- Flow-managed connection
Prepare in Anthropic Admin
Create an Admin API key for your Anthropic organization. See Create an Admin API key for instructions.You can also use an organization-scoped personal or service account key with the required permissions. Workspace-scoped keys cannot authenticate to the Admin API. See Anthropic Admin API authentication for credential requirements.Connect in Flow
1
Find the Anthropic Admin integration
- Open Integrations.
- Choose Add connection.
- In Add connection, search for Anthropic Admin.
- Select the Anthropic Admin card.
2
Connect
- Choose the organization or team that will use the connection.
- In the connection window, enter your API key. Flow supplies the API version.
- Choose Connect and wait for Flow to finish validating the connection.
- Open the new connection’s Automations tab.
- Choose Enable for the intended team or teams. Organization-wide connections enable Automations for all teams.
- Select the Anthropic Admin actions automations can run.
- Choose Save if you changed the selection.
Permissions and scopes
This integration does not define provider scopes.Supported actions
| Action | Description | |
|---|---|---|
| Add RBAC Group Member | Add a User to an RBAC Group. Membership of groups provisioned by an identity provider (source type "scim") cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | high |
| Approve Spend Limit Increase Request | Approve a pending spend limit increase request. Writes a per-user spend limit at amount for the requester and transitions the request to approved. period defaults to the period the member was blocked on. Anthropic emails the requester unless suppress_notification is set. | high |
| Archive Workspace | Archive Workspace | high |
| Create External Key | Create an external key config owned by the caller’s organization. | high |
| Create Invite | Invite a user to join the organization by email. On plans that draw members from a finite pool of purchased seats, the invite automatically consumes a seat from the lowest tier with availability; there is no seat-tier parameter. When no seat is free the request fails with a 400 error rather than purchasing a seat. | high |
| Create Plugin | Create an organization-owned plugin and its first version from files or an archive. Include .claude-plugin/plugin.json. The marketplace must accept manual uploads. A registration_pending error can mean the plugin was stored; retrieve it before retrying creation. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | high |
| Create Plugin Version | Upload a new version of an organization-owned plugin in a manual marketplace. The manifest name must match. The version is served unless the plugin is pinned. A registration_pending error can mean the version was stored; inspect the plugin before retrying. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | high |
| Create RBAC Group | Create an RBAC Group in the Claude Enterprise tenant. Groups created via the API have source type "direct". The RBAC Groups API is available to Claude Enterprise organizations only. | high |
| Create Workspace | Create Workspace | medium |
| Create Workspace Member | Create Workspace Member | high |
| Delete External Key | Delete an external key config. The request is rejected if any workspace still references this config. | high |
| Delete Invite | Delete a pending invite. | high |
| Delete Plugin | Permanently delete a manually uploaded plugin and all versions. Installation settings and member shares are removed. For reversible removal from use, change installation settings instead. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | high |
| Delete RBAC Group | Delete an RBAC Group. Groups provisioned by an identity provider (source type "scim") cannot be deleted via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | high |
| Delete Spend Limit | Delete a spend limit. For a Claude Enterprise organization, this deletes a per-user override, and the member falls back to any inherited spend limit at that period. Its seat-tier, group, and organization-level rows cannot be deleted via this endpoint. A Claude Console organization deletes its organization and workspace limits. Deleting them through the API is in an early access preview. | high |
| Delete Workspace Member | Delete Workspace Member | high |
| Deny Spend Limit Increase Request | Deny a pending spend limit increase request. Idempotent on denied; denying an already-approved request returns 400. Anthropic emails the requester unless suppress_notification is set. | high |
| Get Activity Summaries | Get organization-wide activity summaries for a date range. Claude Enterprise only; requires read:analytics. | low |
| Get API Key | Get API Key | low |
| Get Artifact Activity | Get artifact-creation activity for a given day, broken out by MIME type. Returns the full (artifact_type, is_shared) cube for the organization; next_page is null except for grouped queries, which paginate. The cube can be broken out per product, per member, or per RBAC group via group_by[], and scoped via filter[]. Requires an API key with the read:analytics scope. | low |
| Get Chat Project Usage | Get per-project activity for a given day, with cursor-based pagination. Returns activity metrics for each project in the organization, sorted by project ID. Use group_by[] to break projects out per member or per RBAC group, and filter[] to scope results; the parameter descriptions list the supported dimensions. Available to organizations on a Claude Enterprise plan. Requires an API key with the read:analytics scope. | low |
| Get Claude Code Usage Report | Retrieve daily aggregated usage metrics for Claude Code users. Enables organizations to analyze developer productivity and build custom dashboards. | low |
| Get Compliance Settings | Retrieve your organization’s Compliance Settings. Compliance Settings is a singleton resource: there is exactly one per organization, addressed without an identifier. The state field reflects whether the Compliance API is enabled. An organization with a parent organization reads the state inherited from the parent’s configuration. | low |
| Get Connector Usage | Get per-connector usage for a given day, with cursor-based pagination. Claude Enterprise only; requires read:analytics. | low |
| Get Cost Over Time | Get cost in USD over time across a date range. Returns cost bucketed by minute, hour, or day, optionally broken down by product, model, context window, inference region, speed, cost type, or token type. Available to organizations on a Claude Enterprise plan. Requires an API key with the read:analytics scope. | low |
| Get Cost Report | Get Cost Report | low |
| Get Current Organization | Retrieve information about the organization associated with the authenticated API key. | low |
| Get External Key | Retrieve a single external key config in the caller’s organization by ID. | low |
| Get Invite | Retrieve an invite by ID. | low |
| Get Messages Usage Report | Get Messages Usage Report | low |
| Get Per-User Cost | Get per-user cost in USD across a date range. Returns one row per user, ranked by spend. Use this to see which users account for the most cost. Only cost attributable to a seat user is included; for organization-wide totals including direct API-key and automation traffic, use the bucketed /v1/organizations/analytics/cost_report endpoint. Available to organizations on a Claude Enterprise plan. Requires an API key with the read:analytics scope. | low |
| Get Per-User Token Usage | Get per-user token usage across a date range. Returns one row per user, ranked by the chosen token metric. Use this to see which users consume the most tokens. Only usage attributable to a seat user is included; for organization-wide totals including direct API-key and automation traffic, use the bucketed /v1/organizations/analytics/usage_report endpoint. Available to organizations on a Claude Enterprise plan. Requires an API key with the read:analytics scope. | low |
| Get Plugin | Retrieve a Plugin by ID. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| Get Plugin Marketplace | Retrieve a plugin marketplace by ID. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| Get Plugin Usage | Get per-plugin install + invocation usage for a given day, with pagination. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| Get Plugin Version | Retrieve one version of a Plugin by its ID, or the Plugin’s newest version. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| Get RBAC Group | Retrieve an RBAC Group by ID. The RBAC Groups API is available to Claude Enterprise organizations only. | low |
| Get RBAC Role | Retrieve an RBAC Role by ID. The RBAC Roles API is available to Claude Enterprise organizations only. | low |
| Get Skill Usage | Get per-skill usage for a given day, with cursor-based pagination. Returns skill usage metrics for the organization, sorted by skill name. Use group_by[] to break usage out per member, per RBAC group, or per product surface, and filter[] to scope results; the parameter descriptions list the supported dimensions. Available to organizations on a Claude Enterprise plan. Requires an API key with the read:analytics scope. | low |
| Get Spend Limit | Retrieve a spend limit by ID. | low |
| Get Spend Limit Increase Request | Retrieve a spend limit increase request. While pending, the response includes a live spend_summary for the requester at the request’s period. | low |
| Get Token Usage Over Time | Get token usage over time across a date range. Returns token usage bucketed by minute, hour, or day, optionally broken down by product, model, context window, inference region, or speed. Available to organizations on a Claude Enterprise plan. Requires an API key with the read:analytics scope. | low |
| Get User | Retrieve a member of the organization by user ID. | low |
| Get Workspace | Get Workspace | low |
| Get Workspace Member | Get Workspace Member | low |
| List API Keys | List API Keys | low |
| List Effective Spend Limits | List each member’s effective spend limit and period-to-date spend. Returns one row per (member, period) the member resolves a spend limit for, with the source scope the spend limit was inherited from. Paginates by member, so a member’s periods never split across pages. | low |
| List External Keys | List external key configs in the caller’s organization. Results are ordered by creation time (newest first). Use the next_page cursor from the response to fetch subsequent pages. | low |
| List Invites | List the organization’s invites. | low |
| List Organization Rate Limits | List Messages API rate limits for your organization. Each entry corresponds to one rate-limit group (either a model family or an API-surface category such as the Files API or Message Batches) and contains the set of limiter values that apply to it. When limit is omitted, every matching entry is returned in a single page; when limit truncates the result, follow next_page to fetch the remaining entries. | low |
| List Plugin Installation Settings | List an organization-owned Plugin’s installation settings, which say which members it is for, most recently created first. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| List Plugin Marketplaces | List the plugin marketplaces Plugins live in, newest first: the organization’s own and its members’ personal ones. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| List Plugin Shares | List the shares the owner of a member-owned Plugin has given , to every member of the organization, to an RBAC Group, or to one member , most recently granted first. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| List Plugin Versions | List a Plugin’s versions, newest first. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| List Plugins | List the Plugins created under the organization, newest first: those in the organization’s own plugin marketplaces and those in members’ personal plugin marketplaces. Enterprise beta; requires read:plugins or read:org_audit. Not available to Console or HIPAA-ready organizations. | low |
| List RBAC Group Members | List members of an RBAC Group. The RBAC Groups API is available to Claude Enterprise organizations only. | low |
| List RBAC Groups | List RBAC Groups in the Claude Enterprise tenant. The RBAC Groups API is available to Claude Enterprise organizations only. | low |
| List RBAC Role Permissions | List the permissions an RBAC Role grants. The RBAC Roles API is available to Claude Enterprise organizations only. | low |
| List RBAC Roles | List RBAC Roles in the organization. The RBAC Roles API is available to Claude Enterprise organizations only. | low |
| List Spend Limit Increase Requests | List spend limit increase requests, most recent first. Pending requests include a live spend_summary for the requester. Requests whose requester is no longer a member are excluded. | low |
| List Spend Limits | List the organization’s spend limits. A Claude Console organization’s limits come in an order that is stable across pages. A Claude Enterprise organization’s are grouped by scope type, in the order organization, seat_tier, rbac_group, organization_service, user; within a type they come in a fixed order that is not creation order. | low |
| List User Activity | Get per-user activity for a given day, with cursor-based pagination. Returns activity metrics for each user in the organization, sorted by email address. Use group_by[] for per-RBAC-group aggregates, or filter[] to scope results to specific members, groups, or a chat project. Available to organizations on a Claude Enterprise plan. Requires an API key with the read:analytics scope. | low |
| List Users | List the organization’s members. | low |
| List Workspace Members | List Workspace Members | low |
| List Workspace Rate Limits | List a workspace’s rate limits. | low |
| List Workspaces | List Workspaces | low |
| Remove Plugin Installation Setting | Remove an organization-owned plugin’s setting. Organization removal restores the marketplace default; group removal restores inherited settings. Send writes for one plugin sequentially. An absent own setting returns 404. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | high |
| Remove RBAC Group Member | Remove a User from an RBAC Group. Membership of groups provisioned by an identity provider (source type "scim") cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | high |
| Remove User | Remove a member from the organization. | high |
| Set Plugin Installation Setting | Set an organization-owned plugin’s setting for the organization or an RBAC group. Send writes for one plugin sequentially. A transient 503 can be retried. Member-owned plugins use shares instead and return 404. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | high |
| Set Spend Limit | Set a spend limit. Upsert keyed on (scope, period): setting a limit that already exists overwrites it in place. A Claude Enterprise organization sets user limits. Its seat-tier, group, and organization-level defaults are configured in claude.ai. A Claude Console organization sets organization and workspace limits, which are monthly and always carry an amount. Setting those limits is in an early access preview. To request access, contact your Anthropic account team. | high |
| Update API Key | Update API Key | high |
| Update Compliance Settings | Update your organization’s Compliance Settings. | high |
| Update External Key | Partially update an external key config. Omitted fields are left unchanged. display_name is always editable. geo and provider_config cannot be changed once any workspace references this config, because previously encrypted data requires the original key identity to decrypt. | high |
| Update Plugin | Pin an organization-owned plugin to a stored version. Pinning cannot currently be undone. Content scanning and skill-name conflicts can reject the change. This action does not change installation settings. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | high |
| Update Plugin Marketplace | Set the default installation setting of an organization-owned marketplace. Plugins without their own setting inherit this default, including plugins added later. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | high |
| Update RBAC Group | Update an RBAC Group’s name. Groups provisioned by an identity provider (source type "scim") cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | medium |
| Update User | Update a member’s organization role. | high |
| Update Workspace | Update Workspace | medium |
| Update Workspace Member | Update Workspace Member | high |
| Validate External Key | Validate an external key config against the customer’s KMS. Anthropic performs an encrypt/decrypt roundtrip against the configured KMS key and waits up to 30 seconds for the result. The response status is success if the roundtrip succeeded, or failure with an error message if it failed or timed out. | low |
| Validate Plugin Marketplace Archive | Validate a ZIP archive as a plugin marketplace without storing or connecting it. Flow limits multipart requests to 20 MiB plus 64 KiB of metadata. The report gives marketplace usability and content diagnostics. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | low |
| Validate Plugin Marketplace Repository | Validate a public GitHub repository as a plugin marketplace without storing or connecting it. The report gives marketplace usability and content diagnostics. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | low |