Skip to main content

Configure authentication to Anthropic

Beta

This feature is in Beta. To use it, a workspace admin must turn on Lakeflow Connect for Anthropic from the Previews page. See Manage Databricks previews.

Learn how to configure Anthropic to enable authentication from Databricks.

Prerequisites​

  • An Anthropic organization with Compliance API access enabled. The Compliance API is available to organizations that have been granted compliance access by Anthropic. See Anthropic: Compliance API access.
  • An Anthropic organization admin who can create a Compliance Access Key. The connector authenticates with a Compliance Access Key (sk-ant-api01-...) created in claude.ai. Admin API keys (sk-ant-admin01-...) are not accepted and result in a 403 response.

Configure Anthropic​

In this step, you create an Anthropic Compliance Access Key. For more information, see Anthropic: Compliance API access.

When you create the key, grant the scopes required by the tables you plan to ingest:

Scope

Grants access to

read:compliance_org_data

Organization directory data: organizations, roles, groups, and settings.

read:compliance_user_data

User data: users and group members.

Scope

Grants access to

read:compliance_org_data

Organization directory data: organizations, roles, groups, and settings.

read:compliance_user_data

User data: users and group members.

Before you begin, make sure the Compliance API is enabled for your organization. For Claude Enterprise organizations, enablement is self-service; Claude Console organizations are enabled on request through your Anthropic account team.

To create the key:

  1. Sign in to claude.ai as the primary owner or an organization owner. A primary owner can create a key that covers every organization under the parent organization; an organization owner can create a key scoped to their own organization only.
  2. Go to Organization settings > API (https://claude.ai/admin-settings/api-access) and find the Keys section.
  3. Click Create key, name the key, and select the read:compliance_org_data and read:compliance_user_data scopes.
  4. Click Create, then copy the generated Compliance Access Key (sk-ant-api01-...). Store it securely — Anthropic shows the full key only once.

Compliance Access Key scopes are immutable after creation; to change scopes, create a new key and delete the old one. Use a Compliance Access Key (sk-ant-api01-...), not an Admin API key (sk-ant-admin01-...) — Admin API keys reach only the Activity Feed and return 403 Forbidden on the other endpoints.

For details on the data available through each scope, see Anthropic: Set up the Compliance API and Compliance organization data.

Next steps​

After configuring Anthropic, create a connection in Databricks. See Create an Anthropic connection.