Summary
On June 29, 2026 Anthropic introduced the Claude apps gateway, a self-hosted control plane that gives enterprises corporate SSO, centrally enforced policy, role-based access, per-user cost attribution, and daily, weekly, and monthly spend caps for Claude Code across Amazon Bedrock and Google Cloud. It runs as a single stateless Linux container backed by PostgreSQL and keeps inference and usage data inside the customer's network.
What changed
Anthropic shipped the Claude apps gateway: an OIDC relying party (Google Workspace, Microsoft Entra ID, Okta) issuing short-lived sessions, centrally distributed managed settings, OTLP usage reporting to a customer-run collector, credential-holding request routing to Claude API, Bedrock, or Google Cloud with failover, and org, group, and user spend limits.
Why it matters
It removes a core blocker to enterprise Claude Code adoption, identity, policy, cost tracking, and spend control, without sending inference or usage data to Anthropic, making self-hosted governance a standard expectation for agentic coding at scale.
Evidence excerpt
The gateway is a self-hosted control plane that gives you corporate SSO login, centrally enforced policy, role-based access, and per-user cost attribution for Claude Code, run as a single stateless container on Linux backed by a PostgreSQL database.