Anthropic Claude Compliance

What it does

The Anthropic Claude Compliance card reads your Claude organization's audit and compliance activity (the Compliance API's Activity Feed) into Safeguard, on a poll interval you set. You see recent events on the card's page, and events that touch API keys, roles, permissions, MCP or compliance settings raise a warning alert. Find the card under Integrations on the Project/Product tab.

It reads the Activity Feed only. It does not read chats, files, projects or session transcripts.

Public vs private

This integration has no public mode: it always needs a key for your own Claude organization.

Supported auth methods

Permissions required

Safeguard only reads the Activity Feed (GET https://api.anthropic.com/v1/compliance/activities). It never deletes or changes anything in your Claude organization.

Compliance Access Key

Admin API key

Least privilege: a Compliance Access Key with only read:compliance_activities, scoped to the organizations you want monitored.

Token types

Expiry: Compliance Access Keys do not expire on their own. Rotate the key every 90 days, and delete it at once if it leaks.

What we never need: read:compliance_user_data, delete:compliance_user_data, read:compliance_org_data, or a key that calls Claude models.

Step-by-step setup

Create the key in Claude

Claude Enterprise:

1. As the primary owner, open claude.ai > Organization settings > API and enable the Compliance API, if it is not on yet.
2. In the Keys section, click Create key, name it (for example Safeguard) and select only read:compliance_activities. Click Create.
3. Copy the key (it starts with sk-ant-api01-). Anthropic shows it only once.

Standalone Claude Console organization:

1. As an organization admin, turn on the Compliance API toggle on the Console's Compliance page (platform.claude.com/settings/security).
2. Create a new key on the Admin keys page (platform.claude.com/settings/admin-keys) and copy it (it starts with sk-ant-admin01-).

Or with the CLI

Anthropic has no CLI that creates these keys. To check a key before you paste it into Safeguard:

curl --fail-with-body -sS "https://api.anthropic.com/v1/compliance/activities?limit=1" \
  --header "x-api-key: $ANTHROPIC_COMPLIANCE_ACCESS_KEY" \
  --header "anthropic-version: 2023-06-01"

Connect it in Safeguard

1. Open Integrations and choose the Project/Product tab.
2. Click Connect on the Anthropic Claude Compliance card.
3. Paste the key into Access Key.
4. Leave Stream activity on and set the Poll interval in minutes (at least 1).
5. Click Connect, then Sync now to read the first events. They appear under the recent activity list.

Webhooks and triggers

Anthropic's Activity Feed has no webhooks. Safeguard polls it on the Poll interval you set (Safeguard's scheduler runs every 10 minutes and honours your interval), and Sync now reads new events at once. Turn Stream activity off to pause polling without disconnecting.

What we read and store

• Read: Activity Feed events: each event's id, time, type and actor (type, email address, user id, IP address, user agent).
• Stored: the events, the connection's settings, the last sync time and last error, and the key, which is encrypted at rest and shown only by its last 4 characters.
• Not read: chats, files, projects, session transcripts, users or organization settings.
• No customer data from this integration is sent to third-party LLMs.

Troubleshooting

Rotation and disconnect

• Rotate: create a new key with the same scope, paste it into Access Key on the card's page and save (leave the field blank to keep the existing key), check that Sync now works, then delete the old key in claude.ai or the Claude Console.
• Disconnect: click Disconnect on the card's page. Then delete the key in claude.ai > Organization settings > API (or on the Console's Admin keys page). Deleting a key takes effect on Anthropic's side at once.

Vendor references

• Compliance API, checked 2026-10-16.
• Set up the Compliance API, checked 2026-10-16.