Claude
Connect your organization's Claude surfaces to Airia — telemetry from Claude Code and Cowork, browser coverage for claude.ai, and optional Anthropic usage and compliance data.
The Claude connection has two parts:
- Secure the Claude surfaces. Pick which Claude services your organization uses — Claude Code, Cowork, claude.ai — and Airia gives you the per-service setup to route their traffic through Airia, so usage is visible and guardrails apply.
- Optionally pull Anthropic usage and compliance data into your inventory for post-runtime audit. This needs an Anthropic organization admin or compliance API key, typically on Claude Enterprise.
This page covers the Discover → Connect side: the wizard, what lands in your inventory, and how to verify it. For the full four-surface build — gateway routing, guardrails, agent constraints, and MDM rollout — see Securing Claude with Airia.
At a glance
| Surface | Cloud AI |
| What it does | Secures your Claude surfaces by routing them through Airia, and can pull usage and compliance data |
| How Airia connects | A wizard: pick the Claude services to secure, plus an Airia API key. Optionally, an Anthropic admin/compliance API key for usage data |
| Who sets it up | An Airia admin; an Anthropic org admin only for the optional compliance-data path |
| Time | ~15 min |
Before you start
- Know which Claude surfaces your organization uses: Claude Code, Cowork (Claude Desktop), claude.ai in the browser.
- Permission in Airia to create an API key. The wizard can create one for you.
- Optional, for the compliance-data path: an Anthropic organization admin or compliance API key with read access, on a plan that exposes this data.
Use an organization-level admin or compliance key scoped for reading, never a personal key. Treat it as a secret — never paste an API key into email, chat, or a ticket. This connection is read-only; it does not change anything in your Claude account.
Setup
Part A — The Claude wizard
Open the Claude wizard
In Airia, go to Discover → Connect, click the Claude tile, then Add connection.
Pick the services to secure
Under Services to secure, tick the checkboxes for the Claude surfaces your organization uses — Claude Code, Cowork, Claude.ai. The panel below fills in with that service's configuration.
Create the Airia API key
Under Airia API key, click + Create new key, or select an existing key.
Keys are show-once. The panel's Copy JSON config and Download macOS script buttons only unlock once a key exists, so create the key before trying to copy the config.
Deploy the telemetry config and confirm
For Claude Code, the panel gives you a telemetry configuration to deploy to each user's
~/.claude/settings.json. Use Copy JSON config, or Download macOS script — the script
writes the same settings and covers Claude Code in VS Code too. Push the settings fleet-wide with
your device management tool.
Every Claude Code session then streams its telemetry — user prompts, tool calls, and raw API bodies, tagged with the user's email — to your Airia tenant.
Click Confirm to save the connection.
The Cowork and Claude.ai tabs may show the Claude Code configuration while their dedicated flows roll out. claude.ai in the browser is covered by the Airia Browser Extension either way.
Part B — Roll out to each Claude surface
Two complementary mechanisms cover each surface: the wizard's telemetry feed for deep visibility, and gateway routing for inline control.
| Claude surface | Visibility | Inline control |
|---|---|---|
| Claude Code (terminal, VS Code) | The wizard's telemetry config from Part A — prompts, tool calls, API bodies stream to Airia | Point ANTHROPIC_BASE_URL at your Airia AI Gateway endpoint |
| Claude Desktop / Cowork | Telemetry via the wizard, as available | Developer Mode → Configure third-party inference → Airia AI Gateway base URL |
| Claude for Office add-ins | Not in Anthropic's audit logs — the gateway is the only visibility | Choose the LLM Gateway backend at Microsoft 365 deploy time |
| claude.ai web | Airia Browser Extension reporting | Airia Browser Extension — submit-time DLP, block/warn/redirect (no base-URL option exists) |
Why both matter. The telemetry feed gives near-real-time, per-user visibility including prompt content and tool calls, without needing an Anthropic Enterprise plan — but it observes, it can't block. Gateway routing applies DLP, prompt-injection defense, guardrails, and model routing before the prompt reaches Claude. That's the enforcement layer.
Verify it worked: send a throwaway prompt from one routed surface, for example Claude Code, and confirm the request appears in Airia's gateway usage and Discover dashboards within a few minutes.
Part C — Optional: Anthropic usage and compliance data
For post-runtime audit data pulled from Anthropic itself, on roughly a five-minute polling cycle:
Sign in to your Anthropic organization admin console. Admin rights are required.
Create or obtain an organization admin or compliance API key with read access. The exact menu path depends on your Anthropic plan.
Copy the key once — it isn't shown again — and add it to the Claude connection in Airia.
Have a user send a throwaway prompt in Claude, then confirm the activity appears in the Discover dashboards after the next refresh.
This path needs an Anthropic organization plan that exposes usage and compliance data, typically Claude Enterprise. Everything it shows has already happened — it's an audit trail, not real-time protection. Real-time protection comes from the routing in Parts A and B.
Troubleshooting
| Symptom | Fix |
|---|---|
| Connection test fails | Re-check that the API key was copied in full, and that it's an organization admin or compliance key with read access — not a personal key. |
| Connected, but no data | Confirm the key has read access to usage and compliance data, and that your organization has Claude activity to report. Wait one refresh cycle. |
| A field you don't recognize | Field names vary by Airia build. Confirm what each field expects in Discover → Connect → Claude, or check with the Airia support team. |
| Key stopped working | The key may have been rotated or revoked in Anthropic. Create a new admin/read key and update the connection. |
What you get
| Data | How | Notes |
|---|---|---|
| Routed Claude traffic (Claude Code, Cowork, API) | The wizard plus AI Gateway routing | Real-time visibility and inline controls on every routed request |
| claude.ai browser usage | The Airia Browser Extension | Submit-time DLP, block/warn/redirect |
| Anthropic usage and compliance data (optional) | Compliance API polling, ~5 min | Post-runtime audit trail; needs Claude Enterprise |
It shows up in the Discover dashboards and inventory. The connection polls frequently — roughly every five minutes — so new activity appears after the next refresh.
What you can do
Discover — see Claude usage across the surfaces you route in real time and, optionally, from Anthropic's compliance data.
Govern and audit — usage lands in your inventory and dashboards. The optional compliance path adds a post-runtime audit trail for surfacing violations after the fact.
Secure — inline, real-time controls come from routing through the Airia AI Gateway (Claude Code and API via base URL, Desktop and Cowork via third-party inference) and the Airia Browser Extension for claude.ai.
Know which mechanism does what. The wizard's telemetry feed is deep monitoring — it observes, it can't block. Gateway routing and the Browser Extension are enforcement. The compliance data in Part C is after-the-fact audit.
| Capability | Supported |
|---|---|
| Discover | Yes |
| Govern | Yes, plus post-runtime compliance audit with Claude Enterprise |
| Secure | Yes, via AI Gateway routing and the Browser Extension; the wizard adds deep telemetry |
Related
- Securing Claude with Airia — the full four-surface build.
- Browser Extension — coverage for claude.ai in the browser.