Claude docs changes for August 23rd, 2026 [diff]
Executive Summary
- Cloud/self-hosted environment administration is now restricted to the Owner role across the board — the Admin role can no longer open the Cloud environments admin page, enable self-hosted environments, or manage Trusted Devices
- New
/auto-mode-setupcommand has Claude Code scan your project and recent sessions to draftautoMode.environmententries for you, instead of hand-writing them - New plugins synced from claude.ai: Cowork and cloud sessions now download the plugins enabled on your claude.ai account and load them automatically as
<name>@synced - New MCP OAuth protection: Claude Code now rejects sign-ins whose redirect issuer doesn't match the server's advertised OAuth metadata (RFC 9207 mix-up-attack defense), with a clear new error message
- The archive's crawler fix recovered full content for 38 previously blank "Loading"-placeholder API reference pages (Messages API, Compliance API), but 4 Compliance pages that had full content before this sync now regressed to blank placeholders
Claude Code changes
Changed documents
admin-setup [Source]
- Claude Code on the web's admin surface for organization-shared environments is now scoped to Owners only, not Owners and admins. [line 83] [Source]
auto-mode-config [Source]
- New
/auto-mode-setupcommand draftsautoMode.environment(and sometimes rule) entries by scanning your project'sCLAUDE.md/README/config/git remotes, your existingautoMode/permissions.allowsettings, and recent session command history, then writes the accepted draft to~/.claude/settings.json. Requires a Pro, Max, or Team plan and v2.1.228+ (v2.1.233+ on native Windows); not available on Claude Code on the web. Can be turned off via askillOverridesentry. [line 143] [Source]
chrome [Source]
- Documented how Claude Code handles the Chrome tab group it opens for a session:
/clearcloses the group (including open pages) unless surviving work is still running, while switching sessions or exiting only closes it if it holds nothing but empty new tabs. [line 5] [Source]
claude-apps-gateway [Source]
- Claude Desktop's Cowork and Code tabs (and its Chat tab, once enabled) now all route their model requests through a configured Claude apps gateway, not just CLI-style sign-ins. Turn on the Chat tab with
chatTabEnabledin Desktop's managed configuration or the policy'sdesktopblock (gateway v2.1.227+). [lines 248, 337] [Source]
cloud-environments [Source]
- Creating and managing organization-shared cloud environments is now restricted to the Owner role; the Admin role can no longer open the Cloud environments admin page. [line 76] [Source]
commands [Source]
- New
/auto-mode-setupcommand entry. [line 38] [Source] /claude-apigained anupgradesubcommand that moves a project's Anthropic SDK dependency across a major version — currently the Pythonanthropicpackage from 0.x to 1.x. Requires v2.1.236+. [line 48] [Source]
debug-your-config [Source]
- Clarified exactly which managed-settings sources still apply in a clean debug config: MDM profiles, registry policy, and
managed-settings.jsonfrom outside the config directory, plus server-managed settings fetched once credentials exist. [line 68] [Source]
desktop-scheduled-tasks [Source]
- Local scheduled tasks require Claude Desktop 1.1.5368 or later; added troubleshooting for a missing Routines sidebar entry. [line 28] [Source]
desktop [Source]
- Plugins enabled only in your user settings can now reach cloud sessions by enabling them for your claude.ai account (loaded as synced plugins), instead of only via the repo's
.claude/settings.json. [line 365] [Source]
env-vars [Source]
/auto-mode-setupwas added to the list of features gated behind feature-flag fetching. [line 462] [Source]
errors [Source]
- New error: Issuer mismatch in authorization response (RFC 9207) — during MCP OAuth sign-in, Claude Code now fails the flow if the redirect's
issdoesn't match the issuer the server advertised in its OAuth metadata, a protection against authorization-server mix-up attacks. Bypass while a server is being fixed withMCP_SDK_GENERATION=v1. [lines 65, 886] [Source] - New error: The current directory no longer exists — a clear message when
claudestarts from a deleted or moved directory, replacing a rawENOENT/uv_cwdcrash from before v2.1.239. A permissions-related failure to read the directory now names the error code instead. [lines 120, 1576] [Source]
how-claude-code-works [Source]
- Removed the inline "Be specific upfront," "Give Claude something to verify against," and "Explore before implementing" tip sections in favor of a pointer to the new Best practices page. [line 139] [Source]
managed-settings [Source]
- Noted that a self-hosted-environment session still reads a small set of admin keys from the runner image's managed-settings file even when server-managed settings otherwise take precedence. [line 76] [Source]
model-config [Source]
- Same "keys read from every admin source" clarification applied to model-allowlist precedence in self-hosted environments. [line 206] [Source]
plugins-reference [Source]
- New plugins synced from claude.ai: Cowork and cloud sessions now download the plugins enabled on your claude.ai account into
~/.claude/plugins/synced/and load each as<name>@synced, with no marketplace or install record. Manage withclaude plugin enable/disable <name>@synced; turn one off for every synced session from claude.ai. Before v2.1.239 these loaded under the@inlineidentity instead. [line 354] [Source] --setting-sourcescan now only removeuserfrom thepluginConfigsprecedence list; managed settings and--settingsalways stay in effect. [line 544] [Source]
remote-control [Source]
- Trusted Devices is now enabled for an organization by an Owner only, not an Owner or admin. [lines 185, 198] [Source]
routines [Source]
- Added a pointer to the "disabled by organization policy" section when Routines is missing from the Desktop sidebar. [line 29] [Source]
self-hosted-environments [Source]
- Enabling self-hosted environments for an organization now requires the Owner role specifically, not Owner or admin. [line 27] [Source]
self-hosted-environments-configuration [Source]
- Enabling self-hosted environments requires the Owner role specifically. Also clarified that even when server-managed settings take precedence, sessions still read the runner image's
envblock and other cross-source keys (sandbox locks, sandbox binary paths,forceRemoteSettingsRefresh) from the local managed-settings file. [lines 3, 354] [Source]
self-hosted-environments-deploy [Source]
- Hiding Anthropic-hosted environments organization-wide is now an Owner-only action. [line 21] [Source]
self-hosted-environments-identity [Source]
self-hosted-environments-quickstart [Source]
- Turning on self-hosted environments and running the guided runner setup now require the Owner role specifically, not Owner or admin. [line 41] [Source]
self-hosted-environments-reference [Source]
- Enabling self-hosted environments, and retrying a circuit-broken spawn queue, are now Owner-only actions. [lines 3, 147] [Source]
self-hosted-environments-testing [Source]
- Minting an admin token for CI, and enabling self-hosted environments, now require the Owner role specifically. [lines 194, 215] [Source]
sessions [Source]
settings [Source]
- Same "keys read from every admin source" clarification applied to which managed settings reach a cloud session. [line 291] [Source]
settings-reference [Source]
- The all-settings table gained an interactive topic/scope filter and sort control, plus a running count (210 settings) and a "Back to index" link. [lines 3, 19] [Source]
slack [Source]
- Recreating a Claude Tag channel's cloud environment as an organization-shared one is now an Owner-only fix, not Owner or admin. [lines 178, 183] [Source]
vs-code [Source]
- Replaced the inline "Use git worktrees for parallel tasks" walkthrough (including the
--worktreeexample) with a link to the dedicated Worktrees page. [line 388] [Source]
whats-new [Source]
- Added the Week 34 digest (v2.1.234–v2.1.239, August 17–21): a
/designresearch preview bringing Claude Design's artboard workflow into the CLI and Desktop, a built-in Concise output style, device cards on mobile for any machine runningclaude remote-control, andANTHROPIC_DEFAULT_MODELto set the default model for new sessions. [line 13] [Source] - Added the Week 33 digest (v2.1.225–v2.1.233, August 10–14): auto-continue after a Desktop usage limit resets, fork mode on by default for subagent side tasks, GitLab merge-request URL support in
--worktreeandclaude agents, and@-mentioning another Claude session by name. [line 23] [Source]
API changes
A note on this section
38 of the 42 changed pages below aren't real content changes from Anthropic — they're an archive crawler fix. These pages had been captured mid-render, before their JavaScript content finished loading, so the archive held only "Loading" placeholder text (sometimes for months). This sync finally captured their full rendered content, so each is summarized below as if new.
The remaining 4 pages went the other way: compliance/groups/members, compliance/organizations/settings/retrieve, compliance/organizations/users, and compliance/organizations/users/list had full content captured previously, but this sync's crawl regressed them back to blank "Loading" placeholders. Their descriptions below are inferred from their titles and prior content, not from what the archive currently holds.
Messages API
api/messages/create [Source]
Core Messages API endpoint: sends a list of input messages (text and/or image content) and returns Claude's generated next message. Full parameter and response reference is now captured, including streaming, tool use, vision, and system prompts.
api/messages/count_tokens [Source]
Counts the tokens a given set of messages, tools, images, and documents would consume, without creating a message.
api/messages/batches [Source]
Index for the Message Batches API: create, retrieve, list, cancel, and delete batches, and fetch batch results for asynchronous bulk processing.
api/beta/messages/create [Source]
Same as api/messages/create, with anthropic-beta header support for opt-in features such as extended thinking and the MCP client.
api/beta/messages/count_tokens [Source]
Same as api/messages/count_tokens, with beta header support.
api/beta/messages/batches [Source]
Beta-namespaced version of the Message Batches API index.
Compliance API — Activities
api/compliance/activities/list [Source]
Lists and filters compliance audit-log activities — account, key, and admin events — for the caller's tenant.
Compliance API — Apps: artifacts
api/compliance/apps/artifacts/download [Source]
Downloads the full text content of an artifact version for compliance review.
api/compliance/apps/artifacts/retrieve [Source]
Returns artifact version metadata (type, hash, size, owning chat) without the content body.
Compliance API — Apps: chats
api/compliance/apps/chats/files [Source]
Index for chat-file endpoints: retrieve metadata, delete, and download content.
api/compliance/apps/chats/files/delete [Source]
Permanently deletes a file attached to a chat.
api/compliance/apps/chats/files/download [Source]
Downloads the binary content of a file referenced in chat messages.
api/compliance/apps/chats/generated_files [Source]
Index for endpoints covering files Claude generated via tool use: metadata and download.
api/compliance/apps/chats/generated_files/download [Source]
Downloads the binary content of a file the assistant created via tool use.
api/compliance/apps/chats/generated_files/retrieve [Source]
Returns metadata for a Claude-generated file without its content.
api/compliance/apps/chats/list [Source]
Lists chat metadata across the tenant, with filtering, for compliance review.
api/compliance/apps/chats/messages/list [Source]
Retrieves message history and file metadata for a specific chat.
Compliance API — Apps: projects
api/compliance/apps/projects [Source]
Index for project endpoints: list, retrieve, and delete, for compliance purposes.
api/compliance/apps/projects/attachments [Source]
Index for listing files and documents attached to a project.
api/compliance/apps/projects/attachments/list [Source]
Lists files and project documents attached to a given project.
api/compliance/apps/projects/collaborators/list [Source]
Lists users, groups, and org-wide role grants on a project.
api/compliance/apps/projects/delete [Source]
Hard-deletes a project and all associated data (documents, roles, knowledge base, sync sources); requires no attached chats.
api/compliance/apps/projects/documents [Source]
Index for project document endpoints: retrieve content, metadata, and delete.
api/compliance/apps/projects/documents/delete [Source]
Hard-deletes a specific project document.
api/compliance/apps/projects/documents/metadata [Source]
Returns document metadata (hash, size, filename) without its text content.
api/compliance/apps/projects/documents/retrieve [Source]
Returns the full text content and metadata of a project document.
api/compliance/apps/projects/list [Source]
Lists project metadata across the tenant, filterable, sorted by creation time.
api/compliance/apps/projects/retrieve [Source]
Returns detailed info (counts, timestamps) for a specific project.
Compliance API — Apps: sessions
api/compliance/apps/sessions [Source]
Index for local and remote session endpoints covering Claude Code and Cowork sessions.
api/compliance/apps/sessions/local [Source]
Index for listing and retrieving local sessions — Claude Code/Cowork sessions run on a user's own machine.
api/compliance/apps/sessions/local/messages [Source]
Model reference for the local-session transcript/message schema.
api/compliance/apps/sessions/local/messages/list [Source]
Reads one local session's transcript oldest-first, respecting retention boundaries.
api/compliance/apps/sessions/local/retrieve [Source]
Retrieves metadata for a single local session.
api/compliance/apps/sessions/remote/list [Source]
Lists remote (cloud-hosted Cowork) sessions across accessible orgs, filterable and paginated.
api/compliance/apps/sessions/remote/messages [Source]
Model reference for the remote-session transcript/message schema.
api/compliance/apps/sessions/remote/messages/list [Source]
Retrieves a remote session's transcript of prompts, responses, and tool calls.
Compliance API — Groups and organizations
api/compliance/groups/members [Source]
Regressed to a blank "Loading" placeholder this sync (had full content before). Previously documented listing the members of an RBAC group.
api/compliance/organizations/roles [Source]
Index for compliance role endpoints: list and retrieve the roles defined for an organization.
api/compliance/organizations/roles/list [Source]
Lists the compliance roles defined for an organization.
api/compliance/organizations/settings [Source]
Index for the effective organization settings endpoint.
api/compliance/organizations/settings/retrieve [Source]
Regressed to a blank "Loading" placeholder this sync (had full content before). Previously documented the resolved settings in force for an organization.
api/compliance/organizations/users [Source]
Regressed to a blank "Loading" placeholder this sync (had full content before). Previously an index of organization-user endpoints.
api/compliance/organizations/users/list [Source]
Regressed to a blank "Loading" placeholder this sync (had full content before). Previously listed the users in an organization.