Repository Public
1---2title: Local3url: https://platform.claude.com/docs/en/api/compliance/apps/sessions/local4---56# Local78## List local sessions910**GET** `/v1/compliance/apps/sessions/local`1112List local sessions across the organizations the key may read.1314Results are ordered by `created_at` descending. Pagination is15forward-only via `next_page`; there is no reverse cursor.1617### Query parameters1819- `created_at: optional object`2021 - `gte: optional string`2223 Only return sessions whose first inference call is at or after this time (RFC 3339; a UTC offset is required).2425 format: date-time2627 - `lt: optional string`2829 Only return sessions whose first inference call is strictly before this time (RFC 3339; a UTC offset is required).3031 format: date-time3233- `limit: optional number`3435 Maximum results (default: 100, max: 500)3637 default: 100, maximum: 500, minimum: 13839- `page: optional string`4041 Opaque pagination token from a previous response's `next_page` field. Pass this to retrieve the next page of results. Clients should treat this value as an opaque string and not attempt to parse or interpret its contents, as the format may change without notice.4243- `updated_at: optional object`4445 - `gte: optional string`4647 Only return sessions whose last inference call is at or after this time (RFC 3339; a UTC offset is required). Combines with `created_at.gte` / `created_at.lt`; the ordering and pagination are unchanged. Use it to poll for sessions that have been active since a previous pass — a session that becomes active later can only enter the result, never leave it.4849 format: date-time5051### Headers5253- `"x-api-key": optional string`5455### Returns5657- `data: array of object`5859 Page of local sessions, ordered by `created_at` descending; ties are broken by a fixed server-side order. `updated_at` never participates in the ordering; the `updated_at.gte` query parameter filters on it without changing the order or the pagination cursor.6061 - `type: "compliance_local_session"`6263 default: compliance_local_session6465 - `id: string`6667 Local session identifier, prefixed `clls_`. Unique within the parent organization. Treat as an opaque string; the format may change without notice.6869 - `created_at: string`7071 Timestamp of the session's first retained inference call (RFC 3339, UTC). When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected, so this value is the timestamp of the earliest retained call: always strictly after the boundary, never the boundary itself.7273 format: date-time7475 - `organization_uuid: string`7677 UUID of the child organization the session belongs to7879 - `product_surface: string or null`8081 The product the session ran in: `cowork` (Cowork in Claude Desktop on the user's machine), `claude_code` (Claude Code), `claude_science` (Claude Science), or one of `office_agents/excel`, `office_agents/powerpoint`, `office_agents/word`, and `office_agents/outlook` (Claude for Microsoft 365, by app; `office_agents` alone when the app is not identified). New values appear as coverage expands; treat unrecognized values as opaque. `null` when the surface was not recorded.8283 - `truncated: boolean`8485 True when the session has more inference calls than the service can return for one session (100,000). The messages endpoint then returns only the session's earliest calls, up to that many, and ends before the session does; `updated_at` is a lower bound on the latest call and can differ between the list and retrieve endpoints. False for every session within that bound.8687 default: false8889 - `updated_at: string`9091 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.9293 format: date-time9495 - `user: object`9697 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.9899 - `id: string`100101 User identifier (tagged ID, prefixed `user_`). Always set, so attribution survives after the user's account is deleted or the user leaves the organizations the key may read.102103 - `email_address: string or null`104105 User's email address. Null when the user's account has been deleted or the user is no longer a member of an organization the key may read. The messages endpoint does not resolve email addresses; this field is always null there.106107 - `workspace_id: string or null`108109 Workspace identifier (tagged ID, prefixed `wrkspc_`). Null for sessions not attributed to a workspace.110111- `next_page: string or null`112113 Opaque pagination cursor (prefixed `page_`) for the next page. Null when there is no further page. Treat as an opaque string; the format may change without notice.114115### Example116117```bash118curl https://api.anthropic.com/v1/compliance/apps/sessions/local \119 -H 'anthropic-version: 2023-06-01' \120 -H "Authorization: Bearer $ANTHROPIC_COMPLIANCE_API_KEY"121```122123#### Response (200)124125```json126{127 "data": [128 {129 "type": "compliance_local_session",130 "id": "clls_eyJ2IjoxLCJvIjoiOWEx…",131 "organization_uuid": "9a1e0000-0000-0000-0000-000000000000",132 "workspace_id": "wrkspc_01SvYKoWVRVHoEbwESNvzYdR",133 "user": {134 "id": "user_01GpKpLmNoPqRsTuVwXyZaBc",135 "email_address": "engineer@example.com"136 },137 "product_surface": "cowork",138 "created_at": "2026-07-09T14:02:11Z",139 "updated_at": "2026-07-09T15:47:33Z"140 }141 ]142}143```144145## Retrieve a local session146147**GET** `/v1/compliance/apps/sessions/local/{local_session_id}`148149Retrieve one local session.150151The response is the same session object the list endpoint returns,152with `user.email_address` resolved the same way. Retention is153enforced when the response is served: a session whose every154inference call has aged out returns 404.155156### Path parameters157158- `local_session_id: string`159160### Headers161162- `"x-api-key": optional string`163164### Returns165166- `type: "compliance_local_session"`167168 default: compliance_local_session169170- `id: string`171172 Local session identifier, prefixed `clls_`. Unique within the parent organization. Treat as an opaque string; the format may change without notice.173174- `created_at: string`175176 Timestamp of the session's first retained inference call (RFC 3339, UTC). When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected, so this value is the timestamp of the earliest retained call: always strictly after the boundary, never the boundary itself.177178 format: date-time179180- `organization_uuid: string`181182 UUID of the child organization the session belongs to183184- `product_surface: string or null`185186 The product the session ran in: `cowork` (Cowork in Claude Desktop on the user's machine), `claude_code` (Claude Code), `claude_science` (Claude Science), or one of `office_agents/excel`, `office_agents/powerpoint`, `office_agents/word`, and `office_agents/outlook` (Claude for Microsoft 365, by app; `office_agents` alone when the app is not identified). New values appear as coverage expands; treat unrecognized values as opaque. `null` when the surface was not recorded.187188- `truncated: boolean`189190 True when the session has more inference calls than the service can return for one session (100,000). The messages endpoint then returns only the session's earliest calls, up to that many, and ends before the session does; `updated_at` is a lower bound on the latest call and can differ between the list and retrieve endpoints. False for every session within that bound.191192 default: false193194- `updated_at: string`195196 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.197198 format: date-time199200- `user: object`201202 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.203204 - `id: string`205206 User identifier (tagged ID, prefixed `user_`). Always set, so attribution survives after the user's account is deleted or the user leaves the organizations the key may read.207208 - `email_address: string or null`209210 User's email address. Null when the user's account has been deleted or the user is no longer a member of an organization the key may read. The messages endpoint does not resolve email addresses; this field is always null there.211212- `workspace_id: string or null`213214 Workspace identifier (tagged ID, prefixed `wrkspc_`). Null for sessions not attributed to a workspace.215216### Example217218```bash219curl https://api.anthropic.com/v1/compliance/apps/sessions/local/$LOCAL_SESSION_ID \220 -H 'anthropic-version: 2023-06-01' \221 -H "Authorization: Bearer $ANTHROPIC_COMPLIANCE_API_KEY"222```223224#### Response (200)225226```json227{228 "type": "compliance_local_session",229 "id": "clls_eyJ2IjoxLCJvIjoiOWEx…",230 "organization_uuid": "9a1e0000-0000-0000-0000-000000000000",231 "workspace_id": "wrkspc_01SvYKoWVRVHoEbwESNvzYdR",232 "user": {233 "id": "user_01GpKpLmNoPqRsTuVwXyZaBc",234 "email_address": "engineer@example.com"235 },236 "product_surface": "cowork",237 "created_at": "2026-07-09T14:02:11Z",238 "updated_at": "2026-07-09T15:47:33Z"239}240```241242## Domain types243244### Local Retrieve Response245246- `LocalRetrieveResponse object`247248 A session that a user ran on their own computer in a Claude app while249 signed in with their organization account.250251 - `type: "compliance_local_session"`252253 default: compliance_local_session254255 - `id: string`256257 Local session identifier, prefixed `clls_`. Unique within the parent organization. Treat as an opaque string; the format may change without notice.258259 - `created_at: string`260261 Timestamp of the session's first retained inference call (RFC 3339, UTC). When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected, so this value is the timestamp of the earliest retained call: always strictly after the boundary, never the boundary itself.262263 format: date-time264265 - `organization_uuid: string`266267 UUID of the child organization the session belongs to268269 - `product_surface: string or null`270271 The product the session ran in: `cowork` (Cowork in Claude Desktop on the user's machine), `claude_code` (Claude Code), `claude_science` (Claude Science), or one of `office_agents/excel`, `office_agents/powerpoint`, `office_agents/word`, and `office_agents/outlook` (Claude for Microsoft 365, by app; `office_agents` alone when the app is not identified). New values appear as coverage expands; treat unrecognized values as opaque. `null` when the surface was not recorded.272273 - `truncated: boolean`274275 True when the session has more inference calls than the service can return for one session (100,000). The messages endpoint then returns only the session's earliest calls, up to that many, and ends before the session does; `updated_at` is a lower bound on the latest call and can differ between the list and retrieve endpoints. False for every session within that bound.276277 default: false278279 - `updated_at: string`280281 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.282283 format: date-time284285 - `user: object`286287 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.288289 - `id: string`290291 User identifier (tagged ID, prefixed `user_`). Always set, so attribution survives after the user's account is deleted or the user leaves the organizations the key may read.292293 - `email_address: string or null`294295 User's email address. Null when the user's account has been deleted or the user is no longer a member of an organization the key may read. The messages endpoint does not resolve email addresses; this field is always null there.296297 - `workspace_id: string or null`298299 Workspace identifier (tagged ID, prefixed `wrkspc_`). Null for sessions not attributed to a workspace.300301### Local List Response302303- `LocalListResponse object`304305 A session that a user ran on their own computer in a Claude app while306 signed in with their organization account.307308 - `type: "compliance_local_session"`309310 default: compliance_local_session311312 - `id: string`313314 Local session identifier, prefixed `clls_`. Unique within the parent organization. Treat as an opaque string; the format may change without notice.315316 - `created_at: string`317318 Timestamp of the session's first retained inference call (RFC 3339, UTC). When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected, so this value is the timestamp of the earliest retained call: always strictly after the boundary, never the boundary itself.319320 format: date-time321322 - `organization_uuid: string`323324 UUID of the child organization the session belongs to325326 - `product_surface: string or null`327328 The product the session ran in: `cowork` (Cowork in Claude Desktop on the user's machine), `claude_code` (Claude Code), `claude_science` (Claude Science), or one of `office_agents/excel`, `office_agents/powerpoint`, `office_agents/word`, and `office_agents/outlook` (Claude for Microsoft 365, by app; `office_agents` alone when the app is not identified). New values appear as coverage expands; treat unrecognized values as opaque. `null` when the surface was not recorded.329330 - `truncated: boolean`331332 True when the session has more inference calls than the service can return for one session (100,000). The messages endpoint then returns only the session's earliest calls, up to that many, and ends before the session does; `updated_at` is a lower bound on the latest call and can differ between the list and retrieve endpoints. False for every session within that bound.333334 default: false335336 - `updated_at: string`337338 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.339340 format: date-time341342 - `user: object`343344 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.345346 - `id: string`347348 User identifier (tagged ID, prefixed `user_`). Always set, so attribution survives after the user's account is deleted or the user leaves the organizations the key may read.349350 - `email_address: string or null`351352 User's email address. Null when the user's account has been deleted or the user is no longer a member of an organization the key may read. The messages endpoint does not resolve email addresses; this field is always null there.353354 - `workspace_id: string or null`355356 Workspace identifier (tagged ID, prefixed `wrkspc_`). Null for sessions not attributed to a workspace.357358## Local › Messages359360### Retrieve local session messages361362**GET** `/v1/compliance/apps/sessions/local/{local_session_id}/messages`363364Read one local session's transcript, oldest-first by default.365366Retention is enforced read-side: turns at or before the child367organization's retention boundary are never returned; a session368that straddles the boundary carries one leading369`content_unavailable` placeholder (`reason: "retention_elapsed"`)370in their place. The boundary is pinned on the walk's first page and371honored for 24 hours: a cursor older than that is rejected with an372explicit 400; restart the walk to read under the current boundary.373374#### Path parameters375376- `local_session_id: string`377378#### Query parameters379380- `limit: optional number`381382 Maximum results (default: 100, max: 1000)383384 default: 100, maximum: 1000, minimum: 1385386- `order: optional "asc" or "desc"`387388 Sort direction. `asc` (oldest-first, default) or `desc`.389390 default: asc391392 - `"asc"`393394 - `"desc"`395396- `page: optional string`397398 Opaque pagination token from a previous response's `next_page` field. Pass this to retrieve the next page of results. Clients should treat this value as an opaque string and not attempt to parse or interpret its contents, as the format may change without notice.399400- `tool_result_max_bytes: optional number`401402 Truncate each text item inside a tool result to at most this many bytes (cut on a code-point boundary). Pass `-1` to request the server maximum (approximately 1 MiB); larger values are clamped to it. `0` is not a valid value.403404 default: 10000, maximum: 2147483647, minimum: -1405406- `tool_use_input_max_bytes: optional number`407408 Truncate each tool-use input to at most this many bytes (cut on a code-point boundary so the result is valid UTF-8). Pass `-1` to request the server maximum (approximately 1 MiB); larger values are clamped to it. `0` is not a valid value.409410 default: 10000, maximum: 2147483647, minimum: -1411412#### Headers413414- `"x-api-key": optional string`415416#### Returns417418- `data: array of object`419420 Transcript turns for this page, in call order: oldest call first by default, newest call first with `order=desc`. The messages of one call carry the call's timestamp and follow each other in transcript order; a page boundary can fall between them.421422 - `type: "compliance_local_session_message"`423424 default: compliance_local_session_message425426 - `id: string`427428 Message identifier, prefixed `clsm_`. Stable for as long as the message's turn is retained: identifiers of retained turns do not change as older turns age out of the organization's retention period. The `retention_elapsed` placeholder's identifier is distinct from every retained turn's and changes only when further turns age out.429430 - `content: array of Text or ToolUse or ToolResult`431432 Content blocks within the message, discriminated on `type` (`text` / `tool_use` / `tool_result`: the same discriminator values as the claude.ai chat-messages endpoint; the tool variants omit `integration_name` and `mcp_server_url`, and `text` carries `truncated`). Extended-thinking content is never included. The request's `system` field is never included; a presence-only marker message is emitted when it was set. The request's `tools[]` definitions are never included as transcript messages. Project-level instructions (such as CLAUDE.md files) appear in the message stream as a user-role context block and are included. Empty when `provenance.type` is `content_unavailable`.433434 - `Text object`435436 Text content block.437438 - `type: "text"`439440 default: text441442 - `text: string`443444 Text content from the user or the assistant445446 - `truncated: boolean`447448 True when `text` was shortened by the server's fixed per-string bound (approximately 1 MiB), or when ancillary content the block carried (such as citations) was omitted, or when this block stands in for a non-text block whose content is not shown, or when it is an explanatory marker the server inserted (its text enclosed in square brackets, e.g. prefacing client-asserted history). There is no request parameter that raises the per-string bound.449450 default: false451452 - `ToolUse object`453454 Tool invocation requested by the assistant.455456 - `type: "tool_use"`457458 default: tool_use459460 - `id: string or null`461462 Tool-use ID, e.g. 'toolu_01AbC...'463464 - `input: string`465466 Arguments passed to the tool, as a JSON-encoded string. May be shortened (see the `truncated` field); a truncated value is cut mid-document and is not valid JSON.467468 - `name: string`469470 Name of the tool invoked471472 - `truncated: boolean`473474 True when `input` was shortened. Pass `tool_use_input_max_bytes=-1` to request the server maximum.475476 default: false477478 - `ToolResult object`479480 Result returned by a tool invocation.481482 - `type: "tool_result"`483484 default: tool_result485486 - `content: array of object`487488 Text content returned by the tool. Non-text item types are omitted and signalled via `truncated` with an in-band item-count marker.489490 - `type: "text"`491492 default: text493494 - `text: string`495496 Text returned by the tool497498 - `is_error: boolean`499500 True when the tool reported an error501502 - `name: string`503504 Name of the tool that produced this result505506 - `tool_use_id: string or null`507508 ID of the tool_use block this result responds to509510 - `truncated: boolean`511512 True when one or more text items in `content` were shortened or non-text items were omitted. Pass `tool_result_max_bytes=-1` to request the server maximum.513514 default: false515516 - `created_at: string`517518 When the message was recorded (RFC 3339, UTC)519520 format: date-time521522 - `model: string or null`523524 The model that served this assistant turn, as reported in the `model` field of the underlying Messages API response. Null on user messages and on any assistant message whose `provenance` is set: client-asserted history and synthetic markers were not produced by a model during this session, and for unavailable content the serving model is not known.525526 - `provenance: ContentUnavailable or ClientAsserted or SyntheticMarker or null`527528 Where this turn's content came from, discriminated on `type`. Null (the common case) means verified content: on an assistant message, content Claude produced during this session; on a user message, content the user sent. `content_unavailable`: the turn's content cannot be returned and `content` is empty; `reason` says why. `client_asserted`: assistant content the client supplied as conversation history; `content` shows what the model received but its authorship is not verified; never on user-role messages. `synthetic_marker`: a transcript marker the endpoint generated rather than content either party sent during the session. Both `client_asserted` and `synthetic_marker` can result from normal request or client processing, not only client modification. Callers should tolerate unrecognized `type` values.529530 - `ContentUnavailable object`531532 The turn's content cannot be returned; `content` is empty.533534 - `type: "content_unavailable"`535536 default: content_unavailable537538 - `reason: string`539540 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `client_aborted` (the client closed the connection or cancelled the request before the response completed, so the response was not captured for this turn; any partial output already streamed to the client is not included; assistant-role turns only), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.541542 - `ClientAsserted object`543544 Assistant content the client supplied as conversation history545 rather than produced by Claude during this session. `content` shows546 what the model received but its authorship is not verified; this can547 result from normal request or client processing, not only client548 modification. Never on user-role messages.549550 - `type: "client_asserted"`551552 default: client_asserted553554 - `SyntheticMarker object`555556 A transcript marker generated by the endpoint rather than sent by557 either party during the session. Marker messages indicate that the558 prompt history diverged from what was captured, that the request's559 `system` field was present but is not shown, or that earlier turns560 that a request re-sent as history were withheld because they cannot561 be dated against the child organization's data-retention period562 (only for organizations with a finite retention period; the request's563 new user input after its last assistant turn is not affected). The564 marker's text names the cause. Markers that report a mismatch with565 captured history can result from normal request or client processing,566 not only client modification.567568 - `type: "synthetic_marker"`569570 default: synthetic_marker571572 - `role: "assistant" or "user"`573574 Message sender (`user` or `assistant`)575576 - `"assistant"`577578 - `"user"`579580- `next_page: string or null`581582 Opaque pagination cursor (prefixed `page_`) for the next page. Null when there is no further page. Treat as an opaque string; the format may change without notice.583584- `session: object`585586 The local session the messages belong to. `user.email_address` is always null on this endpoint; the messages endpoint does not resolve email addresses.587588 - `type: "compliance_local_session"`589590 default: compliance_local_session591592 - `id: string`593594 Local session identifier, prefixed `clls_`. Unique within the parent organization. Treat as an opaque string; the format may change without notice.595596 - `created_at: string`597598 Timestamp of the session's first retained inference call (RFC 3339, UTC). When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected, so this value is the timestamp of the earliest retained call: always strictly after the boundary, never the boundary itself.599600 format: date-time601602 - `organization_uuid: string`603604 UUID of the child organization the session belongs to605606 - `product_surface: string or null`607608 The product the session ran in: `cowork` (Cowork in Claude Desktop on the user's machine), `claude_code` (Claude Code), `claude_science` (Claude Science), or one of `office_agents/excel`, `office_agents/powerpoint`, `office_agents/word`, and `office_agents/outlook` (Claude for Microsoft 365, by app; `office_agents` alone when the app is not identified). New values appear as coverage expands; treat unrecognized values as opaque. `null` when the surface was not recorded.609610 - `truncated: boolean`611612 True when the session has more inference calls than the service can return for one session (100,000). The messages endpoint then returns only the session's earliest calls, up to that many, and ends before the session does; `updated_at` is a lower bound on the latest call and can differ between the list and retrieve endpoints. False for every session within that bound.613614 default: false615616 - `updated_at: string`617618 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.619620 format: date-time621622 - `user: object`623624 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.625626 - `id: string`627628 User identifier (tagged ID, prefixed `user_`). Always set, so attribution survives after the user's account is deleted or the user leaves the organizations the key may read.629630 - `email_address: string or null`631632 User's email address. Null when the user's account has been deleted or the user is no longer a member of an organization the key may read. The messages endpoint does not resolve email addresses; this field is always null there.633634 - `workspace_id: string or null`635636 Workspace identifier (tagged ID, prefixed `wrkspc_`). Null for sessions not attributed to a workspace.637638#### Example639640```bash641curl https://api.anthropic.com/v1/compliance/apps/sessions/local/$LOCAL_SESSION_ID/messages \642 -H 'anthropic-version: 2023-06-01' \643 -H "Authorization: Bearer $ANTHROPIC_COMPLIANCE_API_KEY"644```645646##### Response (200)647648```json649{650 "data": [651 {652 "id": "clsm_eyJ2IjoxLCJsIjoi…",653 "content": [654 {655 "text": "text",656 "truncated": true,657 "type": "text"658 }659 ],660 "created_at": "2025-03-12T18:22:41.123456Z",661 "model": "claude-opus-5",662 "provenance": {663 "reason": "not_captured",664 "type": "content_unavailable"665 },666 "role": "assistant",667 "type": "compliance_local_session_message"668 }669 ],670 "next_page": "page_eyJ2IjoxLCJmIjoibSIs…",671 "session": {672 "id": "clls_eyJ2IjoxLCJvIjoiOWEx…",673 "created_at": "2025-03-12T18:22:41.123456Z",674 "organization_uuid": "a1b2c3d4-e5f6-4789-a012-3456789abcde",675 "product_surface": "cowork",676 "truncated": true,677 "type": "compliance_local_session",678 "updated_at": "2025-03-12T18:22:41.123456Z",679 "user": {680 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",681 "email_address": "jane.doe@example.com"682 },683 "workspace_id": "wrkspc_01SvYKoWVRVHoEbwESNvzYdR"684 }685}686```687