Claude

The capabilities and sub-capabilities listed for this connector are available with any active Cortex XSIAM, Cortex Cloud Posture Security, Cortex Cloud Runtime Security, or Cortex Data Security license.

Scan sensitive content and monitor data security risks for Anthropic Claude AI.

This connector includes the following capabilities and sub-capabilities (if applicable):

* **Data Security:** Scan and protect data across the Claude service
* **Identity Posture:** Maintain visibility and control over Claude identities, including users, groups, roles, and granular permissions.

To configure this connector, follow these steps:

### Prerequisite

Sign in to your Anthropic Claude organization as a **Primary Owner** and generate a Compliance API key.

#### 1. Enable Compliance API access

1. Sign in to the Claude.ai console using an account with **Primary Owner** privileges.
2. Click **Settings** in the left navigation menu, and select **Organization Settings**.
3. In **Organization Settings**, select the **API** tab.
4. Verify that the **Compliance API** option is enabled.

#### 2. Generate a Compliance API key and assign scopes

1. On the **API** tab, locate the **Keys** section and click **+ Create Key**.
2. Enter a name for the API key.
3. Under **Scopes**, select the required scopes:
 * `read:compliance_activities` — Read compliance activity logs and audit trails.
 * `read:compliance_org_data` — Read organization-level workspace metadata and asset definitions.
 * `read:compliance_user_data` — Read user identities, group memberships, and role assignments.
 * `delete:compliance_user_data` — Allow programmatic purging or remediation of non-compliant sensitive data.
4. Click **Create**.
5. Copy the generated API key and store it securely.

 **Note:** You cannot retrieve the API key after you close the dialog.

### How to configure the Claude connector

#### Task 1. Select services

1. In Cortex Cloud, navigate to **Settings** → **Data Sources & Integrations**.
2. Click **+ Add new**.
3. On the **Add Data Source** page, search for **Claude**, hover over it, and click **Add**.

In the Configuration Wizard, configure the following settings.

#### Capabilities tab

1. Enter a unique name for the new connector instance.
2. Under **Select Capabilities**, select the capabilities that you want to enable.

 * **Data Security** to enable scanning and inventory collection across the selected repositories.
 * **Identity Posture** to maintain visibility and control over SaaS-based identities, including users, groups, roles, and granular permissions.

 **Note:** **Identity Posture** is automatically enabled when **Data Security** is selected and cannot be disabled during setup. Identity Posture is required for user and group validation and cross-tenant exposure analysis.
3. Click **Next**.

#### Connection tab

1. On the **Connection** tab, select your preferred authentication method:
 * **Recommended:** Paste your Anthropic Claude organization API key into the API key field.
 * **Advanced:** Select this option if your enterprise security policy requires separate authentication tokens for **Data Security** and **Identity Posture**.
2. Click **Test** to validate the connection.
3. If the connection is successful, the wizard displays a green **Verified** status indicator.
4. Click **Save** to save the connection settings.
5. Click **Next**.

#### Summary tab

1. On the **Summary** tab, verify that each selected capability displays a **Connected** status.
2. If validation succeeds, the wizard displays a **Verification Success** message.
3. Click **Create Instance** to create the Claude connector.

#### Task 2. Post verification

After configuration is complete, verify asset discovery and data security findings.

#### 1. Verify discovered assets

1. Go to **Inventory** > **All Assets**.
2. Filter the asset list by setting **Provider** to **Anthropic**.
3. Verify that Cortex discovers the following supported asset types:
 * **Claude Personal Workspace:** Individual user conversations, chat history, and associated metadata.
 * **Claude Project:** Shared workspaces, custom prompt instructions, and attached knowledge repositories.

#### 2. Verify policy findings

1. Select an asset to open the details panel.
2. Click the **Overview** tab to review general properties and total finding counts.
3. Click **Findings** or navigate to the **Compliance** tabs to review detected security findings, such as:
 * Personally identifiable information (PII)
 * API keys or secrets
 * Credit card numbers
 * Unauthorized data sharing