Breaking

Claude Managed Agents Adds Scheduled Runs and Env Vars

June 11, 2026 at 10:34 EDT

AI Agents
Software Dev & Coding
Security

Anthropic has added two features in public beta to Claude Managed Agents, its managed infrastructure for long-running agents: cron-based Scheduled deployments and Environment variables that securely inject credentials. The company's developer accounts disclosed the additions around June 9–11, 2026, with details published on the official blog.

June 11, 2026 · Anthropic

Claude Managed Agents puts agents on autopilot

Two new Public Beta features land: Scheduled deployments for cron-based runs, and Environment variables that inject vault-stored credentials Claude itself never reads — swapped at the network boundary.

$0.08

per session-hour, on top of standard token rates — billed by the millisecond

layers fully hosted by Anthropic: session, harness, and sandbox

secrets read by Claude — credentials swapped only at the network boundary

Billing only while running

Session-time cost scales with the fleet

~$0.64

1 agent
8 hrs/day

$15+

24 agents
8 hrs/day

Idle, waiting, rescheduling and terminated time are not billed — but parallel fleets add up.

⏱ Scheduled deployments

Cron-format schedules, a fresh session per run, plus Pause / Resume / Archive and manual triggers.

Nightly data syncs
Weekly compliance scans
Daily digest generation

🔑 Environment variables

Vault credentials injected as env vars; Claude never accesses the secret values.

CLI / SDK integration
Agent runs in CI/CD
Defends against prompt injection

How a secret stays out of the prompt

Vault stores credential

→

Injected at network boundary

→

CLI / SDK / API runs with env var

Reduces the risk of hardcoding keys in prompts or .env files — provided Vault is used rather than raw env vars.

✓ What developers like

Recurring tasks run without a custom scheduler, and the secret-handling design is rated a strong defense against prompt injection.

! The caveats

Session-time billing adds up on long-running or parallel workloads; Beta brings feature limits and access requests; risk remains if secrets bypass Vault.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.