Claude Code
Record Claude Code sessions from every endpoint.
What it records. Every conversation a person has with Claude Code on the endpoint: prompts, replies, the model used, tool calls, and token counts.
How. The extension registers with Claude Code’s managed settings so Claude Code calls it after each turn. It reads the turn from Claude Code’s own session file and passes it to the scanner.
Before you begin
- You have the Admin role.
- Claude Code is installed on at least one enrolled endpoint, so you can confirm a session arrives.
Check it is running
It is on when your organization is created, so there is nothing to switch on.
Open Hub
Click Hub at the bottom of the left menu. Under AI Tools, the Claude Code card reads Enabled.
Check
The next Claude Code conversation appears on the Sessions page with Claude Code as the source, within 15 minutes of the endpoint’s next scan.
On the endpoint
sudo surface extension list shows claude as installed. sudo surface logs --extension claude shows its activity.
Turn it off
Click the Claude Code card in Hub and turn Enabled off. You see “Claude Code disabled” and endpoints remove the hook on their next scan. Turn it back on to record Claude Code once more.
Next steps
- Session Trace to open a Session Trace or Conversation
- AI Usage for cost and top adopters
- Codex to record another tool