Anthropic Connection¶

The Anthropic connection type enables access to the Claude API through the official Anthropic Python SDK.

Default Connection IDs¶

The Anthropic hook points to the anthropic_default connection by default.

Configuring the Connection¶

API Key

Your Anthropic API key. Required for the first-party API (platform="anthropic"), and also used as the Microsoft Foundry API key (platform="foundry", together with the resource extra). Not required for the bedrock, vertex or aws platforms, which authenticate through the respective cloud provider’s credential chain.

Base URL (optional)

A custom base URL for the first-party API (for example, an LLM gateway or proxy).

Extra (optional)

A JSON dictionary of additional parameters. All keys are optional:

platform — which client to build: anthropic (default), bedrock, vertex, aws or foundry.
model — default model id used whenever an operator or hook call does not pass model (e.g. hook.create_message(...), hook.create_agent(...)). Set it here to change the model without editing Dags; falls back to the provider default (claude-opus-4-8).
aws_region — AWS region for the bedrock and aws platforms.
project_id / region — GCP project and region for the vertex platform.
resource — Azure resource name for the foundry platform.
anthropic_client_kwargs — a nested dictionary forwarded verbatim to the client constructor (for example timeout, max_retries or default_headers).

For example, to set the client timeout:

{
  "anthropic_client_kwargs": {
    "timeout": 30,
    "max_retries": 5
  }
}

Workload Identity Federation (keyless auth)¶

For the first-party anthropic platform you can authenticate with short-lived OIDC tokens instead of a static API key, via Workload Identity Federation. Two ways:

Configured on the connection — leave the API Key empty and set a workload_identity block in extra:

{
  "workload_identity": {
    "identity_token_file": "/var/run/secrets/anthropic.com/token",
    "federation_rule_id": "fdrl_...",
    "organization_id": "00000000-0000-0000-0000-000000000000",
    "service_account_id": "svac_...",
    "workspace_id": "wrkspc_..."
  }
}

From the environment — leave both the API Key and extra empty; the SDK resolves credentials from the standard ANTHROPIC_FEDERATION_RULE_ID / ANTHROPIC_ORGANIZATION_ID / ANTHROPIC_SERVICE_ACCOUNT_ID / ANTHROPIC_IDENTITY_TOKEN_FILE environment variables.

Note

ANTHROPIC_API_KEY in the worker environment shadows federation — unset it where the worker runs if you intend to use WIF.

Note

The Message Batches API, token counting, the Models API and Managed Agents (including AnthropicAgentSessionOperator) are served only by the first-party Anthropic API (platform="anthropic") and Claude Platform on AWS (platform="aws"). They are not available on Amazon Bedrock, Google Vertex AI or Microsoft Foundry; the hook raises a clear error if you call them on those platforms.