One guide for the three technical Claude credentials —
Developer, Architect Foundations, and Architect Professional. Free to share.
| 3Certifications | 1Shared Core | 20Domains Total | ~30hCore + Your Path |
promptgoblins.ai · A community for people who build with AI
This guide was built by Prompt Goblins, an independent community for people who build with AI. Anthropic's Claude certification program now spans four credentials across three roles. Three of them are for people who build — engineers and architects — and they share a large common body of knowledge. Rather than repeat that shared material three times, this guide teaches it once as a Core, then adds a focused path for each of the three builder credentials.
The fourth credential, Claude Certified Associate – Foundations, is aimed at non-technical business users and is covered in a separate companion guide (it shares almost none of the material below).
| If you… | Take | Why |
|---|---|---|
| Write application code, build agents, ship integrations (1–5 yrs SWE) | Developer – Foundations CCDV-F | Heaviest on API integration, custom tools/MCP servers, security, and evals. |
| Design agent systems hands-on and configure Claude Code (6+ mo hands-on) | Architect – Foundations CCAR-F | Scenario-based; orchestration, Claude Code config, prompt engineering, context reliability. |
| Own end-to-end solution architecture, governance, and stakeholders (3+ yrs architecture) | Architect – Professional CCAR-P | Adds solution design, RAG, evaluation strategy, compliance, and lifecycle/stakeholder management. |
Jump to: Exams at a Glance · Part I: The Core · Part II: Developer · Part III: Architect–Foundations · Part IV: Architect–Professional · Change Log
None of the three requires another as a prerequisite — each is awarded on exam performance alone, and all three are independently bookable. Many people take Architect–Foundations before Professional, but that ordering is a recommendation, not a gate.
Every resource is tagged so you know where it came from:
| OFFICIAL | Named on an Anthropic-curated certification course list (the Partner Network Learning Path or a partner-gated prep page). |
| ANTHROPIC | Anthropic-published, community-mapped to exam domains. Other Academy courses, official docs (platform.claude.com / code.claude.com), the "Building Effective Agents" post, and DeepLearning.AI partnership courses. |
| SUPPLEMENTAL | Community / third-party. Useful but unofficial. Items tagged optional in the study plan can be skipped without hurting coverage. |
Tags are deliberately grayscale — color always means an exam domain, never a source tier.
Everything is listed in study order, not grouped by tier — do it top to bottom. Optional supplemental items sit where they naturally fit so you can slot them in or skip them, rather than hunting through a separate section.
All three share the same format shell: 120 minutes, scaled 100–1,000 score, pass at 720, Pearson VUE proctored, 12-month validity, up to 4 attempts per rolling year (14/30/90-day waits). They differ in scope, item count, and price.
| Developer – Foundations | Architect – Foundations | Architect – Professional | |
|---|---|---|---|
| Exam code | CCDV-F | CCAR-F | CCAR-P |
| Items | 53 | 60 | 63 |
| Structure | Standalone items | 4 scenarios of 6, drawn at random | Standalone items |
| Fee | $125 | $125 | $175 |
| # Domains | 8 | 5 | 7 |
| Audience | Engineers, 1–5 yrs SWE + 6 mo Claude | Solution architects, 6+ mo hands-on | Senior architects, 3+ yrs architecture |
| Center of gravity | Building & integrating apps; security; evals | Orchestration; Claude Code; reliability | Solution design; governance; lifecycle |
Work top to bottom. All Skilljar courses are free with certificates. This core is ~24 hours; each path below adds a few hours on top. OFFICIAL = on an Anthropic course list · ANTHROPIC = Anthropic content, mapped · SUPPLEMENTAL = community.
| # | Resource | Platform | Format | Time | Best for | ✓ |
|---|---|---|---|---|---|---|
| 1 | AI Fluency: Framework & Foundations O | Skilljar | Video+quiz | 1h | All | ☐ |
| 2 | Building with the Claude API O | Skilljar | 84 lec, 10 quiz | 8h | All (most surface area) | ☐ |
| 3 | "Building Effective Agents" A | anthropic.com | Reading | 1h | All · agent patterns | ☐ |
| 4 | Introduction to Model Context Protocol O | Skilljar | Video+code | 2h | All · MCP | ☐ |
| 5 | MCP: Build Rich-Context AI Apps A | DLAI | 11 vid+code | 2h | Dev · Arch-F | ☐ |
| 6 | MCP: Advanced Topics A | Skilljar | Video+code | 2h | All · transports, sampling | ☐ |
| 7 | Claude Code in Action O | Skilljar | 15 lec+quiz | 1h | All · Claude Code | ☐ |
| 8 | Claude Code: A Highly Agentic Coding Assistant A | DLAI | 10 vid | 2h | Arch-F · Dev | ☐ |
| 9 | Core documentation deep reads A | platform/code.claude.com | Reading | 3h | All (see table below) | ☐ |
| 10 | Anthropic Cookbooks — hands-on S optional | GitHub | Code | 2h | All · practice | ☐ |
These ideas recur across all three exams. Learn them once here.
The agentic loop is the backbone: send request → check stop_reason → if tool_use, execute the tool, append the result, loop → if end_turn, stop. stop_reason is the only reliable termination signal — never parse natural language or use arbitrary iteration caps.
Workflows vs. agents: workflows have code control the flow (chaining, routing, parallelization, orchestrator-workers, evaluator-optimizer); agents let the LLM control the flow. Start simple — single call → workflow → agent — and only escalate when the task demands it.
Hub-and-spoke / subagents: a coordinator decomposes work and delegates to subagents with isolated context. Never dump full coordinator context into a subagent; pass only what it needs.
Tool descriptions are the primary selection mechanism. Poor descriptions cause misrouting — fix the description before reaching for few-shot examples. Keep ~4–5 tools per agent; beyond that, selection degrades.
MCP primitives: Tools = model-controlled · Resources = app-controlled · Prompts = user-controlled. Know which primitive fits a given scenario.
Transports: stdio = local/same machine; Streamable HTTP = remote/production. The older HTTP+SSE transport was deprecated in the 2025-03-26 spec revision. .mcp.json = project-level (in VCS); ~/.claude.json = user-level; use env-var expansion for secrets.
Structured errors: transient (retry) · validation (fix input) · business (rule violation) · permission (escalate).
Few-shot: 2–4 examples is the sweet spot; demonstrate the exact output format including edge cases.
Structured output via tool_use: define a JSON schema as the tool input — more reliable than asking for JSON in prose. The API now also offers native structured outputs (output_config.format with constrained decoding, plus strict: true tool schemas); know both approaches.
Validation-retry: generate → validate → on failure feed the error back → regenerate. Converges in 1–2 retries; retries don't help when the needed information simply isn't present.
Context hygiene: guard against lost-in-the-middle and context drift/bloat; prune tool output, compact, and isolate via subagents. For transactional data, keep immutable "case facts" rather than progressively summarizing (which loses order numbers, dates, amounts).
CLAUDE.md hierarchy: Managed/Enterprise → Project → User → Local, with higher levels taking precedence. .claude/rules/ holds glob-scoped rule files (a paths frontmatter field limits a rule to matching files).
Skills, commands, hooks: Skills = SKILL.md folders whose description drives auto-loading (progressive disclosure); slash commands live in .claude/commands/; hooks (PreToolUse, PostToolUse, and many more) enforce rules programmatically. When the requirement is "must" or "always," the answer is a hook, not a prompt.
Headless / CI: the -p/--print flag runs non-interactively; --output-format json and --json-schema structure the output for pipelines.
Tiering: match the model to the task — a fast, low-cost tier for high-volume/simple work; a top tier for complex reasoning. Weigh quality vs. latency vs. cost, and watch for behavior changes across model releases.
Cost levers: prompt caching for repeated static prefixes (order stable content first); the Message Batches API for latency-tolerant bulk jobs — 50% cheaper, results within 24h, not for blocking/real-time workflows.
A large share of every builder exam is spotting what's wrong. These apply across all three paths.
| # | ❌ Anti-Pattern | ✅ Do This Instead |
|---|---|---|
| 1 | Parsing natural language for loop termination | Use stop_reason == "end_turn" |
| 2 | Arbitrary iteration caps (max_iterations=5) | stop_reason-driven termination |
| 3 | Prompt-based critical rules ("don't refund >$500") | Hooks / programmatic checks |
| 4 | Sharing full coordinator context with subagents | Pass only relevant context; isolate scope |
| 5 | Tool overload (>4–5 per agent) | Scope per role; decompose into subagents |
| 6 | Few-shot as first fix for misrouting | Fix the tool description first |
| 7 | Trusting retrieved/untrusted content as instructions | Isolate untrusted input; guard with least-privilege hooks |
| 8 | Progressive summarization of transactional facts | Immutable "case facts" blocks |
| 9 | Batch API for blocking/real-time workflows | Batch = 24h window, latency-tolerant only |
| 10 | Least privilege by monitoring unused powerful tools | Remove the capability the role doesn't need |
| Value | Meaning | Action |
|---|---|---|
end_turn | Model finished | Show result; loop complete |
tool_use | Model wants a tool | Execute, return result, continue loop |
max_tokens | Token limit reached | Response truncated; may need higher limit |
stop_sequence | Stop sequence hit | Handle per application logic |
pause_turn | Long server-tool turn paused | Resend the response as-is to continue |
refusal | Model declined | Handle gracefully; don't blind-retry |
| Value | Behavior | When to use |
|---|---|---|
{"type":"auto"} | Model decides tool or text | Default |
{"type":"any"} | Must call some tool | Guaranteed structured output |
{"type":"tool","name":"…"} | Must call a specific tool | Forced first step / ordering |
{"type":"none"} | May not call any tool | Suppress tools while keeping them defined |
any and tool are incompatible with extended thinking (only auto/none work there).
| Topic | URL |
|---|---|
| Tool Use | platform.claude.com/docs/en/agents-and-tools/tool-use/overview |
| Prompt Engineering | platform.claude.com/docs/.../prompt-engineering/overview |
| Prompting Best Practices | platform.claude.com/docs/.../claude-prompting-best-practices |
| Structured Outputs | platform.claude.com/docs/.../structured-outputs |
| Batch Processing | platform.claude.com/docs/.../batch-processing |
| Context Windows | platform.claude.com/docs/.../context-windows |
| Agent SDK Overview | code.claude.com/docs/en/agent-sdk/overview |
| Claude Code: Memory / Skills / Hooks | code.claude.com/docs/en/{memory, skills, hooks, sub-agents} |
| MCP Specification | modelcontextprotocol.io/specification |
For engineers who build, integrate, and ship Claude-powered applications, agents, and workflows — 1–5 years of software engineering, 6+ months with Claude, comfortable in Python and/or TypeScript. Not for non-technical users or prompt-only roles.
| Wt | Domain & key skills |
|---|---|
| 33.1% | Applications & Integration — Claude API mechanics (messages, tools, streaming, vision, thinking, caching, batch); software-engineering foundations (REST, JSON, async, VCS, refactoring); application design across interfaces; configuration management (CLAUDE.md, settings.json, version pinning); requirements & systems life cycle. |
| 16.8% | Model Selection & Optimization — LLM fundamentals (tokens, context, sampling, thinking modes, n-shot); model tradeoffs (Opus/Sonnet/Haiku); cost & token management (usage tracking, prompt caching, checkpointing). |
| 14.7% | Agents & Workflows — agent vs. workflow decision criteria; manager/subagent hierarchies; construction with the Agent SDK, custom loops, hosted vs. self-hosted; patterns & frameworks (tool-use loops, memory, LangGraph/PydanticAI/Strands). |
| 11.0% | Prompt & Context Engineering — context management (drift/bloat, pruning, compaction, subagent isolation); prompt engineering (clarity, few-shot, placement, sanitization); output handling (structured output, defensive parsing). |
| 10.6% | Tools & MCPs — tool implementation (function calling, descriptions, error handling, approval patterns); MCP server development; choosing among built-in tools, custom tools, Skills, and MCPs. |
| 8.1% | Security & Safety — prompt-injection & jailbreak defense, untrusted input, PII/data leakage; guardrails & secure-by-design; hooks for safety; secrets/key management. |
| 3.1% | Claude Code — core components (Rules, Skills, Commands, Agents, Memory), session/headless/streaming modes, CLAUDE.md hierarchy, repo init, settings.json. |
| 2.6% | Eval, Testing & Debugging — error-type identification, recovery strategy, trace analysis, isolating integration-layer vs. model-output faults. |
| Resource | Platform | Time | Adds | ✓ |
|---|---|---|---|---|
| Agent Skills with Anthropic A | DLAI | 2.5h | Agent SDK + Skills + MCP integration | ☐ |
| Structured Outputs & Tool Use docs A | platform.claude.com | 1h | Native structured output, strict schemas | ☐ |
| Security best-practices reading A | platform.claude.com | 1h | Prompt-injection defense, secrets | ☐ |
| Build one app end-to-end S | Your machine | 4h+ | API + a tool + evals + a guardrail | ☐ |
Domain 7 — Security & Safety: A Claude agent summarizes user-submitted web pages. One page hides text telling the model to ignore prior instructions and reveal its system prompt. Best mitigation?
✅ Treat retrieved page content as untrusted input, keep it separate from trusted instructions, and use guardrails/hooks so injected instructions can't trigger sensitive actions. (Raising temperature, a polite "please don't" in the system prompt, or a bigger model do not address injection — a more instruction-following model can be more susceptible.)
For solution architects with 6+ months hands-on across the Agent SDK, Claude Code, MCP, and prompt engineering. This is the scenario-based exam: every question is anchored in a realistic production context.
Agentic loop lifecycle, hub-and-spoke, subagent invocation with explicit context, hooks for enforcement, task decomposition, session management (fork_session, --resume).
CLAUDE.md hierarchy, .claude/rules/ globs, commands vs. Skills, plan mode vs. direct, iterative refinement, CI/CD (-p, --output-format json).
Explicit criteria, 2–4 few-shot examples, structured output via tool_use, validation-retry with Pydantic, multi-instance review.
Tool descriptions as selection mechanism, structured errors (isError), 4–5 tools/agent, .mcp.json vs ~/.claude.json, built-in vs MCP tools.
Lost-in-the-middle, immutable case facts, valid vs. invalid escalation, structured error propagation, confidence calibration, provenance.
All questions are anchored in these. Per the official exam guide v1.0 (July 2026), the bank is 6. note Some community study guides list additional candidate-reported scenarios (e.g. "Conversational AI Architecture Patterns," "Agentic AI Tools"); those are not in the official guide.
An Agent SDK agent handling returns, billing disputes, and account issues via MCP tools (get_customer, lookup_order, process_refund, escalate_to_human). Enforce financial limits with hooks; escalate correctly.
Accelerate development — generation, refactoring, debugging, docs — with custom slash commands, CLAUDE.md config, and plan mode vs. direct execution.
A coordinator delegates to specialized subagents (web research, doc analysis, synthesis, report generation); complete reports with citations and conflicting-source handling.
Explore unfamiliar codebases, generate boilerplate, automate routine tasks using built-in tools (Read, Write, Bash, Grep, Glob) plus MCP servers.
Automated code review, test generation, and PR feedback in CI using -p and --output-format json; prompts must minimize false positives.
Extract from unstructured documents, validate with JSON schemas via tool_use, handle edge cases, nullable fields, and inconsistent formats with validation-retry.
Valid: explicit customer request ("get me a manager"), policy gap (request not covered), capability limit (no progress after reasonable attempts), financial op above threshold (enforce via hook). Invalid: sentiment analysis (mood ≠ complexity), model self-rated confidence (confidently wrong), or an over-engineered auto-classifier.
| Resource | Platform | Time | Adds | ✓ |
|---|---|---|---|---|
| Introduction to Agent Skills O | Skilljar | 30m | Skills vs commands vs hooks (D3) | ☐ |
| Introduction to Subagents A | Skilljar | 1h | Isolated-context delegation (D1) | ☐ |
| Escalation & reliability patterns A | code.claude.com | 1h | Hooks, structured errors (D5) | ☐ |
For mid-to-senior architects and tech leads — 3+ years in systems architecture/platform engineering plus 6+ months with Claude in production — who own the full lifecycle from discovery to deployment, and who face stakeholders, security, and compliance.
| Wt | Domain & key tasks |
|---|---|
| 19% | Integration — evaluate tool/agent config for capability bloat; auth/authz gap analysis; accuracy-latency tradeoffs; observability at scale; design a RAG pipeline (chunking, indexing, retrieval matched to data shape); choose the connection protocol (MCP, API/CLI, agent-to-agent); progressive discovery vs. monolithic context. |
| 17% | Solution Design & Architecture — translate business problems into Claude solutions; end-to-end architectures with feedback loops; pick the pattern (workflow / agentic / augmented LLM); multi-agent orchestration; decomposition; align to business value pillars. |
| 16% | Evaluation, Testing & Optimization — define metrics (accuracy, latency, cost, safety); build eval datasets & frameworks; A/B testing; diagnose prompt failure/hallucination/model mismatch; optimize cost-performance; monitor with logging/observability. |
| 14% | Governance, Safety & Risk Management — guardrails & safety controls; identify LLM failure modes; human-in-the-loop validation; regulatory compliance (GDPR, HIPAA, FedRAMP); ethical AI (bias, fairness, transparency). |
| 14% | Stakeholder Communication & Lifecycle Management — structured discovery & requirements; communicate architectural tradeoffs; manage feedback loops & SLAs; document architectures; support discovery → design → handoff → monitoring → iteration. |
| 13% | Claude Models, Prompting & Context Engineering — model selection tradeoffs; system prompts, templates, guardrails; zero/few-shot, chain-of-thought; context-window & token optimization; prompt reuse (caching, modular prompts, Skills). |
| 7% | Developer Productivity & Operational Enablement — configure Claude tooling for teams (e.g. Claude Code); improve dev workflows with AI tooling; support debugging & operational resolution. |
Professional is lighter on courses and heavier on architecture practice and reading. There is no single prep course — build and reason about end-to-end systems.
| Resource | Platform | Time | Adds | ✓ |
|---|---|---|---|---|
| RAG & retrieval deep read A | platform.claude.com + Cookbooks | 2h | Chunking, indexing, contextual retrieval (D1) | ☐ |
| Evaluation & observability practices A | platform.claude.com | 2h | Eval datasets, metrics, monitoring (D3) | ☐ |
| Responsible use / governance reading A | anthropic.com/learn | 1.5h | Guardrails, compliance, ethics (D4) | ☐ |
| Design one end-to-end solution S | Your project | 6h+ | Discovery → RAG → eval → observability → handoff | ☐ |
| Architecting-with-Claude community writeups S optional | Blogs / GitHub | 2h | Real-world patterns & tradeoffs | ☐ |
Domain 3 — Integration: A support agent can read tickets, draft replies, issue refunds, and delete accounts. Staff only ever read tickets and draft replies. Applying least privilege, the best change is to remove the refund and delete tools from the agent's configuration entirely — eliminating the attack surface, not just logging or confirming it. (Logging and confirmation prompts are detective/compensating controls; a bigger model is unrelated to authorization scope.)
Initial release of the combined Builder-Track guide. Structure and content were validated against the official Anthropic exam guides (all v1.0, "Effective July 2026," exam codes CCDV-F / CCAR-F / CCAR-P), the Anthropic certification FAQ, Pearson VUE, and the current platform.claude.com / code.claude.com documentation, on July 19–20, 2026.
Claude Certifications: Builder Track · v1.0 · July 2026 · promptgoblins.ai · A community for people who build with AI
Blueprints summarized from Anthropic's official exam guides (CCDV-F, CCAR-F, CCAR-P v1.0). Free to share. Discuss & get updates: promptgoblins.ai/t/85