Getting Started with the Claude Apps Gateway on Google Cloud

The Claude apps gateway, which enables enterprise-level integrated management of Anthropic's agentic coding tool Claude Code beyond individual developer use, has been unveiled. This service is a self-hosted service that acts as an intermediary between the local Claude Code client and Google Cloud (GCP).

By adopting the gateway, organizations can centrally control the following enterprise management features.

• Identity Management (Identity): Integrates with OIDC-based identity providers (IdPs) such as Google Workspace to securely manage sessions without storing sensitive API keys on developer laptops.
• Policy and Permission Control (Policy): Configure RBAC (role-based access control) via a gateway.yaml file and enforce model usage permissions server-side.
• Telemetry and Monitoring (Telemetry): Sends per-user usage, along with verified email and group information, via OTLP/HTTP to Cloud Monitoring, Grafana, and similar tools.
• Cost Management (Spend limits): Prevents unexpected costs by setting daily/weekly/monthly token usage limits per user or group.
• Routing (Routing): Routes traffic using Cloud Run service identities, with support for failover in the event of an outage.

This architecture runs as a stateless container based on Cloud Run, and manages login state and spend ledgers through Cloud SQL, ensuring both security and scalability.