{"slug": "anthropic-self-hosted-managed-agents-private-beta", "title": "Anthropic Self-Hosted Managed Agents: Private Beta", "summary": "Anthropic opened a private beta on November 12 for self-hosted Claude Managed Agents, letting enterprises run the full agent control plane — cma-server, a PostgreSQL 16+ database, and workers — on their own infrastructure for the first time. The default inference.provider setting is still \"anthropic,\" so model requests leave the customer's network unless they configure bedrock, vertex, foundry, or gateway, and the beta lacks scheduled runs, webhooks, mcp_oauth credentials, migration from the hosted service, and automatic updates. Self-hosting shifts security responsibility to the customer under license terms requiring a rollback of a flagged version within 8 hours, a safety update within 1 business day, incident reporting within 48 hours, and unauthorized-access reporting within 72 hours; the Apache 2.0 cma-server binary carries a $100,000 liability cap.", "body_md": "Anthropic opened a private beta on November 12 for self-hosted Claude Managed Agents — the first time enterprises can run the full agent control plane on their own infrastructure, not just the sandboxes. The pitch is data sovereignty: your agent sessions, credentials, and tool execution all stay behind your perimeter. That matters for regulated industries. But there are real gaps in this beta, and one specific gotcha that most coverage is glossing over.\n\n## What You’re Actually Running\n\nThe self-hosted deployment has three components. First, **cma-server** — this is the core: it serves the Managed Agents API, runs the agent loop, and stores agents, sessions, and session history. Second, a **PostgreSQL 16+ database** for persistence. Skip the database and the server defaults to in-memory storage, which means a restart wipes your session history. Don’t skip the database. Third, **workers** — separate processes that run your agent’s shell and file tools inside your own sandboxes. Critically, the server itself never executes tools; that’s the workers’ job.\n\nDeployment options are Docker Compose for simpler setups or Kubernetes for production scale. [Kubernetes deployment docs are already up.](https://platform.claude.com/docs/en/managed-agents/self-hosted/kubernetes)\n\n## The Gotcha Nobody Is Talking About\n\nHere’s what most coverage is omitting: self-hosting the service does not mean self-hosting the model. The default `inference.provider` setting is `anthropic` — which means model requests still go to Anthropic’s API. Your agent loop runs on your server, your session history lives in your database, but every Claude inference call leaves your network.\n\nTo actually keep everything in your perimeter, you need to configure a non-Anthropic inference provider. The `inference.provider` setting accepts five values: `anthropic` (default), `bedrock`, `vertex`, `foundry`, or `gateway` (bring your own). If you’re in a regulated environment and your threat model includes model inference traffic, set this explicitly. [The New Stack covered this as the key architectural nuance](https://thenewstack.io/self-hosted-claude-managed-agents/) worth understanding before you request access.\n\n## What This Beta Does Not Do Yet\n\nFour gaps worth knowing before you go to your account team:\n\n- **No scheduled runs.** Webhooks are absent from the self-hosted server, so any worker logic triggered by webhooks won’t fire. Use your own cron or scheduler.\n- **No OAuth credentials.** The`mcp_oauth` credential type is not accepted — the OAuth renewal flow is missing from this beta.\n- **No migration from the hosted service.** Nothing copies over. Agents, skills, vault credentials, and memory stores all need to be recreated on the new server from scratch.\n- **No automatic updates.** You own the release cycle now. Anthropic ships a binary; you install it.\n\nThe workarounds exist — cron instead of scheduled runs, polling instead of webhooks — but if your team depends on OAuth credentials, that’s a real blocker for now. [Developers Digest has a thorough breakdown of the full feature delta](https://www.developersdigest.tech/blog/claude-managed-agents-self-hosted-2026) between hosted and self-hosted.\n\n## The Security Obligations That Come With It\n\nSelf-hosting means Anthropic is no longer responsible for securing your agent infrastructure. You are. That includes the server, the database, and the sandboxes — and it comes with specific contractual timelines baked into the license:\n\n- Roll back a flagged version within **8 hours** of a safety notice\n- Deploy a safety update within **1 business day**\n- Report a confirmed agent incident to Anthropic within **48 hours**\n- Report unauthorized access to the codebase within **72 hours**\n\nThe cma-server binary is Apache 2.0 — free to run. Anthropic caps its total liability for the self-hosted binary at $100,000, and your model usage costs remain unchanged under your existing Claude API, Bedrock, or Vertex agreement.\n\n## Who Should Request Access\n\nThe honest answer: regulated industries. Finance, healthcare, legal, and government organizations that face data handling requirements their vendor agreements currently violate. If you’re running agents against private code, internal documents, or sensitive customer data — and your compliance team won’t approve Anthropic-hosted session storage — this is what you’ve been waiting for.\n\nIf you’re not in a regulated vertical, the hosted Managed Agents service is simpler to operate, has more features, and Anthropic handles the security burden. The self-hosted beta makes sense when data sovereignty is non-negotiable, not just preferable. [Anthropic’s official overview](https://claude.com/resources/articles/self-hosted-claude-managed-agents) has the access request details. It’s private beta — access goes through your Anthropic account team, not a sign-up form. No general availability date has been announced.", "url": "https://wpnews.pro/news/anthropic-self-hosted-managed-agents-private-beta", "canonical_source": "https://byteiota.com/anthropic-self-hosted-managed-agents/", "published_at": "2026-11-13 22:07:30+00:00", "updated_at": "2026-11-13 22:23:45.537351+00:00", "lang": "en", "topics": ["ai-agents", "ai-products", "ai-infrastructure", "ai-safety", "developer-tools"], "entities": ["Anthropic", "Claude Managed Agents", "cma-server", "PostgreSQL", "Kubernetes", "Docker Compose", "The New Stack", "Developers Digest"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/anthropic-self-hosted-managed-agents-private-beta", "markdown": "https://wpnews.pro/news/anthropic-self-hosted-managed-agents-private-beta.md", "text": "https://wpnews.pro/news/anthropic-self-hosted-managed-agents-private-beta.txt", "jsonld": "https://wpnews.pro/news/anthropic-self-hosted-managed-agents-private-beta.jsonld"}}