# Claude Managed Agents API (/en/docs/api/compatible/anthropic/managed-agents)
## Base URL [#base-url]
## Get started [#get-started]
## Run a session [#run-a-session]
1. [Create an agent](/en/docs/api/compatible/anthropic/managed-agents/createAgent) and save its `agent_…` ID.
2. [Create a session](/en/docs/api/compatible/anthropic/managed-agents/createSession), replacing `agent` with that ID. Save the returned `sesn_…` ID.
3. [Subscribe to events](/en/docs/api/compatible/anthropic/managed-agents/streamEvents) before [sending a message](/en/docs/api/compatible/anthropic/managed-agents/sendEvents), using the same real session ID in both requests.
4. After `agent.message`, wait for `session.status_idle`; [list historical events](/en/docs/api/compatible/anthropic/managed-agents/listEvents) to read previous replies.
Use the base URL above as the SDK base URL. All requests require an API Key, `anthropic-version: 2023-06-01` and `anthropic-beta: managed-agents-2026-04-01`. Try it supplies these protocol headers; replace resource IDs yourself.
All 95 official operations are declared: 41 are supported or partially supported (see the badges in the endpoint list); the other 54 are not implemented yet and answer 501 (not\_implemented\_error, x-should-retry: false) with no side effects and no charge. See endpoint notes for capability and vault limits.
## Endpoints [#endpoints]
### Agents (6 endpoints, 6 available) [#agents-6-endpoints-6-available]
| Method | Path | Description | Support |
| ------ | --------------------------------------------------------------------------------------------------- | ------------------- | ----------- |
| POST | [`/v1/agents`](/docs/api/compatible/anthropic/managed-agents/createAgent) | Create Agent | ◐ Partial |
| GET | [`/v1/agents`](/docs/api/compatible/anthropic/managed-agents/listAgents) | List Agents | ● Supported |
| GET | [`/v1/agents/{agent_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveAgent) | Get Agent | ● Supported |
| POST | [`/v1/agents/{agent_id}`](/docs/api/compatible/anthropic/managed-agents/updateAgent) | Update Agent | ◐ Partial |
| GET | [`/v1/agents/{agent_id}/versions`](/docs/api/compatible/anthropic/managed-agents/listAgentVersions) | List Agent Versions | ● Supported |
| POST | [`/v1/agents/{agent_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveAgent) | Archive Agent | ● Supported |
### Sessions & events (9 endpoints, 8 available) [#sessions--events-9-endpoints-8-available]
| Method | Path | Description | Support |
| ------ | ------------------------------------------------------------------------------------------------------- | --------------- | ------------- |
| POST | [`/v1/sessions`](/docs/api/compatible/anthropic/managed-agents/createSession) | Create Session | ◐ Partial |
| GET | [`/v1/sessions`](/docs/api/compatible/anthropic/managed-agents/listSessions) | List Sessions | ◐ Partial |
| GET | [`/v1/sessions/{session_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveSession) | Get Session | ● Supported |
| POST | [`/v1/sessions/{session_id}/events`](/docs/api/compatible/anthropic/managed-agents/sendEvents) | Send Events | ◐ Partial |
| GET | [`/v1/sessions/{session_id}/events`](/docs/api/compatible/anthropic/managed-agents/listEvents) | List Events | ● Supported |
| GET | [`/v1/sessions/{session_id}/events/stream`](/docs/api/compatible/anthropic/managed-agents/streamEvents) | Stream Events | ◐ Partial |
| POST | [`/v1/sessions/{session_id}`](/docs/api/compatible/anthropic/managed-agents/updateSession) | Update Session | ◐ Partial |
| DELETE | [`/v1/sessions/{session_id}`](/docs/api/compatible/anthropic/managed-agents/deleteSession) | Delete Session | ○ Unsupported |
| POST | [`/v1/sessions/{session_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveSession) | Archive Session | ● Supported |
### Deployments (10 endpoints, 0 available) [#deployments-10-endpoints-0-available]
| Method | Path | Description | Support |
| ------ | ---------------------------------------------------------------------------------------------------------------- | -------------------- | ------------- |
| GET | [`/v1/deployment_runs`](/docs/api/compatible/anthropic/managed-agents/listDeploymentRuns) | List Deployment Runs | ○ Unsupported |
| GET | [`/v1/deployment_runs/{deployment_run_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveDeploymentRun) | Get Deployment Run | ○ Unsupported |
| GET | [`/v1/deployments`](/docs/api/compatible/anthropic/managed-agents/listDeployments) | List Deployments | ○ Unsupported |
| POST | [`/v1/deployments`](/docs/api/compatible/anthropic/managed-agents/createDeployment) | Create Deployment | ○ Unsupported |
| GET | [`/v1/deployments/{deployment_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveDeployment) | Get Deployment | ○ Unsupported |
| POST | [`/v1/deployments/{deployment_id}`](/docs/api/compatible/anthropic/managed-agents/updateDeployment) | Update Deployment | ○ Unsupported |
| POST | [`/v1/deployments/{deployment_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveDeployment) | Archive Deployment | ○ Unsupported |
| POST | [`/v1/deployments/{deployment_id}/pause`](/docs/api/compatible/anthropic/managed-agents/pauseDeployment) | Pause Deployment | ○ Unsupported |
| POST | [`/v1/deployments/{deployment_id}/run`](/docs/api/compatible/anthropic/managed-agents/runDeployment) | Run Deployment | ○ Unsupported |
| POST | [`/v1/deployments/{deployment_id}/unpause`](/docs/api/compatible/anthropic/managed-agents/unpauseDeployment) | Unpause Deployment | ○ Unsupported |
### Environments (6 endpoints, 5 available) [#environments-6-endpoints-5-available]
| Method | Path | Description | Support |
| ------ | --------------------------------------------------------------------------------------------------------------- | ------------------- | ------------- |
| GET | [`/v1/environments`](/docs/api/compatible/anthropic/managed-agents/listEnvironments) | List Environments | ◐ Partial |
| POST | [`/v1/environments`](/docs/api/compatible/anthropic/managed-agents/createEnvironment) | Create Environment | ◐ Partial |
| DELETE | [`/v1/environments/{environment_id}`](/docs/api/compatible/anthropic/managed-agents/deleteEnvironment) | Delete Environment | ○ Unsupported |
| GET | [`/v1/environments/{environment_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveEnvironment) | Get Environment | ◐ Partial |
| POST | [`/v1/environments/{environment_id}`](/docs/api/compatible/anthropic/managed-agents/updateEnvironment) | Update Environment | ◐ Partial |
| POST | [`/v1/environments/{environment_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveEnvironment) | Archive Environment | ◐ Partial |
### Environment work (8 endpoints, 0 available) [#environment-work-8-endpoints-0-available]
| Method | Path | Description | Support |
| ------ | -------------------------------------------------------------------------------------------------------------------------------------- | --------------------- | ------------- |
| GET | [`/v1/environments/{environment_id}/work`](/docs/api/compatible/anthropic/managed-agents/listEnvironmentWork) | List Work Items | ○ Unsupported |
| GET | [`/v1/environments/{environment_id}/work/{work_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveEnvironmentWork) | Get Work Item | ○ Unsupported |
| POST | [`/v1/environments/{environment_id}/work/{work_id}`](/docs/api/compatible/anthropic/managed-agents/updateEnvironmentWork) | Update Work Item | ○ Unsupported |
| POST | [`/v1/environments/{environment_id}/work/{work_id}/ack`](/docs/api/compatible/anthropic/managed-agents/ackEnvironmentWork) | Acknowledge Work Item | ○ Unsupported |
| POST | [`/v1/environments/{environment_id}/work/{work_id}/heartbeat`](/docs/api/compatible/anthropic/managed-agents/heartbeatEnvironmentWork) | Heartbeat Work Item | ○ Unsupported |
| POST | [`/v1/environments/{environment_id}/work/{work_id}/stop`](/docs/api/compatible/anthropic/managed-agents/stopEnvironmentWork) | Stop Work Item | ○ Unsupported |
| GET | [`/v1/environments/{environment_id}/work/poll`](/docs/api/compatible/anthropic/managed-agents/pollEnvironmentWork) | Poll Work Items | ○ Unsupported |
| GET | [`/v1/environments/{environment_id}/work/stats`](/docs/api/compatible/anthropic/managed-agents/retrieveEnvironmentWorkStats) | Work Item Stats | ○ Unsupported |
### Memory stores (14 endpoints, 0 available) [#memory-stores-14-endpoints-0-available]
| Method | Path | Description | Support |
| ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------- | ------------- |
| GET | [`/v1/memory_stores`](/docs/api/compatible/anthropic/managed-agents/listMemoryStores) | List Memory Stores | ○ Unsupported |
| POST | [`/v1/memory_stores`](/docs/api/compatible/anthropic/managed-agents/createMemoryStore) | Create Memory Store | ○ Unsupported |
| DELETE | [`/v1/memory_stores/{memory_store_id}`](/docs/api/compatible/anthropic/managed-agents/deleteMemoryStore) | Delete Memory Store | ○ Unsupported |
| GET | [`/v1/memory_stores/{memory_store_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveMemoryStore) | Get Memory Store | ○ Unsupported |
| POST | [`/v1/memory_stores/{memory_store_id}`](/docs/api/compatible/anthropic/managed-agents/updateMemoryStore) | Update Memory Store | ○ Unsupported |
| POST | [`/v1/memory_stores/{memory_store_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveMemoryStore) | Archive Memory Store | ○ Unsupported |
| GET | [`/v1/memory_stores/{memory_store_id}/memories`](/docs/api/compatible/anthropic/managed-agents/listMemoryStoreMemories) | List Memories | ○ Unsupported |
| POST | [`/v1/memory_stores/{memory_store_id}/memories`](/docs/api/compatible/anthropic/managed-agents/createMemoryStoreMemory) | Create Memory | ○ Unsupported |
| DELETE | [`/v1/memory_stores/{memory_store_id}/memories/{memory_id}`](/docs/api/compatible/anthropic/managed-agents/deleteMemoryStoreMemory) | Delete Memory | ○ Unsupported |
| GET | [`/v1/memory_stores/{memory_store_id}/memories/{memory_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveMemoryStoreMemory) | Get Memory | ○ Unsupported |
| POST | [`/v1/memory_stores/{memory_store_id}/memories/{memory_id}`](/docs/api/compatible/anthropic/managed-agents/updateMemoryStoreMemory) | Update Memory | ○ Unsupported |
| GET | [`/v1/memory_stores/{memory_store_id}/memory_versions`](/docs/api/compatible/anthropic/managed-agents/listMemoryStoreMemoryVersions) | List Memory Versions | ○ Unsupported |
| GET | [`/v1/memory_stores/{memory_store_id}/memory_versions/{memory_version_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveMemoryStoreMemoryVersion) | Get Memory Version | ○ Unsupported |
| POST | [`/v1/memory_stores/{memory_store_id}/memory_versions/{memory_version_id}/redact`](/docs/api/compatible/anthropic/managed-agents/redactMemoryStoreMemoryVersion) | Redact Memory Version | ○ Unsupported |
### Session resources (5 endpoints, 4 available) [#session-resources-5-endpoints-4-available]
| Method | Path | Description | Support |
| ------ | ---------------------------------------------------------------------------------------------------------------------------- | ----------------------- | ------------- |
| GET | [`/v1/sessions/{session_id}/resources`](/docs/api/compatible/anthropic/managed-agents/listSessionResources) | List Session Resources | ◐ Partial |
| POST | [`/v1/sessions/{session_id}/resources`](/docs/api/compatible/anthropic/managed-agents/addSessionResource) | Add Session Resource | ◐ Partial |
| DELETE | [`/v1/sessions/{session_id}/resources/{resource_id}`](/docs/api/compatible/anthropic/managed-agents/deleteSessionResource) | Delete Session Resource | ◐ Partial |
| GET | [`/v1/sessions/{session_id}/resources/{resource_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveSessionResource) | Get Session Resource | ◐ Partial |
| POST | [`/v1/sessions/{session_id}/resources/{resource_id}`](/docs/api/compatible/anthropic/managed-agents/updateSessionResource) | Update Session Resource | ○ Unsupported |
### Session threads (5 endpoints, 5 available) [#session-threads-5-endpoints-5-available]
| Method | Path | Description | Support |
| ------ | --------------------------------------------------------------------------------------------------------------------------------- | -------------------- | --------- |
| GET | [`/v1/sessions/{session_id}/threads`](/docs/api/compatible/anthropic/managed-agents/listSessionThreads) | List Threads | ◐ Partial |
| GET | [`/v1/sessions/{session_id}/threads/{thread_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveSessionThread) | Get Thread | ◐ Partial |
| POST | [`/v1/sessions/{session_id}/threads/{thread_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveSessionThread) | Archive Thread | ◐ Partial |
| GET | [`/v1/sessions/{session_id}/threads/{thread_id}/events`](/docs/api/compatible/anthropic/managed-agents/listSessionThreadEvents) | List Thread Events | ◐ Partial |
| GET | [`/v1/sessions/{session_id}/threads/{thread_id}/stream`](/docs/api/compatible/anthropic/managed-agents/streamSessionThreadEvents) | Stream Thread Events | ◐ Partial |
### Skills (9 endpoints, 0 available) [#skills-9-endpoints-0-available]
| Method | Path | Description | Support |
| ------ | ------------------------------------------------------------------------------------------------------------------------ | ------------------------------ | ------------- |
| GET | [`/v1/skills`](/docs/api/compatible/anthropic/managed-agents/listSkills) | List Skills | ○ Unsupported |
| POST | [`/v1/skills`](/docs/api/compatible/anthropic/managed-agents/createSkill) | Create Skill | ○ Unsupported |
| DELETE | [`/v1/skills/{skill_id}`](/docs/api/compatible/anthropic/managed-agents/deleteSkill) | Delete Skill | ○ Unsupported |
| GET | [`/v1/skills/{skill_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveSkill) | Get Skill | ○ Unsupported |
| GET | [`/v1/skills/{skill_id}/versions`](/docs/api/compatible/anthropic/managed-agents/listSkillVersions) | List Skill Versions | ○ Unsupported |
| POST | [`/v1/skills/{skill_id}/versions`](/docs/api/compatible/anthropic/managed-agents/createSkillVersion) | Create Skill Version | ○ Unsupported |
| DELETE | [`/v1/skills/{skill_id}/versions/{version}`](/docs/api/compatible/anthropic/managed-agents/deleteSkillVersion) | Delete Skill Version | ○ Unsupported |
| GET | [`/v1/skills/{skill_id}/versions/{version}`](/docs/api/compatible/anthropic/managed-agents/retrieveSkillVersion) | Get Skill Version | ○ Unsupported |
| GET | [`/v1/skills/{skill_id}/versions/{version}/content`](/docs/api/compatible/anthropic/managed-agents/downloadSkillVersion) | Download Skill Version Content | ○ Unsupported |
### Tunnels (10 endpoints, 0 available) [#tunnels-10-endpoints-0-available]
| Method | Path | Description | Support |
| ------ | ----------------------------------------------------------------------------------------------------------------------------------------- | -------------------------- | ------------- |
| GET | [`/v1/tunnels`](/docs/api/compatible/anthropic/managed-agents/listTunnels) | List Tunnels | ○ Unsupported |
| POST | [`/v1/tunnels`](/docs/api/compatible/anthropic/managed-agents/createTunnel) | Create Tunnel | ○ Unsupported |
| GET | [`/v1/tunnels/{tunnel_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveTunnel) | Get Tunnel | ○ Unsupported |
| POST | [`/v1/tunnels/{tunnel_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveTunnel) | Archive Tunnel | ○ Unsupported |
| GET | [`/v1/tunnels/{tunnel_id}/certificates`](/docs/api/compatible/anthropic/managed-agents/listTunnelCertificates) | List Tunnel Certificates | ○ Unsupported |
| POST | [`/v1/tunnels/{tunnel_id}/certificates`](/docs/api/compatible/anthropic/managed-agents/createTunnelCertificate) | Create Tunnel Certificate | ○ Unsupported |
| GET | [`/v1/tunnels/{tunnel_id}/certificates/{certificate_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveTunnelCertificate) | Get Tunnel Certificate | ○ Unsupported |
| POST | [`/v1/tunnels/{tunnel_id}/certificates/{certificate_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveTunnelCertificate) | Archive Tunnel Certificate | ○ Unsupported |
| POST | [`/v1/tunnels/{tunnel_id}/reveal_token`](/docs/api/compatible/anthropic/managed-agents/revealTunnelToken) | Reveal Tunnel Token | ○ Unsupported |
| POST | [`/v1/tunnels/{tunnel_id}/rotate_token`](/docs/api/compatible/anthropic/managed-agents/rotateTunnelToken) | Rotate Tunnel Token | ○ Unsupported |
### Vaults & credentials (13 endpoints, 13 available) [#vaults--credentials-13-endpoints-13-available]
| Method | Path | Description | Support |
| ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------- | ----------- |
| GET | [`/v1/vaults`](/docs/api/compatible/anthropic/managed-agents/listVaults) | List Vaults | ● Supported |
| POST | [`/v1/vaults`](/docs/api/compatible/anthropic/managed-agents/createVault) | Create Vault | ● Supported |
| DELETE | [`/v1/vaults/{vault_id}`](/docs/api/compatible/anthropic/managed-agents/deleteVault) | Delete Vault | ● Supported |
| GET | [`/v1/vaults/{vault_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveVault) | Get Vault | ● Supported |
| POST | [`/v1/vaults/{vault_id}`](/docs/api/compatible/anthropic/managed-agents/updateVault) | Update Vault | ● Supported |
| POST | [`/v1/vaults/{vault_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveVault) | Archive Vault | ● Supported |
| GET | [`/v1/vaults/{vault_id}/credentials`](/docs/api/compatible/anthropic/managed-agents/listVaultCredentials) | List Credentials | ◐ Partial |
| POST | [`/v1/vaults/{vault_id}/credentials`](/docs/api/compatible/anthropic/managed-agents/createVaultCredential) | Create Credential | ◐ Partial |
| DELETE | [`/v1/vaults/{vault_id}/credentials/{credential_id}`](/docs/api/compatible/anthropic/managed-agents/deleteVaultCredential) | Delete Credential | ◐ Partial |
| GET | [`/v1/vaults/{vault_id}/credentials/{credential_id}`](/docs/api/compatible/anthropic/managed-agents/retrieveVaultCredential) | Get Credential | ◐ Partial |
| POST | [`/v1/vaults/{vault_id}/credentials/{credential_id}`](/docs/api/compatible/anthropic/managed-agents/updateVaultCredential) | Update Credential | ◐ Partial |
| POST | [`/v1/vaults/{vault_id}/credentials/{credential_id}/archive`](/docs/api/compatible/anthropic/managed-agents/archiveVaultCredential) | Archive Credential | ◐ Partial |
| POST | [`/v1/vaults/{vault_id}/credentials/{credential_id}/mcp_oauth_validate`](/docs/api/compatible/anthropic/managed-agents/validateVaultCredentialMcpOAuth) | Validate Credential MCP OAuth | ◐ Partial |
## Differences from Claude Managed Agents [#differences-from-claude-managed-agents]
* Create Agent：Supports text prompts, models, metadata and built-in tools. MCP, skills and additional model controls are not supported and return 400. multiagent accepts null or a coordinator roster of 1–20 agent IDs, \{type:"agent",id,version?} references or at most one \{type:"self"}. Versions are pinned on create/update. Members must be distinct, exist, be unarchived and have no multiagent topology. The compatibility API provides only the eight official tools: bash, edit, glob, grep, read, write, web\_search and web\_fetch. configs rejects other tool names. Sessions created here do not provide background tasks, Monitor or subagents. Use /agent/v1 for all native tools. Each coordinator permits at most one advisor whose model must be available and differ from the agent model; only the primary session can consult it, each consultation uses a separate advisor thread, and advice returns via agent.thread\_message\_received.
* Get Agent：Replace example resource IDs with IDs from resources you created.
* Update Agent：Use version for optimistic concurrency; conflicts return 409 and unchanged updates preserve the version. MCP and skills are not supported. multiagent accepts null or a coordinator roster of 1–20 agent IDs, \{type:"agent",id,version?} references or at most one \{type:"self"}. Versions are pinned on create/update. Members must be distinct, exist, be unarchived and have no multiagent topology. The compatibility API provides only the eight official tools: bash, edit, glob, grep, read, write, web\_search and web\_fetch. configs rejects other tool names. Sessions created here do not provide background tasks, Monitor or subagents. Use /agent/v1 for all native tools. Each coordinator permits at most one advisor whose model must be available and differ from the agent model; only the primary session can consult it, each consultation uses a separate advisor thread, and advice returns via agent.thread\_message\_received.
* List Agent Versions：Replace example resource IDs with IDs from resources you created.
* Archive Agent：Archived agents remain readable, including versions, but cannot be updated. Only archive your own test agent.
* Create Session：Create an agent first and replace agent\_123 with its returned id. environment\_id is required on this compatibility surface: use node22 or a tenant-owned cloud environment. The native /agent/v1 surface allows omission to select a light machine. Inline agent overrides, budgets and vaults are not supported. Supports persistence, retrieval and removal of file resource references, up to 500 per session. Files must be live and owned by the current tenant. Paths default to /mnt/session/uploads/\; custom paths are rooted there and parent traversal is rejected. File content is immutable through this API. Sandbox synchronization is not implemented in this batch.
* List Sessions：Supports limit, page and agent\_id. agent\_version, time ranges, deployment\_id, memory\_store\_id, include\_archived, order and statuses are not supported and return 400.
* Get Session：Replace example resource IDs with IDs from resources you created.
* Send Events：Each user.message accepts exactly one nonempty text block. Replace sesn\_123 with your session id. Text user.message, user.interrupt and tool confirmation are supported; other input variants are not. The response acknowledges inputs; read replies from event history or the stream. A user.message sent while the session waits for tool approval is queued: the returned event has processed\_at null and runs in order once the approval is resolved.
* List Events：Send a message before reading history. Until processing finishes, only admitted input may be visible. Pagination, event type and time filters are supported. A session waiting for tool approval pauses on session.status\_idle with stop\_reason requires\_action, whose event\_ids list the agent.tool\_use events to confirm. A failed run emits session.error before session.status\_terminated. As in the official API, agent.thinking is a progress signal without content.
* Stream Events：Keep the SSE connection open and send a message in another request after replacing sesn\_123. Stopping the stream disconnects the subscription, not the agent. SDK 0.124.0 filters session.usage; read history for full usage. Pass event\_deltas\[]=agent.message to receive incremental text previews before the final event; as in the official API, agent.thinking previews are start-only.
* List Environments：Supports tenant-owned cloud environments, configuration updates and soft archival; built-ins are read-only. Lists accept limit, page and include\_archived. Limited networking applies at sandbox creation; package installation failure terminates the session with ENVIRONMENT\_PACKAGE\_INSTALL\_FAILED. self\_hosted, scope and cross-session package caching are not supported.
* Create Environment：Supports tenant-owned cloud environments, configuration updates and soft archival; built-ins are read-only. Lists accept limit, page and include\_archived. Limited networking applies at sandbox creation; package installation failure terminates the session with ENVIRONMENT\_PACKAGE\_INSTALL\_FAILED. self\_hosted, scope and cross-session package caching are not supported.
* Get Environment：Supports tenant-owned cloud environments, configuration updates and soft archival; built-ins are read-only. Lists accept limit, page and include\_archived. Limited networking applies at sandbox creation; package installation failure terminates the session with ENVIRONMENT\_PACKAGE\_INSTALL\_FAILED. self\_hosted, scope and cross-session package caching are not supported.
* Update Environment：Supports tenant-owned cloud environments, configuration updates and soft archival; built-ins are read-only. Lists accept limit, page and include\_archived. Limited networking applies at sandbox creation; package installation failure terminates the session with ENVIRONMENT\_PACKAGE\_INSTALL\_FAILED. self\_hosted, scope and cross-session package caching are not supported.
* Archive Environment：Supports tenant-owned cloud environments, configuration updates and soft archival; built-ins are read-only. Lists accept limit, page and include\_archived. Limited networking applies at sandbox creation; package installation failure terminates the session with ENVIRONMENT\_PACKAGE\_INSTALL\_FAILED. self\_hosted, scope and cross-session package caching are not supported.
* Update Session：Supports title and metadata with the official patch semantics: a string value upserts the key, null deletes it, a whole-null object clears the bag, and untouched keys are preserved. The official agent override (tools/mcp\_servers), budget and vault\_ids are not supported and return 400 naming the field. Updating an archived session returns 409.
* Archive Session：Archived sessions refuse new messages with 400 invalid\_request\_error naming the archived session; retrieval and event history stay readable. Re-archiving is idempotent and archived\_at keeps the first archive time.
* List Session Resources：Supports persistence, retrieval and removal of file resource references, up to 500 per session. Files must be live and owned by the current tenant. Paths default to /mnt/session/uploads/\; custom paths are rooted there and parent traversal is rejected. File content is immutable through this API. Sandbox synchronization is not implemented in this batch.
* Add Session Resource：Supports persistence, retrieval and removal of file resource references, up to 500 per session. Files must be live and owned by the current tenant. Paths default to /mnt/session/uploads/\; custom paths are rooted there and parent traversal is rejected. File content is immutable through this API. Sandbox synchronization is not implemented in this batch.
* Delete Session Resource：Supports persistence, retrieval and removal of file resource references, up to 500 per session. Files must be live and owned by the current tenant. Paths default to /mnt/session/uploads/\; custom paths are rooted there and parent traversal is rejected. File content is immutable through this API. Sandbox synchronization is not implemented in this batch.
* Get Session Resource：Supports persistence, retrieval and removal of file resource references, up to 500 per session. Files must be live and owned by the current tenant. Paths default to /mnt/session/uploads/\; custom paths are rooted there and parent traversal is rejected. File content is immutable through this API. Sandbox synchronization is not implemented in this batch.
* List Threads：Returns the primary thread and every child thread in created\_at order. Thread ids use sthr\_ plus the owning session suffix; children reference the primary parent\_thread\_id and retain the parent session\_id. agent describes the actual running definition; built-in types use their type name and null for unregistered id/version. Archived children have status terminated and archived\_at. stats/usage remain null without thread-level tracking.
* Get Thread：Returns a primary or child thread belonging to this session, field-for-field identical to its list item. Foreign, unknown and malformed thread ids uniformly return 404 without revealing existence.
* Archive Thread：Archiving the primary thread uses session archival. Archiving a child archives only that child session, leaving the parent and siblings intact. Archived children have status terminated and archived\_at; their history remains readable.
* List Thread Events：Reads the selected thread ledger: the primary session for the primary thread, or the child session for a child thread. Uses the session event query parameters, public event types and data + next\_page envelope. Web tools return search\_result blocks on both APIs; answer citations are an /agent/v1 extension, rendered as \[n] on /anthropic.
* Stream Thread Events：Subscribes to the selected thread live ledger using the session SSE implementation; the /agent API also supports a read-only WebSocket. The parent stream includes child creation, status and message events. Child approvals carry session\_thread\_id; confirmations and interrupts targeting that id are routed to the owned child.
* List Vaults：Supports create, list, retrieve, update, archive and delete. Lists accept limit, page and include\_archived. Archiving a vault archives every credential in it and clears their values; deleting it removes every credential and cannot be undone. Metadata keys starting with anthropic. are reserved and cannot be written. The same vaults are also available through the native /vault/v1 API.
* Create Vault：Supports create, list, retrieve, update, archive and delete. Lists accept limit, page and include\_archived. Archiving a vault archives every credential in it and clears their values; deleting it removes every credential and cannot be undone. Metadata keys starting with anthropic. are reserved and cannot be written. The same vaults are also available through the native /vault/v1 API.
* Delete Vault：Supports create, list, retrieve, update, archive and delete. Lists accept limit, page and include\_archived. Archiving a vault archives every credential in it and clears their values; deleting it removes every credential and cannot be undone. Metadata keys starting with anthropic. are reserved and cannot be written. The same vaults are also available through the native /vault/v1 API.
* Get Vault：Supports create, list, retrieve, update, archive and delete. Lists accept limit, page and include\_archived. Archiving a vault archives every credential in it and clears their values; deleting it removes every credential and cannot be undone. Metadata keys starting with anthropic. are reserved and cannot be written. The same vaults are also available through the native /vault/v1 API.
* Update Vault：Supports create, list, retrieve, update, archive and delete. Lists accept limit, page and include\_archived. Archiving a vault archives every credential in it and clears their values; deleting it removes every credential and cannot be undone. Metadata keys starting with anthropic. are reserved and cannot be written. The same vaults are also available through the native /vault/v1 API.
* Archive Vault：Supports create, list, retrieve, update, archive and delete. Lists accept limit, page and include\_archived. Archiving a vault archives every credential in it and clears their values; deleting it removes every credential and cannot be undone. Metadata keys starting with anthropic. are reserved and cannot be written. The same vaults are also available through the native /vault/v1 API.
* List Credentials：Supports environment\_variable and static\_bearer. environment\_variable networking supports limited only; unrestricted returns 400. secret\_name may contain only uppercase letters, digits and underscores and cannot start with a digit. injection\_location defaults match the official API. A static\_bearer token is usable only on the host of its mcp\_server\_url. Creating or updating mcp\_oauth returns 501 (not\_implemented\_error), produces no side effects, and the official SDK does not retry; use one-click authorization at /vault/v1/authorizations for OAuth tokens. A vault holds at most 20 active credentials. Metadata keys starting with anthropic. are reserved and cannot be written.
* Create Credential：Supports environment\_variable and static\_bearer. environment\_variable networking supports limited only; unrestricted returns 400. secret\_name may contain only uppercase letters, digits and underscores and cannot start with a digit. injection\_location defaults match the official API. A static\_bearer token is usable only on the host of its mcp\_server\_url. Creating or updating mcp\_oauth returns 501 (not\_implemented\_error), produces no side effects, and the official SDK does not retry; use one-click authorization at /vault/v1/authorizations for OAuth tokens. A vault holds at most 20 active credentials. Metadata keys starting with anthropic. are reserved and cannot be written.
* Delete Credential：Supports environment\_variable and static\_bearer. environment\_variable networking supports limited only; unrestricted returns 400. secret\_name may contain only uppercase letters, digits and underscores and cannot start with a digit. injection\_location defaults match the official API. A static\_bearer token is usable only on the host of its mcp\_server\_url. Creating or updating mcp\_oauth returns 501 (not\_implemented\_error), produces no side effects, and the official SDK does not retry; use one-click authorization at /vault/v1/authorizations for OAuth tokens. A vault holds at most 20 active credentials. Metadata keys starting with anthropic. are reserved and cannot be written.
* Get Credential：Supports environment\_variable and static\_bearer. environment\_variable networking supports limited only; unrestricted returns 400. secret\_name may contain only uppercase letters, digits and underscores and cannot start with a digit. injection\_location defaults match the official API. A static\_bearer token is usable only on the host of its mcp\_server\_url. Creating or updating mcp\_oauth returns 501 (not\_implemented\_error), produces no side effects, and the official SDK does not retry; use one-click authorization at /vault/v1/authorizations for OAuth tokens. A vault holds at most 20 active credentials. Metadata keys starting with anthropic. are reserved and cannot be written.
* Update Credential：Supports environment\_variable and static\_bearer. environment\_variable networking supports limited only; unrestricted returns 400. secret\_name may contain only uppercase letters, digits and underscores and cannot start with a digit. injection\_location defaults match the official API. A static\_bearer token is usable only on the host of its mcp\_server\_url. Creating or updating mcp\_oauth returns 501 (not\_implemented\_error), produces no side effects, and the official SDK does not retry; use one-click authorization at /vault/v1/authorizations for OAuth tokens. A vault holds at most 20 active credentials. Metadata keys starting with anthropic. are reserved and cannot be written.
* Archive Credential：Supports environment\_variable and static\_bearer. environment\_variable networking supports limited only; unrestricted returns 400. secret\_name may contain only uppercase letters, digits and underscores and cannot start with a digit. injection\_location defaults match the official API. A static\_bearer token is usable only on the host of its mcp\_server\_url. Creating or updating mcp\_oauth returns 501 (not\_implemented\_error), produces no side effects, and the official SDK does not retry; use one-click authorization at /vault/v1/authorizations for OAuth tokens. A vault holds at most 20 active credentials. Metadata keys starting with anthropic. are reserved and cannot be written.
* Validate Credential MCP OAuth：Applies to OAuth credentials only; other types return 400. The result is always HTTP 200 with status valid, invalid or unknown; mcp\_probe describes the failing step only when the check does not pass, and refresh appears only when a refresh was attempted.
For authoritative parameter definitions, see the [official Claude Managed Agents documentation](https://platform.claude.com/docs/en/managed-agents/overview).
Errors follow the Claude Managed Agents format, see [errors](/docs/api/errors); quotas and response headers are covered in [rate limits](/docs/api/rate-limits).