@anthropic-ai/sdk 0.122.0 → 0.124.0

package/src/resources/beta/organization/compliance-settings.ts

@@ -0,0 +1,106 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../core/resource';
+import { APIPromise } from '../../../core/api-promise';
+import { RequestOptions } from '../../../internal/request-options';
+
+export class ComplianceSettings extends APIResource {
+  /**
+   * Retrieve your organization's Compliance Settings.
+   *
+   * Compliance Settings is a singleton resource: there is exactly one per
+   * organization, addressed without an identifier. The `state` field reflects
+   * whether the Compliance API is enabled. An organization with a parent
+   * organization reads the state inherited from the parent's configuration.
+   *
+   * @example
+   * ```ts
+   * const betaComplianceSettings =
+   *   await client.beta.organization.complianceSettings.retrieve();
+   * ```
+   */
+  retrieve(options?: RequestOptions): APIPromise<BetaComplianceSettings> {
+    return this._client.get('/v1/organizations/compliance_settings?beta=true', options);
+  }
+
+  /**
+   * Update your organization's Compliance Settings.
+   *
+   * Setting `state` to `enabled` turns on the Compliance API and begins capturing
+   * organization activity events. Setting it to `disabled` turns both off. `state`
+   * reflects whether the Compliance API is enabled.
+   *
+   * A request that sets `state` to its current value succeeds and leaves the
+   * resource unchanged. A `disabled` request stays in effect until a later `enabled`
+   * request or the organization's next provisioning action that enables Access
+   * Transparency: enabling Access Transparency also enables the Compliance API,
+   * which serves its activity events, so such provisioning (including re-runs)
+   * re-enables the Compliance API even after a `disabled` request. Automated
+   * provisioning never disables compliance settings.
+   *
+   * @example
+   * ```ts
+   * const betaComplianceSettings =
+   *   await client.beta.organization.complianceSettings.update({
+   *     state: { type: 'enabled' },
+   *   });
+   * ```
+   */
+  update(body: ComplianceSettingUpdateParams, options?: RequestOptions): APIPromise<BetaComplianceSettings> {
+    return this._client.post('/v1/organizations/compliance_settings?beta=true', { body, ...options });
+  }
+}
+
+export interface BetaComplianceSettings {
+  /**
+   * Whether the Compliance API is enabled for this organization.
+   */
+  state: BetaComplianceSettingsState;
+
+  type: 'compliance_settings';
+}
+
+export type BetaComplianceSettingsState =
+  | BetaComplianceSettingsStateEnabled
+  | BetaComplianceSettingsStateDisabled;
+
+export interface BetaComplianceSettingsStateDisabled {
+  type: 'disabled';
+}
+
+export interface BetaComplianceSettingsStateDisabledParam {
+  type: 'disabled';
+}
+
+export interface BetaComplianceSettingsStateEnabled {
+  type: 'enabled';
+}
+
+export interface BetaComplianceSettingsStateEnabledParam {
+  type: 'enabled';
+}
+
+export type BetaComplianceSettingsStateParam =
+  | BetaComplianceSettingsStateEnabledParam
+  | BetaComplianceSettingsStateDisabledParam;
+
+export interface ComplianceSettingUpdateParams {
+  /**
+   * Desired state. Accepts the string shorthand "enabled" or "disabled" in place of
+   * the object form; the response always returns the canonical object form.
+   */
+  state: BetaComplianceSettingsStateParam;
+}
+
+export declare namespace ComplianceSettings {
+  export {
+    type BetaComplianceSettings as BetaComplianceSettings,
+    type BetaComplianceSettingsState as BetaComplianceSettingsState,
+    type BetaComplianceSettingsStateDisabled as BetaComplianceSettingsStateDisabled,
+    type BetaComplianceSettingsStateDisabledParam as BetaComplianceSettingsStateDisabledParam,
+    type BetaComplianceSettingsStateEnabled as BetaComplianceSettingsStateEnabled,
+    type BetaComplianceSettingsStateEnabledParam as BetaComplianceSettingsStateEnabledParam,
+    type BetaComplianceSettingsStateParam as BetaComplianceSettingsStateParam,
+    type ComplianceSettingUpdateParams as ComplianceSettingUpdateParams,
+  };
+}

package/src/resources/beta/organization/external-keys.ts

@@ -136,7 +136,9 @@ export type BetaExternalKeysPageCursor = PageCursor<BetaExternalKey>;
 
 export interface BetaAWSExternalKeyConfig {
   /**
-   * Full ARN of the AWS KMS key.
+   * Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
+   * single-Region key in your organization's own AWS account; cross-account keys,
+   * multi-Region keys, and alias ARNs are rejected.
    */
   kms_arn: string;
 
@@ -148,8 +150,9 @@ export interface BetaAWSExternalKeyConfig {
   region?: string | null;
 
   /**
-   * @deprecated IAM role ARN. Deprecated — Anthropic reaches the KMS key via a
-   * managed intermediate role; this field is ignored.
+   * @deprecated IAM role ARN. Deprecated — Anthropic reaches the KMS key through its
+   * own intermediate role (or, on Claude Platform on AWS, with credentials AWS
+   * issues for the Workspace); this field is ignored.
    */
   role_arn?: string | null;
 }

package/src/resources/beta/organization/index.ts

@@ -12,6 +12,17 @@ export {
   type APIKeyListParams,
   type BetaAPIKeysPage,
 } from './api-keys';
+export {
+  ComplianceSettings,
+  type BetaComplianceSettings,
+  type BetaComplianceSettingsState,
+  type BetaComplianceSettingsStateDisabled,
+  type BetaComplianceSettingsStateDisabledParam,
+  type BetaComplianceSettingsStateEnabled,
+  type BetaComplianceSettingsStateEnabledParam,
+  type BetaComplianceSettingsStateParam,
+  type ComplianceSettingUpdateParams,
+} from './compliance-settings';
 export {
   ExternalKeys,
   type BetaAWSExternalKeyConfig,

package/src/resources/beta/organization/organization.ts

@@ -14,6 +14,18 @@ import {
   BetaAPIKeyWorkspaceScope,
   BetaAPIKeysPage,
 } from './api-keys';
+import * as ComplianceSettingsAPI from './compliance-settings';
+import {
+  BetaComplianceSettings,
+  BetaComplianceSettingsState,
+  BetaComplianceSettingsStateDisabled,
+  BetaComplianceSettingsStateDisabledParam,
+  BetaComplianceSettingsStateEnabled,
+  BetaComplianceSettingsStateEnabledParam,
+  BetaComplianceSettingsStateParam,
+  ComplianceSettingUpdateParams,
+  ComplianceSettings,
+} from './compliance-settings';
 import * as ExternalKeysAPI from './external-keys';
 import {
   BetaAWSExternalKeyConfig,
@@ -99,6 +111,9 @@ export class Organization extends APIResource {
   users: UsersAPI.Users = new UsersAPI.Users(this._client);
   workspaces: WorkspacesAPI.Workspaces = new WorkspacesAPI.Workspaces(this._client);
   rateLimits: RateLimitsAPI.RateLimits = new RateLimitsAPI.RateLimits(this._client);
+  complianceSettings: ComplianceSettingsAPI.ComplianceSettings = new ComplianceSettingsAPI.ComplianceSettings(
+    this._client,
+  );
 
   /**
    * Retrieve information about the organization associated with the authenticated
@@ -153,6 +168,7 @@ Organization.ServiceAccounts = ServiceAccounts;
 Organization.Users = Users;
 Organization.Workspaces = Workspaces;
 Organization.RateLimits = RateLimits;
+Organization.ComplianceSettings = ComplianceSettings;
 
 export declare namespace Organization {
   export { type BetaOrganization as BetaOrganization, type BetaOrganizationRole as BetaOrganizationRole };
@@ -242,4 +258,16 @@ export declare namespace Organization {
     type BetaOrganizationRateLimitsPageCursor as BetaOrganizationRateLimitsPageCursor,
     type RateLimitListParams as RateLimitListParams,
   };
+
+  export {
+    ComplianceSettings as ComplianceSettings,
+    type BetaComplianceSettings as BetaComplianceSettings,
+    type BetaComplianceSettingsState as BetaComplianceSettingsState,
+    type BetaComplianceSettingsStateDisabled as BetaComplianceSettingsStateDisabled,
+    type BetaComplianceSettingsStateDisabledParam as BetaComplianceSettingsStateDisabledParam,
+    type BetaComplianceSettingsStateEnabled as BetaComplianceSettingsStateEnabled,
+    type BetaComplianceSettingsStateEnabledParam as BetaComplianceSettingsStateEnabledParam,
+    type BetaComplianceSettingsStateParam as BetaComplianceSettingsStateParam,
+    type ComplianceSettingUpdateParams as ComplianceSettingUpdateParams,
+  };
 }

package/src/resources/beta/organization/workspaces/workspaces.ts

@@ -221,8 +221,12 @@ export interface BetaWorkspace {
    * key-policy condition so the key is scoped to this compartment. On GCP and Azure,
    * Anthropic enforces the compartment binding automatically; you do not need to
    * reference this value in your key configuration. See the CMEK integration guide
-   * for the required key configuration, including the value used during key
-   * validation.
+   * for the required key configuration; unless your organization is on Claude
+   * Platform on AWS, it includes a separate value used during key validation. On
+   * Claude Platform on AWS there is no separate validation value: the key is
+   * validated against this Workspace's own value when it is attached, so if your key
+   * policy uses the compartment condition, add this value to it before attaching the
+   * key.
    */
   compartment_id: string;
 
@@ -245,10 +249,14 @@ export interface BetaWorkspace {
    * ID of the customer-managed encryption key (CMEK) configuration to use for this
    * Workspace. Setting this field requires CMEK to be enabled for your organization.
    * When set, data stored for this Workspace is encrypted with the referenced key.
-   * Create key configurations with the External Keys API. This field is write-once:
-   * once a key is attached to a Workspace it cannot be detached or replaced. To
-   * rotate key material, rotate the underlying key on your cloud KMS; the
-   * `external_key_id` stays the same.
+   * Create key configurations with the External Keys API. On Claude Platform on AWS
+   * the value is the AWS KMS key ARN, and the key must be a single-Region key in the
+   * same AWS account and Region as the Workspace. On that platform the key is
+   * validated against this Workspace when it is attached, so a key-policy problem is
+   * reported as an error on this request. This field is write-once: once a key is
+   * attached to a Workspace it cannot be detached or replaced. To rotate key
+   * material, rotate the underlying key on your cloud KMS; the `external_key_id`
+   * stays the same.
    */
   external_key_id: string | null;
 
@@ -324,8 +332,12 @@ export interface WorkspaceCreateParams {
    * Body param: ID of the customer-managed encryption key (CMEK) configuration to
    * use for this Workspace. Setting this field requires CMEK to be enabled for your
    * organization. When set, data stored for this Workspace is encrypted with the
-   * referenced key. Create key configurations with the External Keys API. This field
-   * is write-once: once a key is attached to a Workspace it cannot be detached or
+   * referenced key. Create key configurations with the External Keys API. On Claude
+   * Platform on AWS the value is the AWS KMS key ARN, and the key must be a
+   * single-Region key in the same AWS account and Region as the Workspace. On that
+   * platform the key is validated against this Workspace when it is attached, so a
+   * key-policy problem is reported as an error on this request. This field is
+   * write-once: once a key is attached to a Workspace it cannot be detached or
    * replaced. To rotate key material, rotate the underlying key on your cloud KMS;
    * the `external_key_id` stays the same.
    */
@@ -358,10 +370,14 @@ export interface WorkspaceUpdateParams {
    * ID of the customer-managed encryption key (CMEK) configuration to use for this
    * Workspace. Setting this field requires CMEK to be enabled for your organization.
    * When set, data stored for this Workspace is encrypted with the referenced key.
-   * Create key configurations with the External Keys API. This field is write-once:
-   * once a key is attached to a Workspace it cannot be detached or replaced. To
-   * rotate key material, rotate the underlying key on your cloud KMS; the
-   * `external_key_id` stays the same.
+   * Create key configurations with the External Keys API. On Claude Platform on AWS
+   * the value is the AWS KMS key ARN, and the key must be a single-Region key in the
+   * same AWS account and Region as the Workspace. On that platform the key is
+   * validated against this Workspace when it is attached, so a key-policy problem is
+   * reported as an error on this request. This field is write-once: once a key is
+   * attached to a Workspace it cannot be detached or replaced. To rotate key
+   * material, rotate the underlying key on your cloud KMS; the `external_key_id`
+   * stays the same.
    */
   external_key_id?: string;
 

package/src/resources/beta/sessions/events.ts

@@ -34,7 +34,7 @@ export class Events extends APIResource {
     params: EventListParams | null | undefined = {},
     options?: RequestOptions,
   ): PagePromise<BetaManagedAgentsSessionEventsPageCursor, BetaManagedAgentsSessionEvent> {
-    const { betas, ...query } = params ?? {};
+    const { betas, workspace_id, ...query } = params ?? {};
     return this._client.getAPIList(
       path`/v1/sessions/${sessionID}/events?beta=true`,
       PageCursor<BetaManagedAgentsSessionEvent>,
@@ -42,7 +42,10 @@ export class Events extends APIResource {
         query,
         ...options,
         headers: buildHeaders([
-          { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+          {
+            'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+            ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+          },
           options?.headers,
         ]),
       },
@@ -78,12 +81,15 @@ export class Events extends APIResource {
     params: EventSendParams,
     options?: RequestOptions,
   ): APIPromise<BetaManagedAgentsSendSessionEvents> {
-    const { betas, ...body } = params;
+    const { betas, workspace_id, ...body } = params;
     return this._client.post(path`/v1/sessions/${sessionID}/events?beta=true`, {
       body,
       ...options,
       headers: buildHeaders([
-        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+        {
+          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+          ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+        },
         options?.headers,
       ]),
     });
@@ -105,12 +111,15 @@ export class Events extends APIResource {
     params: EventStreamParams | undefined = {},
     options?: RequestOptions,
   ): APIPromise<Stream<BetaManagedAgentsStreamSessionEvents>> {
-    const { betas, ...query } = params ?? {};
+    const { betas, workspace_id, ...query } = params ?? {};
     return this._client.get(path`/v1/sessions/${sessionID}/events/stream?beta=true`, {
       query,
       ...options,
       headers: buildHeaders([
-        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+        {
+          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+          ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+        },
         options?.headers,
       ]),
       stream: true,
@@ -1977,7 +1986,7 @@ export interface EventListParams extends PageCursorParams {
 
   /**
    * Query param: Sort direction for results, ordered by the event's `processed_at`.
-   * Defaults to asc (chronological).
+   * Defaults to `asc` (chronological).
    */
   order?: 'asc' | 'desc';
 
@@ -1992,6 +2001,16 @@ export interface EventListParams extends PageCursorParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface EventSendParams {
@@ -2004,6 +2023,16 @@ export interface EventSendParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface EventStreamParams {
@@ -2025,6 +2054,16 @@ export interface EventStreamParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export { SessionToolRunner, type SessionToolRunnerOptions } from '../../../lib/tools/SessionToolRunner';

package/src/resources/beta/sessions/resources.ts

@@ -27,11 +27,14 @@ export class Resources extends APIResource {
     params: ResourceRetrieveParams,
     options?: RequestOptions,
   ): APIPromise<ResourceRetrieveResponse> {
-    const { session_id, betas } = params;
+    const { session_id, betas, workspace_id } = params;
     return this._client.get(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
       ...options,
       headers: buildHeaders([
-        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+        {
+          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+          ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+        },
         options?.headers,
       ]),
     });
@@ -57,12 +60,15 @@ export class Resources extends APIResource {
     params: ResourceUpdateParams,
     options?: RequestOptions,
   ): APIPromise<ResourceUpdateResponse> {
-    const { session_id, betas, ...body } = params;
+    const { session_id, betas, workspace_id, ...body } = params;
     return this._client.post(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
       body,
       ...options,
       headers: buildHeaders([
-        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+        {
+          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+          ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+        },
         options?.headers,
       ]),
     });
@@ -86,7 +92,7 @@ export class Resources extends APIResource {
     params: ResourceListParams | null | undefined = {},
     options?: RequestOptions,
   ): PagePromise<BetaManagedAgentsSessionResourcesPageCursor, BetaManagedAgentsSessionResource> {
-    const { betas, ...query } = params ?? {};
+    const { betas, workspace_id, ...query } = params ?? {};
     return this._client.getAPIList(
       path`/v1/sessions/${sessionID}/resources?beta=true`,
       PageCursor<BetaManagedAgentsSessionResource>,
@@ -94,7 +100,10 @@ export class Resources extends APIResource {
         query,
         ...options,
         headers: buildHeaders([
-          { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+          {
+            'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+            ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+          },
           options?.headers,
         ]),
       },
@@ -118,11 +127,14 @@ export class Resources extends APIResource {
     params: ResourceDeleteParams,
     options?: RequestOptions,
   ): APIPromise<BetaManagedAgentsDeleteSessionResource> {
-    const { session_id, betas } = params;
+    const { session_id, betas, workspace_id } = params;
     return this._client.delete(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
       ...options,
       headers: buildHeaders([
-        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+        {
+          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+          ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+        },
         options?.headers,
       ]),
     });
@@ -148,12 +160,15 @@ export class Resources extends APIResource {
     params: ResourceAddParams,
     options?: RequestOptions,
   ): APIPromise<BetaManagedAgentsFileResource> {
-    const { betas, ...body } = params;
+    const { betas, workspace_id, ...body } = params;
     return this._client.post(path`/v1/sessions/${sessionID}/resources?beta=true`, {
       body,
       ...options,
       headers: buildHeaders([
-        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
+        {
+          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
+          ...(workspace_id != null ? { 'anthropic-workspace-id': workspace_id } : undefined),
+        },
         options?.headers,
       ]),
     });
@@ -289,6 +304,16 @@ export interface ResourceRetrieveParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface ResourceUpdateParams {
@@ -307,6 +332,16 @@ export interface ResourceUpdateParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface ResourceListParams extends PageCursorParams {
@@ -314,6 +349,16 @@ export interface ResourceListParams extends PageCursorParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface ResourceDeleteParams {
@@ -326,6 +371,16 @@ export interface ResourceDeleteParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export interface ResourceAddParams {
@@ -349,6 +404,16 @@ export interface ResourceAddParams {
    * Header param: Optional header to specify the beta version(s) you want to use.
    */
   betas?: Array<BetaAPI.AnthropicBeta>;
+
+  /**
+   * Header param: Optional header to select the Workspace for this request. The
+   * value is a Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
+   *
+   * Only needed for credentials that can act on more than one Workspace. A
+   * credential that belongs to a specific Workspace may omit it; if sent, it must
+   * match that Workspace.
+   */
+  workspace_id?: string;
 }
 
 export declare namespace Resources {