Connect OpenAI, Anthropic, Datadog and Snowflake

Connect AI and software vendors with admin keys or a Snowflake key pair so their spend sits beside your cloud costs.

Connect OpenAI, Anthropic, Datadog and Snowflake

Bring AI and software-vendor spend into the same view as your cloud bills, by pasting a read-only key (or, for Snowflake, registering a key pair) for each vendor.

Where in CostGlassCost Explorer → SaaS & AI Spend → Connect Provider

PlanDepends on your plan's connection limit

Who can do thisAny signed-in member of your CostGlass organisation, plus someone who can create admin keys in the vendor

Time needed3 to 10 minutes per vendor

In short

All four connect from one dialog: SaaS & AI Spend → Connect Provider. Pick the vendor, give the connector a name and supply its credentials.
Every credential is checked against the vendor before it is stored. A wrong key is rejected on the spot with the vendor's own message, not discovered six hours later.
OpenAI and Anthropic need an Admin key (a normal project or workspace key is not enough). Datadog needs an API key and an application key. Snowflake uses a key pair that CostGlass generates, plus an organisation administrator.
Spend is read every six hours. OpenAI, Anthropic and Snowflake are daily; Datadog is monthly.
Personal ChatGPT and Claude subscriptions cannot be connected, because they have no cost report.

Where it fits

Cloud bills are only part of modern spend. Language-model usage and monitoring or data-warehouse tools often arrive as separate invoices with little breakdown. Connecting them puts their spend into the same cost data as your clouds, so it shows up in Cost Explorer, Reports and the dashboard. The page itself is described in SaaS and AI spend.

Vendor	What you provide	Data granularity	Source
OpenAI	An Admin API key (starts sk-admin-)	Daily, per project and line item	OpenAI's organisation Costs API
Anthropic	An Admin key (starts sk-ant-admin01-)	Daily, per workspace, model and token type	Anthropic's organisation Cost Report API
Datadog	API key + Application key + site	Monthly (current and previous month), per product	Datadog's Estimated Cost API
Snowflake	A key pair you register, plus account identifier and username	Daily, in real currency	SNOWFLAKE.ORGANIZATION_USAGE.USAGE_IN_CURRENCY_DAILY

Note

The connect dialog also lists DeepSeek (Direct API) with a normal API key. It follows the same paste-and-verify pattern, but this guide covers the four vendors above.

The connect dialog

Go to SaaS & AI Spend and click Connect Provider. The dialog is called Connect SaaS / LLM Provider.

Field	What to enter
Provider	OpenAI (Admin API), Anthropic Claude (Admin API), DeepSeek (Direct API), Datadog (Estimated Cost API) or Snowflake (ORGANIZATION_USAGE).
Connector Name	Any name you like, for example "Production OpenAI". Names are unique per vendor within your organisation: reusing one replaces that connector's credentials.
API key field	Its label changes with the vendor: OpenAI Admin API Key, Anthropic Admin Key or Datadog API Key.
Datadog Application Key	Datadog only.
Datadog Site	Datadog only. Choose the site you sign in to.

Click Connect & Sync. It shows Verifying & Connecting… while CostGlass makes one small real call to the vendor. Only if that succeeds is the credential saved (in CostGlass's encrypted secrets store), a connector card created and a first sync run. Snowflake has its own two-step flow, described below.

Only one connector per vendor is synced

You can create connectors with different names, but each scheduled sync reads the first active connector for a vendor. Connect one connector per vendor.

OpenAI

You need

An OpenAI organisation owner (only owners can create Admin keys).
An OpenAI Admin API key, which starts with sk-admin-. A regular project key is rejected with a message telling you which kind of key is needed.

Create an Admin key

In the OpenAI platform go to Settings → Organization → Admin keys and create a key named something like costglass-readonly. Copy it straight away.

Connect it

Open Connect Provider, choose OpenAI (Admin API), enter a Connector Name, paste the key into OpenAI Admin API Key (sk-admin-...) and click Connect & Sync.

SaaS & AI Spend → Connect Provider → OpenAI.

CostGlass reads OpenAI's organisation cost report in daily buckets, grouped by line item and project. Amounts are real dollars as OpenAI reports them. Each sync reads roughly the last 35 days. Token volumes and the share of requests sent through the Batch API appear beside the dollars.

Anthropic

You need

An Anthropic organisation admin.
An Admin key, which starts with sk-ant-admin01-. Admin keys exist only for organisation accounts. An individual (personal) account cannot create one, so it cannot be connected.

Create an Admin key

In the Claude Console go to Settings → Admin Keys and create a key.

Connect it

Open Connect Provider, choose Anthropic Claude (Admin API), enter a name, paste the key into Anthropic Admin Key (sk-ant-admin01-...) and click Connect & Sync.

SaaS & AI Spend → Connect Provider → Anthropic.

CostGlass reads Anthropic's cost report in daily buckets, grouped by description and workspace. Cost is shown per workspace, model and token type (uncached input, cache reads, cache writes and output), so you can see how well prompt caching is working. A brand-new organisation with no usage shows nothing yet.

Datadog

You need

A Datadog administrator who can create API and application keys.
A Datadog API key.
A Datadog application key with the usage_read scope.
Your Datadog site, for example datadoghq.com or datadoghq.eu.

Create the two keys

In Datadog, open Organization Settings → API Keys for the API key and Application Keys → New Key for the application key. Name the application key costglass-finops-readonly and grant it only the usage_read scope. Do not use a key that belongs to a person: when they leave, your billing data would quietly stop.

Find your site

It is in the URL when you are signed in, for example datadoghq.com, datadoghq.eu or us3.datadoghq.com. Keys do not work across sites.

Connect it

Open Connect Provider, choose Datadog (Estimated Cost API), enter a name, paste Datadog API Key and Datadog Application Key, choose the Datadog Site and click Connect & Sync. CostGlass checks both keys against Datadog first.

SaaS & AI Spend → Connect Provider → Datadog: API key, application key and site.

The site choices are:

datadoghq.com, datadoghq.eu, us3.datadoghq.com, us5.datadoghq.com, ap1.datadoghq.com, ap2.datadoghq.com and ddog-gov.com.

What Datadog gives CostGlass

Estimated cost per product (hosts, logs, custom metrics and so on) for the current and previous calendar month only. Datadog does not provide older history through this API.
One figure per product per month, so there are no daily Datadog numbers and no daily anomaly detection for it.
Datadog's own figures can lag by up to 72 hours and are estimates until the month closes.

A 403 error

A 403 almost always means the application key is missing the usage_read scope, or the wrong site is selected. CostGlass shows the message when you connect.

Snowflake

Snowflake does not use a pasted password. CostGlass generates an RSA key pair for the connection, keeps the private key in its encrypted vault and gives you the public key to register on a Snowflake user. CostGlass then signs in with that key.

You need

Someone who can alter a Snowflake user (a user administrator) to register the public key.
Your account identifier, for example xy12345.eu-west-1, and the username CostGlass will connect as.
Access to SNOWFLAKE.ORGANIZATION_USAGE for that user. An organisation administrator (ORGADMIN) has to grant it. This is the step most people miss.

Generate the key pair

Open Connect Provider, choose Snowflake, enter a Connector Name and click Generate Keypair.

SaaS & AI Spend → Connect Provider → Snowflake, step one.

CostGlass shows one SQL statement. Replace the username placeholder with the Snowflake user CostGlass should connect as and run it in a Snowflake worksheet as a user administrator.

Run in Snowflake

Enter the account and verify

Back in CostGlass fill in Account Identifier and Snowflake Username, then click Verify & Sync. It reads Verifying Connection… while CostGlass signs in with the key and runs a small query.

The ORGADMIN requirement

CostGlass reads real currency amounts from SNOWFLAKE.ORGANIZATION_USAGE.USAGE_IN_CURRENCY_DAILY, because credits alone cannot be priced reliably. Ordinary roles cannot see this view. An ORGADMIN must grant the connecting user's role access to it. If access is missing, verification or the sync stops with a message that names this requirement. CostGlass never swaps in a different view or a made-up number instead.

The connect form uses the user's default role. If you need a specific role or warehouse, make it that user's default in Snowflake before you verify.

Snowflake data is daily and each sync reads roughly the last 35 days. Registering the public key and the ORGADMIN grant are the only changes made in your Snowflake account, and both are yours to make.

After you connect

Each connected vendor appears as a card with its status (active, pending or error), the 30-day recorded spend, the time of the last sync and any error message.
CostGlass syncs every six hours. Click Sync on a card to sync that vendor now.
The trash icon removes the connector after you confirm. Its stored credentials are deleted; cost already collected is kept.
Spend is stored alongside your cloud costs, so you can filter by these vendors in Cost Explorer and Reports. Budgets, anomaly detection (for daily vendors) and savings checks (for example moving eligible OpenAI work to Batch, or prompt caching for Anthropic) cover them too.
Seat activity and token detail appear where the vendor exposes them. Where it does not, the page says so rather than showing a guess.

Limits worth knowing

Limit	Detail
Personal subscriptions	A Claude.ai or ChatGPT plan (Pro, Max, Plus and similar) is not API usage and has no cost report. CostGlass reads the organisation-level Admin cost reports, and Anthropic issues Admin keys only to organisation accounts. Connect the API organisation you build with instead.
Admin keys only	OpenAI and Anthropic normal keys cannot read organisation cost. They are rejected at connect time.
Datadog history	Current and previous month only, monthly granularity, up to 72 hours late.
Snowflake permission	Needs an ORGADMIN grant on ORGANIZATION_USAGE.
Currency	These vendors bill in dollars as reported. Figures are shown in your chosen display currency using the usual rates.
Live-vendor testing	These connectors were built against each vendor's documentation. If your first sync fails with something unexpected, tell CostGlass support.

Questions people ask

Why was my OpenAI key rejected?

You probably pasted a project key. Create an Admin key (Settings → Organization → Admin keys) that starts with sk-admin-.

Can I connect my personal Claude or ChatGPT subscription?

No. Those plans have no cost report. Only API organisations with Admin keys can be connected.

Datadog says 403.

Check the application key has the usage_read scope and that the Datadog Site matches the URL you sign in to.

Snowflake verification fails with a permission message.

Ask an ORGADMIN to grant the connecting role access to the SNOWFLAKE.ORGANIZATION_USAGE views.

Why is Datadog only two months?

The estimated-cost API only returns the current and previous month. CostGlass builds history from each sync going forward.

Is my key stored safely?

Keys are stored only in CostGlass's encrypted secrets store, are never returned by any screen, and are verified before storage.

All Documentation Guides

Welcome to CostGlass — What CostGlass does, who it is for, how your data gets in, the plans and regions, and a plain-English glossary.
Quickstart: your first hour — Sign up, connect a first cloud, invite your team, set a budget and turn on anomaly alerts, with a first-week checklist.
Finding your way around — A tour of the sidebar, top bar and page controls: what every page answers, plan gating, currency, language, links and caching.
Dashboards — The Overview dashboard widget by widget, plus building custom dashboards you can share with your organisation.
Cloud Resources — The multi-cloud inventory: filters, search, categories, estimated cost, terminated resources and CSV or Excel export.
Uptime, incidents & support requests — Monitor public endpoints, route alerts, see incidents and raise requests to CostGlass engineers.
How CostGlass accesses your data — Security and data ingestion architecture: how CostGlass reads multi-cloud billing and telemetry through read-only roles and least-privilege permissions.
Dashboard & Platform Screenshot Tour — Visual walkthrough of the CostGlass interface with screenshots covering multi-cloud spend, Cost Explorer, anomalies, Kubernetes allocation, and savings.
Connecting your clouds: overview — Every cloud and service you can connect, how each one connects, what access it needs, how long data takes and your plan limits.
Connect AWS (CloudFormation) — Deploy the generated CloudFormation template, choose organization or single account and optional features, then verify.
Connect AWS with Terraform instead of CloudFormation — A Terraform equivalent of the generated AWS template, with an Organization variant and a way to compare it to the wizard.
Connect Azure — Admin consent for the CostGlass application, Reader and Cost Management Reader roles, management group or subscription scope, and a Terraform version.
Connect Google Cloud — Enable the FOCUS BigQuery export, run the IAM grants CostGlass prints, verify, and a Terraform version.
Managing connected accounts — The Cloud Accounts page: statuses, syncing, errors, naming, disconnecting, and the FOCUS 1.0 and CUR Export pages.
Connect Oracle Cloud (OCI) — Give CostGlass read-only access to Oracle Cost and Usage Reports with a Resource Manager stack or your own Terraform.
Connect Alibaba Cloud — Connect Alibaba Cloud through Bill Subscription files in OSS and a read-only RAM role created by a ROS template.
Connect DigitalOcean — Connect DigitalOcean accounts with a read-only personal access token and see invoices by month.
Connect Akamai / Linode — Connect Linode (Akamai Connected Cloud) accounts with an account read-only token.
Connect Cloudflare — Connect Cloudflare usage-based charges with a Billing Read account token and see credits and unpaid debt.
Connect OpenAI, Anthropic, Datadog and Snowflake — Connect AI and software vendors with admin keys or a Snowflake key pair so their spend sits beside your cloud costs.
Cost Explorer — Slice, compare and drill into spend across every connected cloud: group by, filters, charts, overlays, details, AI, links and export.
Saved views, saved filters & scheduled emails — Keep, share and email the Cost Explorer views you use often, and reuse include/exclude filters across views and reports.
Reports — Build, compare, export, save and schedule spend reports, with presets, Excel, CSV and PDF exports.
SaaS & AI Spend — Spend and token analytics for OpenAI, Anthropic, DeepSeek, Datadog, Snowflake and cloud AI services.
Unit Economics — Cost per business unit: define metrics, send volumes, set targets and alerts.
Connect a Kubernetes cluster — Install OpenCost and the CostGlass exporter in your cluster so cost data is pushed to CostGlass every 15 minutes.
Kubernetes Costs page — Understand cluster, namespace, workload and pod costs, idle capacity, rightsizing, carbon and health.
Tagging strategy: getting the most from tags — How to tag cloud resources, enforce tagging, and when to use cloud tags or virtual tags in CostGlass.
Tag Explorer — Group billed spend by the value of a tag, see tag coverage per cloud and drill into resources.
Tag Compliance — Define required AWS tags, measure compliance, and fix missing tags with Quick Tag, batch apply or a CLI script.
Virtual tagging — Allocate spend by team, product or environment with rules, no cloud changes, with a rule builder and CostGlass AI.
Forecasting — Forecast month-end spend, the next months and a yearly run-rate, and simulate the cost of changes.
Budgets — Create spending limits for a cloud, account, service or team, and see how CostGlass budgets differ from native AWS, Azure and Google budgets.
Anomaly detection — How CostGlass finds unusual daily cost, how to tune it, explain it and be notified.
Cost alerts — Alert when spend rises versus the previous day, week, month or quarter.
All alert and notification types — A comparison of every alert and notification in CostGlass, with channel setup and testing.
Issues & annotations — Dated notes on spend, and a lightweight issue tracker for cost work with Jira push.
Savings playbook — A prioritised, step-by-step programme for reducing your cloud bill, with a 30/60/90-day plan.
Savings recommendations — How the Savings page finds, prices and tracks savings for every connected cloud and platform.
Rightsizing — Find servers and databases that are too big, or too small, using real CPU and memory measurements.
Commitments: Savings Plans & Reserved Instances — Track coverage, utilisation, expiry and purchase recommendations for Savings Plans, Reservations and committed use discounts.
Instance Scheduler — Start and stop non-production servers on a weekly schedule to stop paying for idle hours.
Giving your team access — Invite people, choose Owner, Admin or Member roles, remove users and limit what they see.
Setting up your organisation hierarchy — Build a tree of nodes, place cloud accounts by hand, rule or CSV, and scope people to a branch.
Designing your hierarchy (with enterprise examples) — Principles and worked patterns for AWS Organizations, single accounts, multi-cloud groups, MSPs and regulated regions.
Single sign-on (SAML & OIDC) — Connect Okta, Entra ID, Google Workspace or another provider, verify your domain, test and require SSO.
API keys & AI assistants (MCP) — Create API keys and connect Claude Desktop, Cursor or Claude Code to your cost data.
Audit log — See who changed what and when, with before and after values, kept for 24 months.
Data residency & retention — Your fixed region, how long cost history is kept, purge now and the data handling summary.
Notification settings, Jira & chat — Weekly spend summary, Slack and Teams webhooks, and connecting Jira Cloud.
Troubleshooting & Common Setup Fixes — Solutions for common cloud connection and ingestion issues across AWS, Azure, Google Cloud, OCI, Alibaba Cloud, Kubernetes, and SSO.

Connect OpenAI, Anthropic, Datadog and Snowflake