> ## Documentation Index
> Fetch the complete documentation index at: https://docs.letsflow.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Anthropic Admin

> Manage Anthropic organization access, workspaces, API keys, usage, and enterprise settings from automations.

export const flowWebUrl = "https://app.letsflow.ai";

Flow uses this integration to run Anthropic Admin actions from automations with your team's connection. You choose which actions the team can use. Available actions depend on your Anthropic organization, plan, and key permissions.

<Tabs>
  <Tab title="Flow-managed connection">
    ### Prepare in Anthropic Admin

    Create an Admin API key for your Anthropic organization. See [Create an Admin API key](https://platform.claude.com/docs/en/manage-claude/admin-api-keys) for instructions.

    You can also use an organization-scoped personal or service account key with the required permissions. Workspace-scoped keys cannot authenticate to the Admin API. See [Anthropic Admin API authentication](https://platform.claude.com/docs/en/manage-claude/admin-api#authentication) for credential requirements.

    ### Connect in Flow

    <Steps>
      <Step title="Find the Anthropic Admin integration">
        1. Open **Integrations**.
        2. Choose **Add connection**.
        3. In **Add connection**, search for **Anthropic Admin**.
        4. Select the **Anthropic Admin** card.

        <a className="flow-app-link" href={flowWebUrl}>
          Open Flow

          <svg aria-hidden="true" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round">
            <path d="M7 7h10v10" />

            <path d="M7 17 17 7" />
          </svg>
        </a>
      </Step>

      <Step title="Connect">
        1. Choose the organization or team that will use the connection.
        2. In the connection window, enter your API key. Flow supplies the API version.
        3. Choose **Connect** and wait for Flow to finish validating the connection.
        4. Open the new connection's **Automations** tab.
        5. Choose **Enable** for the intended team or teams. Organization-wide connections enable Automations for all teams.
        6. Select the Anthropic Admin actions automations can run.
        7. Choose **Save** if you changed the selection.
      </Step>
    </Steps>
  </Tab>
</Tabs>

## Permissions and scopes

This integration does not define provider scopes.

## Supported actions

| Action | Description | <Tooltip tip="Risk estimates the impact of the action. Low reads provider data, medium changes existing records, and high can grant access, remove data, disable resources, or make broad changes.">Risk</Tooltip> |
| - | - | - |
| Add RBAC Group Member | Add a User to an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Approve Spend Limit Increase Request | Approve a pending spend limit increase request. Writes a per-user spend limit at `amount` for the requester and transitions the request to `approved`. `period` defaults to the period the member was blocked on. Anthropic emails the requester unless `suppress_notification` is set. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Archive Workspace | Archive Workspace | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Create External Key | Create an external key config owned by the caller's organization. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Create Invite | Invite a user to join the organization by email. On plans that draw members from a finite pool of purchased seats, the invite automatically consumes a seat from the lowest tier with availability; there is no seat-tier parameter. When no seat is free the request fails with a 400 error rather than purchasing a seat. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Create Plugin | Create an organization-owned plugin and its first version from files or an archive. Include .claude-plugin/plugin.json. The marketplace must accept manual uploads. A registration\_pending error can mean the plugin was stored; retrieve it before retrying creation. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Create Plugin Version | Upload a new version of an organization-owned plugin in a manual marketplace. The manifest name must match. The version is served unless the plugin is pinned. A registration\_pending error can mean the version was stored; inspect the plugin before retrying. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Create RBAC Group | Create an RBAC Group in the Claude Enterprise tenant. Groups created via the API have source type `"direct"`. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Create Workspace | Create Workspace | <Badge color="yellow" size="sm" shape="pill">medium</Badge> |
| Create Workspace Member | Create Workspace Member | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Delete External Key | Delete an external key config. The request is rejected if any workspace still references this config. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Delete Invite | Delete a pending invite. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Delete Plugin | Permanently delete a manually uploaded plugin and all versions. Installation settings and member shares are removed. For reversible removal from use, change installation settings instead. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Delete RBAC Group | Delete an RBAC Group. Groups provisioned by an identity provider (source type `"scim"`) cannot be deleted via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Delete Spend Limit | Delete a spend limit. For a Claude Enterprise organization, this deletes a per-user override, and the member falls back to any inherited spend limit at that period. Its seat-tier, group, and organization-level rows cannot be deleted via this endpoint. A Claude Console organization deletes its organization and workspace limits. Deleting them through the API is in an early access preview. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Delete Workspace Member | Delete Workspace Member | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Deny Spend Limit Increase Request | Deny a pending spend limit increase request. Idempotent on `denied`; denying an already-`approved` request returns 400. Anthropic emails the requester unless `suppress_notification` is set. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Get Activity Summaries | Get organization-wide activity summaries for a date range. Claude Enterprise only; requires read:analytics. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get API Key | Get API Key | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Artifact Activity | Get artifact-creation activity for a given day, broken out by MIME type. Returns the full (`artifact_type`, `is_shared`) cube for the organization; `next_page` is null except for grouped queries, which paginate. The cube can be broken out per product, per member, or per RBAC group via `group_by[]`, and scoped via `filter[]`. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Chat Project Usage | Get per-project activity for a given day, with cursor-based pagination. Returns activity metrics for each project in the organization, sorted by project ID. Use `group_by[]` to break projects out per member or per RBAC group, and `filter[]` to scope results; the parameter descriptions list the supported dimensions. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Claude Code Usage Report | Retrieve daily aggregated usage metrics for Claude Code users. Enables organizations to analyze developer productivity and build custom dashboards. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Compliance Settings | Retrieve your organization's Compliance Settings. Compliance Settings is a singleton resource: there is exactly one per organization, addressed without an identifier. The `state` field reflects whether the Compliance API is enabled. An organization with a parent organization reads the state inherited from the parent's configuration. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Connector Usage | Get per-connector usage for a given day, with cursor-based pagination. Claude Enterprise only; requires read:analytics. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Cost Over Time | Get cost in USD over time across a date range. Returns cost bucketed by minute, hour, or day, optionally broken down by product, model, context window, inference region, speed, cost type, or token type. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Cost Report | Get Cost Report | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Current Organization | Retrieve information about the organization associated with the authenticated API key. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get External Key | Retrieve a single external key config in the caller's organization by ID. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Invite | Retrieve an invite by ID. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Messages Usage Report | Get Messages Usage Report | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Per-User Cost | Get per-user cost in USD across a date range. Returns one row per user, ranked by spend. Use this to see which users account for the most cost. Only cost attributable to a seat user is included; for organization-wide totals including direct API-key and automation traffic, use the bucketed `/v1/organizations/analytics/cost_report` endpoint. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Per-User Token Usage | Get per-user token usage across a date range. Returns one row per user, ranked by the chosen token metric. Use this to see which users consume the most tokens. Only usage attributable to a seat user is included; for organization-wide totals including direct API-key and automation traffic, use the bucketed `/v1/organizations/analytics/usage_report` endpoint. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Plugin | Retrieve a Plugin by ID. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Plugin Marketplace | Retrieve a plugin marketplace by ID. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Plugin Usage | Get per-plugin install + invocation usage for a given day, with pagination. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Plugin Version | Retrieve one version of a Plugin by its ID, or the Plugin's newest version. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get RBAC Group | Retrieve an RBAC Group by ID. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get RBAC Role | Retrieve an RBAC Role by ID. The RBAC Roles API is available to Claude Enterprise organizations only. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Skill Usage | Get per-skill usage for a given day, with cursor-based pagination. Returns skill usage metrics for the organization, sorted by skill name. Use `group_by[]` to break usage out per member, per RBAC group, or per product surface, and `filter[]` to scope results; the parameter descriptions list the supported dimensions. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Spend Limit | Retrieve a spend limit by ID. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Spend Limit Increase Request | Retrieve a spend limit increase request. While `pending`, the response includes a live `spend_summary` for the requester at the request's period. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Token Usage Over Time | Get token usage over time across a date range. Returns token usage bucketed by minute, hour, or day, optionally broken down by product, model, context window, inference region, or speed. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get User | Retrieve a member of the organization by user ID. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Workspace | Get Workspace | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Get Workspace Member | Get Workspace Member | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List API Keys | List API Keys | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Effective Spend Limits | List each member's effective spend limit and period-to-date spend. Returns one row per (member, period) the member resolves a spend limit for, with the `source` scope the spend limit was inherited from. Paginates by member, so a member's periods never split across pages. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List External Keys | List external key configs in the caller's organization. Results are ordered by creation time (newest first). Use the `next_page` cursor from the response to fetch subsequent pages. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Invites | List the organization's invites. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Organization Rate Limits | List Messages API rate limits for your organization. Each entry corresponds to one rate-limit group (either a model family or an API-surface category such as the Files API or Message Batches) and contains the set of limiter values that apply to it. When `limit` is omitted, every matching entry is returned in a single page; when `limit` truncates the result, follow `next_page` to fetch the remaining entries. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Plugin Installation Settings | List an organization-owned Plugin's installation settings, which say which members it is for, most recently created first. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Plugin Marketplaces | List the plugin marketplaces Plugins live in, newest first: the organization's own and its members' personal ones. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Plugin Shares | List the shares the owner of a member-owned Plugin has given , to every member of the organization, to an RBAC Group, or to one member , most recently granted first. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Plugin Versions | List a Plugin's versions, newest first. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Plugins | List the Plugins created under the organization, newest first: those in the organization's own plugin marketplaces and those in members' personal plugin marketplaces. Enterprise beta; requires read:plugins or read:org\_audit. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List RBAC Group Members | List members of an RBAC Group. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List RBAC Groups | List RBAC Groups in the Claude Enterprise tenant. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List RBAC Role Permissions | List the permissions an RBAC Role grants. The RBAC Roles API is available to Claude Enterprise organizations only. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List RBAC Roles | List RBAC Roles in the organization. The RBAC Roles API is available to Claude Enterprise organizations only. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Spend Limit Increase Requests | List spend limit increase requests, most recent first. Pending requests include a live `spend_summary` for the requester. Requests whose requester is no longer a member are excluded. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Spend Limits | List the organization's spend limits. A Claude Console organization's limits come in an order that is stable across pages. A Claude Enterprise organization's are grouped by scope type, in the order `organization`, `seat_tier`, `rbac_group`, `organization_service`, `user`; within a type they come in a fixed order that is not creation order. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List User Activity | Get per-user activity for a given day, with cursor-based pagination. Returns activity metrics for each user in the organization, sorted by email address. Use `group_by[]` for per-RBAC-group aggregates, or `filter[]` to scope results to specific members, groups, or a chat project. Available to organizations on a Claude Enterprise plan. Requires an API key with the `read:analytics` scope. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Users | List the organization's members. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Workspace Members | List Workspace Members | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Workspace Rate Limits | List a workspace's rate limits. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| List Workspaces | List Workspaces | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Remove Plugin Installation Setting | Remove an organization-owned plugin's setting. Organization removal restores the marketplace default; group removal restores inherited settings. Send writes for one plugin sequentially. An absent own setting returns 404. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Remove RBAC Group Member | Remove a User from an RBAC Group. Membership of groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Remove User | Remove a member from the organization. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Set Plugin Installation Setting | Set an organization-owned plugin's setting for the organization or an RBAC group. Send writes for one plugin sequentially. A transient 503 can be retried. Member-owned plugins use shares instead and return 404. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Set Spend Limit | Set a spend limit. Upsert keyed on (scope, period): setting a limit that already exists overwrites it in place. A Claude Enterprise organization sets `user` limits. Its seat-tier, group, and organization-level defaults are configured in claude.ai. A Claude Console organization sets `organization` and `workspace` limits, which are monthly and always carry an amount. Setting those limits is in an early access preview. To request access, contact your Anthropic account team. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Update API Key | Update API Key | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Update Compliance Settings | Update your organization's Compliance Settings. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Update External Key | Partially update an external key config. Omitted fields are left unchanged. `display_name` is always editable. `geo` and `provider_config` cannot be changed once any workspace references this config, because previously encrypted data requires the original key identity to decrypt. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Update Plugin | Pin an organization-owned plugin to a stored version. Pinning cannot currently be undone. Content scanning and skill-name conflicts can reject the change. This action does not change installation settings. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Update Plugin Marketplace | Set the default installation setting of an organization-owned marketplace. Plugins without their own setting inherit this default, including plugins added later. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Update RBAC Group | Update an RBAC Group's name. Groups provisioned by an identity provider (source type `"scim"`) cannot be modified via the API while an organization in the tenant uses SCIM provisioning. The RBAC Groups API is available to Claude Enterprise organizations only. | <Badge color="yellow" size="sm" shape="pill">medium</Badge> |
| Update User | Update a member's organization role. | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Update Workspace | Update Workspace | <Badge color="yellow" size="sm" shape="pill">medium</Badge> |
| Update Workspace Member | Update Workspace Member | <Badge color="red" size="sm" shape="pill">high</Badge> |
| Validate External Key | Validate an external key config against the customer's KMS. Anthropic performs an encrypt/decrypt roundtrip against the configured KMS key and waits up to 30 seconds for the result. The response status is `success` if the roundtrip succeeded, or `failure` with an error message if it failed or timed out. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Validate Plugin Marketplace Archive | Validate a ZIP archive as a plugin marketplace without storing or connecting it. Flow limits multipart requests to 20 MiB plus 64 KiB of metadata. The report gives marketplace usability and content diagnostics. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |
| Validate Plugin Marketplace Repository | Validate a public GitHub repository as a plugin marketplace without storing or connecting it. The report gives marketplace usability and content diagnostics. Enterprise beta; requires write:plugins. Not available to Console or HIPAA-ready organizations. | <Badge color="green" size="sm" shape="pill">low</Badge> |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.