Skip to main content

OpenAI and Anthropic

CloudFlow supports Admin API connections for OpenAI and Anthropic. These connections let your flows call provider administration APIs to manage API keys, list users and projects, query usage analytics, and perform other organization-level operations.

Early preview

OpenAI and Anthropic Admin API connections are available under early preview. To request access, submit a support request.

Admin API connections are independent of the OpenAI and Anthropic billing integrations available in the Integrations catalog. Billing integrations ingest cost and usage data into DoiT Cloud Intelligence, while Admin API connections give CloudFlow flows the ability to call provider management endpoints directly.

Caution

Admin API connections can perform organization-wide administrative actions, including destructive operations and operations that return plaintext credentials. Review the capabilities granted by each key before creating a connection.

Required permissions​

To create an Admin API connection, your DoiT account must have the CloudFlow Manager permission. To test, rotate, add, or remove credentials on an existing connection, you must also have Owner or Editor access to that connection. See CloudFlow permissions and connection access levels.

Supported providers​

ProviderCredential slotsCapabilities verified at connection time
OpenAIAdmin API key (required)Manage admin API keys, list users, list projects
AnthropicClaude Code / Admin API key and Enterprise Analytics API key (at least one required)Manage API keys, list users, list workspaces, read analytics cost reports

These capabilities are verified when CloudFlow validates the credential. In the CloudFlow builder, action nodes can call the full Admin API operation catalog for the provider when the stored key has sufficient permissions.

Create an Admin API connection​

The connection wizard is a single-step form. The fields differ slightly between OpenAI and Anthropic.

  1. Sign in to the DoiT console, select Automation and operations from the top navigation mega menu, and then select CloudFlow.

  2. From the sidebar, select Connections.

  3. Select the OpenAI or Anthropic tab for the provider you want to connect.

  4. Select Create connection.

  5. In Connection name, enter a unique name for this connection.

  6. Enter the API credentials for the provider:

    • OpenAI: In OpenAI Admin key, enter your OpenAI Admin API key. This field is required.

    • Anthropic: Enter at least one of the following keys:

      • Claude Code / Admin API key: Grants access to organization management operations such as managing API keys, listing users, and listing workspaces.

      • Enterprise Analytics API key: Grants read-only access using the read:analytics scope.

  7. If you entered an Admin API key (required for OpenAI; optional for Anthropic), select the checkbox to confirm that the key has the write permissions required by the CloudFlow operations you plan to use.

  8. Select Create connection. CloudFlow validates the credentials against the provider's API and displays the connection details on success.

  9. Review the connection details. The confirmation view shows:

    • Organization: The name of your provider organization.
    • Organization ID: The provider's organization identifier.
    • Capabilities: The operations available through this connection, based on the permissions granted to the key.

  10. Select Done to return to the connections list.

Manage credentials​

After creating an Admin API connection, you can test, rotate, add, and remove credentials from the connection overview.

  1. Sign in to the DoiT console, select Automation and operations from the top navigation mega menu, and then select CloudFlow.

  2. From the sidebar, select Connections.

  3. Select the OpenAI or Anthropic tab.

  4. Select the connection you want to manage. The connection overview displays a card for each credential slot.

Each credential card shows the credential status, organization name, organization ID, capabilities, and the timestamp when the credential was last validated.

Test a stored credential​

To verify that a stored credential is still valid, select Test stored key on the credential card. CloudFlow calls the provider API and displays the result.

Rotate a credential​

To replace an existing credential with a new key:

  1. On the credential card, select Rotate key.

  2. In the dialog, enter the new key.

  3. If rotating an Admin API key, select the checkbox to confirm that the key has the required write permissions.

  4. Select Rotate key. CloudFlow validates the new credential and replaces the stored key.

Add a credential (Anthropic only)​

Anthropic connections support two independent credential slots. If you created the connection with only one key, you can add the other later.

  1. On the credential card that shows Not configured, select Add key.

  2. In the dialog, enter the API key.

  3. If adding an Admin API key, select the checkbox to confirm that the key has the required write permissions.

  4. Select Add key.

Remove a credential (Anthropic only)​

You can remove a single credential from an Anthropic connection, provided the other credential slot is still configured. An Anthropic connection must always have at least one active credential.

  1. On the credential card, select Remove key.

  2. In the confirmation dialog, select Remove. The credential is removed and any CloudFlow operations that depend on it are no longer available.

Note

If only one credential is configured, the Remove key button is disabled. Add the other credential before removing the existing one.

Use Admin API connections in flows​

After creating an Admin API connection, you can select it in the CloudFlow builder when configuring OpenAI or Anthropic action nodes. For general information on assigning connections to nodes, see Use connections.

See also​

Last updated on