Claude plugin usage
AI summary
The Claude plugin usage inventory tracks installations and invocations of Claude Code and Cowork plugins by user, capturing marketplace source, session data, and risk assessment. Monitor plugin adoption across your organization and use built-in policies to detect unapproved plugins or suspicious activity.
Per-plugin and user installs and invocations of Claude Code and Cowork plugins, with the plugin identity and the marketplace it comes from
Part of the Claude Enterprise inventory.
In Rencore Governance
Scan settings
| Default scanning interval | Allowed scanning intervals | Data removal during incremental scan |
|---|---|---|
| Daily | Daily, Weekly, Bi-Weekly, Monthly, Never, Initial | Yes |
Properties
28 properties in 8 groups. Open a group to see its properties.
Name and identity 6
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Display Name | String | {{ClaudePluginUsage. | |
| Group Name | String | Display name of the RBACRoles and teamsRoles and teams control what each user can do and see in a Workspace. Each user is assigned a role, which grants permissions, and a team, which grants access to inventory objects.Read more group of the user. | {{ClaudePluginUsage. |
| M365 User Name | String | Display name of the related M365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more user. | {{ClaudePluginUsage. |
| User Email | String | {{ClaudePluginUsage. | |
| User Id | String | The stable analytics user id (user_...); kept even when the user cannot be resolved. | {{ClaudePluginUsage. |
| User Name | String | Display name of the user the plugin usage is attributed to. | {{ClaudePluginUsage. |
Organization and location 2
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Organization | Claude linked organization | The organization the analytics key is scoped to. | {{ClaudePluginUsage. |
| Organization Name | String | Display name of the organization the analytics key is scoped to. | {{ClaudePluginUsage. |
Activity and usage 4
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Claude Code Sessions (30d) | Int32 | Distinct Claude Code sessions in which the plugin was invoked. | {{ClaudePluginUsage. |
| Cowork Sessions (30d) | Int32 | Distinct Cowork sessions in which the plugin was invoked. | {{ClaudePluginUsage. |
| Unidentified Activity | Boolean | The row is not a plugin but the combined third-party bucket: plugin activity for which the reporting client did not provide a name. Plugins of the organization itself can contribute both to their own rows and to this bucket. | {{ClaudePluginUsage. |
| Last scan update | DateTime | Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. | {{ClaudePluginUsage. |
AI and agents 2
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Plugin Id | String | The stable plugin identity where Anthropic provides one, for example serena@claude-plugins-official. Empty for third-party Claude Code plugins, whose identity is redacted at the source, and for Cowork slash commands that carry only a hashed id. | {{ClaudePluginUsage. |
| Plugin | String | Name of the plugin as the reporting client named it. | {{ClaudePluginUsage. |
Dates and scanning 1
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Initially Scanned | DateTime | Shows when this object was initially found in a scan. | {{ClaudePluginUsage. |
Security and compliance 4
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Key | String | Internal. | {{ClaudePluginUsage. |
| Risk Score | Int32 | Stores risk score | {{ClaudePluginUsage. |
| Risk Score Update | DateTime | Stores risk score update | {{ClaudePluginUsage. |
| Risk Score Value | String | Stores risk score value like Low_Low | {{ClaudePluginUsage. |
Settings 1
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| From Official Directory | Boolean | The plugin identity points at the official Anthropic plugin directory. False both for plugins brought in from another marketplace and for plugins whose identity Anthropic does not report at all. | {{ClaudePluginUsage. |
Other properties 8
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Distinct Users (30d) | Int32 | Distinct users behind the row. Rows are grouped per user, so this is 1 and sums to the user count of the plugin in reports. | {{ClaudePluginUsage. |
| Group | Claude group | The RBAC group of the user; empty when the user holds no group or more than one - the Claude Group Members inventory carries the full membership. | {{ClaudePluginUsage. |
| Installs (30d) | Int32 | Whether the user installed the plugin within the window (0 or 1 per row); summed per plugin it is the number of people who installed it. | {{ClaudePluginUsage. |
| Invocations (30d) | Int32 | Times the plugin was invoked by this user. | {{ClaudePluginUsage. |
| M365 User | User | The related M365 user in Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more, for policies on M365 users. | {{ClaudePluginUsage. |
| Marketplace | String | The marketplace the plugin identity points at, taken from the part behind the @ of the plugin id. Empty when Anthropic reports no plugin identity. | {{ClaudePluginUsage. |
| Products | String | The Claude products the plugin was used in over the window. Claude Code and Cowork are the only surfaces with plugin attribution. | {{ClaudePluginUsage. |
| User | Claude user | The user the plugin usage is attributed to; unlinked when the analytics user id cannot be resolved to an inventoried user. | {{ClaudePluginUsage. |
Relations
| Relation | Connector | Description |
|---|---|---|
| Claude group | Claude EnterpriseClaude EnterpriseClaude Enterprise is the business plan of the Claude AI assistant by Anthropic.Read more | RBAC and SCIM-provisioned groups of the Claude Enterprise parent organization |
| Claude linked organization | Claude Enterprise | The organizations linked under the Claude Enterprise parent organization |
| Claude user | Claude Enterprise | Every member across organizations |
| User | Microsoft 365 | All users registered in your tenant (internal, external) |
Segments
This object does currently not have any segments.
Actions
This object does currently not have any actions.
Policies that check this object
| Policy | Severity | Description |
|---|---|---|
| Plugin from outside the official directory | Medium | Detects plugins in use whose identity does not point at the official Anthropic plugin directory, from the Claude Console analytics of the Enterprise planPlanA Plan is the edition of Rencore Governance in your Subscription: Professional, Premium or Enterprise.Read more |
| Unidentified plugin activity | Medium | Detects activity in the combined third-party bucket, where plugins run that the Claude Console analytics cannot name, on the Enterprise plan |
Frequently asked questions
What is the Claude plugin usage object in Rencore Governance?
Per-plugin and user installs and invocations of Claude Code and Cowork plugins, with the plugin identity and the marketplace it comes from. Claude plugin usage is an object type in the Claude Enterprise inventory of Rencore Governance.
Which properties does Rencore Governance collect for Claude plugin usage?
Rencore Governance collects 28 properties for Claude plugin usage, such as Key, Claude Code Sessions (30d), Cowork Sessions (30d) and 25 more.
Which policies check Claude plugin usage objects?
2 built-in policies check Claude plugin usage objects, such as Plugin from outside the official directory and Unidentified plugin activity.
How often is Claude plugin usage scanned?
By default daily. You can change the scan interval of Claude plugin usage objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.
Which module includes the Claude Enterprise connector?
The Claude Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?