Skip to main content
Last updated on

Claude Max / Anthropic Enterprise support

Beta

This feature is in Beta. Account admins can manage access to this feature from the account console Previews page. See Manage Databricks previews.

Claude Max / Anthropic Enterprise support lets you use an existing Claude Pro, Max, Enterprise, or Team plan with Unity AI Gateway. Instead of storing an Anthropic API key, Unity AI Gateway relays each caller's own Anthropic OAuth token to Anthropic. Requests are billed against the caller's subscription, while Unity AI Gateway governs access, routing, and usage.

This applies to Claude Code only, because it relies on Claude Code's own Anthropic subscription login.

Requirements​

  • Unity AI Gateway preview enabled for your account. See Manage Databricks previews.
  • CREATE SERVICE on the schema where you create the model provider service, plus USE CATALOG and USE SCHEMA on its catalog and schema.
  • A Claude Pro, Max, Enterprise, or Team subscription to authenticate with when querying.

Create a model provider service​

Register the connection once as a relayed model provider service. When creating a model provider service, select the Claude Max/Enterprise authentication mode. The service stores no credential. It exists to relay each caller's Anthropic OAuth token and to let you govern access with Unity Catalog privileges.

Connect Claude Code​

Step 1: Set your environment variables​

Add the following to your shell configuration file (~/.zshrc or ~/.bashrc):

Bash
export ANTHROPIC_BASE_URL="https://<workspace-url>/ai-gateway/anthropic"
export ANTHROPIC_CUSTOM_HEADERS="X-Databricks-AI-Gateway-Token: <databricks-token>
Databricks-Model-Provider-Service: <catalog>.<schema>.<name>"
  • Replace <workspace-url> with your workspace URL.
  • Replace <databricks-token> with your Databricks token.
  • Replace <catalog>.<schema>.<name> with the fully qualified name of your model provider service.

Step 2: Start Claude Code​

Bash
claude

Step 3: Log in with your Claude subscription​

If you are not already logged in, Claude Code prompts you to authenticate. Select Option 1 - Claude account with subscription and log in with your Anthropic account.

If you run into issues, log out with claude /logout and log in again.

Your Claude Code requests now route through Unity AI Gateway. Requests are billed against your Anthropic subscription, and you get centralized access, routing, and usage governance.

How Claude Max / Anthropic Enterprise support works​

When you configure Claude Code to use Unity AI Gateway, Claude Code continues to authenticate with Anthropic. It sends its Authorization header, and Unity AI Gateway relays the OAuth token to Anthropic on each request.

Because the Authorization header is reserved for Claude subscription credentials, Unity AI Gateway uses a separate header, X-Databricks-AI-Gateway-Token, for its own Databricks credentials. This lets both Anthropic and Databricks authentication mechanisms coexist.

The Databricks-Model-Provider-Service header specifies which model provider service Unity AI Gateway resolves. Because that service is a Unity Catalog securable, you register it once, govern access with Unity Catalog privileges, and query it through Unity AI Gateway. The only difference from a standard model provider service is how each request is authenticated.

The following diagram shows how the two credentials travel together and where each is used. Unity AI Gateway never stores the Anthropic credential. It relays it on every request.

Unity AI Gateway receives an Anthropic OAuth token and a Databricks token from Claude Code, governs the request with Unity Catalog, then relays only the OAuth token to Anthropic

Automate setup with ucode​

ucode (Unity AI Gateway Coding CLI) installs, authenticates, and configures Claude Code for you. It sets the headers, manages OAuth token refresh through a local proxy, and points Claude Code at the gateway, so you skip the manual environment setup above.

Step 1: Install ucode​

Bash
uv tool install git+https://github.com/databricks/ucode

Step 2: Open Claude Code against a model provider service​

Pass the model provider service's fully qualified name (<catalog>.<schema>.<name>) to --provider and the workspace URL to --workspace:

Bash
ucode claude --provider main.default.claude_subscription --workspace https://<workspace>.databricks.com

ucode configures Claude Code to send the Databricks-Model-Provider-Service header and points Claude Code at a local refresh proxy rather than directly at the Unity AI Gateway endpoint. The proxy forwards each request to https://<workspace-url>/ai-gateway/anthropic and adds the X-Databricks-AI-Gateway-Token header. Because the service stores no credential, ucode relays your Anthropic OAuth token instead of an API key.

note

--provider for a Claude Max/Enterprise model provider service is only supported with ucode claude.

Limitations​

  • Requests are billed against the caller's Anthropic subscription and are subject to that subscription's rate limits.
  • A model provider service that uses Claude Max / Anthropic Enterprise support stores no credential, so it can only serve requests that relay a caller's Anthropic OAuth token.

Next steps​

On this page