1# Managed Agents — Endpoint Reference
2 
3All endpoints require `x-api-key` and `anthropic-version: 2023-06-01` headers. Managed Agents endpoints additionally require the `anthropic-beta` header.
4 
5## Beta Headers
6 
7```
8anthropic-beta: managed-agents-2026-04-01
9```
10 
11The SDK adds this header automatically for all `client.beta.{agents,environments,sessions,vaults,memory_stores,deployments,deployment_runs}.*` calls. Skills endpoints use `skills-2025-10-02`; Files endpoints use `files-api-2025-04-14`.
12 
13---
14 
15## SDK Method Reference
16 
17All resources are under the `beta` namespace. Python and TypeScript share identical method names.
18 
19| Resource | Python / TypeScript (`client.beta.*`) | Go (`client.Beta.*`) |
20| --- | --- | --- |
21| Agents | `agents.create` / `retrieve` / `update` / `list` / `archive` | `Agents.New` / `Get` / `Update` / `List` / `Archive` |
22| Agent Versions | `agents.versions.list` | `Agents.Versions.List` |
23| Environments | `environments.create` / `retrieve` / `update` / `list` / `delete` / `archive` | `Environments.New` / `Get` / `Update` / `List` / `Delete` / `Archive` |
24| Environment Work (self-hosted) | `environments.work.poller` / `stats` / `stop` | See `shared/managed-agents-self-hosted-sandboxes.md` |
25| Sessions | `sessions.create` / `retrieve` / `update` / `list` / `delete` / `archive` | `Sessions.New` / `Get` / `Update` / `List` / `Delete` / `Archive` |
26| Session Events | `sessions.events.list` / `send` / `stream` | `Sessions.Events.List` / `Send` / `StreamEvents` |
27| Session Threads | `sessions.threads.list` / `retrieve` / `archive`; `sessions.threads.events.list` / `stream` | `Sessions.Threads.List` / `Get` / `Archive`; `Sessions.Threads.Events.List` / `StreamEvents` |
28| Session Resources | `sessions.resources.add` / `retrieve` / `update` / `list` / `delete` | `Sessions.Resources.Add` / `Get` / `Update` / `List` / `Delete` |
29| Deployments | `deployments.create` / `pause` / `unpause` / `archive` / `run` | Not yet documented — WebFetch the SDK repo (`shared/live-sources.md`) |
30| Deployment Runs | `deployment_runs.list` (TS: `deploymentRuns.list`) | Not yet documented — WebFetch the SDK repo (`shared/live-sources.md`) |
31| Vaults | `vaults.create` / `retrieve` / `update` / `list` / `delete` / `archive` | `Vaults.New` / `Get` / `Update` / `List` / `Delete` / `Archive` |
32| Credentials | `vaults.credentials.create` / `retrieve` / `update` / `list` / `delete` / `archive` / `mcp_oauth_validate` | `Vaults.Credentials.New` / `Get` / `Update` / `List` / `Delete` / `Archive` / `McpOauthValidate` |
33| Memory Stores | `memory_stores.create` / `retrieve` / `update` / `list` / `delete` / `archive` | `MemoryStores.New` / `Get` / `Update` / `List` / `Delete` / `Archive` |
34| Memories | `memory_stores.memories.create` / `retrieve` / `update` / `list` / `delete` | `MemoryStores.Memories.New` / `Get` / `Update` / `List` / `Delete` |
35| Memory Versions | `memory_stores.memory_versions.list` / `retrieve` / `redact` | `MemoryStores.MemoryVersions.List` / `Get` / `Redact` |
36 
37**Naming quirks to watch for:**
38- Agents and Session Threads have **no delete** — only `archive`. Archive is **permanent**: the agent becomes read-only, new sessions cannot reference it, and there is no unarchive. Confirm with the user before archiving a production agent. Environments, Sessions, Vaults, Credentials, and Memory Stores have both `delete` and `archive`; Session Resources, Files, Skills, and Memories are `delete`-only; Memory Versions have neither — only `redact`.
39- Session resources use `add` (not `create`).
40- Go's event stream is `StreamEvents` (not `Stream`).
41- The self-hosted worker is **not** under `client.beta.*` — it's `EnvironmentWorker` from `anthropic.lib.environments` / `@anthropic-ai/sdk/helpers/beta/environments`; only `environments.work.poller/stats/stop` are client methods.
42 
43**Agent shorthand:** `agent` on session create accepts either a bare string (`agent="agent_abc123"` — uses latest version) or the full reference object (`{type: "agent", id: "agent_abc123", version: 123}`).
44 
45**Model shorthand:** `model` on agent create accepts either a bare string (`model="claude-opus-4-8"` — uses `standard` speed) or the full config object (`{id: "claude-opus-4-6", speed: "fast"}`). Note: `speed: "fast"` is only supported on Opus 4.6.
46 
47---
48 
49## Agents
50 
51**Step one of every flow.** Sessions require a pre-created agent — there is no inline agent config under `managed-agents-2026-04-01`.
52 
53| Method   | Path                                             | Operation        | Description                              |
54| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
55| `GET` | `/v1/agents` | ListAgents | List agents |
56| `POST` | `/v1/agents` | CreateAgent | Create a saved agent configuration |
57| `GET` | `/v1/agents/{agent_id}` | GetAgent | Get agent details |
58| `POST` | `/v1/agents/{agent_id}` | UpdateAgent | Update agent configuration |
59| `POST` | `/v1/agents/{agent_id}/archive` | ArchiveAgent | Archive an agent. Makes it **read-only**; existing sessions continue, new sessions cannot reference it. No unarchive — this is the terminal state. |
60| `GET` | `/v1/agents/{agent_id}/versions` | ListAgentVersions | List agent versions |
61 
62## Sessions
63 
64| Method   | Path                                             | Operation        | Description                              |
65| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
66| `GET` | `/v1/sessions` | ListSessions | List sessions (paginated) |
67| `POST` | `/v1/sessions` | CreateSession | Create a new session |
68| `GET` | `/v1/sessions/{session_id}` | GetSession | Get session details |
69| `POST` | `/v1/sessions/{session_id}` | UpdateSession | Update session `metadata`/`title`, or `agent.tools`/`agent.mcp_servers`/`vault_ids` (session-local override; session must be `idle`). See `shared/managed-agents-core.md` → Updating the agent configuration mid-session. |
70| `DELETE` | `/v1/sessions/{session_id}` | DeleteSession | Delete a session |
71| `POST` | `/v1/sessions/{session_id}/archive` | ArchiveSession | Archive a session |
72 
73## Events
74 
75| Method   | Path                                             | Operation        | Description                              |
76| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
77| `GET` | `/v1/sessions/{session_id}/events` | ListEvents | List events (polling, paginated) |
78| `POST` | `/v1/sessions/{session_id}/events` | SendEvents | Send events (user message, tool result) |
79| `GET` | `/v1/sessions/{session_id}/events/stream` | StreamEvents | Stream events via SSE |
80 
81## Session Threads
82 
83Per-subagent event streams in multiagent sessions. See `shared/managed-agents-multiagent.md`.
84 
85| Method   | Path                                             | Operation        | Description                              |
86| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
87| `GET` | `/v1/sessions/{session_id}/threads` | ListThreads | List threads (paginated) |
88| `GET` | `/v1/sessions/{session_id}/threads/{thread_id}` | GetThread | Retrieve one thread (carries `agent` snapshot, `status`, `parent_thread_id`, `stats`, `usage`) |
89| `POST` | `/v1/sessions/{session_id}/threads/{thread_id}/archive` | ArchiveThread | Archive a thread |
90| `GET` | `/v1/sessions/{session_id}/threads/{thread_id}/events` | ListThreadEvents | List past events for one thread (paginated) |
91| `GET` | `/v1/sessions/{session_id}/threads/{thread_id}/stream` | StreamThreadEvents | Stream one thread via SSE (SDK: `threads.events.stream`) |
92 
93## Session Resources
94 
95| Method   | Path                                                    | Operation        | Description                              |
96| -------- | ------------------------------------------------------- | ---------------- | ---------------------------------------- |
97| `GET` | `/v1/sessions/{session_id}/resources` | ListResources | List resources attached to session |
98| `POST` | `/v1/sessions/{session_id}/resources` | AddResource | Attach `file` or `github_repository` resource (SDK method: `add`, not `create`). `memory_store` resources attach at session-create time only. |
99| `GET` | `/v1/sessions/{session_id}/resources/{resource_id}` | GetResource | Get a single resource |
100| `POST` | `/v1/sessions/{session_id}/resources/{resource_id}` | UpdateResource | Update resource |
101| `DELETE` | `/v1/sessions/{session_id}/resources/{resource_id}` | DeleteResource | Remove resource from session |
102 
103## Environments
104 
105| Method   | Path                                                             | Operation            | Description                         |
106| -------- | ---------------------------------------------------------------- | -------------------- | ----------------------------------- |
107| `POST`   | `/v1/environments`                                     | CreateEnvironment    | Create environment                  |
108| `GET`    | `/v1/environments`                                     | ListEnvironments     | List environments                   |
109| `GET`    | `/v1/environments/{environment_id}`                    | GetEnvironment       | Get environment details             |
110| `POST`   | `/v1/environments/{environment_id}`                    | UpdateEnvironment    | Update environment                  |
111| `DELETE` | `/v1/environments/{environment_id}`                    | DeleteEnvironment    | Delete environment. Returns 204. |
112| `POST`   | `/v1/environments/{environment_id}/archive`            | ArchiveEnvironment   | Archive environment. Makes it **read-only**; existing sessions continue, new sessions cannot reference it. No unarchive — this is the terminal state. |
113| `GET`    | `/v1/environments/{environment_id}/work/stats`         | WorkQueueStats       | Self-hosted work-queue depth/pending/workers. `x-api-key` auth. See `shared/managed-agents-self-hosted-sandboxes.md`. |
114| `POST`   | `/v1/environments/{environment_id}/work/{work_id}/stop` | StopWork            | Self-hosted: stop a claimed work item. `x-api-key` auth. |
115 
116For `type: "self_hosted"`, `config` is the bare `{"type": "self_hosted"}` — `networking` and `packages` do not apply.
117 
118## Deployments
119 
120Scheduled deployments (`depl_` IDs) run an agent on a recurring cron schedule — each firing creates a session. See `shared/managed-agents-scheduled-deployments.md` for the conceptual guide (cron/DST semantics, failure behavior, lifecycle).
121 
122| Method   | Path                                             | Operation        | Description                              |
123| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
124| `POST`   | `/v1/deployments`                                | CreateDeployment | Create a scheduled deployment            |
125| `POST`   | `/v1/deployments/{deployment_id}/pause`          | PauseDeployment  | Suppress scheduled triggers (reversible; manual runs still allowed) |
126| `POST`   | `/v1/deployments/{deployment_id}/unpause`        | UnpauseDeployment | Resume from the next occurrence (no backfill) |
127| `POST`   | `/v1/deployments/{deployment_id}/archive`        | ArchiveDeployment | **Terminal** — schedule stops, deployment becomes immutable |
128| `POST`   | `/v1/deployments/{deployment_id}/run`            | RunDeployment    | Trigger a manual run immediately (`trigger_context.type: "manual"`); works while paused |
129 
130## Deployment Runs
131 
132Each trigger attempt (scheduled or manual) writes a `deployment_run` record (`drun_` IDs) carrying either the created `session_id` or an `error.type` (`environment_archived`, `agent_archived`, `vault_not_found`, `session_rate_limited`, `service_unavailable`).
133 
134| Method   | Path                                             | Operation        | Description                              |
135| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
136| `GET`    | `/v1/deployment_runs?deployment_id=...`          | ListDeploymentRuns | List runs for a deployment (paginated; filter failures with `has_error=true`) |
137 
138## Vaults
139 
140Vaults store credentials that Anthropic manages on your behalf — MCP credentials (OAuth with auto-refresh, or static bearer tokens) and `environment_variable` credentials substituted into outbound requests at egress. Attach to sessions via `vault_ids`. See `managed-agents-tools.md` §Vaults for the conceptual guide and credential shapes.
141 
142| Method   | Path                                             | Operation        | Description                              |
143| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
144| `POST`   | `/v1/vaults`                                     | CreateVault      | Create a vault                           |
145| `GET`    | `/v1/vaults`                                     | ListVaults       | List vaults                              |
146| `GET`    | `/v1/vaults/{vault_id}`                          | GetVault         | Get vault details                        |
147| `POST`   | `/v1/vaults/{vault_id}`                          | UpdateVault      | Update vault                             |
148| `DELETE` | `/v1/vaults/{vault_id}`                          | DeleteVault      | Delete vault                             |
149| `POST`   | `/v1/vaults/{vault_id}/archive`                  | ArchiveVault     | Archive vault                            |
150 
151## Credentials
152 
153Credentials are individual secrets stored inside a vault.
154 
155| Method   | Path                                                              | Operation          | Description                  |
156| -------- | ----------------------------------------------------------------- | ------------------ | ---------------------------- |
157| `POST`   | `/v1/vaults/{vault_id}/credentials`                               | CreateCredential   | Create a credential          |
158| `GET`    | `/v1/vaults/{vault_id}/credentials`                               | ListCredentials    | List credentials in vault    |
159| `GET`    | `/v1/vaults/{vault_id}/credentials/{credential_id}`               | GetCredential      | Get credential metadata      |
160| `POST`   | `/v1/vaults/{vault_id}/credentials/{credential_id}`               | UpdateCredential   | Update credential            |
161| `DELETE` | `/v1/vaults/{vault_id}/credentials/{credential_id}`               | DeleteCredential   | Delete credential            |
162| `POST`   | `/v1/vaults/{vault_id}/credentials/{credential_id}/archive`       | ArchiveCredential  | Archive credential           |
163| `POST`   | `/v1/vaults/{vault_id}/credentials/{credential_id}/mcp_oauth_validate` | McpOauthValidate | Validate an MCP OAuth credential |
164 
165## Memory Stores
166 
167Workspace-scoped persistent memory that survives across sessions. Attach to a session via a `{"type": "memory_store", "memory_store_id": ...}` entry in `resources[]` (session-create time only). See `shared/managed-agents-memory.md` for the conceptual guide, the FUSE-mount agent interface, preconditions, and versioning.
168 
169| Method   | Path                                             | Operation          | Description                              |
170| -------- | ------------------------------------------------ | ------------------ | ---------------------------------------- |
171| `POST`   | `/v1/memory_stores`                              | CreateMemoryStore  | Create a store (`name`, `description`, `metadata`) |
172| `GET`    | `/v1/memory_stores`                              | ListMemoryStores   | List stores (`include_archived`, `created_at_{gte,lte}`) |
173| `GET`    | `/v1/memory_stores/{memory_store_id}`            | GetMemoryStore     | Get store details                        |
174| `POST`   | `/v1/memory_stores/{memory_store_id}`            | UpdateMemoryStore  | Update store                             |
175| `DELETE` | `/v1/memory_stores/{memory_store_id}`            | DeleteMemoryStore  | Delete store                             |
176| `POST`   | `/v1/memory_stores/{memory_store_id}/archive`    | ArchiveMemoryStore | Archive store. Makes it **read-only**; existing sessions continue, new sessions cannot reference it. No unarchive. |
177 
178## Memories
179 
180Individual text documents inside a store (≤ 100KB each). `create` creates at a `path` and returns `409` (`memory_path_conflict_error`, with `conflicting_memory_id`) if the path is occupied; `update` mutates by `mem_...` ID (rename and/or content). Only `update` accepts a `precondition` (`{"type": "content_sha256", "content_sha256": ...}`) — on mismatch returns `409` (`memory_precondition_failed_error`). List endpoints accept `view: "basic"|"full"` (controls whether `content` is populated; `retrieve` defaults to `full`).
181 
182| Method   | Path                                                              | Operation      | Description                              |
183| -------- | ----------------------------------------------------------------- | -------------- | ---------------------------------------- |
184| `GET`    | `/v1/memory_stores/{memory_store_id}/memories`                    | ListMemories   | Returns `Memory \| MemoryPrefix`; filter by `path_prefix`, `depth`, `order_by`/`order` |
185| `POST`   | `/v1/memory_stores/{memory_store_id}/memories`                    | CreateMemory   | Create at `path` (SDK: `memories.create`); `409 memory_path_conflict_error` if occupied |
186| `GET`    | `/v1/memory_stores/{memory_store_id}/memories/{memory_id}`        | GetMemory      | Read one memory (defaults to `view="full"`) |
187| `PATCH`  | `/v1/memory_stores/{memory_store_id}/memories/{memory_id}`        | UpdateMemory   | Change `content`, `path`, or both by ID; optional `precondition` |
188| `DELETE` | `/v1/memory_stores/{memory_store_id}/memories/{memory_id}`        | DeleteMemory   | Delete (optional `expected_content_sha256`) |
189 
190## Memory Versions
191 
192Immutable per-mutation snapshots (`memver_...`) — the audit and rollback surface. `operation` ∈ `created` / `modified` / `deleted`.
193 
194| Method   | Path                                                                          | Operation             | Description                              |
195| -------- | ----------------------------------------------------------------------------- | --------------------- | ---------------------------------------- |
196| `GET`    | `/v1/memory_stores/{memory_store_id}/memory_versions`                         | ListMemoryVersions    | Newest-first; filter by `memory_id`, `operation`, `session_id`, `api_key_id`, `created_at_{gte,lte}` |
197| `GET`    | `/v1/memory_stores/{memory_store_id}/memory_versions/{version_id}`            | GetMemoryVersion      | List fields + full `content`             |
198| `POST`   | `/v1/memory_stores/{memory_store_id}/memory_versions/{version_id}/redact`     | RedactMemoryVersion   | Clear `content`/`content_sha256`/`content_size_bytes`/`path`; preserve actor + timestamps |
199 
200## Files
201 
202| Method   | Path                                             | Operation        | Description                              |
203| -------- | ------------------------------------------------ | ---------------- | ---------------------------------------- |
204| `POST`   | `/v1/files`                            | UploadFile       | Upload a file                            |
205| `GET`    | `/v1/files`                            | ListFiles        | List files                               |
206| `GET`    | `/v1/files/{file_id}`                  | GetFile          | Get file metadata (SDK method: `retrieve_metadata`) |
207| `GET`    | `/v1/files/{file_id}/content`          | DownloadFile     | Download file content                    |
208| `DELETE` | `/v1/files/{file_id}`                  | DeleteFile       | Delete a file                            |
209 
210## Skills
211 
212| Method   | Path                                                            | Operation          | Description                  |
213| -------- | --------------------------------------------------------------- | ------------------ | ---------------------------- |
214| `POST`   | `/v1/skills`                                          | CreateSkill        | Create a skill               |
215| `GET`    | `/v1/skills`                                          | ListSkills         | List skills                  |
216| `GET`    | `/v1/skills/{skill_id}`                               | GetSkill           | Get skill details            |
217| `DELETE` | `/v1/skills/{skill_id}`                               | DeleteSkill        | Delete a skill               |
218| `POST`   | `/v1/skills/{skill_id}/versions`                      | CreateVersion      | Create skill version         |
219| `GET`    | `/v1/skills/{skill_id}/versions`                      | ListVersions       | List skill versions          |
220| `GET`    | `/v1/skills/{skill_id}/versions/{version}`            | GetVersion         | Get skill version            |
221| `DELETE` | `/v1/skills/{skill_id}/versions/{version}`            | DeleteVersion      | Delete skill version         |
222 
223---
224 
225## Request/Response Schema Quick Reference
226 
227### CreateAgent Request Body
228 
229**Always start here.** `model`, `system`, `tools`, `mcp_servers`, `skills` are top-level fields on this object — they do NOT go on the session.
230 
231```json
232{
233  "name": "string (required, 1-256 chars)",
234  "model": "claude-opus-4-8 (required — bare string, or {id, speed} object)",
235  "description": "string (optional, up to 2048 chars)",
236  "system": "string (optional, up to 100,000 chars)",
237  "tools": [
238    { "type": "agent_toolset_20260401" }
239  ],
240  "skills": [
241    { "type": "anthropic", "skill_id": "xlsx" },
242    { "type": "custom", "skill_id": "skill_abc123", "version": "1" }
243  ],
244  "mcp_servers": [
245    {
246      "type": "url",
247      "name": "github",
248      "url": "https://api.githubcopilot.com/mcp/"
249    }
250  ],
251  "multiagent": {
252    "type": "coordinator",
253    "agents": [
254      "agent_abc123",
255      { "type": "agent", "id": "agent_def456", "version": 4 },
256      { "type": "self" }
257    ]
258  },
259  "metadata": {
260    "key": "value (max 16 pairs, keys ≤64 chars, values ≤512 chars)"
261  }
262}
263```
264 
265> Limits: `tools` max 128, `skills` max 20, `mcp_servers` max 20 (unique names). `multiagent.agents` 1–20 entries (string ID | `{type:"agent",id,version?}` | `{type:"self"}`) — see `shared/managed-agents-multiagent.md`.
266 
267### CreateSession Request Body
268 
269```json
270{
271  "agent": "agent_abc123 (required — string shorthand for latest version, or {type: \"agent\", id, version} object)",
272  "environment_id": "env_abc123 (required)",
273  "title": "string (optional)",
274  "resources": [
275    {
276      "type": "github_repository",
277      "url": "https://github.com/owner/repo (required)",
278      "authorization_token": "ghp_... (required)",
279      "mount_path": "/workspace/repo (optional — defaults to /workspace/<repo-name>)",
280      "checkout": { "type": "branch", "name": "main" }
281    }
282  ],
283  "vault_ids": ["vlt_abc123 (optional — vault credentials: MCP auth + environment variables)"],
284  "metadata": {
285    "key": "value"
286  }
287}
288```
289 
290> The `agent` field accepts only a string ID or `{type: "agent", id, version}` — `model`/`system`/`tools` live on the agent, not here.
291>
292> **`checkout`** accepts `{type: "branch", name: "..."}` or `{type: "commit", sha: "..."}`. Omit for the repo's default branch.
293 
294### CreateEnvironment Request Body
295 
296```json
297{
298  "name": "string (required)",
299  "description": "string (optional)",
300  "config": {
301    "type": "cloud | self_hosted",
302    "networking": {
303      "type": "unrestricted | limited (union — see SDK types)"
304    },
305    "packages": { }
306  },
307  "metadata": { "key": "value" }
308}
309```
310 
311### CreateDeployment Request Body
312 
313```json
314{
315  "name": "Weekly compliance scan",
316  "agent": "agent_abc123 (required — same shapes as CreateSession)",
317  "environment_id": "env_abc123 (required)",
318  "initial_events": [
319    { "type": "user.message", "content": [{ "type": "text", "text": "Run the weekly compliance scan." }] }
320  ],
321  "schedule": {
322    "type": "cron",
323    "expression": "0 20 * * 5",
324    "timezone": "America/New_York"
325  }
326}
327```
328 
329> Optional session config (`resources`, `vault_ids`, etc.) is supported the same way as on CreateSession. Response includes `status`, `paused_reason`, and `schedule.upcoming_runs_at` (next fire times). See `shared/managed-agents-scheduled-deployments.md`.
330 
331### SendEvents Request Body
332 
333```json
334{
335  "events": [
336    {
337      "type": "user.message",
338      "content": [
339        {
340          "type": "text",
341          "text": "Hello"
342        }
343      ]
344    }
345  ]
346}
347```
348 
349> `system.message` events (update the system prompt between turns) use the same envelope with `type: "system.message"` — Claude Opus 4.8 only; see `shared/managed-agents-events.md` § Updating the system prompt mid-session.
350 
351### Define Outcome Event
352 
353```json
354{
355  "type": "user.define_outcome",
356  "description": "Build a DCF model for Costco in .xlsx",
357  "rubric": { "type": "file", "file_id": "file_01..." },
358  "max_iterations": 5
359}
360```
361 
362> `rubric` is required: `{type: "text", content}` or `{type: "file", file_id}`. `max_iterations` default 3, max 20. Echoed back with `outcome_id` + `processed_at`. See `shared/managed-agents-outcomes.md`.
363 
364### Tool Result Event
365 
366```json
367{
368  "type": "user.custom_tool_result",
369  "custom_tool_use_id": "sevt_abc123",
370  "content": [{ "type": "text", "text": "Result data" }],
371  "is_error": false
372}
373```
374 
375---
376 
377## Error Handling
378 
379Managed Agents endpoints use the standard Anthropic API error format. Errors are returned with an HTTP status code and a JSON body containing `type`, `error`, and `request_id`:
380 
381```json
382{
383  "type": "error",
384  "error": {
385    "type": "invalid_request_error",
386    "message": "Description of what went wrong"
387  },
388  "request_id": "req_011CRv1W3XQ8XpFikNYG7RnE"
389}
390```
391 
392Include the `request_id` when reporting issues to Anthropic — it lets us trace the request end-to-end. The inner `error.type` is one of the following:
393 
394| Status | Error type | Description |
395|---|---|---|
396| 400 | `invalid_request_error` | The request was malformed or missing required parameters |
397| 401 | `authentication_error` | Invalid or missing API key |
398| 403 | `permission_error` | The API key doesn't have permission for this operation |
399| 404 | `not_found_error` | The requested resource doesn't exist |
400| 409 | `invalid_request_error` | The request conflicts with the resource's current state (e.g., sending to an archived session) |
401| 413 | `request_too_large` | The request body exceeds the maximum allowed size |
402| 429 | `rate_limit_error` | Too many requests — check rate limit headers for retry timing |
403| 500 | `api_error` | An internal server error occurred |
404| 529 | `overloaded_error` | The service is temporarily overloaded — retry with backoff |
405 
406Note that `409 Conflict` carries `error.type: "invalid_request_error"` (there is no separate `conflict_error` type); inspect both the HTTP status and the `message` to distinguish conflicts from other invalid requests.
407 
408---
409 
410## Rate Limits
411 
412Managed Agents endpoints have per-organization request-per-minute (RPM) limits, separate from your [Messages API token limits](https://platform.claude.com/docs/en/api/rate-limits). Model inference inside a session still draws from your organization's standard ITPM/OTPM limits.
413 
414| Endpoint group | Scope | RPM | Max concurrent |
415|---|---|---|---|
416| Create operations (Agents, Sessions, Vaults) | organization | 300 | — |
417| All other operations (Agents, Sessions, Vaults) | organization | 600 | — |
418| All operations (Environments) | organization | 60 | 5 |
419 
420Files and Skills endpoints use the standard tier-based [rate limits](https://platform.claude.com/docs/en/api/rate-limits).
421 
422When a limit is exceeded the API returns `429` with a `rate_limit_error` (see [Error Handling](#error-handling) for the response envelope) and a `retry-after` header indicating how many seconds to wait before retrying. The Anthropic SDK reads this header and retries automatically.
423