Anthropic Admin Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Anthropic Admin Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- mcp-name: io.github.Trushtonfactory/anthropic-admin-mcp -->
The MCP server Anthropic hasn't shipped yet — full coverage of the Anthropic Admin API and the Usage & Cost API, properly typed, properly tooled, and properly safety-scoped.
Manage your Anthropic organization from any MCP-compatible client (Claude Desktop, Cursor, Windsurf, ChatGPT, etc.) using natural language:
10 read tools, 10 write tools, audit logging, optional workspace scoping, read-only mode, role-escalation guard.
Anthropic ships an excellent Admin API with ~22 endpoints across organization management, workspaces, members, API keys, usage reporting, and cost reporting. Existing MCP wrappers from third parties cover a tiny slice of it through commercial integration platforms. This server is native, free, open-source, and complete — installable in two minutes against your own Admin key.
pip install git+https://github.com/Trushtonfactory/anthropic-admin-mcp.gitOr for local development:
git clone https://github.com/Trushtonfactory/anthropic-admin-mcp.git
cd anthropic-admin-mcp
python3 -m venv .venv
source .venv/bin/activate
pip install -e .Requires an Organization plan (Team / Pro+ / Enterprise) and the admin role. Individual accounts cannot create Admin keys.
.env.example to .env and fill in your key: cp .env.example .env
# edit .env: ANTHROPIC_ADMIN_KEY=sk-ant-admin-...~/Library/Application Support/Claude/claude_desktop_config.json: {
"mcpServers": {
"anthropic-admin": {
"command": "anthropic-admin-mcp",
"env": {
"ANTHROPIC_ADMIN_KEY": "sk-ant-admin-..."
}
}
}
}See examples/claude_desktop_config.json for more options (read-only mode, workspace scoping).
| Tool | Purpose |
|---|---|
get_org_info | Smoke-test the key; return org id + name |
list_members | List org members and roles |
list_invites | List pending and historical invites |
list_workspaces | List active (and optionally archived) workspaces |
get_workspace | Resolve a workspace ID to its full record |
list_workspace_members | List members of a specific workspace |
list_api_keys | List keys with filters by status / workspace |
get_usage_report | Token usage, grouped by workspace/api_key/model/etc. |
get_cost_report | Dollar costs, grouped by workspace / description |
get_claude_code_usage | Claude Code-specific usage data |
confirm=True| Tool | Action |
|---|---|
invite_member | Send an invite (cannot grant admin) |
delete_invite | Cancel a pending invite |
update_member_role | Change a member's org role (cannot touch admin) |
remove_member | Remove a non-admin member |
create_workspace | Create a new workspace |
update_workspace | Rename or recolor a workspace |
archive_workspace | Archive a workspace |
add_workspace_member | Grant workspace access |
update_workspace_member_role | Change a workspace role |
remove_workspace_member | Revoke workspace access |
update_api_key | Rename or deactivate an API key |
# Full mode (read + write), stdio transport
anthropic-admin-mcp
# Read-only — recommended for first-time setup
anthropic-admin-mcp --read-only
# Streamable HTTP (for remote MCP clients)
anthropic-admin-mcp --http --port 8000
# Restrict writes to specific workspaces (set in .env or shell)
ALLOWED_WORKSPACES=wrkspc_abc,wrkspc_xyz anthropic-admin-mcpSee SECURITY.md for the full threat model and design notes. The short version:
confirm=True, gets audit-logged to JSONL, and respects optional workspace scoping.v0.1.0 — read + write tool surface complete. Pagination, error messages, and audit logging tested manually. No usage limits implemented yet. Pydantic response models are minimal (tools return raw dicts).
Issues and PRs welcome.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.