret. type: string minLength: 1 maxLength: 512 BetaManagedAgentsCredentialCreateAuth: description: Authentication details for creating a credential. type: object discriminator: propertyName: type mapping: mcp_oauth: '#/components/schemas/BetaManagedAgentsMcpOauthCreateParams' static_bearer: '#/components/schemas/BetaManagedAgentsStaticBearerCreateParams' environment_variable: '#/components/schemas/BetaManagedAgentsEnvironmentVariableCreateParams' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsMcpOauthCreateParams' - $ref: '#/components/schemas/BetaManagedAgentsStaticBearerCreateParams' - $ref: '#/components/schemas/BetaManagedAgentsEnvironmentVariableCreateParams' example: type: static_bearer token: bearer_exampletoken mcp_server_url: https://example-server.modelcontextprotocol.io/sse BetaManagedAgentsTokenEndpointAuthNoneResponse: description: Token endpoint requires no client authentication. type: object additionalProperties: false required: - type properties: type: type: string enum: - none BetaManagedAgentsMcpOauthCreateParams: description: Parameters for creating an MCP OAuth credential. type: object additionalProperties: false required: - type - mcp_server_url - access_token properties: type: type: string enum: - mcp_oauth mcp_server_url: description: URL of the MCP server this credential authenticates against. type: string minLength: 1 maxLength: 2047 access_token: description: OAuth access token. type: string minLength: 1 maxLength: 8192 expires_at: anyOf: - $ref: '#/components/schemas/BetaTimestamp' - type: 'null' refresh: description: Refresh token configuration, if the credential supports token refresh. anyOf: - $ref: '#/components/schemas/BetaManagedAgentsMcpOauthRefreshParams' - type: 'null' BetaManagedAgentsCredentialNetworkingParams: type: object discriminator: propertyName: type mapping: unrestricted: '#/components/schemas/BetaManagedAgentsUnrestrictedCredentialNetworkingParams' limited: '#/components/schemas/BetaManagedAgentsLimitedCredentialNetworkingParams' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsUnrestrictedCredentialNetworkingParams' - $ref: '#/components/schemas/BetaManagedAgentsLimitedCredentialNetworkingParams' BetaManagedAgentsVault: description: A vault that stores credentials for use by agents during sessions. type: object additionalProperties: false required: - type - id - display_name - metadata - created_at - updated_at - archived_at properties: type: type: string enum: - vault examples: - vault id: description: Unique identifier for the vault. type: string examples: - vlt_011CZkZDLs7fYzm1hXNPeRjv display_name: description: Human-readable name for the vault. type: string examples: - Example vault metadata: description: Arbitrary key-value metadata attached to the vault. type: object additionalProperties: type: string examples: - environment: production created_at: $ref: '#/components/schemas/BetaTimestamp' examples: - '2026-03-15T10:00:00Z' updated_at: $ref: '#/components/schemas/BetaTimestamp' examples: - '2026-03-15T10:00:00Z' archived_at: description: When the vault was archived. Null if not archived. anyOf: - $ref: '#/components/schemas/BetaTimestamp' - type: 'null' examples: - null example: type: vault id: vlt_011CZkZDLs7fYzm1hXNPeRjv display_name: Example vault metadata: environment: production created_at: '2026-03-15T10:00:00Z' updated_at: '2026-03-15T10:00:00Z' archived_at: null BetaManagedAgentsCreateCredentialRequestBody: type: object additionalProperties: false required: - auth properties: auth: description: Authentication configuration for the credential. allOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialCreateAuth' examples: - type: static_bearer token: bearer_exampletoken mcp_server_url: https://example-server.modelcontextprotocol.io/sse display_name: description: Human-readable name for the credential. Up to 255 characters. anyOf: - type: string maxLength: 255 - type: 'null' examples: - Example credential metadata: description: Arbitrary key-value metadata to attach to the credential. Maximum 16 pairs, keys up to 64 chars, values up to 512 chars. type: object additionalProperties: type: string examples: - environment: production example: auth: type: static_bearer token: bearer_exampletoken mcp_server_url: https://example-server.modelcontextprotocol.io/sse display_name: Example credential metadata: environment: production BetaManagedAgentsEnvironmentVariableAuthResponse: description: Environment variable credential details. The secret value is never returned. type: object additionalProperties: false required: - type - secret_name - networking - injection_location properties: type: type: string enum: - environment_variable secret_name: description: Name of the environment variable. type: string networking: description: Outbound hosts the secret value is substituted on. allOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialNetworkingResponse' injection_location: description: Where in the outbound request the secret value is substituted. allOf: - $ref: '#/components/schemas/BetaManagedAgentsInjectionLocationResponse' x-anthropic-beta-required: - managed-agents-2026-04-01 BetaManagedAgentsUpdateVaultRequestBody: type: object additionalProperties: false properties: display_name: description: Updated human-readable name for the vault. 1-255 characters. anyOf: - type: string minLength: 1 maxLength: 255 - type: 'null' examples: - Example vault metadata: description: Metadata patch. Set a key to a string to upsert it, or to null to delete it. Omitted keys are preserved. anyOf: - type: object additionalProperties: anyOf: - type: string - type: 'null' - type: 'null' examples: - environment: production example: display_name: Example vault metadata: environment: production BetaManagedAgentsRefreshObject: description: Outcome of a refresh-token exchange attempted during credential validation. type: object additionalProperties: false required: - status - http_response properties: status: description: Outcome of the refresh attempt. allOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialRefreshStatus' http_response: description: The captured HTTP error response from the token endpoint. Populated only when `status` is `failed`. anyOf: - $ref: '#/components/schemas/BetaManagedAgentsRefreshHttpResponse' - type: 'null' BetaManagedAgentsTokenEndpointAuthBasicResponse: description: Token endpoint uses HTTP Basic authentication with client credentials. type: object additionalProperties: false required: - type properties: type: type: string enum: - client_secret_basic BetaManagedAgentsInjectionLocationResponse: description: Where in the outbound request the secret value is substituted. type: object additionalProperties: false required: - header - body properties: header: description: Whether the placeholder is substituted in request header values. type: boolean body: description: Whether the placeholder is substituted in the request body. type: boolean BetaAPIError: properties: message: default: Internal server error title: Message type: string type: const: api_error default: api_error title: Type type: string required: - message - type title: APIError type: object BetaManagedAgentsTokenEndpointAuthPostUpdateParam: description: Updated POST body authentication parameters for the token endpoint. type: object additionalProperties: false required: - type properties: type: type: string enum: - client_secret_post client_secret: description: Updated OAuth client secret. anyOf: - type: string minLength: 1 maxLength: 512 - type: 'null' BetaErrorResponse: properties: error: discriminator: mapping: api_error: '#/components/schemas/BetaAPIError' authentication_error: '#/components/schemas/BetaAuthenticationError' billing_error: '#/components/schemas/BetaBillingError' invalid_request_error: '#/components/schemas/BetaInvalidRequestError' not_found_error: '#/components/schemas/BetaNotFoundError' overloaded_error: '#/components/schemas/BetaOverloadedError' permission_error: '#/components/schemas/BetaPermissionError' rate_limit_error: '#/components/schemas/BetaRateLimitError' timeout_error: '#/components/schemas/BetaGatewayTimeoutError' propertyName: type oneOf: - $ref: '#/components/schemas/BetaInvalidRequestError' - $ref: '#/components/schemas/BetaAuthenticationError' - $ref: '#/components/schemas/BetaBillingError' - $ref: '#/components/schemas/BetaPermissionError' - $ref: '#/components/schemas/BetaNotFoundError' - $ref: '#/components/schemas/BetaRateLimitError' - $ref: '#/components/schemas/BetaGatewayTimeoutError' - $ref: '#/components/schemas/BetaAPIError' - $ref: '#/components/schemas/BetaOverloadedError' title: Error request_id: anyOf: - type: string - type: 'null' default: null title: Request Id type: const: error default: error title: Type type: string required: - error - request_id - type title: ErrorResponse type: object BetaManagedAgentsCredentialRefreshStatus: type: string description: Outcome of a refresh-token exchange attempted during credential validation. enum: - succeeded - failed - connect_error - no_refresh_token BetaManagedAgentsRefreshHttpResponse: description: An HTTP response captured during a credential validation probe. type: object additionalProperties: false required: - status_code - content_type - body - body_truncated properties: status_code: description: HTTP status code. type: integer format: int32 content_type: description: Value of the `Content-Type` response header. type: string body: description: Response body. May be truncated and has sensitive values scrubbed. type: string body_truncated: description: Whether `body` was truncated. type: boolean BetaManagedAgentsLimitedCredentialNetworkingResponse: description: The secret is substituted only on requests to the listed hosts. type: object additionalProperties: false required: - type - allowed_hosts properties: type: type: string enum: - limited allowed_hosts: description: Hostnames on which the secret will be substituted. An entry matches the request host exactly; a `*.`-prefixed entry matches any subdomain of the named domain but not the domain itself. type: array items: type: string BetaManagedAgentsEnvironmentVariableCreateParams: description: Parameters for creating an environment variable credential. type: object additionalProperties: false required: - type - secret_name - secret_value - networking properties: type: type: string enum: - environment_variable secret_name: description: Name of the environment variable. Immutable after create. type: string minLength: 1 maxLength: 255 secret_value: description: Secret value. Write-only; never returned in responses. type: string minLength: 1 maxLength: 4096 networking: description: Outbound hosts the secret value is substituted on. allOf: - $ref: '#/components/schemas/BetaManagedAgentsCredentialNetworkingParams' injection_location: description: Where in the outbound request the secret value may be substituted. allOf: - $ref: '#/components/schemas/BetaManagedAgentsInjectionLocationParams' x-anthropic-beta-required: - managed-agents-2026-04-01 AnthropicBeta: anyOf: - type: string - type: string enum: - message-batches-2024-09-24 - prompt-caching-2024-07-31 - computer-use-2024-10-22 - computer-use-2025-01-24 - pdfs-2024-09-25 - token-counting-2024-11-01 - token-efficient-tools-2025-02-19 - output-128k-2025-02-19 - files-api-2025-04-14 - mcp-client-2025-04-04 - mcp-client-2025-11-20 - dev-full-thinking-2025-05-14 - interleaved-thinking-2025-05-14 - code-execution-2025-05-22 - extended-cache-ttl-2025-04-11 - context-1m-2025-08-07 - context-management-2025-06-27 - model-context-window-exceeded-2025-08-26 - skills-2025-10-02 - fast-mode-2026-02-01 - output-300k-2026-03-24 - user-profiles-2026-03-24 - user-profiles-2026-08-18 - advisor-tool-2026-03-01 - managed-agents-2026-04-01 - cache-diagnosis-2026-04-07 - dreaming-2026-04-21 - thinking-token-count-2026-05-13 - server-side-fallback-2026-06-01 - server-side-fallback-2026-07-01 - fallback-credit-2026-06-01 - fallback-credit-2026-07-01 - agent-memory-2026-07-22 - mid-conversation-tool-changes-2026-07-01 - compact-2026-01-12 - computer-use-2025-11-24 - mcp-tunnels-2026-06-22 - structured-outputs-2025-11-13 - task-budgets-2026-03-13 - thinking-display-updates-2026-08-18 - ce-user-management-2026-07-13 x-stainless-nominal: false BetaRateLimitError: properties: message: default: Rate limited title: Message type: string type: const: rate_limit_error default: rate_limit_error title: Type type: string required: - message - type title: RateLimitError type: object BetaManagedAgentsMcpOauthRefreshParams: description: OAuth refresh token parameters for creating a credential with refresh support. type: object additionalProperties: false required: - refresh_token - token_endpoint - client_id - token_endpoint_auth properties: refresh_token: description: OAuth refresh token. type: string minLength: 1 maxLength: 4096 token_endpoint: description: Token endpoint URL used to refresh the access token. type: string minLength: 1 maxLength: 2047 client_id: description: OAuth client ID. type: string minLength: 1 maxLength: 1024 scope: description: OAuth scope for the refresh request. anyOf: - type: string minLength: 1 maxLength: 8192 - type: 'null' resource: description: OAuth resource indicator. anyOf: - type: string minLength: 1 maxLength: 2047 - type: 'null' token_endpoint_auth: type: object discriminator: propertyName: type mapping: none: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthNoneParam' client_secret_basic: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthBasicParam' client_secret_post: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthPostParam' oneOf: - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthNoneParam' - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthBasicParam' - $ref: '#/components/schemas/BetaManagedAgentsTokenEndpointAuthPostParam' BetaManagedAgentsMcpProbe: description: The failing step of an MCP validation probe. type: object additionalProperties: false required: - method - http_response properties: method: description: The MCP method that failed (for example `initialize` or `tools/list`). type: string http_response: description: The captured HTTP error response. Null when no HTTP response was received (timeout, DNS, TLS). anyOf: - $ref: '#/components/schemas/BetaManagedAgentsRefreshHttpResponse' - type: 'null' BetaManagedAgentsInjectionLocationParams: description: Where in the outbound request the secret value may be substituted. type: object additionalProperties: false properties: header: description: Substitute when the placeholder appears in a request header value. type: boolean body: description: Substitute when the placeholder appears in the request body. type: boolean