Read-only billing access
On AWS the connector runs in your own payer account with a billing-read role, and we never hold your keys. Azure and Google Cloud are read from Costaraq's account with a billing-read role, keyless (federation) wherever the provider allows it. Claude's cost API needs an Admin key and Anthropic has no read-only one, so we ask for a dedicated key you can revoke in the Anthropic Console at any time: we store it encrypted, only the Claude reader can open it, and our code calls only the cost and usage reports. Offboarding removes everything we created.