This page describes AAES Govern’s controls. AAES Operate has private-work permissions, operational reviews and recorded-spend limits; it does not include Govern. About AAES Govern
Before you enable this package
Send anthropic-version: 2023-06-01 on every call. Bind WORKSPACE_ID, USER_ID and API_KEY_ID before enabling. The Admin API cannot create API keys, and archiving a workspace or an API key cannot be undone.
Read each action's effects and exclusions below. Before installation, also read the complete package requirements, including credential issuance, scope, expiry, and provider permissions. These are deployment prerequisites, not capabilities this package supplies.
Capabilities (14)
Each capability below is one registered operation. The complete package JSON includes its exact network destination allowlist. The repository stores it at packs/anthropic.json and embeds a copy in the release binary.
Risk tiers. R0 is the minimum for reads. R2 is the minimum for write, create, update, execute, and invoke. R3 is the minimum for delete, send, pay, deploy, approve, share, and transfer. Operators can raise these levels. A minimum tier does not measure the operation's business or confidentiality risk.
On supported execution paths routed through AAES Govern, the R3 actions listed below require approval by an authorized person. Bypass paths and observation-only registrations are outside that guarantee. A provider's restoration feature does not remove this approval requirement. A provider-side approval, such as approving a GitLab merge request, is also separate from AAES Govern human approval. The capability matrix shows which execution paths are implemented, restricted to lab use, or refused at startup. Live compatibility must be tested in your environment.
Field guide. Endpoint is the service address and request method. Connector is the adapter that makes the call. Custody describes how the credential is held; the credential reference identifies the value to resolve. Data class sets handling requirements: pii means personal data, financial means financial records, and internal means internal organizational data.
anthropic.workspaces.list v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.anthropic.com/v1/organizations/workspaces- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
List workspaces.
List the organization's workspaces with name, data residency, tags and archived time. Archived workspaces and the Default Workspace are left out unless include_archived or include_default is set.
anthropic.workspace.create v1.0.0R2
- Kind
- tool
- Action
- create
- Endpoint
POST https://api.anthropic.com/v1/organizations/workspaces- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
Create workspace.
Create a workspace. The body takes a name and optional data residency, display color, tags and a customer-managed key id; Anthropic documents that the key id cannot be detached or replaced once set.
anthropic.workspace.archive v1.0.0R3
- Kind
- tool
- Action
- delete
- Endpoint
POST https://api.anthropic.com/v1/organizations/workspaces/WORKSPACE_ID/archive- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
Archive workspace.
Archive a workspace. Anthropic documents that archiving deactivates the workspace, archives every API key created for it within seconds, and cannot be undone, so the capability declares delete at R3. WORKSPACE_ID is a placeholder.
anthropic.workspace.members.list v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.anthropic.com/v1/organizations/workspaces/WORKSPACE_ID/members- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
List workspace members.
List a workspace's members by user id with their workspace roles. WORKSPACE_ID is a placeholder.
anthropic.workspace.member.add v1.0.0R2
- Kind
- tool
- Action
- create
- Endpoint
POST https://api.anthropic.com/v1/organizations/workspaces/WORKSPACE_ID/members- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
Add workspace member.
Add an organization member to a workspace with a workspace role. WORKSPACE_ID is a placeholder.
anthropic.workspace.member.update v1.0.0R2
- Kind
- tool
- Action
- update
- Endpoint
POST https://api.anthropic.com/v1/organizations/workspaces/WORKSPACE_ID/members/USER_ID- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
Update workspace member.
Change a member's workspace role. WORKSPACE_ID and USER_ID are placeholders.
anthropic.workspace.member.remove v1.0.0R3
- Kind
- tool
- Action
- delete
- Endpoint
DELETE https://api.anthropic.com/v1/organizations/workspaces/WORKSPACE_ID/members/USER_ID- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
Remove workspace member.
Remove a member from a workspace. A single-workspace key that member holds stops working there. WORKSPACE_ID and USER_ID are placeholders.
anthropic.api-keys.list v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.anthropic.com/v1/organizations/api_keys- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
List API keys.
List the organization's API keys with name, status, partial key hint, expiry, scope and the principal each acts as, optionally filtered by workspace, status or creator.
anthropic.api-key.update v1.0.0R3
- Kind
- tool
- Actions
- update, delete
- Endpoint
POST https://api.anthropic.com/v1/organizations/api_keys/API_KEY_ID- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
Update API key.
Rename an API key or change its status to active, inactive or archived. Anthropic documents inactive as reversible and archived as permanent; one endpoint takes both, so the capability declares delete at R3. API_KEY_ID is a placeholder.
anthropic.users.list v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.anthropic.com/v1/organizations/users- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- pii
List users.
List the organization's members with email addresses, names and roles, optionally filtered by email.
anthropic.user.update v1.0.0R2
- Kind
- tool
- Action
- update
- Endpoint
POST https://api.anthropic.com/v1/organizations/users/USER_ID- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- pii
Update user.
Change a member's organization role. The admin role cannot be assigned through the API. USER_ID is a placeholder.
anthropic.user.remove v1.0.0R3
- Kind
- tool
- Action
- delete
- Endpoint
DELETE https://api.anthropic.com/v1/organizations/users/USER_ID- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- pii
Remove user.
Remove a member from the organization. Anthropic documents that the member's personal keys are archived and are not restored on re-invitation. Admins cannot be removed through the API. USER_ID is a placeholder.
anthropic.usage-report.messages.get v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.anthropic.com/v1/organizations/usage_report/messages- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- internal
Get usage report messages.
Read token usage for the Messages API in time buckets, optionally grouped or filtered by model, workspace, API key and service tier.
anthropic.cost-report.get v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.anthropic.com/v1/organizations/cost_report- Connector
- http
- Custody
- inherits the pack credential block
- Credential ref
- inherits the pack credential block
- Data class
- financial
Get cost report.
Read the organization's cost breakdown in USD, optionally grouped by workspace and description. This is spend data, registered at the read floor.
Credential reference
The credential field names a reference rather than containing credential material. Packs are designed not to contain secrets; the format checks cover only known credential formats and cannot prove that arbitrary text contains no secrets. Installing a package registers its capabilities. Configure the provider credentials, endpoints, and network access, then test the integration in your environment before enabling it.
- Reference
secret-ref-anthropic-admin-key- Custody
- customer_vault
- Injection
- header (x-api-key)
Configure the value and injection format specified in the package. Assign responsibility for credential rotation and revocation, restrict provider permissions, and keep credential material out of logs and responses.
Complete credential requirements
An Anthropic Admin API key held in the client's own secret manager, injected as the x-api-key header. The stored material is the key itself, with no scheme. Only organization members with the admin role can create an Admin API key, in the Claude Console. The Admin API also accepts an OAuth token with the org:admin scope; this pack registers the Admin API key only. Rotate by creating a new key in the Console, storing it under this reference, then retiring the old one. The executor injects the stored value unchanged and performs no key lifecycle.
The value must live only in executor memory for a call and never in logs, traces, diagnostics or crash dumps; a deployment that cannot meet that bar must not enable the pack.
Resources
anthropic-organization(api, pii):https://api.anthropic.com/v1/organizationsanthropic-organization-costs(api, financial):https://api.anthropic.com/v1/organizations/cost_report
Technical package and review record
Complete provider requirements and exclusions
Every endpoint is on api.anthropic.com under /v1/organizations. WORKSPACE_ID, USER_ID and API_KEY_ID are path placeholders to bind before enabling. Each request must carry the header anthropic-version: 2023-06-01, which every example in the Admin API documentation sends; it is a request header the caller supplies, not part of the credential, and moving to a newer version is a re-review trigger.
Tiers sit at the floor of the declared actions. Archiving a workspace is registered as delete because Anthropic documents it cannot be undone and that it archives the workspace's API keys. The API key update declares delete because the same call can set status archived, which is permanent. Removals are R3. Role changes are R2 by the action floor, and policy should raise them.
The Admin API cannot create API keys: Anthropic documents that keys are created in the Claude Console and the API can only read, rename and change the status of existing keys. Rotation is therefore a Console step followed by the registered status change that retires the old key.
Every other operation in the Admin API reference is excluded, among them the organization info endpoint, invites, workspace retrieval and update, single-member, single-key and single-user retrieval, workspace and organization rate limits (including the workspace rate-limit update), service accounts and their workspace bindings, workload identity federation issuers and rules, external keys (CMEK), compliance settings, Claude Code analytics, and the Enterprise-only groups, roles, spend limits and plugins endpoints. AAES has not been certified by Anthropic; these endpoints are configuration to review and test.
Download the complete package JSON for exact network allowlists, credential requirements, exclusions, and setup notes. Read these requirements before installation.
The full documentation review record is supplied in the evaluation package. The platform evaluation package for AAES Operate and AAES Govern runs in your environment and is included only in the paid design partnership. This page reproduces the source links and review block; the full record is available for evaluation. Discuss a design partnership to inspect it before installation.
Review block
This section reproduces the review block recorded in the pack file. The evidence and approval record is separate: for a reviewed pack, it is packs/review/records/anthropic.md in the repository (mirrored into the release binary's embedded assets).
Review completed: 2026-10-22
19 sources, retrieved 2026-10-22
- https://platform.claude.com/docs/en/api/administration-api (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/manage-claude/authentication (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/manage-claude/workspaces (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/manage-claude/usage-cost-api (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/workspaces/list (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/workspaces/create (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/workspaces/archive (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/workspaces/members/list (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/workspaces/members/add (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/workspaces/members/update (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/workspaces/members/remove (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/api_keys/list (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/api_keys/update (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/users/list (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/users/update (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/organization/users/remove (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/beta/organization/usage_report/retrieve_messages (retrieved 2026-10-22)
- https://platform.claude.com/docs/en/api/beta/organization/cost_report/retrieve (retrieved 2026-10-22)
Current documentation links are navigation aids. They do not change the package, its historical sources or its review date. Review dates describe a documentation review, not a live integration test. No package is provider-endorsed or yet tested against a live provider tenant.
Release identity
SHA-256 of the pack file bytes: b66d34233945c4b9c5e720a4823f67133fa976ce6c75cfbb5702f66835cc9f31
Distributable: yes, digest matches the release manifest. Editing a package changes its release identity. A deployment plan checks its own file digests; it does not restore reviewed status or authenticate approval.