Get information about the current Anthropic organization.

Returns the organization's ID, name, and type. Useful as a smoke test that the Admin API key is configured correctly.

List organization members.

Returns up to limit members per call. For pagination, pass the last user_id from a previous response as after_id. Member objects include id, email, name, role (user / developer / billing / admin / claude_code_user), and timestamps.

List pending and historical organization invites.

Invites expire after 21 days. Each invite includes the invited email, the role offered, status (pending / accepted / expired / deleted), and timestamps.

List workspaces in the organization.

Workspaces partition API keys, members, and billing. Every org has a Default Workspace that doesn't appear in this list. Max 100 active workspaces per org; archived workspaces don't count against the limit.

Get a single workspace by ID.

Returns name, display_color, created_at, archived_at (if archived), and type. Useful for resolving a workspace ID into its display name before referring to it in subsequent operations.

List members of a specific workspace.

Each entry includes the user_id and their workspace_role (workspace_admin / workspace_developer / workspace_user / workspace_billing). Org admins automatically have workspace_admin on every workspace and may not appear here explicitly.

List API keys in the organization.

Returns metadata only — the actual key values are never returned by the Admin API and cannot be retrieved after creation. Each entry includes id, name, status, workspace_id, partial_key_hint (last 4 chars), and created_by_user_id.

Get detailed token usage from the Messages API.

Returns input/output/cache token counts and request counts, bucketed by the requested time window and grouped by the requested dimensions. Use this for questions like 'how many Opus tokens did workspace X burn yesterday' or 'show daily request volume for the last week grouped by model'. Data appears within ~5 minutes of API calls.

Get dollar-amount cost data for the organization.

Returns costs in US dollars (already converted from the API's native cents representation by the client wrapper) broken down by operation description (input tokens, output tokens, cache writes /reads, code execution, web search, etc.) and optionally by workspace. Use for questions like 'what did we spend last week' or 'which workspace cost the most this month'. Priority Tier costs are NOT included here — track those via usage.

Get usage data specific to Claude Code workspaces.

Returns daily aggregated user activity, tool usage statistics, and token consumption for Claude Code sessions. This is separate from the general usage report and only covers Claude Code workspace activity. Bedrock-routed Claude Code is not included.

Invite a new member to the organization.

Sends an invitation email. The invitation expires in 21 days and cannot be modified once created — only cancelled and re-issued. Cannot grant the 'admin' role; admins must be promoted via Console.

Cancel a pending invite.

Once deleted, the invite link will no longer work. The invitee will not be notified. Re-inviting requires a new invite call.

Change an existing member's organization role.

Cannot promote to or demote from 'admin' — those changes happen only in the Console. Changing roles takes effect immediately and may impact what API keys and workspaces the user can access.

Remove a member from the organization.

The user loses access to all workspaces immediately. API keys created by them remain active (keys are org-scoped, not user-scoped). Cannot remove members with the 'admin' role — that must be done through the Console.

Create a new workspace.

Workspaces partition API keys, members, and limits. Max 100 active workspaces per organization. Creating a workspace does not add any members or keys to it automatically.

Rename or recolor a workspace.

Cosmetic only — does not affect billing, access, or API keys. At least one of name or display_color must be provided.

Archive a workspace.

Archived workspaces are hidden from default listings but their data (usage history, costs) is preserved. API keys in the workspace become inactive. Per Anthropic docs this state is reversible through the Console.

Grant a user access to a workspace.

Org admins and org billing members get automatic workspace roles and don't need to be added explicitly. workspace_billing is inherited from org-level billing role and cannot be assigned here.

Change a member's role within a workspace.

Effective immediately. Does not affect their org-level role or access to other workspaces.

Remove a member from a workspace.

They lose access to API keys scoped to this workspace. Their org-level role and access to other workspaces are unaffected. Org admins cannot be removed from workspaces — their role is automatic and inherited.

Rename or deactivate an API key.

Renaming is cosmetic and does not require confirmation in itself, but the tool still respects the global confirm flag. Setting status='inactive' immediately stops the key from authenticating new requests — any running workloads using it will start failing. This server cannot reactivate keys; that must be done in the Console.