Agents, Environments & Sessions — Managed Agents
Agents, Environments & Sessions
Managed Agent Architecture & Claude Agent SDK
Building production agents requires orchestrating environments, tools, skills, state, and execution loops. Alongside cloud-hosted Managed Agents, Anthropic provides the official Claude Agent SDK (@anthropic-ai/claude-agent-sdk for TypeScript and claude-agent-sdk for Python) and modular Agent Skills (loaded dynamically via container.skills in the Messages API).
Core Agent Primitives
| Primitive | Definition | Role |
|---|---|---|
| Model & Instructions | System prompt + Claude 5.5 / Fable 5.1 reasoning | Strategic decision maker |
| Tool Suite & Skills | JSON Schemas, MCP servers, and container.skills | Execution capabilities & domain workflows |
| Session Memory | Persistent conversation state, CLAUDE.md, and compaction | Contextual continuity |
September 2026 Update: The 'auto' Permission Policy
In the September 10, 2026 update to Claude Managed Agents, Anthropic introduced the auto permission setting. Previously, developers configured tools with either static allow or synchronous ask human-confirmation gates. With auto, the Anthropic execution harness evaluates each outgoing tool or MCP call against contextual threat profiles, parameter bounds, and historical drift in real time. Low-risk read-only commands proceed automatically, while write/destructive actions pause the session and generate a verified approval request.
SOE & AOE Operational Runbook for Claude Agents
For enterprise-grade Standard Operating Environments (SOE) and AI Operations Engineering (AOE), production deployments should enforce:
- SOE Baseline: Standardize runtime environment variables (
ANTHROPIC_API_KEY,ANTHROPIC_BASE_URL), pin modern SDKs (@anthropic-ai/sdk >= 1.0.0, Pythonanthropic >= 2.0.0, and@anthropic-ai/claude-agent-sdk), enforce Zero Data Retention (ZDR) contracts, and scope outbound network egress via private proxies. - AOE Tool Gatekeeping: Deploy the
autopolicy across all third-party MCP connectors, pair with real-time audit logging via OpenTelemetry, enforce exponential backoff with full jitter on 429 rate-limit responses, and set deterministic max_turn limits to prevent runaway iteration loops.
Anthropic agent architectures execute tasks in isolated container environments. Call the Messages API with the official bash sandbox tool to execute benchmarks.