KeyKeeperAnthropic
How an agent gets a Anthropic key through KeyKeeper, what to choose on console.anthropic.com, and how KeyKeeper verifies it.
| Template id | anthropic (also claude, anthropic-api) |
|---|---|
| Field | anthropic-api-key → ANTHROPIC_API_KEY · secret |
| Key looks like | starts with sk-ant-, shown once when created |
| Created at | console.anthropic.com |
| Verified by KeyKeeper | GET https://api.anthropic.com/v1/models — lists the models this key can use |
| Template checked | 2026-09-15 |
What the agent does
keykeeper providers show anthropic
keykeeper save --provider anthropic --from-clipboard --create --purpose "what this task does"
keykeeper run -c anthropic -- <your command>--provider anthropic fills in the credential id and the field. The environment
variable is the one Anthropic's own tools read, so nothing has to be mapped.
What only you can do
Log in to console.anthropic.com
Choose a single workspace for this project
Choose the shortest practical expiration
Billing or credits must be set up before the key can be used
Copy the key, then approve the save in KeyKeeper's window.
What to choose
Prefer a service-account key in a single dedicated workspace. Multi-workspace keys need an extra workspace header that this template does not guess.
The agent is told the same thing. It opens the page for you and says what to pick; it never logs in, passes 2FA or pays on your behalf.
What KeyKeeper checks
- Before writing: the value must look like a Anthropic key (starts with
sk-ant-, shown once when created). A wrong paste is refused before anything is stored, and the agent is told why — without the value. - After saving: KeyKeeper itself sends
GET https://api.anthropic.com/v1/modelswith the key in thex-api-keyheader (lists the models this key can use). The agent receives accepted, rejected or could not reach — never the value.
Rotation and expiry
Choose 3 hours, 1/7/30 days, a custom date, or never; prefer the shortest practical value. Rotate or revoke at console.anthropic.com.