apicheats.dev Cheat sheet Raw .md
POST

Try POST /v1/organizations/federation_issuers/{federation_issuer_id} — Claude API

Claude playground

Update Federation Issuer

Credentials

Kept in this tab only. Requests go through apicheats.dev's same-origin proxy straight to api.anthropic.com; the proxy stores and logs nothing about them.

Headers

Path

Body application/json

6 body fields
  • check_jti · optional · boolean — Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement.
  • issuer_url · optional · string — Replaces the `iss` claim value to match against. For discovery-mode issuers without a `discovery_base`, this is also the URL Anthropic fetches the OIDC discovery document and signing keys from, so changing it repoints the JWKS source. Changing the issuer URL to a well-known shared platform is rejected while any live rule under this issuer would not constrain tenant identity.
  • jwks · optional · object — Replaces the entire JWKS configuration.
  • jwks_polling_disabled · optional · boolean — Only `false` is accepted, to re-enable polling after the system pauses it. Polling is paused automatically; sending `true` is rejected.
  • max_jwt_lifetime_seconds · optional · integer — Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected.
  • name · optional · string — Replaces the slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.