{"resources":{"claude":{"id":"claude","name":"claude","fields":{"agent":{"name":"agent","type":"\u001bclaude.agent","title":"Claude managed agent","desc":"Examine a managed agent definition including its model configuration, system prompt, skills, and version history. Managed agents are created via the Beta Agents API and execute within sessions.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"agents":{"name":"agents","type":"\u0019\u001bclaude.agent","title":"Managed agents","provider":"go.mondoo.com/mql/providers/claude"},"environment":{"name":"environment","type":"\u001bclaude.environment","title":"Claude execution environment","desc":"Examine an execution environment for agent sessions. Environments define the compute context and visibility scope in which agents run. The `scope` field is one of organization or account.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"environments":{"name":"environments","type":"\u0019\u001bclaude.environment","title":"Execution environments","provider":"go.mondoo.com/mql/providers/claude"},"file":{"name":"file","type":"\u001bclaude.file","title":"Claude uploaded file","desc":"Examine an uploaded file including its name, MIME type, size, and whether it can be downloaded. Files are managed through the Beta Files API.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bclaude.file","title":"Uploaded files","provider":"go.mondoo.com/mql/providers/claude"},"host":{"name":"host","type":"\u0007","title":"API host address","provider":"go.mondoo.com/mql/providers/claude"},"memoryStore":{"name":"memoryStore","type":"\u001bclaude.memoryStore","title":"Claude memory store","desc":"Examine a memory store used to persist context across agent sessions. Memory stores are mounted under `/mnt/memory/` in the agent environment and their description is included in the system prompt.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"memoryStores":{"name":"memoryStores","type":"\u0019\u001bclaude.memoryStore","title":"Memory stores","provider":"go.mondoo.com/mql/providers/claude"},"messageBatch":{"name":"messageBatch","type":"\u001bclaude.messageBatch","title":"Claude message batch","desc":"Examine a message batch job including its processing status and lifecycle timestamps. Message batches allow submitting multiple message requests for asynchronous processing. The `processingStatus` field is one of in_progress, canceling, or ended.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"messageBatches":{"name":"messageBatches","type":"\u0019\u001bclaude.messageBatch","title":"Message batches","provider":"go.mondoo.com/mql/providers/claude"},"model":{"name":"model","type":"\u001bclaude.model","title":"Claude AI model","desc":"Examine an AI model available through the Claude API including its token limits and capability flags. The `id` field is the canonical model identifier (e.g. `claude-opus-4-6`) and serves as the selection key for `claude.model(id: \"claude-opus-4-6\")`.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"models":{"name":"models","type":"\u0019\u001bclaude.model","title":"Available models","provider":"go.mondoo.com/mql/providers/claude"},"organization":{"name":"organization","type":"\u001bclaude.organization","title":"Claude organization","desc":"Examine organizational resources managed through the Claude Admin API: identity, workspaces, members, pending invites, API keys, usage, cost, and rate limits. Requires an admin API key configured via `--admin-token` or the `ANTHROPIC_ADMIN_API_KEY` environment variable.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"session":{"name":"session","type":"\u001bclaude.session","title":"Claude agent session","desc":"Examine an agent session including its execution status, associated environment, and lifecycle timestamps. The `status` field is one of rescheduling, running, idle, or terminated.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"sessions":{"name":"sessions","type":"\u0019\u001bclaude.session","title":"Agent sessions","provider":"go.mondoo.com/mql/providers/claude"},"skill":{"name":"skill","type":"\u001bclaude.skill","title":"Claude registered skill","desc":"Examine a skill registered in the Claude platform. Skills extend agent capabilities and can be Anthropic-provided or custom. The `source` field is one of custom or anthropic.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"skills":{"name":"skills","type":"\u0019\u001bclaude.skill","title":"Registered skills","provider":"go.mondoo.com/mql/providers/claude"},"userProfile":{"name":"userProfile","type":"\u001bclaude.userProfile","title":"Claude user profile","desc":"Examine a user profile representing an entity that interacts with the Claude platform. The `relationship` field describes how the entity relates to the platform: one of external, resold, or internal.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"userProfiles":{"name":"userProfiles","type":"\u0019\u001bclaude.userProfile","title":"User profiles","provider":"go.mondoo.com/mql/providers/claude"},"vault":{"name":"vault","type":"\u001bclaude.vault","title":"Claude secret vault","desc":"Examine a secret vault used to store credentials for agent sessions. Vaults hold credentials that agents can access at runtime without exposing secrets in prompts.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"vaults":{"name":"vaults","type":"\u0019\u001bclaude.vault","title":"Secret vaults","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude AI platform","desc":"Use the `claude` resource to examine models available through the Claude API, audit managed agents, environments, sessions, files, skills, vaults, memory stores, message batches, and user profiles. When an admin API key is configured, also audit organizational resources such as workspaces, members, invites, API keys, usage, cost, and rate limits.","min_provider_version":"13.0.0","defaults":"host","provider":"go.mondoo.com/mql/providers/claude"},"claude.agent":{"id":"claude.agent","name":"claude.agent","fields":{"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Archive timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Agent creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Agent description","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Agent identifier","provider":"go.mondoo.com/mql/providers/claude"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model identifier used by this agent","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Agent name","provider":"go.mondoo.com/mql/providers/claude"},"system":{"name":"system","type":"\u0007","is_mandatory":true,"title":"System prompt","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Agent version number","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude managed agent","desc":"Examine a managed agent definition including its model configuration, system prompt, skills, and version history. Managed agents are created via the Beta Agents API and execute within sessions.","min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/claude"},"claude.environment":{"id":"claude.environment","name":"claude.environment","fields":{"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Archive timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Environment description","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Environment identifier","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Environment name","provider":"go.mondoo.com/mql/providers/claude"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Visibility scope","desc":"One of organization or account.","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude execution environment","desc":"Examine an execution environment for agent sessions. Environments define the compute context and visibility scope in which agents run. The `scope` field is one of organization or account.","min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/claude"},"claude.file":{"id":"claude.file","name":"claude.file","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Upload timestamp","provider":"go.mondoo.com/mql/providers/claude"},"downloadable":{"name":"downloadable","type":"\u0004","is_mandatory":true,"title":"Whether the file can be downloaded","provider":"go.mondoo.com/mql/providers/claude"},"filename":{"name":"filename","type":"\u0007","is_mandatory":true,"title":"Original filename","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"File identifier","provider":"go.mondoo.com/mql/providers/claude"},"mimeType":{"name":"mimeType","type":"\u0007","is_mandatory":true,"title":"MIME type","provider":"go.mondoo.com/mql/providers/claude"},"sizeBytes":{"name":"sizeBytes","type":"\u0005","is_mandatory":true,"title":"File size in bytes","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude uploaded file","desc":"Examine an uploaded file including its name, MIME type, size, and whether it can be downloaded. Files are managed through the Beta Files API.","min_provider_version":"13.0.0","defaults":"id filename","provider":"go.mondoo.com/mql/providers/claude"},"claude.memoryStore":{"id":"claude.memoryStore","name":"claude.memoryStore","fields":{"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Archive timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Memory store description","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Memory store identifier","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Memory store name","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude memory store","desc":"Examine a memory store used to persist context across agent sessions. Memory stores are mounted under `/mnt/memory/` in the agent environment and their description is included in the system prompt.","min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/claude"},"claude.messageBatch":{"id":"claude.messageBatch","name":"claude.messageBatch","fields":{"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Archive timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"cancelInitiatedAt":{"name":"cancelInitiatedAt","type":"\t","is_mandatory":true,"title":"Cancellation initiation timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Batch creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"endedAt":{"name":"endedAt","type":"\t","is_mandatory":true,"title":"Processing end timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Batch expiration timestamp","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Batch identifier","provider":"go.mondoo.com/mql/providers/claude"},"processingStatus":{"name":"processingStatus","type":"\u0007","is_mandatory":true,"title":"Processing status","desc":"One of in_progress, canceling, or ended.","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude message batch","desc":"Examine a message batch job including its processing status and lifecycle timestamps. Message batches allow submitting multiple message requests for asynchronous processing. The `processingStatus` field is one of in_progress, canceling, or ended.","min_provider_version":"13.0.0","defaults":"id processingStatus","provider":"go.mondoo.com/mql/providers/claude"},"claude.model":{"id":"claude.model","name":"claude.model","fields":{"batchSupported":{"name":"batchSupported","type":"\u0004","is_mandatory":true,"title":"Whether batch processing is supported","provider":"go.mondoo.com/mql/providers/claude"},"citationsSupported":{"name":"citationsSupported","type":"\u0004","is_mandatory":true,"title":"Whether citation extraction is supported","provider":"go.mondoo.com/mql/providers/claude"},"codeExecutionSupported":{"name":"codeExecutionSupported","type":"\u0004","is_mandatory":true,"title":"Whether code execution is supported","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Model creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Human-readable display name","provider":"go.mondoo.com/mql/providers/claude"},"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"Model family","desc":"Parsed from the model identifier, for example opus, sonnet, or haiku.","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Canonical model identifier","provider":"go.mondoo.com/mql/providers/claude"},"imageInputSupported":{"name":"imageInputSupported","type":"\u0004","is_mandatory":true,"title":"Whether image input is supported","provider":"go.mondoo.com/mql/providers/claude"},"maxInputTokens":{"name":"maxInputTokens","type":"\u0005","is_mandatory":true,"title":"Maximum input context window size in tokens","provider":"go.mondoo.com/mql/providers/claude"},"maxTokens":{"name":"maxTokens","type":"\u0005","is_mandatory":true,"title":"Maximum output tokens","provider":"go.mondoo.com/mql/providers/claude"},"pdfInputSupported":{"name":"pdfInputSupported","type":"\u0004","is_mandatory":true,"title":"Whether PDF input is supported","provider":"go.mondoo.com/mql/providers/claude"},"structuredOutputsSupported":{"name":"structuredOutputsSupported","type":"\u0004","is_mandatory":true,"title":"Whether structured output is supported","provider":"go.mondoo.com/mql/providers/claude"},"thinkingSupported":{"name":"thinkingSupported","type":"\u0004","is_mandatory":true,"title":"Whether extended thinking is supported","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","desc":"Always \"model\" for Claude model resources.","provider":"go.mondoo.com/mql/providers/claude"},"vendor":{"name":"vendor","type":"\u0007","is_mandatory":true,"title":"Model vendor","desc":"Always \"Anthropic\" for models served through the Claude API.","provider":"go.mondoo.com/mql/providers/claude"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"Claude AI model","desc":"Examine an AI model available through the Claude API including its token limits and capability flags. The `id` field is the canonical model identifier (e.g. `claude-opus-4-6`) and serves as the selection key for `claude.model(id: \"claude-opus-4-6\")`.","min_provider_version":"13.0.0","defaults":"id displayName","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization":{"id":"claude.organization","name":"claude.organization","fields":{"activities":{"name":"activities","type":"\u0019\u001bclaude.organization.activity","title":"Compliance activity log entries","provider":"go.mondoo.com/mql/providers/claude"},"activity":{"name":"activity","type":"\u001bclaude.organization.activity","title":"Claude organization compliance activity","desc":"Examine an entry from the Claude compliance activity feed. The activity feed captures security-relevant events such as logins, permission changes, API key operations, and workspace modifications. Requires either a Compliance Access Key or an Admin API key.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"apiKey":{"name":"apiKey","type":"\u001bclaude.organization.apiKey","title":"Claude organization API key","desc":"Examine an API key in the Claude organization including its status, associated workspace, and creation metadata. The `status` field is one of active, inactive, archived, or expired.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"apiKeys":{"name":"apiKeys","type":"\u0019\u001bclaude.organization.apiKey","title":"API keys in the organization","provider":"go.mondoo.com/mql/providers/claude"},"costEntry":{"name":"costEntry","type":"\u001bclaude.organization.costEntry","title":"Claude organization cost report bucket","desc":"Examine a daily cost bucket from the Admin API cost report. Each bucket covers a time window with USD cost amounts broken down by workspace and cost type.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"costReport":{"name":"costReport","type":"\u0019\u001bclaude.organization.costEntry","title":"Cost report entries","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Organization identifier","provider":"go.mondoo.com/mql/providers/claude"},"invite":{"name":"invite","type":"\u001bclaude.organization.invite","title":"Claude organization invite","desc":"Examine a pending invitation to the Claude organization. The `status` field is one of pending, accepted, expired, or deleted.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"invites":{"name":"invites","type":"\u0019\u001bclaude.organization.invite","title":"Pending invitations","provider":"go.mondoo.com/mql/providers/claude"},"member":{"name":"member","type":"\u001bclaude.organization.member","title":"Claude organization member","desc":"Examine a member of the Claude organization including their role assignment. The `role` field is one of user, developer, billing, admin, or claude_code_user.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"members":{"name":"members","type":"\u0019\u001bclaude.organization.member","title":"Organization members","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Organization display name","provider":"go.mondoo.com/mql/providers/claude"},"rateLimit":{"name":"rateLimit","type":"\u001bclaude.organization.rateLimit","title":"Claude organization rate limit group","desc":"Examine an organization-level or workspace-level rate limit group. Each group covers a category of API usage such as model_group, batch, web_search, or files, and lists the models it applies to along with per-minute request and token limits.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"rateLimits":{"name":"rateLimits","type":"\u0019\u001bclaude.organization.rateLimit","title":"Organization-level rate limits","provider":"go.mondoo.com/mql/providers/claude"},"usageEntry":{"name":"usageEntry","type":"\u001bclaude.organization.usageEntry","title":"Claude organization usage report bucket","desc":"Examine a daily usage bucket from the Admin API usage report. Each bucket covers a time window and contains per-model, per-workspace token consumption breakdowns for the last seven days.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"usageReport":{"name":"usageReport","type":"\u0019\u001bclaude.organization.usageEntry","title":"Token usage report entries","provider":"go.mondoo.com/mql/providers/claude"},"workspace":{"name":"workspace","type":"\u001bclaude.organization.workspace","title":"Claude organization workspace","desc":"Examine a workspace within the Claude organization including its name, display color, creation date, archive status, data residency configuration, and workspace-level members and rate limits.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"workspaces":{"name":"workspaces","type":"\u0019\u001bclaude.organization.workspace","title":"Workspaces in the organization","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization","desc":"Examine organizational resources managed through the Claude Admin API: identity, workspaces, members, pending invites, API keys, usage, cost, and rate limits. Requires an admin API key configured via `--admin-token` or the `ANTHROPIC_ADMIN_API_KEY` environment variable.","min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.activity":{"id":"claude.organization.activity","name":"claude.organization.activity","fields":{"actorEmail":{"name":"actorEmail","type":"\u0007","is_mandatory":true,"title":"Actor email address","provider":"go.mondoo.com/mql/providers/claude"},"actorId":{"name":"actorId","type":"\u0007","is_mandatory":true,"title":"Actor identifier","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Timestamp when the activity was created","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Activity event identifier","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Event type","desc":"For example claude_chat_created, claude_file_uploaded, or organization.user.added.","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization compliance activity","desc":"Examine an entry from the Claude compliance activity feed. The activity feed captures security-relevant events such as logins, permission changes, API key operations, and workspace modifications. Requires either a Compliance Access Key or an Admin API key.","min_provider_version":"13.0.0","defaults":"id type actorEmail","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.apiKey":{"id":"claude.organization.apiKey","name":"claude.organization.apiKey","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Timestamp when the key was created","provider":"go.mondoo.com/mql/providers/claude"},"createdBy":{"name":"createdBy","type":"\u001bclaude.organization.member","title":"User who created this key","provider":"go.mondoo.com/mql/providers/claude"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Timestamp when the key expires, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"API key identifier","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"API key display name","provider":"go.mondoo.com/mql/providers/claude"},"partialKeyHint":{"name":"partialKeyHint","type":"\u0007","is_mandatory":true,"title":"Partial key hint for identification","provider":"go.mondoo.com/mql/providers/claude"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"API key status","desc":"One of active, inactive, archived, or expired.","provider":"go.mondoo.com/mql/providers/claude"},"workspace":{"name":"workspace","type":"\u001bclaude.organization.workspace","title":"Workspace this key belongs to","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization API key","desc":"Examine an API key in the Claude organization including its status, associated workspace, and creation metadata. The `status` field is one of active, inactive, archived, or expired.","min_provider_version":"13.0.0","defaults":"id name status","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.costEntry":{"id":"claude.organization.costEntry","name":"claude.organization.costEntry","fields":{"amount":{"name":"amount","type":"\u0007","is_mandatory":true,"title":"Cost amount as a decimal string in USD cents","provider":"go.mondoo.com/mql/providers/claude"},"costType":{"name":"costType","type":"\u0007","is_mandatory":true,"title":"Cost type","desc":"One of tokens, web_search, code_execution, or session_usage.","provider":"go.mondoo.com/mql/providers/claude"},"currency":{"name":"currency","type":"\u0007","is_mandatory":true,"title":"Currency code","provider":"go.mondoo.com/mql/providers/claude"},"endingAt":{"name":"endingAt","type":"\t","is_mandatory":true,"title":"Bucket end timestamp","provider":"go.mondoo.com/mql/providers/claude"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model identifier","provider":"go.mondoo.com/mql/providers/claude"},"startingAt":{"name":"startingAt","type":"\t","is_mandatory":true,"title":"Bucket start timestamp","provider":"go.mondoo.com/mql/providers/claude"},"workspaceId":{"name":"workspaceId","type":"\u0007","is_mandatory":true,"title":"Workspace identifier","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization cost report bucket","desc":"Examine a daily cost bucket from the Admin API cost report. Each bucket covers a time window with USD cost amounts broken down by workspace and cost type.","min_provider_version":"13.0.0","defaults":"startingAt costType","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.invite":{"id":"claude.organization.invite","name":"claude.organization.invite","fields":{"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Invitee email address","provider":"go.mondoo.com/mql/providers/claude"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Timestamp when the invite expires","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Invite identifier","provider":"go.mondoo.com/mql/providers/claude"},"invitedAt":{"name":"invitedAt","type":"\t","is_mandatory":true,"title":"Timestamp when the invite was sent","provider":"go.mondoo.com/mql/providers/claude"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Assigned role","desc":"One of user, developer, billing, admin, or claude_code_user.","provider":"go.mondoo.com/mql/providers/claude"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Invite status","desc":"One of pending, accepted, expired, or deleted.","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization invite","desc":"Examine a pending invitation to the Claude organization. The `status` field is one of pending, accepted, expired, or deleted.","min_provider_version":"13.0.0","defaults":"id email role status","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.member":{"id":"claude.organization.member","name":"claude.organization.member","fields":{"addedAt":{"name":"addedAt","type":"\t","is_mandatory":true,"title":"Timestamp when the user was added to the organization","provider":"go.mondoo.com/mql/providers/claude"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"User email address","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"User identifier","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"User display name","provider":"go.mondoo.com/mql/providers/claude"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Organization role","desc":"One of user, developer, billing, admin, or claude_code_user.","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization member","desc":"Examine a member of the Claude organization including their role assignment. The `role` field is one of user, developer, billing, admin, or claude_code_user.","min_provider_version":"13.0.0","defaults":"id name email role","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.rateLimit":{"id":"claude.organization.rateLimit","name":"claude.organization.rateLimit","fields":{"groupType":{"name":"groupType","type":"\u0007","is_mandatory":true,"title":"Rate limit group type","desc":"One of model_group, batch, token_count, files, skills, or web_search.","provider":"go.mondoo.com/mql/providers/claude"},"inputTokensPerMinute":{"name":"inputTokensPerMinute","type":"\u0005","is_mandatory":true,"title":"Maximum input tokens per minute (cache-aware)","provider":"go.mondoo.com/mql/providers/claude"},"models":{"name":"models","type":"\u0019\u0007","is_mandatory":true,"title":"Models covered by this rate limit group","provider":"go.mondoo.com/mql/providers/claude"},"outputTokensPerMinute":{"name":"outputTokensPerMinute","type":"\u0005","is_mandatory":true,"title":"Maximum output tokens per minute","provider":"go.mondoo.com/mql/providers/claude"},"requestsPerMinute":{"name":"requestsPerMinute","type":"\u0005","is_mandatory":true,"title":"Maximum requests per minute","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization rate limit group","desc":"Examine an organization-level or workspace-level rate limit group. Each group covers a category of API usage such as model_group, batch, web_search, or files, and lists the models it applies to along with per-minute request and token limits.","min_provider_version":"13.0.0","defaults":"groupType","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.usageEntry":{"id":"claude.organization.usageEntry","name":"claude.organization.usageEntry","fields":{"cacheReadInputTokens":{"name":"cacheReadInputTokens","type":"\u0005","is_mandatory":true,"title":"Input tokens read from cache","provider":"go.mondoo.com/mql/providers/claude"},"endingAt":{"name":"endingAt","type":"\t","is_mandatory":true,"title":"Bucket end timestamp","provider":"go.mondoo.com/mql/providers/claude"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model identifier","provider":"go.mondoo.com/mql/providers/claude"},"outputTokens":{"name":"outputTokens","type":"\u0005","is_mandatory":true,"title":"Output tokens produced","provider":"go.mondoo.com/mql/providers/claude"},"serviceTier":{"name":"serviceTier","type":"\u0007","is_mandatory":true,"title":"API service tier","desc":"One of standard, batch, priority, flex, or priority_on_demand.","provider":"go.mondoo.com/mql/providers/claude"},"startingAt":{"name":"startingAt","type":"\t","is_mandatory":true,"title":"Bucket start timestamp","provider":"go.mondoo.com/mql/providers/claude"},"uncachedInputTokens":{"name":"uncachedInputTokens","type":"\u0005","is_mandatory":true,"title":"Uncached input tokens consumed","provider":"go.mondoo.com/mql/providers/claude"},"workspaceId":{"name":"workspaceId","type":"\u0007","is_mandatory":true,"title":"Workspace identifier","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization usage report bucket","desc":"Examine a daily usage bucket from the Admin API usage report. Each bucket covers a time window and contains per-model, per-workspace token consumption breakdowns for the last seven days.","min_provider_version":"13.0.0","defaults":"startingAt","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.workspace":{"id":"claude.organization.workspace","name":"claude.organization.workspace","fields":{"allowedInferenceGeos":{"name":"allowedInferenceGeos","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed inference geographic regions","provider":"go.mondoo.com/mql/providers/claude"},"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Timestamp when the workspace was archived, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Workspace creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"defaultInferenceGeo":{"name":"defaultInferenceGeo","type":"\u0007","is_mandatory":true,"title":"Default inference geographic region","provider":"go.mondoo.com/mql/providers/claude"},"displayColor":{"name":"displayColor","type":"\u0007","is_mandatory":true,"title":"Hex display color for the console UI","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Workspace identifier","provider":"go.mondoo.com/mql/providers/claude"},"member":{"name":"member","type":"\u001bclaude.organization.workspace.member","title":"Claude organization workspace member","desc":"Examine a member's access to a specific workspace. The `workspaceRole` field is one of workspace_user, workspace_developer, workspace_restricted_developer, workspace_admin, or workspace_billing.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"members":{"name":"members","type":"\u0019\u001bclaude.organization.workspace.member","title":"Members with access to this workspace","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Workspace name","provider":"go.mondoo.com/mql/providers/claude"},"rateLimits":{"name":"rateLimits","type":"\u0019\u001bclaude.organization.rateLimit","title":"Workspace-level rate limit overrides","provider":"go.mondoo.com/mql/providers/claude"},"workspaceGeo":{"name":"workspaceGeo","type":"\u0007","is_mandatory":true,"title":"Workspace geographic region","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization workspace","desc":"Examine a workspace within the Claude organization including its name, display color, creation date, archive status, data residency configuration, and workspace-level members and rate limits.","min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/claude"},"claude.organization.workspace.member":{"id":"claude.organization.workspace.member","name":"claude.organization.workspace.member","fields":{"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"User identifier","provider":"go.mondoo.com/mql/providers/claude"},"workspaceId":{"name":"workspaceId","type":"\u0007","is_mandatory":true,"title":"Workspace identifier","provider":"go.mondoo.com/mql/providers/claude"},"workspaceRole":{"name":"workspaceRole","type":"\u0007","is_mandatory":true,"title":"Workspace-level role","desc":"One of workspace_user, workspace_developer, workspace_restricted_developer, workspace_admin, or workspace_billing.","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude organization workspace member","desc":"Examine a member's access to a specific workspace. The `workspaceRole` field is one of workspace_user, workspace_developer, workspace_restricted_developer, workspace_admin, or workspace_billing.","min_provider_version":"13.0.0","defaults":"userId workspaceRole","provider":"go.mondoo.com/mql/providers/claude"},"claude.session":{"id":"claude.session","name":"claude.session","fields":{"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Archive timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Session creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"environmentId":{"name":"environmentId","type":"\u0007","is_mandatory":true,"title":"Environment identifier for this session","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Session identifier","provider":"go.mondoo.com/mql/providers/claude"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Session status","desc":"One of rescheduling, running, idle, or terminated.","provider":"go.mondoo.com/mql/providers/claude"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Session title","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude agent session","desc":"Examine an agent session including its execution status, associated environment, and lifecycle timestamps. The `status` field is one of rescheduling, running, idle, or terminated.","min_provider_version":"13.0.0","defaults":"id title status","provider":"go.mondoo.com/mql/providers/claude"},"claude.skill":{"id":"claude.skill","name":"claude.skill","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"displayTitle":{"name":"displayTitle","type":"\u0007","is_mandatory":true,"title":"Skill display title","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Skill identifier","provider":"go.mondoo.com/mql/providers/claude"},"latestVersion":{"name":"latestVersion","type":"\u0007","is_mandatory":true,"title":"Latest version identifier","provider":"go.mondoo.com/mql/providers/claude"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Skill source","desc":"One of custom or anthropic.","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude registered skill","desc":"Examine a skill registered in the Claude platform. Skills extend agent capabilities and can be Anthropic-provided or custom. The `source` field is one of custom or anthropic.","min_provider_version":"13.0.0","defaults":"id displayTitle","provider":"go.mondoo.com/mql/providers/claude"},"claude.userProfile":{"id":"claude.userProfile","name":"claude.userProfile","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Profile creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"externalId":{"name":"externalId","type":"\u0007","is_mandatory":true,"title":"Platform-provided external identifier","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Profile identifier","provider":"go.mondoo.com/mql/providers/claude"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile display name","provider":"go.mondoo.com/mql/providers/claude"},"relationship":{"name":"relationship","type":"\u0007","is_mandatory":true,"title":"Relationship to the platform","desc":"One of external, resold, or internal.","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude user profile","desc":"Examine a user profile representing an entity that interacts with the Claude platform. The `relationship` field describes how the entity relates to the platform: one of external, resold, or internal.","min_provider_version":"13.0.0","defaults":"id name relationship","provider":"go.mondoo.com/mql/providers/claude"},"claude.vault":{"id":"claude.vault","name":"claude.vault","fields":{"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Archive timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Vault creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"credential":{"name":"credential","type":"\u001bclaude.vault.credential","title":"Claude vault credential","desc":"Examine a credential stored in a Claude vault. Credentials provide authentication details that agents can use during sessions without exposing secrets in prompts or tool calls.","provider":"go.mondoo.com/mql/providers/claude","is_implicit_resource":true},"credentials":{"name":"credentials","type":"\u0019\u001bclaude.vault.credential","title":"Credentials stored in this vault","provider":"go.mondoo.com/mql/providers/claude"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Vault display name","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Vault identifier","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude secret vault","desc":"Examine a secret vault used to store credentials for agent sessions. Vaults hold credentials that agents can access at runtime without exposing secrets in prompts.","min_provider_version":"13.0.0","defaults":"id displayName","provider":"go.mondoo.com/mql/providers/claude"},"claude.vault.credential":{"id":"claude.vault.credential","name":"claude.vault.credential","fields":{"archivedAt":{"name":"archivedAt","type":"\t","is_mandatory":true,"title":"Archive timestamp, if applicable","provider":"go.mondoo.com/mql/providers/claude"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Creation timestamp","provider":"go.mondoo.com/mql/providers/claude"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Credential display name","provider":"go.mondoo.com/mql/providers/claude"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Credential identifier","provider":"go.mondoo.com/mql/providers/claude"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type","provider":"go.mondoo.com/mql/providers/claude"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update timestamp","provider":"go.mondoo.com/mql/providers/claude"},"vaultId":{"name":"vaultId","type":"\u0007","is_mandatory":true,"title":"Vault identifier this credential belongs to","provider":"go.mondoo.com/mql/providers/claude"}},"title":"Claude vault credential","desc":"Examine a credential stored in a Claude vault. Credentials provide authentication details that agents can use during sessions without exposing secrets in prompts or tool calls.","min_provider_version":"13.0.0","defaults":"id displayName","provider":"go.mondoo.com/mql/providers/claude"}}}