> ## Documentation Index
> Fetch the complete documentation index at: https://docs.parable.work/llms.txt
> Use this file to discover all available pages before exploring further.

# Claude Admin

> Sync organizational data and usage analytics from the Anthropic Claude Admin API

Sync organizational data and usage analytics from the Anthropic Claude Admin API.

<Tabs>
  <Tab title="Overview">
    Connect Parable to the Anthropic **Admin API** to sync organization members, workspaces, API keys, invites, workspace membership, and daily usage/cost reports.

    This Provider is separate from **Claude Compliance**, which uses a Compliance Access Key for audit and eDiscovery data.

    #### Organization data

    Users, workspaces, workspace members, invites, and API key inventory

    #### Usage & cost

    Daily token usage and cost buckets for FinOps reporting

    By default, Parable ingests:

    | Data                           | Admin API area                                                                       |
    | ------------------------------ | ------------------------------------------------------------------------------------ |
    | Organization users             | `/v1/organizations/users`                                                            |
    | Workspaces                     | `/v1/organizations/workspaces`                                                       |
    | Workspace members              | `/v1/organizations/workspaces/{id}/members`                                          |
    | API keys (metadata)            | `/v1/organizations/api_keys`                                                         |
    | Pending invites                | `/v1/organizations/invites`                                                          |
    | Daily message usage            | `/v1/organizations/usage_report/messages` (grouped by workspace, API key, and model) |
    | Daily cost (USD)               | `/v1/organizations/cost_report` (grouped by workspace and description)               |
    | Per-user Claude Code analytics | `/v1/organizations/usage_report/claude_code`                                         |

    For compliance audit logs and chat/project content, use the **Claude Compliance** Provider instead.

    * [Admin API](https://platform.claude.com/docs/en/manage-claude/admin-api)
    * [Usage and Cost API](https://platform.claude.com/docs/en/build-with-claude/usage-cost-api)
    * [Compliance API access (key types comparison)](https://platform.claude.com/docs/en/manage-claude/compliance-api-access)

    ## Data streams

    This Provider Plugin defines 8 data streams.

    | Stream                  | Description                                                                                                                                                                                                                     | Sync        |
    | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
    | `users`                 | Organization users from Anthropic Admin API                                                                                                                                                                                     | full        |
    | `workspaces`            | Organization workspaces from Anthropic Admin API                                                                                                                                                                                | full        |
    | `api_keys`              | Organization API keys from Anthropic Admin API                                                                                                                                                                                  | full        |
    | `invites`               | Organization invites from Anthropic Admin API                                                                                                                                                                                   | full        |
    | `workspace_members`     | Members of each workspace from Anthropic Admin API                                                                                                                                                                              | full        |
    | `usage_report`          | Daily usage report (message token counts) from Anthropic Admin API. Default group\_by\[] is workspace\_id, api\_key\_id, and model. Omits speed because that dimension requires the anthropic-beta fast-mode-2026-02-01 header. | incremental |
    | `cost_report`           | Daily cost report (USD cents) from Anthropic Admin API                                                                                                                                                                          | incremental |
    | `claude_code_analytics` | Per-user daily Claude Code analytics (tokens, cost, productivity) from Anthropic Admin API                                                                                                                                      | incremental |
  </Tab>

  <Tab title="Setup Guide">
    ### Claude Admin

    #### What You'll Need

    | Credential        | What it is                                                            |
    | ----------------- | --------------------------------------------------------------------- |
    | **Admin API Key** | Organization admin key from Claude Console (prefix `sk-ant-admin01-`) |

    > **Info:** **Setup access in Anthropic Claude Console.** These steps require **organization admin**, or a colleague with equivalent permissions who can create credentials for you.
    >
    > If that is not you, ask your Anthropic Claude Console administrator.

    * A Claude **organization** (Admin API is unavailable for individual accounts). Set up your organization at Console > Settings > Organization if needed.
    * **Admin API Key** access in [Claude Console](https://console.anthropic.com) (not the standard API keys page).

    > **Info:** **Claude Platform on AWS:** Most Admin API endpoints are unavailable on Claude Platform on AWS except workspace management. Usage/cost reporting and organization member endpoints may not work in that deployment model.

    #### Step 1: Open Admin keys in Claude Console

    1. Sign in to [console.anthropic.com](https://console.anthropic.com) as an **organization admin**.
    2. Open **Settings > Admin keys** (direct link: [console.anthropic.com/settings/admin-keys](https://console.anthropic.com/settings/admin-keys)).

    #### Step 2: Create an Admin API Key

    1. Click **Create key** (or **Create Admin Key**).
    2. Enter a descriptive name, for example `Parable Platform`.
    3. Copy the key immediately. It is shown only once.

    > **Warning:** **Copy your Admin API Key now!**
    >
    > This is the only time it will be displayed. Store it in a secure password manager before closing this page.

    > **Warning:** Use an **Admin API Key** (`sk-ant-admin01-...`) from **Settings > Admin keys**. Do **not** use a standard Claude API key from **Settings > API keys** (`sk-ant-api03-...`) — that key is for Messages API calls and will not authenticate to the Admin API.

    #### Step 3: Connect in Parable

    1. In Parable, open **Platform → Providers** and choose the Provider to add.
    2. Select **Anthropic > Claude Admin**.
    3. Paste your Admin API Key.
    4. Save and run **Test connection**.

    > **Success:** **Success!** If you received a `200 OK` response with valid data, your credentials are configured correctly. You can now configure this Provider in Parable.

    ```bash theme={null}
    read -rs -p "Admin API Key: " ANTHROPIC_ADMIN_API_KEY && echo
    curl --silent "https://api.anthropic.com/v1/organizations/me" \
      --header "x-api-key: ${ANTHROPIC_ADMIN_API_KEY}" \
      --header "anthropic-version: 2023-06-01"
    unset ANTHROPIC_ADMIN_API_KEY
    ```

    A `200` response with organization JSON confirms the key is valid.
  </Tab>

  <Tab title="Permissions">
    <AccordionGroup>
      <Accordion id="provider-permission-tap-claude-api-keys-1231beb9d504" title="API Keys" icon="user-shield" iconType="sharp-duotone-solid">
        Developer identifier: `api_keys`

        **API Keys.** Organization API keys from Anthropic Admin API.

        * **Enables:** Match each Anthropic API key record to its creator, workspace, status, and lifecycle timestamps without exposing secret key material.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/api_keys` operation as a snapshot stream using full synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-api-keys-created-at-d789e1bfbc48" title="Created At" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.created_at`

            **Created At.** Timestamp when the API key was created. It anchors the API key on the provider's reported timeline.

            * **Enables:** Order API Keys by created at in `api_keys.created_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports created at as a timestamp on each API key; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-created-by-8ad4544372a4" title="Created By" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.created_by`

            **Created By.** User or entity that created this API key. It preserves the nested context needed to interpret the parent API key.

            * **Enables:** Attribute created by in `api_keys.created_by` to the parent API key; identify parent records where that nested created by object is absent.
            * **Interpretation:** Claude Admin reports created by as a nested object on each API key; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-created-by-id-3a0060fc12ec" title="ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.created_by.id`

            **ID.** Creator's unique identifier. It provides the reference needed to connect the API key to the corresponding provider object.

            * **Enables:** Connect each Anthropic API key created by in API Keys to the referenced Anthropic API key created by through `api_keys.AnthropicApiKeyCreatedBy.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports ID as an identifier in its Anthropic API key created by namespace; it is not a universal identity outside Claude Admin.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-created-by-type-e1dbcf1af7cb" title="Type" icon="user-tie" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.created_by.type`

            **Type.** Creator type (e.g. 'user'). It identifies the related provider object that gives the Anthropic API key created by its parent, owner, or container context.

            * **Enables:** Segment Anthropic API key created by entries in API Keys by type in `api_keys.AnthropicApiKeyCreatedBy.type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports type as a label from its own taxonomy on each Anthropic API key created by; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-expires-at-224c2475f3e1" title="Expires At" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.expires_at`

            **Expires At.** Timestamp when the API key expires, if applicable. It anchors the API key on the provider's reported timeline.

            * **Enables:** Order API Keys by expires at in `api_keys.expires_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports expires at as a timestamp on each API key; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-id-b919a9d3270a" title="ID" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.id`

            **ID.** Unique API key identifier. It provides the reference needed to connect the API key to the corresponding provider object.

            * **Enables:** Match repeated API key entries on ID in `api_keys.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports ID as an identifier in its API key namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-name-238e6cd06f54" title="Name" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.name`

            **Name.** Human-readable name for the API key. It gives the API key a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each API key with name from `api_keys.name`; distinguish records that share that display name but have different Claude Admin identifiers.
            * **Interpretation:** Claude Admin reports name as display text for each API key; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-partial-key-hint-6ecadcf1decc" title="Partial Key Hint" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.partial_key_hint`

            **Partial Key Hint.** Partial hint of the API key value (e.g. 'sk-ant-...1234'). It provides the reference needed to connect the API key to the corresponding provider object.

            * **Enables:** Connect each API key in API Keys to the referenced partial  hint through `api_keys.partial_key_hint`; flag partial key hint values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports partial key hint as an identifier in its partial  hint namespace; it is not a universal identity outside Claude Admin.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-status-f2c7d9dfae33" title="Status" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.status`

            **Status.** Key status (e.g. 'active', 'inactive', 'archived'). It distinguishes the provider-defined status state or classification for the API key.

            * **Enables:** Segment API key entries in API Keys by status in `api_keys.status`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports status as a label from its own taxonomy on each API key; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-type-c652480c6384" title="Type" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.type`

            **Type.** Object type (always 'api\_key'). It distinguishes the provider-defined type state or classification for the API key.

            * **Enables:** Segment API key entries in API Keys by type in `api_keys.type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports type as a label from its own taxonomy on each API key; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-api-keys-workspace-id-8dd7f7506eef" title="Workspace ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `api_keys.workspace_id`

            **Workspace ID.** Workspace this key belongs to. It provides the reference needed to connect the API key to the corresponding provider object.

            * **Enables:** Connect each API key in API Keys to the referenced workspace through `api_keys.workspace_id`; flag workspace ID values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports workspace ID as an identifier in its workspace namespace; it is not a universal identity outside Claude Admin.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-claude-claude-code-analytics-7f27fd10d62e" title="Claude Code Analytics" icon="chart-line" iconType="sharp-duotone-solid">
        Developer identifier: `claude_code_analytics`

        **Claude Code Analytics.** Daily per-user Claude Code activity, token, and estimated-cost records from the Anthropic Admin API.

        * **Enables:** Measure provider-reported Claude Code activity, token counts, and estimated costs by actor-day and model.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/usage_report/claude_code` operation as an event stream using incremental synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. Estimated costs are decimal currency-lowest-unit estimates—USD may be fractional cents—and are not invoices. Activity measures are provider reports, not Parable judgments about individual performance. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-claude-code-analytics-actor-7042734790cf" title="Actor" icon="user-tie" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.actor`

            **Actor.** The structured actor details attached to each Claude Code analytics record in Claude Code Analytics. It preserves the nested context needed to interpret the parent Claude Code analytics record.

            * **Enables:** Attribute actor in `claude_code_analytics.actor` to the parent Claude Code analytics record; identify parent records where that nested actor object is absent.
            * **Interpretation:** Claude Admin reports actor as a nested object on each Claude Code analytics record; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-actor-api-key-name-e52cf6511f81" title="API Key Name" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.actor.api_key_name`

            **API Key Name.** API key name when actor type is api\_actor. It provides the reference needed to connect the Claude Code analytics record to the corresponding provider object.

            * **Enables:** Connect each Anthropic claude code actor in Claude Code Analytics to the referenced API  name through `claude_code_analytics.AnthropicClaudeCodeActor.api_key_name`; flag API key name values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports API key name as an identifier in its API  name namespace; it is not a universal identity outside Claude Admin.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-actor-email-address-b5e5284ae6b2" title="Email Address" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.actor.email_address`

            **Email Address.** User email when actor type is user\_actor. It supplies the provider-reported address or location facet for the Anthropic Claude Code actor, not a residency determination.

            * **Enables:** Attribute each Anthropic claude code actor to a person or account by the exact email address in `claude_code_analytics.AnthropicClaudeCodeActor.email_address`; identify addresses that do not match the Claude Admin directory.
            * **Interpretation:** Claude Admin reports email address as an address on each Anthropic claude code actor; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-actor-type-c75e4d1d72de" title="Type" icon="user-tie" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.actor.type`

            **Type.** Actor type: user\_actor or api\_actor. It distinguishes the provider-defined type state or classification for the Anthropic Claude Code actor.

            * **Enables:** Segment Anthropic claude code actor entries in Claude Code Analytics by type in `claude_code_analytics.AnthropicClaudeCodeActor.type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports type as a label from its own taxonomy on each Anthropic claude code actor; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-claude-code-analyti-cf4f21b2cfe5" title="Claude Code Analytics Row ID" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.claude_code_analytics_row_id`

            **Claude Code Analytics Row ID.** Synthetic primary key for actor-day uniqueness. It provides the reference needed to connect the Claude Code analytics record to the corresponding provider object.

            * **Enables:** Match repeated Claude Code analytics record entries on claude code analytics row ID in `claude_code_analytics.claude_code_analytics_row_id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports claude code analytics row ID as an identifier in its claude code analytics row namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-core-metrics-c6c3209853b9" title="Core Metrics" icon="cube" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.core_metrics`

            **Core Metrics.** The structured core metrics details attached to each Claude Code analytics record in Claude Code Analytics. It preserves the nested context needed to interpret the parent Claude Code analytics record.

            * **Enables:** Attribute core metrics in `claude_code_analytics.core_metrics` to the parent Claude Code analytics record; identify parent records where that nested core metrics object is absent.
            * **Interpretation:** Claude Admin reports core metrics as a nested object on each Claude Code analytics record; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-core-metrics-commit-4ed4123049d4" title="Commits By Claude Code" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.core_metrics.commits_by_claude_code`

            **Commits By Claude Code.** Git commits created through Claude Code. It supplies the commits by Claude Code measure for the Anthropic Claude Code core metric at the provider's declared unit and grain.

            * **Enables:** Measure commits by Claude Code through `claude_code_analytics.AnthropicClaudeCodeCoreMetrics.commits_by_claude_code` for each Anthropic Claude Code core metric and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports commits by Claude Code as a measure on each Anthropic Claude Code core metric; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-core-metrics-lines--29c6f067e635" title="Lines Of Code" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.core_metrics.lines_of_code`

            **Lines Of Code.** The structured lines of code details attached to each Anthropic claude code core metrics in Claude Code Analytics. It preserves the nested context needed to interpret the parent Claude Code analytics record.

            * **Enables:** Attribute lines of code in `claude_code_analytics.AnthropicClaudeCodeCoreMetrics.lines_of_code` to the parent Claude Code analytics record; identify parent records where that nested lines of code object is absent.
            * **Interpretation:** Claude Admin reports lines of code as a nested object on each Anthropic claude code core metric; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-core-metrics-lines--1b71d20103b6" title="Added" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.core_metrics.lines_of_code.added`

            **Added.** Lines of code added. It supplies the added measure for the Anthropic Claude Code lines of code at the provider's declared unit and grain.

            * **Enables:** Measure added through `claude_code_analytics.AnthropicClaudeCodeLinesOfCode.added` for each Anthropic Claude Code lines of code and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports added as a measure on each Anthropic Claude Code lines of code; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-core-metrics-lines--21eacefc6d55" title="Removed" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.core_metrics.lines_of_code.removed`

            **Removed.** Lines of code removed. It supplies the removed measure for the Anthropic Claude Code lines of code at the provider's declared unit and grain.

            * **Enables:** Measure removed through `claude_code_analytics.AnthropicClaudeCodeLinesOfCode.removed` for each Anthropic Claude Code lines of code and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports removed as a measure on each Anthropic Claude Code lines of code; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-core-metrics-num-se-e1c09cc3a0ef" title="Num Sessions" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.core_metrics.num_sessions`

            **Num Sessions.** Number of distinct Claude Code sessions. It supplies the num sessions measure for the Anthropic Claude Code core metric at the provider's declared unit and grain.

            * **Enables:** Measure num sessions through `claude_code_analytics.AnthropicClaudeCodeCoreMetrics.num_sessions` for each Anthropic Claude Code core metric and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports num sessions as a measure on each Anthropic Claude Code core metric; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-core-metrics-pull-r-0e5406e137b6" title="Pull Requests By Claude Code" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.core_metrics.pull_requests_by_claude_code`

            **Pull Requests By Claude Code.** Pull requests created through Claude Code. It supplies the pull requests by Claude Code measure for the Anthropic Claude Code core metric at the provider's declared unit and grain.

            * **Enables:** Measure pull requests by Claude Code through `claude_code_analytics.AnthropicClaudeCodeCoreMetrics.pull_requests_by_claude_code` for each Anthropic Claude Code core metric and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports pull requests by Claude Code as a measure on each Anthropic Claude Code core metric; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-customer-type-8b9120adefd7" title="Customer Type" icon="sliders" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.customer_type`

            **Customer Type.** Customer account type (API or subscription). It distinguishes the provider-defined customer type state or classification for the Claude Code analytic.

            * **Enables:** Segment Claude Code analytics record entries in Claude Code Analytics by customer type in `claude_code_analytics.customer_type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports customer type as a label from its own taxonomy on each Claude Code analytics record; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-date-46be5b55484d" title="Date" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.date`

            **Date.** UTC day for this analytics record. It anchors the Claude Code analytics record on the provider's reported timeline.

            * **Enables:** Order Claude Code Analytics by date in `claude_code_analytics.date` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports date as a timestamp on each Claude Code analytics record; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. The schema designates this field as the event timestamp.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-ad13d8fff7fe" title="Model Breakdown" icon="sack-dollar" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown`

            **Model Breakdown.** Per-model token usage and estimated cost for this actor-day. It preserves the nested context needed to interpret the parent Claude Code analytics record.

            * **Enables:** Measure each returned Anthropic claude code model breakdown in `claude_code_analytics.model_breakdown` at its element and time grain; compare values only when Claude Admin reports the same unit and aggregation.
            * **Interpretation:** Claude Admin returns model breakdown as an array of Anthropic claude code model breakdown entries on each Claude Code analytics record; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-est-52b362b0d4ca" title="Estimated Cost" icon="sack-dollar" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.estimated_cost`

            **Estimated Cost.** The structured estimated cost details attached to each Anthropic claude code model breakdown in Claude Code Analytics. It preserves the nested context needed to interpret the parent Claude Code analytics record.

            * **Enables:** Attribute estimated cost in `claude_code_analytics.AnthropicClaudeCodeModelBreakdown.estimated_cost` to the parent Claude Code analytics record; identify parent records where that nested estimated cost object is absent.
            * **Interpretation:** Claude Admin reports estimated cost as a nested object on each Anthropic claude code model breakdown; optional children may be absent from a valid response. Monetary amounts are decimal currency-lowest-unit estimates; USD may be fractional cents, and these values are not invoices or integer-cent totals.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-est-e764d7a3e029" title="Amount" icon="money-bill" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.estimated_cost.amount`

            **Amount.** Estimated cost amount as a decimal in the currency lowest unit; USD values can be fractional cents. This is an estimate, not an invoice amount or integer-cent value. It supplies the amount measure for the Anthropic Claude Code estimated cost at the provider's declared unit and grain.

            * **Enables:** Measure amount through `claude_code_analytics.AnthropicClaudeCodeEstimatedCost.amount` for each Anthropic Claude Code estimated cost and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports amount as a measure on each Anthropic Claude Code estimated cost; compare only records with the same unit and aggregation grain. Monetary amounts are decimal currency-lowest-unit estimates; USD may be fractional cents, and these values are not invoices or integer-cent totals.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-est-de900937db1a" title="Currency" icon="money-bill" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.estimated_cost.currency`

            **Currency.** Currency code (USD). It distinguishes the provider-defined currency state or classification for the Anthropic Claude Code estimated cost.

            * **Enables:** Filter Claude Code Analytics by the exact Claude Admin-defined currency in `claude_code_analytics.AnthropicClaudeCodeEstimatedCost.currency` and preserve unknown values as distinct categories.
            * **Interpretation:** Claude Admin supplies currency from its own taxonomy on each Anthropic Claude Code estimated cost; preserve unknown and newly introduced labels. Monetary amounts are decimal currency-lowest-unit estimates; USD may be fractional cents, and these values are not invoices or integer-cent totals.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-mod-25b4fab92390" title="Model" icon="microchip" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.model`

            **Model.** Claude model identifier. It identifies the related provider object that gives the Anthropic Claude Code model breakdown its parent, owner, or container context.

            * **Enables:** Match repeated Anthropic claude code model breakdown entries on model in `claude_code_analytics.AnthropicClaudeCodeModelBreakdown.model`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports model on each Anthropic claude code model breakdown; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-tok-1cb608a6de0f" title="Tokens" icon="cube" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.tokens`

            **Tokens.** The structured tokens details attached to each Anthropic claude code model breakdown in Claude Code Analytics. It preserves the nested context needed to interpret the parent Claude Code analytics record.

            * **Enables:** Attribute tokens in `claude_code_analytics.AnthropicClaudeCodeModelBreakdown.tokens` to the parent Claude Code analytics record; identify parent records where that nested tokens object is absent.
            * **Interpretation:** Claude Admin reports tokens as a nested object on each Anthropic claude code model breakdown; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-tok-704b73bf822d" title="Cache Creation" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.tokens.cache_creation`

            **Cache Creation.** Cache creation tokens. It supplies the cache creation measure for the Anthropic Claude Code model token at the provider's declared unit and grain.

            * **Enables:** Measure cache creation through `claude_code_analytics.AnthropicClaudeCodeModelTokens.cache_creation` for each Anthropic Claude Code model token and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports cache creation as a measure on each Anthropic Claude Code model token; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-tok-3e4239c1aab2" title="Cache Read" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.tokens.cache_read`

            **Cache Read.** Cache read tokens. It supplies the cache read measure for the Anthropic Claude Code model token at the provider's declared unit and grain.

            * **Enables:** Measure cache read through `claude_code_analytics.AnthropicClaudeCodeModelTokens.cache_read` for each Anthropic Claude Code model token and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports cache read as a measure on each Anthropic Claude Code model token; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-tok-696f7de1c7d3" title="Input" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.tokens.input`

            **Input.** Input tokens. It must be interpreted with the enclosing provider field name, type, or custom schema for the Anthropic Claude Code model token.

            * **Enables:** Interpret `claude_code_analytics.AnthropicClaudeCodeModelTokens.input` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Claude Admin reports input under the enclosing custom or typed field contract on each Anthropic Claude Code model token; compare it only with values from the same provider key and type.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-model-breakdown-tok-517a906307fd" title="Output" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.model_breakdown.tokens.output`

            **Output.** Output tokens. It supplies the output measure for the Anthropic Claude Code model token at the provider's declared unit and grain.

            * **Enables:** Measure output through `claude_code_analytics.AnthropicClaudeCodeModelTokens.output` for each Anthropic Claude Code model token and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports output as a measure on each Anthropic Claude Code model token; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-organization-id-92a555a34b62" title="Organization ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.organization_id`

            **Organization ID.** Organization UUID. It provides the reference needed to connect the Claude Code analytics record to the corresponding provider object.

            * **Enables:** Connect each Claude Code analytics record in Claude Code Analytics to the referenced organization through `claude_code_analytics.organization_id`; flag organization ID values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports organization ID as an identifier in its organization namespace; it is not a universal identity outside Claude Admin.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-subscription-type-6ee1b00205c1" title="Subscription Type" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.subscription_type`

            **Subscription Type.** Subscription tier or plan type returned by the Claude Code Analytics API. It distinguishes the provider-defined subscription type state or classification for the Claude Code analytic.

            * **Enables:** Segment Claude Code analytics record entries in Claude Code Analytics by subscription type in `claude_code_analytics.subscription_type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports subscription type as a label from its own taxonomy on each Claude Code analytics record; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-terminal-type-10d42a859c3c" title="Terminal Type" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.terminal_type`

            **Terminal Type.** Terminal or environment where Claude Code was used. It distinguishes the provider-defined terminal type state or classification for the Claude Code analytic.

            * **Enables:** Segment Claude Code analytics record entries in Claude Code Analytics by terminal type in `claude_code_analytics.terminal_type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports terminal type as a label from its own taxonomy on each Claude Code analytics record; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-claude-code-analytics-tool-actions-c50b4eeacf47" title="Tool Actions" icon="sliders" iconType="sharp-duotone-solid">
            Developer identifier: `claude_code_analytics.tool_actions`

            **Tool Actions.** Tool acceptance and rejection counts by tool type. It preserves the nested context needed to interpret the parent Claude Code analytics record.

            * **Enables:** Attribute tool actions in `claude_code_analytics.tool_actions` to the parent Claude Code analytics record; identify parent records where that nested tool actions object is absent.
            * **Interpretation:** Claude Admin reports tool actions as a nested object on each Claude Code analytics record; optional children may be absent from a valid response.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-claude-cost-report-362b1dac6c83" title="Cost Report" icon="receipt" iconType="sharp-duotone-solid">
        Developer identifier: `cost_report`

        **Cost Report.** Daily cost report from Anthropic Admin API. Amounts are decimals in the currency lowest unit; USD values can be fractional cents.

        * **Enables:** Attribute decimal currency-lowest-unit cost report estimates to their time bucket, workspace, model, and cost type.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/cost_report` operation as a changelog stream using incremental synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. Amounts are decimal currency-lowest-unit report estimates—USD may be fractional cents—and are not invoices or integer-cent totals. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-cost-report-ending-at-539313fd3141" title="Ending At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.ending_at`

            **Ending At.** End of the bucket time window. It anchors the cost report on the provider's reported timeline.

            * **Enables:** Order Cost Report by ending at in `cost_report.ending_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports ending at as a timestamp on each cost report; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-180652f46fff" title="Results" icon="sack-dollar" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results`

            **Results.** Cost line items for this time bucket, one row per cost result element. It preserves the nested context needed to interpret the parent cost report.

            * **Enables:** Measure each returned Anthropic cost result in `cost_report.results` at its element and time grain; compare values only when Claude Admin reports the same unit and aggregation.
            * **Interpretation:** Claude Admin returns results as an array of Anthropic cost result entries on each cost report; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-amount-cb4de9ada11f" title="Amount" icon="money-bill" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.amount`

            **Amount.** Cost report amount as a decimal in the currency lowest unit; USD values can be fractional cents. This is a report amount, not an invoice amount or integer-cent value. It supplies the amount measure for the Anthropic cost result at the provider's declared unit and grain.

            * **Enables:** Measure amount through `cost_report.AnthropicCostResult.amount` for each Anthropic cost result and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports amount as a measure on each Anthropic cost result; compare only records with the same unit and aggregation grain. Monetary amounts are decimal currency-lowest-unit estimates; USD may be fractional cents, and these values are not invoices or integer-cent totals.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-context-window-e76c8c8e3343" title="Context Window" icon="comment" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.context_window`

            **Context Window.** Context window (0-200k or 200k-1M). Absent when not grouping by description or for non-token costs. It supplies the context window boundary, band, or unit needed to interpret the companion measure.

            * **Enables:** Interpret `cost_report.AnthropicCostResult.context_window` with its companion minimum, maximum, interval, or unit before comparing the context window across like-for-like records.
            * **Interpretation:** Claude Admin reports context window as a boundary, band, interval, or unit on each Anthropic cost result; it is meaningful only with its companion measure and provider scale.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-cost-type-deca55e94ee9" title="Cost Type" icon="sack-dollar" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.cost_type`

            **Cost Type.** Cost type (tokens, web\_search, code\_execution, session\_usage). Absent when not grouping by description. It supplies the cost type measure for the Anthropic cost result at the provider's declared unit and grain.

            * **Enables:** Match repeated Anthropic cost result entries on cost type in `cost_report.AnthropicCostResult.cost_type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports cost type as a label from its own taxonomy on each Anthropic cost result; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key. Monetary amounts are decimal currency-lowest-unit estimates; USD may be fractional cents, and these values are not invoices or integer-cent totals.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-currency-c4d64e266bf4" title="Currency" icon="money-bill" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.currency`

            **Currency.** Currency code for the cost amount. Currently always USD. It distinguishes the provider-defined currency state or classification for the Anthropic cost result.

            * **Enables:** Filter Cost Report by the exact Claude Admin-defined currency in `cost_report.AnthropicCostResult.currency` and preserve unknown values as distinct categories.
            * **Interpretation:** Claude Admin supplies currency from its own taxonomy on each Anthropic cost result; preserve unknown and newly introduced labels. Monetary amounts are decimal currency-lowest-unit estimates; USD may be fractional cents, and these values are not invoices or integer-cent totals.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-description-776612556e11" title="Description" icon="sack-dollar" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.description`

            **Description.** Human-readable cost item description. Absent when not grouping by description. It defines the content surface available for this cost report.

            * **Enables:** Match repeated Anthropic cost result entries on description in `cost_report.AnthropicCostResult.description`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin supplies description as text on each Anthropic cost result; referenced files or media are not implied unless explicitly represented. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-inference-geo-bb1a8354ecd3" title="Inference Geo" icon="circle-info" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.inference_geo`

            **Inference Geo.** Inference geography. Absent when not grouping by inference geo. It supplies the provider-reported address or location facet for the Anthropic cost result, not a residency determination.

            * **Enables:** Group Cost Report by inference geo in `cost_report.AnthropicCostResult.inference_geo` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Claude Admin reports inference geo as a user, device, request, or resource location attribute on each Anthropic cost result; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-model-fb2ab4aeb55e" title="Model" icon="comment" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.model`

            **Model.** Model name. Absent when not grouping by description or for non-token costs. It supplies the returned model text needed to understand the Anthropic cost result in context.

            * **Enables:** Match repeated Anthropic cost result entries on model in `cost_report.AnthropicCostResult.model`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports model on each Anthropic cost result; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-service-tier-916c16e3c76d" title="Service Tier" icon="comment" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.service_tier`

            **Service Tier.** Service tier (batch or standard). Absent when not grouping by description or for non-token costs. It supplies the returned service tier text needed to understand the Anthropic cost result in context.

            * **Enables:** Segment Anthropic cost result entries in Cost Report by service tier in `cost_report.AnthropicCostResult.service_tier`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports service tier as a label from its own taxonomy on each Anthropic cost result; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-token-type-77cf14d69d02" title="Token Type" icon="comment" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.token_type`

            **Token Type.** Token type dimension. Absent when not grouping by description or for non-token costs. It supplies the token type measure for the Anthropic cost result at the provider's declared unit and grain.

            * **Enables:** Match repeated Anthropic cost result entries on token type in `cost_report.AnthropicCostResult.token_type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports token type as a label from its own taxonomy on each Anthropic cost result; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-results-workspace-id-866318e9d5ee" title="Workspace ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.results.workspace_id`

            **Workspace ID.** Workspace ID. Absent when not grouping by workspace or for the default workspace. It provides the reference needed to connect the cost report to the corresponding provider object.

            * **Enables:** Match repeated Anthropic cost result entries on workspace ID in `cost_report.AnthropicCostResult.workspace_id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports workspace ID as an identifier in its workspace namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-cost-report-starting-at-f10fa948e17e" title="Starting At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `cost_report.starting_at`

            **Starting At.** Start of the bucket time window. It anchors the cost report on the provider's reported timeline.

            * **Enables:** Match repeated cost report entries on starting at in `cost_report.starting_at`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports starting at as a timestamp on each cost report; timezone and precision follow this API field, and absence is not an inferred event time. The connector explicitly marks this field as a transform deduplication key. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-claude-invites-f2d73a965ce8" title="Invites" icon="robot" iconType="sharp-duotone-solid">
        Developer identifier: `invites`

        **Invites.** Organization invites from Anthropic Admin API.

        * **Enables:** Track organization invitations by email, role, status, invitation time, and expiration time.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/invites` operation as a snapshot stream using full synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-invites-email-bbaeb059d072" title="Email" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `invites.email`

            **Email.** Email address the invite was sent to. It supplies the provider-reported address or location facet for the invite, not a residency determination.

            * **Enables:** Attribute each invite to a person or account by the exact email in `invites.email`; identify addresses that do not match the Claude Admin directory.
            * **Interpretation:** Claude Admin reports email as an address on each invite; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-claude-invites-expires-at-30d8990d7cf4" title="Expires At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `invites.expires_at`

            **Expires At.** Timestamp when the invite expires. It anchors the invite on the provider's reported timeline.

            * **Enables:** Order Invites by expires at in `invites.expires_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports expires at as a timestamp on each invite; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-claude-invites-id-7f97a05609b9" title="ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `invites.id`

            **ID.** Unique invite identifier. It provides the reference needed to connect the invite to the corresponding provider object.

            * **Enables:** Match repeated invite entries on ID in `invites.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports ID as an identifier in its invite namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-invites-invited-at-830850012f96" title="Invited At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `invites.invited_at`

            **Invited At.** Timestamp when the invite was sent. It anchors the invite on the provider's reported timeline.

            * **Enables:** Order Invites by invited at in `invites.invited_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports invited at as a timestamp on each invite; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>

          <Accordion id="provider-permission-field-claude-invites-role-dd73a4929345" title="Role" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `invites.role`

            **Role.** Role assigned to the invite (e.g. admin, developer, user). It distinguishes the provider-defined role state or classification for the invite.

            * **Enables:** Segment invite entries in Invites by role in `invites.role`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports role as a label from its own taxonomy on each invite; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-invites-status-e88ef98f6787" title="Status" icon="sliders" iconType="sharp-duotone-solid">
            Developer identifier: `invites.status`

            **Status.** Invite status (e.g. 'pending', 'accepted', 'expired'). It distinguishes the provider-defined status state or classification for the invite.

            * **Enables:** Segment invite entries in Invites by status in `invites.status`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports status as a label from its own taxonomy on each invite; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-invites-type-1e602b312ced" title="Type" icon="sliders" iconType="sharp-duotone-solid">
            Developer identifier: `invites.type`

            **Type.** Object type (always 'invite'). It distinguishes the provider-defined type state or classification for the invite.

            * **Enables:** Segment invite entries in Invites by type in `invites.type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports type as a label from its own taxonomy on each invite; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-claude-usage-report-58a21b14499f" title="Usage Report" icon="chart-line" iconType="sharp-duotone-solid">
        Developer identifier: `usage_report`

        **Usage Report.** Daily usage report (message token counts) from Anthropic Admin API. Default group\_by\[] is workspace\_id, api\_key\_id, and model. Omits speed because that dimension requires the Anthropic-beta fast-mode-2026-02-01 header.

        * **Enables:** Measure provider-reported token counts by day, workspace, API key, and model using the configured grouping dimensions.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/usage_report/messages` operation as a changelog stream using incremental synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-usage-report-ending-at-1d682c4794f6" title="Ending At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.ending_at`

            **Ending At.** End of the bucket time window. It anchors the usage report on the provider's reported timeline.

            * **Enables:** Order Usage Report by ending at in `usage_report.ending_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports ending at as a timestamp on each usage report; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-bfa500182fb0" title="Results" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results`

            **Results.** Usage line items for this time bucket, one row per workspace, API key, and model combination. It preserves the nested context needed to interpret the parent usage report.

            * **Enables:** Measure each returned Anthropic usage result in `usage_report.results` at its element and time grain; compare values only when Claude Admin reports the same unit and aggregation.
            * **Interpretation:** Claude Admin returns results as an array of Anthropic usage result entries on each usage report; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-api-key-id-b2d37557e1dc" title="API Key ID" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.api_key_id`

            **API Key ID.** API key ID. Absent for Anthropic Console usage. It provides the reference needed to connect the usage report to the corresponding provider object.

            * **Enables:** Match repeated Anthropic usage result entries on API key ID in `usage_report.AnthropicUsageResult.api_key_id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports API key ID as an identifier in its API namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-cache-creation-1013d2ed383e" title="Cache Creation" icon="cube" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.cache_creation`

            **Cache Creation.** The structured cache creation details attached to each Anthropic usage result in Usage Report. It preserves the nested context needed to interpret the parent usage report.

            * **Enables:** Attribute cache creation in `usage_report.AnthropicUsageResult.cache_creation` to the parent usage report; identify parent records where that nested cache creation object is absent.
            * **Interpretation:** Claude Admin reports cache creation as a nested object on each Anthropic usage result; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-cache-creation-ephem-add68856ac64" title="Ephemeral 1h Input Tokens" icon="route" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.cache_creation.ephemeral_1h_input_tokens`

            **Ephemeral 1h Input Tokens.** Input tokens used to create the 1 hour cache entry. It supplies the ephemeral 1h input tokens measure for the Anthropic usage cache creation at the provider's declared unit and grain.

            * **Enables:** Measure ephemeral 1h input tokens through `usage_report.AnthropicUsageCacheCreation.ephemeral_1h_input_tokens` for each Anthropic usage cache creation and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports ephemeral 1h input tokens as a measure on each Anthropic usage cache creation; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-cache-creation-ephem-61a5366bd1b9" title="Ephemeral 5m Input Tokens" icon="route" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.cache_creation.ephemeral_5m_input_tokens`

            **Ephemeral 5m Input Tokens.** Input tokens used to create the 5 minute cache entry. It supplies the ephemeral 5m input tokens measure for the Anthropic usage cache creation at the provider's declared unit and grain.

            * **Enables:** Measure ephemeral 5m input tokens through `usage_report.AnthropicUsageCacheCreation.ephemeral_5m_input_tokens` for each Anthropic usage cache creation and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports ephemeral 5m input tokens as a measure on each Anthropic usage cache creation; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-cache-read-input-tok-7a30d9d5ad5e" title="Cache Read Input Tokens" icon="route" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.cache_read_input_tokens`

            **Cache Read Input Tokens.** Input tokens read from the cache. It supplies the cache read input tokens measure for the Anthropic usage result at the provider's declared unit and grain.

            * **Enables:** Measure cache read input tokens through `usage_report.AnthropicUsageResult.cache_read_input_tokens` for each Anthropic usage result and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports cache read input tokens as a measure on each Anthropic usage result; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-model-39c5ded2c0d1" title="Model" icon="microchip" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.model`

            **Model.** Model used. It distinguishes the provider-defined model state or classification for the Anthropic usage result.

            * **Enables:** Match repeated Anthropic usage result entries on model in `usage_report.AnthropicUsageResult.model`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports model on each Anthropic usage result; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-output-tokens-3550f8125513" title="Output Tokens" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.output_tokens`

            **Output Tokens.** Output tokens generated. It supplies the output tokens measure for the Anthropic usage result at the provider's declared unit and grain.

            * **Enables:** Measure output tokens through `usage_report.AnthropicUsageResult.output_tokens` for each Anthropic usage result and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports output tokens as a measure on each Anthropic usage result; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-server-tool-use-0b28339f72f5" title="Server Tool Use" icon="server" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.server_tool_use`

            **Server Tool Use.** The structured server tool use details attached to each Anthropic usage result in Usage Report. It preserves the nested context needed to interpret the parent usage report.

            * **Enables:** Attribute server tool use in `usage_report.AnthropicUsageResult.server_tool_use` to the parent usage report; identify parent records where that nested server tool use object is absent.
            * **Interpretation:** Claude Admin reports server tool use as a nested object on each Anthropic usage result; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-server-tool-use-web--0a6c9dc135a3" title="Web Search Requests" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.server_tool_use.web_search_requests`

            **Web Search Requests.** Number of web search requests made. It supplies the web search requests measure for the Anthropic usage server tool use at the provider's declared unit and grain.

            * **Enables:** Measure web search requests through `usage_report.AnthropicUsageServerToolUse.web_search_requests` for each Anthropic usage server tool use and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports web search requests as a measure on each Anthropic usage server tool use; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-uncached-input-token-1c4302227097" title="Uncached Input Tokens" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.uncached_input_tokens`

            **Uncached Input Tokens.** Uncached input tokens processed. It supplies the uncached input tokens measure for the Anthropic usage result at the provider's declared unit and grain.

            * **Enables:** Measure uncached input tokens through `usage_report.AnthropicUsageResult.uncached_input_tokens` for each Anthropic usage result and compare only values with the same unit and record grain.
            * **Interpretation:** Claude Admin reports uncached input tokens as a measure on each Anthropic usage result; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-results-workspace-id-4a72f8fac9a6" title="Workspace ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.results.workspace_id`

            **Workspace ID.** Workspace ID. Absent for the default workspace. It provides the reference needed to connect the usage report to the corresponding provider object.

            * **Enables:** Match repeated Anthropic usage result entries on workspace ID in `usage_report.AnthropicUsageResult.workspace_id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports workspace ID as an identifier in its workspace namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-usage-report-starting-at-34f444c7f434" title="Starting At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `usage_report.starting_at`

            **Starting At.** Start of the bucket time window. It anchors the usage report on the provider's reported timeline.

            * **Enables:** Match repeated usage report entries on starting at in `usage_report.starting_at`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports starting at as a timestamp on each usage report; timezone and precision follow this API field, and absence is not an inferred event time. The connector explicitly marks this field as a transform deduplication key. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-claude-users-5da4a061c7e3" title="Users" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `users`

        **Users.** Organization users from Anthropic Admin API.

        * **Enables:** Reconcile Anthropic organization users to email, name, role, lifecycle state, and organization membership dates.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/users` operation as a snapshot stream using full synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-users-added-at-64de6643db34" title="Added At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `users.added_at`

            **Added At.** Timestamp when the user was added to the organization. It anchors the user on the provider's reported timeline.

            * **Enables:** Order Users by added at in `users.added_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports added at as a timestamp on each user; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>

          <Accordion id="provider-permission-field-claude-users-email-d7f2c7434a05" title="Email" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.email`

            **Email.** User's email address. It supplies the provider-reported address or location facet for the user, not a residency determination.

            * **Enables:** Attribute each user to a person or account by the exact email in `users.email`; identify addresses that do not match the Claude Admin directory.
            * **Interpretation:** Claude Admin reports email as an address on each user; aliases, casing, and unverified addresses can prevent a one-to-one person match. A connector directive maps this field to a person's email identity.
          </Accordion>

          <Accordion id="provider-permission-field-claude-users-id-b5b95fb91f2c" title="ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.id`

            **ID.** Unique user identifier. It provides the reference needed to connect the user to the corresponding provider object.

            * **Enables:** Match repeated user entries on ID in `users.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports ID as an identifier in its user namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key. A connector directive maps this field to account identity.
          </Accordion>

          <Accordion id="provider-permission-field-claude-users-name-54b951187172" title="Name" icon="comment" iconType="sharp-duotone-solid">
            Developer identifier: `users.name`

            **Name.** User's full name. It gives the user a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each user with name from `users.name`; distinguish records that share that display name but have different Claude Admin identifiers.
            * **Interpretation:** Claude Admin reports name as display text for each user; names are mutable and are not stable identities. A connector directive maps this field to a person's display name.
          </Accordion>

          <Accordion id="provider-permission-field-claude-users-role-6c21fc185bb4" title="Role" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.role`

            **Role.** User's role in the organization (e.g. admin, developer, user). It distinguishes the provider-defined role state or classification for the user.

            * **Enables:** Segment user entries in Users by role in `users.role`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports role as a label from its own taxonomy on each user; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-users-type-9cc64496f6f3" title="Type" icon="user-tie" iconType="sharp-duotone-solid">
            Developer identifier: `users.type`

            **Type.** Object type (always 'user'). It distinguishes the provider-defined type state or classification for the user.

            * **Enables:** Segment user entries in Users by type in `users.type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports type as a label from its own taxonomy on each user; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-claude-workspace-members-c37b7b807463" title="Workspace Members" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `workspace_members`

        **Workspace Members.** Members of each workspace from Anthropic Admin API.

        * **Enables:** Match each workspace membership to its Anthropic user and provider-reported workspace role.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/workspaces/{id}/members` operation as a snapshot stream using full synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-workspace-members-type-62b38c085d36" title="Type" icon="sitemap" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_members.type`

            **Type.** Object type (always 'workspace\_member'). It distinguishes the provider-defined type state or classification for the workspace member.

            * **Enables:** Segment workspace member entries in Workspace Members by type in `workspace_members.type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports type as a label from its own taxonomy on each workspace member; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspace-members-user-id-565956c7d1a8" title="User ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_members.user_id`

            **User ID.** Unique identifier of the user. It provides the reference needed to connect the workspace member to the corresponding provider object.

            * **Enables:** Match repeated workspace member entries on user ID in `workspace_members.user_id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports user ID as an identifier in its user namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key. A connector directive maps this field to account identity.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspace-members-workspace-id-8ca5229f9069" title="Workspace ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_members.workspace_id`

            **Workspace ID.** Unique identifier of the workspace. It provides the reference needed to connect the workspace member to the corresponding provider object.

            * **Enables:** Connect each workspace member in Workspace Members to the referenced workspace through `workspace_members.workspace_id`; flag workspace ID values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports workspace ID as an identifier in its workspace namespace; it is not a universal identity outside Claude Admin.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspace-members-workspace-role-b097c18bad3e" title="Workspace Role" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_members.workspace_role`

            **Workspace Role.** The role assigned to the user within this workspace. It distinguishes the provider-defined workspace role state or classification for the workspace member.

            * **Enables:** Segment workspace member entries in Workspace Members by workspace role in `workspace_members.workspace_role`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports workspace role as a label from its own taxonomy on each workspace member; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-claude-workspaces-0c135c8461da" title="Workspaces" icon="sitemap" iconType="sharp-duotone-solid">
        Developer identifier: `workspaces`

        **Workspaces.** Organization workspaces from Anthropic Admin API.

        * **Enables:** Inventory Anthropic workspaces and compare their names, archive state, display color, and lifecycle timestamps.
        * **Scope:** Reads the records selected by Claude Admin's `/v1/organizations/workspaces` operation as a snapshot stream using full synchronization. Visibility is limited to the Anthropic organization and Admin API privileges granted to the credential. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-claude-workspaces-archived-at-1a86c3fc7e75" title="Archived At" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.archived_at`

            **Archived At.** Timestamp when the workspace was archived, if applicable. It anchors the workspace on the provider's reported timeline.

            * **Enables:** Order Workspaces by archived at in `workspaces.archived_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports archived at as a timestamp on each workspace; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-compartment-id-9436df9d99a7" title="Compartment ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.compartment_id`

            **Compartment ID.** Workspace compartment ID used for CMEK key policy scoping. It provides the reference needed to connect the workspace to the corresponding provider object.

            * **Enables:** Connect each workspace in Workspaces to the referenced compartment through `workspaces.compartment_id`; flag compartment ID values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports compartment ID as an identifier in its compartment namespace; it is not a universal identity outside Claude Admin.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-created-at-dc3cac1a4a72" title="Created At" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.created_at`

            **Created At.** Timestamp when the workspace was created. It anchors the workspace on the provider's reported timeline.

            * **Enables:** Order Workspaces by created at in `workspaces.created_at` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Claude Admin reports created at as a timestamp on each workspace; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-data-residency-46c603ebbbf2" title="Data Residency" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.data_residency`

            **Data Residency.** Data residency configuration for the workspace. It preserves the nested context needed to interpret the parent workspace.

            * **Enables:** Attribute data residency in `workspaces.data_residency` to the parent workspace; identify parent records where that nested data residency object is absent.
            * **Interpretation:** Claude Admin reports data residency as a nested object on each workspace; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-display-color-d668a9b74669" title="Display Color" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.display_color`

            **Display Color.** Display color for the workspace (hex code). It distinguishes the provider-defined display color state or classification for the workspace.

            * **Enables:** Filter Workspaces by the exact Claude Admin-defined display color in `workspaces.display_color` and preserve unknown values as distinct categories.
            * **Interpretation:** Claude Admin supplies display color from its own taxonomy on each workspace; preserve unknown and newly introduced labels.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-external-key-id-1939079074d8" title="External Key ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.external_key_id`

            **External Key ID.** CMEK external key ID attached to this workspace (write-once). It provides the reference needed to connect the workspace to the corresponding provider object.

            * **Enables:** Connect each workspace in Workspaces to the referenced external through `workspaces.external_key_id`; flag external key ID values that do not resolve in that provider namespace.
            * **Interpretation:** Claude Admin reports external key ID as an identifier in its external namespace; it is not a universal identity outside Claude Admin.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-id-799dcd2ae675" title="ID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.id`

            **ID.** Unique workspace identifier. It provides the reference needed to connect the workspace to the corresponding provider object.

            * **Enables:** Match repeated workspace entries on ID in `workspaces.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Claude Admin reports ID as an identifier in its workspace namespace; it is not a universal identity outside Claude Admin. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-name-deea756ef539" title="Name" icon="comment" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.name`

            **Name.** Workspace name. It gives the workspace a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each workspace with name from `workspaces.name`; distinguish records that share that display name but have different Claude Admin identifiers.
            * **Interpretation:** Claude Admin reports name as display text for each workspace; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-tags-75c24391f661" title="Tags" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.tags`

            **Tags.** User-defined string key-value tags (keys must not begin with Anthropic). It preserves the nested context needed to interpret the parent workspace.

            * **Enables:** Attribute tags in `workspaces.tags` to the parent workspace; identify parent records where that nested tags object is absent.
            * **Interpretation:** Claude Admin reports tags as a nested object on each workspace; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-claude-workspaces-type-3aa8e8d01569" title="Type" icon="sitemap" iconType="sharp-duotone-solid">
            Developer identifier: `workspaces.type`

            **Type.** Object type (always 'workspace'). It distinguishes the provider-defined type state or classification for the workspace.

            * **Enables:** Segment workspace entries in Workspaces by type in `workspaces.type`; compare counts only within the same Claude Admin taxonomy.
            * **Interpretation:** Claude Admin reports type as a label from its own taxonomy on each workspace; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>
    </AccordionGroup>
  </Tab>

  <Tab title="Troubleshooting">
    If validation fails, confirm that the credential is active, the configured account can read the required resources, and every connection field matches the Provider environment.
    Parable never returns stored secret values; replace a secret in the connection form when it has expired or been revoked.
  </Tab>
</Tabs>