Bringing Claude Enterprise Activity Into Lasso With Claude's Compliance API

Today we're launching Lasso's integration with Claude's Compliance API, and it is generally available starting now. Claude Enterprise has become one of the places where real work happens inside the organizations we protect. Employees connect it to internal systems through MCP servers and extend it with skills that automate parts of their daily work. Security teams have been asking us to bring that activity into the same place where they already secure the rest of their AI. This integration does that.

‍

With the integration in place, Lasso pulls activity from Claude Enterprise and Claude Platform organizations into the Lasso AI Security Platform. Every Claude user appears in the inventory next to the agents and AI applications Lasso already discovers and assesses, and each one comes with a record of the MCP servers and skills they use. Lasso classifies that activity against the customer's own policies. For Claude Enterprise it goes a step further and inspects conversation content for sensitive data and secrets.

‍

Why this Matters Now

‍

Latio's 2026 AI Security Market Report names Claude's Compliance API as one of the new integration points that give security teams more ways to see agent activity. The same report identifies monitoring MCP servers and skills as a defining outcome for AI security programs this year, because every server and skill a user connects extends what Claude can reach.

‍

That matched what we were hearing from customers. They wanted to know which MCP servers and skills were in use across their organization. They also wanted a clear view of how employees were adopting Claude, so security and leadership could support that adoption with confidence. Those two needs shaped how we built the integration.

‍

How it Works

‍

Setup starts in the customer's Claude organization, where an admin generates a Compliance API key and adds it to Lasso. Once connected, Lasso pulls from the Compliance API's activities endpoint and for Claude Enterprise organizations that provide a Compliance Access Key minted by the primary owner, Lasso also retrieves the message content for each chat, and that content powers conversation-level inspection.

‍

Through the integration, Lasso receives user activity and conversation content, including org-level events, while Claude Platform exposes activity logs. 

‍

What Security Teams Get

‍

AI Discovery & AI-BOM

‍

The first thing a security team sees after connecting is its Claude user base appearing in Lasso's inventory. Each user is discovered from the activity feed and represented as an agent. The team can open any user into a timeline of their Claude activity, showing which MCP servers they connected and which skills they invoked. That turns the question of what Claude is reaching across the organization into an answer the team can see at the level of each user.

‍

Content Moderation & Policy Violation Classification  

‍

Policy makes that visibility actionable. Lasso classifies every interaction against policies the customer defines, and when activity falls outside what the environment permits, the team knows about it. In Claude Enterprise organizations, inspection extends into message content, where Lasso looks for sensitive data, secrets and policy violations. Violations flow to the team's SIEM or SOAR platform and enter the triage workflow their analysts already use.

‍

AI Activity Log & Audit Trail 

‍

Everything Lasso ingests also builds a durable audit trail, with org-level events stored alongside user activity. When a SOC 2, ISO or GDPR audit comes around, the evidence for Claude usage sits in the same place as the evidence for the rest of the AI environment.

‍

One Inventory for Everything AI 

‍

Claude is rarely the only AI platform in an enterprise. The organizations running Claude Enterprise are also building agents on cloud AI services and shipping internal AI applications through CI/CD, and Lasso already discovers and assesses those assets. Bringing Claude activity into that inventory means security teams review all of it in one console, against one set of policies. That is what we set out to build, and we're proud to make it available today.

‍

Get Started 

‍

The integration is generally available now. To learn more, head to our Claude Enterprise integration page or book a demo with our technical team.