Returns HTTP 501 because fleet-wide Claude Code managed settings are a Business feature; no publish, history, pull, check-in or drift action is performed.

POST

/v1/m/claude-policy/{surface}/checkin

curl --request POST \
  --url https://example.com/v1/m/claude-policy/example/checkin \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "artifact_sha256": "example", "key_fingerprint": "example", "observed_content": "example", "revision": 1, "scope": "example", "tools": [ { "driver": "example", "state": "ready", "version": "example" } ] }'

• this engine

Returns HTTP 501 because fleet-wide Claude Code managed settings are a Business feature; no publish, history, pull, check-in or drift action is performed.

Authorizations

• bearerAuth
• browserSession

Parameters

Path Parameters

surface

required

string

Path parameter surface.

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

artifact_sha256

Any of:

string

Optional artifact hash echo; a missing or mismatched value records the check-in unverified.

string

null

null

key_fingerprint

Any of:

string

Optional signer fingerprint echo.

string

null

null

observed_content

Any of:

string

Optional observed document, capped at 262144 UTF-8 bytes and credential-redacted before persistence.

string

null

null

revision

Any of:

integer

Zero records an unattested check-in.

integer

null

null

scope

required

After trimming, must be non-empty, at most 128 UTF-8 bytes and contain no control characters.

string

tools

Any of:

Array<object>

The AI tools on this workstation, as the full list: a check-in that carries tools replaces the scope’s earlier report (an empty list reports none), and one without tools leaves it unchanged. A driver appears once. The report is self-declared and unattested. Business only.

Array<object>

<= 32 items

object

driver

required

The provider driver key, for example claude or codex.

string

/^[a-z0-9][a-z0-9._-]{0,63}$/

state

required

The tool’s sign-in state, as olivares tool ls reports it.

string

Allowed values: ready not_signed_in not_installed unknown error

version

Any of:

string

The installed version when the tool reports one.

string

/^[0-9A-Za-z][0-9A-Za-z.+_~-]{0,63}$/

null

null

null

null

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}