Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Anthropic has introduced new Compliance API endpoints to provide security teams with better visibility into Claude Code's activity. Claude Code has the ability to read files, run shell commands, and invoke tools using a developer's machine credentials. The new API endpoints offer a clearer view of this activity, but also reveal that activity logs are insufficient to determine the legitimacy of an agent's access. This highlights a larger issue with monitoring and controlling AI-powered agents like Claude Code. The introduction of the Compliance API is a step towards addressing this problem. Claude Code's capabilities have extended beyond browser-based interactions to more integrated system activities.