---
title: "List Federation Issuers"
method: GET
path: "/v1/organizations/federation_issuers"
---

# List Federation Issuers

`GET /v1/organizations/federation_issuers`

## Request

- Base URL: `https://api.anthropic.com`
- URL: `https://api.anthropic.com/v1/organizations/federation_issuers`
- Auth: none declared

**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).

List federation issuers in your organization.

Archived issuers are excluded unless `include_archived=true`.

## Query parameters

- `limit` integer: Number of results per page.
- `page` string, nullable: Opaque cursor from a previous response's `next_page`.
- `include_archived` boolean: Include archived resources. Defaults to false.

## Headers

- `anthropic-version` string: The version of the Claude API you want to use. Read more about versioning and our version history [here](https://platform.claude.com/docs/en/api/versioning).

## Response `200`

Successful Response

- FederationIssuerListResponse
  - `data` FederationIssuer[], required
    - `archived_at` string, date-time, nullable, required: If set, all rules referencing this issuer reject token exchange.
    - `archived_by_actor_id` string, nullable, required: Tagged ID (`user_`/`svac_`) of the actor that archived this issuer.
    - `check_jti` boolean, required: Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a `jti` claim; tokens without one are accepted without single-use enforcement.
    - `created_at` string, date-time, required: When this issuer was created.
    - `created_by_actor_id` string, nullable, required: Tagged ID (`user_`/`svac_`) of the actor that created this issuer.
    - `id` string, required: Tagged ID of the federation issuer.
    - `issuer_url` string, required: The `iss` claim value. Incoming JWTs must match exactly.
    - `jwks` union, required: How signing keys are obtained for signature verification.
      - JwksDiscovery: JWKS via the issuer's OIDC discovery document.
        - `ca_cert_pem` string, nullable: Optional custom CA (PEM) for TLS verification of the JWKS fetch.
        - `discovery_base` string, nullable: Set when the discovery URL differs from `issuer_url`.
        - `type` 'discovery', required
      - JwksExplicitUrl: JWKS fetched from a fixed endpoint.
        - `ca_cert_pem` string, nullable: Optional custom CA (PEM) for TLS verification of the JWKS fetch.
        - `type` 'explicit_url', required
        - `url` string, required: JWKS endpoint.
      - JwksInline: JWKS supplied directly; no network fetch.
        - `keys` object[], required: Inline JWK objects.
        - `type` 'inline', required
    - `jwks_polling_disabled_at` string, date-time, nullable, required: If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
    - `max_jwt_lifetime_seconds` integer, required: Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected.
    - `name` string, required: Admin-chosen slug identifier.
    - `poll_status` IssuerPollStatus, required: Status of automatic JWKS polling for a federation issuer. Anthropic periodically fetches the issuer's signing keys in the background. These fields summarize the most recent fetches so the health of the JWKS endpoint can be monitored.
      - `consecutive_failures` integer, required: Consecutive fetch failures since the last success.
      - `last_fetched_at` string, date-time, nullable, required: When the last successful fetch completed.
      - `next_poll_at` string, date-time, nullable, required: When the next fetch is scheduled. Null if paused.
    - `type` 'federation_issuer', required
    - `updated_at` string, date-time, required: When this issuer was last updated.
    - `updated_by_actor_id` string, nullable, required: Tagged ID (`user_`/`svac_`) of the actor that last updated this issuer.
  - `next_page` string, nullable, required: Opaque cursor for the next page, or null if no more results.

## Other responses

- `400`: Invalid argument - The client specified an invalid argument
- `401`: Unauthenticated - The request does not have valid authentication credentials
- `403`: Permission denied - The caller does not have permission to execute the specified operation
- `404`: Not found - Some requested entity was not found
- `408`: Deadline exceeded - The deadline expired before the operation could complete
- `409`: Aborted - The operation was aborted due to concurrency issue
- `412`: Failed precondition - Operation was rejected because the system is not in required state
- `413`: Out of range - Operation was attempted past the valid range
- `429`: Resource exhausted - Some resource has been exhausted (rate limiting)
- `431`: Request header fields too large - Request metadata was too large
- `499`: Cancelled - The operation was cancelled by the client
- `500`: Internal - Internal server error
- `501`: Unimplemented - The operation is not implemented or supported
- `503`: Unavailable - The service is currently unavailable
- `504`: Deadline exceeded - Upstream service did not respond in time
- `529`: Overloaded - The service is temporarily overloaded

## Changes

- **2026-10-21** `94c83daca660`: 1 warning
  - deleted the `header` request parameter `x-api-key`
- **2026-09-30** `51c5260134e8`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/anthropics/apis/anthropic-api/changes/v1/organizations/federation_issuers/get.md)

---

[API](https://skmtc.dev/anthropics/apis/anthropic-api.md) - [All operations](https://skmtc.dev/anthropics/apis/anthropic-api/llms.txt) - [OpenAPI document](https://skmtc.dev/anthropics/apis/anthropic-api/revisions/328591af84ad?raw)