What is Claude Managed Agents?
Anthropic's documentation defines it as a "pre-built, configurable agent harness that runs in managed infrastructure. Best for long-running tasks and asynchronous work." In plainer terms: the agent loop that powers Claude Code, plus a sandbox for it to work in, plus durable session storage, offered as an API. You send a task; Anthropic runs the agent until it is done or needs you.
It launched on April 8, 2026 and is still in public beta: every endpoint requires the managed-agents-2026-04-01 beta header, though access is on by default for all API accounts. If the vocabulary is new, two earlier posts help: an agent harness is everything around the model that lets it act, and an agent runtime is the production layer that keeps it running. Managed Agents is Anthropic selling you both, pre-assembled.
How does Claude Managed Agents work?
There are four objects:
- • Agent: the reusable definition, with model, system prompt, tools, MCP servers, and skills.
- • Environment: where it runs. Either an Anthropic-managed cloud sandbox or a self-hosted sandbox on your own infrastructure, with networking rules.
- • Session: one running instance of an agent in an environment. Anthropic keeps its state and event history server-side, so it survives disconnects.
- • Events: what flows in and out: user turns, tool results, and status updates, streamed over server-sent events.
Anthropic's engineering post, Scaling Managed Agents: Decoupling the brain from the hands, explains the design: the "brain" (Claude plus the harness) is separated from the "hands" (sandboxes and tools) and from the session log, so each can fail, scale, and be replaced independently. Anthropic reports that after this change "p50 TTFT dropped roughly 60% and p95 dropped over 90%."
On top of that sit the features you would otherwise build yourself: a built-in toolset (bash, read, write, edit, glob, grep, web fetch, web search), custom tools your code executes, MCP servers with OAuth credentials kept in vaults, skills, multi-agent coordination, scheduled (cron) deployments, per-session budgets, permission policies, outcome rubrics, and the ability to steer or interrupt a running agent. The harness also handles prompt caching and context compaction for you.
Claude Managed Agents quickstart
The official quickstart creates the three objects and streams the result:
# From Anthropic's Managed Agents quickstart (Python), trimmed.
# Every Managed Agents endpoint needs the managed-agents-2026-04-01 beta header.
agent = client.beta.agents.create(
name="Coding Assistant",
model="claude-opus-5-5",
system="You are a helpful coding assistant. Write clean, well-documented code.",
tools=[{"type": "agent_toolset_20260401"}],
)
environment = client.beta.environments.create(
name="quickstart-env",
config={"type": "cloud",
"networking": {"type": "limited", "allow_package_managers": True}},
)
session = client.beta.sessions.create(
agent=agent.id, environment_id=environment.id, title="Quickstart session",
)
with client.beta.sessions.events.stream(session.id) as stream:
client.beta.sessions.events.send(session.id, events=[{
"type": "user.message",
"content": [{"type": "text", "text": "Create a Python script that generates the first 20 "
"Fibonacci numbers and saves them to fibonacci.txt"}],
}])
for event in stream:
... # agent.message / agent.tool_use / session.status_idleThere are SDKs for Python, TypeScript, Java, Go, C#, Ruby, and PHP, a CLI (ant apply agent.md lets you define an agent in a Markdown or YAML file), and in Claude Code the command /claude-api managed-agents-onboard walks you through setup.
Get the weekly AI engineering brief
Agent platforms, harnesses, runtimes, and what they really cost: one practical email a week for engineers. Plus the free roadmap PDF.
By subscribing you agree to receive emails from AI Engineer Insights. Unsubscribe anytime. See our Privacy Policy.
How much does Claude Managed Agents cost?
Per Anthropic's pricing page, you pay for two things, "tokens and session runtime":
- • Tokens at the standard rate of whichever model the agent uses, with prompt caching discounts applied.
- • $0.08 per session-hour of runtime, "measured to the millisecond", counted only while the session is
running. Idle, rescheduling, and terminated time is free. - • Session runtime replaces container-hour billing, so there is no separate charge for the sandbox.
- • Web search: $10 per 1,000 searches. No Batch API discount. US-only inference: 1.1x.
Anthropic's worked example: a one-hour session on Opus 5.5 that uses 50,000 input and 15,000 output tokens costs $0.20 + $0.30 + $0.08 = $0.58, or about $0.43 with caching. The runtime fee is small; tokens dominate. That makes model choice and context management the real cost levers, the same ones we cover in LLM routing. Set a per-session budget before you let an agent run unattended.
Claude Managed Agents vs Agent SDK vs AgentCore vs Google's agent platform
| Option | Who runs the agent | Models / frameworks | Best for |
|---|---|---|---|
| Claude Managed Agents | Anthropic hosts the agent loop, sandbox, and session state | Claude only | Long-running, asynchronous Claude agents without running infrastructure |
| Claude Agent SDK | You run it, in a process you operate | Claude only | Embedding Claude Code's harness in your own app or infrastructure |
| Claude Code (CLI) | You, on your machine | Claude only | Interactive coding in a terminal or IDE |
| AWS Bedrock AgentCore | AWS hosts; you bring the agent | Any framework, any model | Teams standardised on AWS, mixing models and frameworks |
| Google Gemini Enterprise Agent Platform (formerly Vertex AI Agent Engine) | Google Cloud hosts; you bring the agent | ADK, LangChain, LangGraph, LlamaIndex, custom | Teams on Google Cloud building with ADK or LangGraph |
The sharpest line is who runs the loop. Anthropic's Agent SDK overview puts it plainly: the SDK runs the agent "in a process you operate," while Managed Agents means Anthropic hosts the agent. The second line is model choice. Bedrock AgentCore advertises "any framework, any model" (and lists the Claude Agent SDK as a supported framework), and Google's agent platform hosts ADK, LangChain, LangGraph, and LlamaIndex agents. Managed Agents is Claude-only. If you build with an open-source framework, see our agent frameworks comparison.
Limits and what to watch
- • Still beta. APIs may change; MCP tunnels and the "dreaming" memory feature are a separate research preview.
- • Compliance. Anthropic says it is "not currently eligible for Zero Data Retention or HIPAA BAA coverage." You can delete sessions and files through the API.
- • Where it runs. Available on the Claude Platform (including Claude Platform on AWS), but Anthropic's pricing page notes it is "not available on partner-operated cloud platforms."
- • Rate limits. 300 requests per minute on create endpoints and 1,200 on read endpoints per organization, on top of your usage tier.
- • Undocumented limits. Sandbox CPU, memory, disk, and maximum session length aren't published; test your longest job before you depend on it.
- • Lock-in. The main complaint in the Hacker News launch thread (169 points) and in VentureBeat's coverage: one model provider, with session data in Anthropic's managed database.
Anthropic's launch customers give a sense of the target: Notion, Rakuten, Asana, Sentry, and Atlassian among them, with Sentry running a debugging agent and a patch-writing agent. That is the sweet spot: well-defined, asynchronous jobs that take minutes to hours, where the team wants results, not agent infrastructure. Pair it with sensible guardrails on tool calls.
When should you use Claude Managed Agents?
- • Use it if you are already on Claude, the job is long-running or asynchronous (research, code changes, data work), and you don't want to run sandboxes, queues, and session storage yourself.
- • Use the Claude Agent SDK if you need the agent inside your own infrastructure, on a partner cloud, or under data rules Managed Agents can't meet yet.
- • Use AgentCore or Google's platform if you need to mix model providers or already standardise on that cloud.
- • Use a plain tool-calling loop if the task is short and synchronous; an agent platform is overkill for a few tool calls. For coordinating several agents, see multi-agent orchestration patterns.
Go deeper on Claude Managed Agents with AI
Ask your next question with this article as context. Opens in a new tab; you can edit the question before sending.
Frequently Asked Questions
What is Claude Managed Agents?
Claude Managed Agents is Anthropic's hosted service for running Claude as an autonomous agent. Anthropic describes it as a pre-built, configurable agent harness that runs in managed infrastructure, best for long-running tasks and asynchronous work. You define an agent (model, system prompt, tools, MCP servers, skills) and an environment (a cloud sandbox Anthropic manages, or your own), then start sessions that Anthropic runs, keeping their state and event history on its side. It launched in public beta on April 8, 2026.
How much does Claude Managed Agents cost?
Two charges: tokens at the standard model rates, plus $0.08 per session-hour of runtime. Runtime is measured to the millisecond and only counts while a session's status is running, not while it is idle or terminated, and it replaces separate container-hour billing. Web search costs $10 per 1,000 searches, the Batch API discount does not apply, and pinning inference to the US adds a 1.1x multiplier. Anthropic's own example, a one-hour Opus 5.5 session with 50,000 input and 15,000 output tokens, costs $0.58, or about $0.43 with prompt caching.
What is the difference between Claude Managed Agents and the Claude Agent SDK?
Where the agent runs. The Claude Agent SDK is a library that runs Claude Code's agent harness in a process you operate, so you host the loop, the sandbox, and the state. Managed Agents is the same idea hosted by Anthropic: Anthropic runs the agent loop, provides the sandbox, stores the session and its events, and you talk to it over an API. Choose the SDK for full control and your own infrastructure; choose Managed Agents to skip running agent infrastructure.
Is Claude Managed Agents generally available?
Not yet. As of October 2026 it is in public beta: every endpoint requires the managed-agents-2026-04-01 beta header, though access is enabled by default for all API accounts. Some features, such as MCP tunnels and the memory feature Anthropic calls dreaming, are in a narrower research preview that you have to request.
What tools can a Claude Managed Agent use?
The built-in agent toolset includes bash, read, write, edit, glob, grep, web fetch, and web search. You can also add custom tools that your own code executes, connect MCP servers through the MCP connector (with OAuth credentials stored in vaults), and attach skills to the agent.
What are the downsides of Claude Managed Agents?
It runs Claude models only, so teams that want to mix providers see lock-in; session data lives in Anthropic's managed storage; it is not currently eligible for Zero Data Retention or HIPAA BAA coverage; it is still in beta; and Anthropic does not document sandbox CPU, memory, or maximum session length. Agents running unattended can also run up token costs, so set per-session budgets.
References
- • Anthropic — Claude Managed Agents overview (docs)
- • Anthropic — Managed Agents quickstart
- • Anthropic — Managed Agents tools
- • Anthropic — Managed Agents API reference and limits
- • Anthropic — Pricing: Claude Managed Agents
- • Anthropic — Claude Managed Agents launch (Apr 8, 2026)
- • Anthropic Engineering — Scaling Managed Agents: Decoupling the brain from the hands
- • Anthropic — Agent SDK overview (SDK vs Claude Code vs Managed Agents)
- • AWS — Amazon Bedrock AgentCore
- • Google Cloud — Agent Engine overview
- • VentureBeat — Claude Managed Agents and lock-in risk
Pricing and beta status verified against Anthropic's docs on October 20, 2026.