Anthropic just made it a lot easier for enterprises to deploy Claude without losing sleep over runaway costs and credential management. The Claude Apps Gateway, now generally available on Amazon Bedrock and Google Cloud, is a self-hosted control plane that lets organizations centrally manage how their teams interact with Claude Code, Anthropic’s desktop coding and collaboration tool.

What the gateway actually does

The gateway runs as a single stateless Linux container backed by PostgreSQL. It’s lightweight, easy to deploy, and doesn’t require enterprises to rearchitect their existing infrastructure.

Corporate Single Sign-On integration means no more managing individual developer credentials. Role-based access controls let administrators decide who gets to use what. Configurable spending caps, available on daily, weekly, and monthly intervals, ensure that one enthusiastic engineering team doesn’t accidentally burn through the quarter’s AI budget in a week.

On the identity provider front, the gateway supports major OpenID Connect providers including Okta, Microsoft Entra ID, and Google Workspace. The gateway supports up to 10 OIDC providers, covering the vast majority of enterprise identity stacks already in production.

Per-user cost attribution is another notable addition. Instead of getting a single bill for “Claude usage” and trying to figure out which department was responsible, organizations can now track spending at the individual level, with monthly cost attribution tracking available.

Telemetry data can be exported via the OpenTelemetry Protocol, which means companies can pipe usage metrics directly into whatever observability stack they’re already running.

The gateway’s architecture ensures that upstream credentials stay within the client’s own infrastructure rather than being handed off to a third-party service.