OpenWatchby Attri

Open sourceApache 2.0Runs in your cloud

You rolled out AI.See what your team did with it.

OpenWatch traces every AI session, tool call and dollar back to the person behind it. Starting with Claude.

Three questions your console can't answer.

Anthropic's console reports spend per API key. OpenWatch connects it to the person, the session and the prompt behind it.

Who is using AI, and how much?

Sessions and spend per person, not per API key.

Did any prompt contain customer data?

Flagged with the evidence and the person who sent it.

What caused yesterday's cost spike?

Open the exact session behind it, every turn and tool call.

How it works

Collected where your team uses AI.Kept where your data lives.

Sources

OpenWatch

One identity per person

Stored in your cloud

m.alvarez · session joined

Answers

  • DashboardSessions, cost, detections
  • Microsoft TeamsTeams app with SSO
  • Claude, via MCP14 read-only tools
  • REST API23 read-only endpoints

The REST API and MCP server are the open-source repo. The dashboard and Teams app come with an Attri deployment.

  1. 01

    Collect

    A signed collector on each laptop, plus read-only vendor feeds.

  2. 02

    Join

    Transcripts, cost and device data, joined to one identity per person.

  3. 03

    Answer

    Ask in the dashboard, in Teams, or from Claude itself through MCP.

Compared with Anthropic

Built on Anthropic's Compliance API.Covers what it leaves out.

Claude is the platform OpenWatch supports today. This is what it adds on top of Anthropic's own compliance tooling.

Anthropic Compliance API

Server-side records for Claude Enterprise

Cost isn't on session recordsToken usage and cost live in a separate Analytics API.
No local data for HIPAA-ready orgsLocal sessions aren't captured when HIPAA readiness is on.
Personal data returned unmaskedTranscripts come back as sent, with no classification.
Sessions can't be deletedThe session endpoints are read-only.
OpenWatchJoined, classified and stored in your cloud
Cost joined to every sessionSpend, tokens and transcript on one record, per person.
Captured on the deviceThe signed collector reads Claude Desktop and Cowork sessions locally.
Personal data detected and flaggedEach finding cites the session and the person behind it.
Deletion requests tracked as workAccess and erasure requests become tickets with citations.

Source: Anthropic Compliance API documentation, checked September 15, 2026

Use cases

Built for regulated teams.Proven first in legal.

Enterprise

Run it yourself, or let Attri run it.Either way, it lives in your cloud.

Self-hosted

Free and open source

Deploy OpenWatch in your own cloud and operate it with your team.

Hosted by you

  • Full source code under Apache 2.0
  • Your infrastructure, your keys
  • Community support on GitHub
View on GitHub

Managed by Attri

Operated for you

Attri deploys and runs OpenWatch inside your cloud account.

In your cloud, run by Attri

  • Deployed in your tenancy, under your keys
  • Microsoft Teams and single sign-on set up for you
  • Support from the team that builds OpenWatch
Talk to AttriSOC 2 Type II, stated by AttriHIPAA BAA available

  • Microsoft Teams app

    Entra single sign-on, with no second login.

  • Signed installer

    Code-signed and deployable through Intune or your RMM.

  • Private network

    Runs inside a private subnet in your cloud.

  • Read-only APIs

    REST and MCP endpoints read data and never write it.

Open source

Read the code. Run it today.Apache 2.0, running in minutes.

$ git clone https://github.com/Attri-Inc/openwatch.git
$ cd openwatch
$ python -m venv .venv && source .venv/bin/activate
$ pip install -e ".[dev]"
$ cp .env.example .env
$ python scripts/seed.py
$ python -m uvicorn src.main:app --reload
# REST API on http://localhost:8788, docs at /docs
  • 14MCP tools for Claude
  • Read-onlyREST API, docs at /docs
  • Apache 2.0License

Loads sample data out of the box. Live data from your organisation comes with an Attri deployment.

Read the README on GitHub

Someone will ask what happened.Have the answer ready.

Run OpenWatch on sample data in minutes, or have Attri deploy it inside your cloud with live data from your organisation.

GitHubTalk to Attri