Analysis

Claude agent traces in your own monitoring: what the OpenTelemetry beta changes

1AYM is an OpenAI Select Partner.

Published . Vendor facts checked on against each vendor’s own pages, listed at the end. Plans, prices and availability change. Neither OpenAI nor Anthropic has reviewed this analysis.

The short version

One release with two decisions in it: what goes into the traces, and what the traces can be trusted for. Each has its own section, with what to check before an administrator switches it on.

The release and the content setting
OpenTelemetry trace export from the Messages API, Claude Managed Agents and the Claude SDKs, in public beta. Metadata only by default; full content copies prompts and responses out.
Debugging aid, not an audit log
Delivery is at least once and not guaranteed, a caller can switch tracing off per request, and a destination is disabled after 24 hours of failures. Anthropic points to its Usage API for complete counts.

What Anthropic released, and the content setting

What was announced

On 14 October 2026 Anthropic announced OpenTelemetry trace export for the Claude Platform, in public beta. It covers Claude Managed Agents, the Messages API and the Claude SDKs. Traces record agent turns, model calls and tool use, with latency, token counts and IDs, and follow the OpenTelemetry GenAI semantic conventions, so any tool that accepts a standard OTLP endpoint can receive them.

Anthropic names twelve platforms it works with: Arize AI, Braintrust, Databricks, Datadog, Grafana Cloud, Honeycomb, Langfuse, LangSmith, New Relic, PostHog, Sentry and Splunk. API tracing is set up as a destination in the Claude Console, which needs the admin role, and works on the Claude API and Claude Platform on AWS. SDK tracing is set up in code and needs no role.

Each destination has a content mode. Metadata only is the default and holds identifiers, timing, status, token counts and names you choose, such as agent, tool and MCP server names. Full content adds the model prompts and responses. Anthropic's documentation says that after delivery the data is held by the service you chose, outside Anthropic, under that service's retention and access controls.

Organisations with a HIPAA, FERPA or K-12 data-handling restriction with Anthropic get metadata only from API destinations whatever the setting; SDK spans are not affected. Full content can be used with zero data retention on the Messages API, where the content is held only in memory until it is delivered. Claude Managed Agents is not eligible for zero data retention, and its retention does not change when tracing is on.

What it means for enterprises

The export puts each model call, tool use and agent turn in the same monitoring stack as the rest of the estate, which is where operations and security teams already look. For a team running agents in production, that is likely the quickest route to answering why a run failed, what it cost and which tool it called.

Full content is a data protection decision, not a monitoring setting. Prompts and responses can hold customer records, contract text or staff data, and switching it on copies all of that into a second system with its own retention, access list and location. A data protection officer will likely want that second system on the record of processing and covered by its own contract before the setting changes.

The workspace setting gives a way to split the risk. A destination can cover all workspaces, selected ones or all except some, so a team can send full content from a test workspace and metadata only from the workspace that handles live customer data.

Before you switch it on

Content mode
Decide per workspace whether full content is allowed, and write down who approved it. Start every live workspace on metadata only.
The receiving tool
Check where your monitoring platform stores data, how long it keeps it and who can read it, before a prompt arrives there.
Retention promises
If you rely on zero data retention, note that it covers the Messages API but not Claude Managed Agents, and that the copy in your own tool is yours to delete.
Admin access
Adding a destination needs the Console admin role. Confirm who holds it, because a new destination can start sending data within about a minute.

Sources: [1] [2] [3]

What the traces can be trusted for

What was announced

Anthropic's documentation says exported spans are not guaranteed to be a complete record of API usage. Delivery is at least once, so a span can arrive twice, and not guaranteed, so a span can be lost and is not sent again. A caller can also leave a request out by turning off the sampled flag in its traceparent header. To track each API key's usage, for example to spot a leaked key, Anthropic points to its Usage API, which counts requests without spans too.

The API retries a limited number of times after timeouts, connection failures and 408, 429 or 5xx responses. It disables a destination that sends a redirect, resolves to a non-public IP address, or fails every delivery for 24 hours, and sends nothing to it until someone enables it again. An organisation can have up to 10 destinations, including disabled ones.

What it means for enterprises

This makes the traces good for operations and weak as evidence. They are the right tool for debugging slow or failed runs, tracking token spend by team and building evaluation sets from real traffic. They are the wrong tool to show an auditor or regulator that every agent action was recorded, because the documentation says plainly that some will not be.

The sampled flag matters for control. Whoever writes the calling code decides whether a request is traced, so tracing alone cannot prove that a team followed a monitoring policy. Spend reporting and key monitoring belong on the Usage API, with traces used to explain the numbers rather than to produce them.

A disabled destination fails quietly from the agent's point of view: the agents keep running and the traces stop. Someone has to own the delivery status, or a monitoring outage on a Friday can mean a weekend with no traces.

Before you switch it on

Evidence
Keep the audit trail for consequential agent actions in the system the agent acts on. Treat exported traces as the explanation, not the record.
Spend
Reconcile monthly token reporting against the Usage API, and count each span once by trace ID and span ID to avoid double counting.
Alerting
Alert when a destination's delivery state is Failing or Disabled, and name who re-enables it.
Sampling
If tracing every request is a policy, check that the calling code does not switch the sampled flag off.

Sources: [2] [3]

Where the market is heading: agent monitoring on open standards

The choice of the OpenTelemetry GenAI conventions, and a partner list that runs from general monitoring tools to evaluation platforms, means Claude traces can sit beside traces from other models and from the rest of an application in one tool. For a buyer running more than one model provider, that likely makes a single view of agent behaviour, cost and latency across vendors more practical than it was.

It also moves part of the governance burden to the buyer. Anthropic's documentation is clear that delivered data is held under the receiving service's controls. As agents do more work unattended, the questions an enterprise has to answer about what was sent where, and for how long, will likely sit with the team that owns the monitoring platform as much as with the AI team.

Sources: [1] [2]

What is not known yet

The announcement and documentation, read the day after release, leave some questions open.

Price
The pages we read do not mention a charge for trace export. Your monitoring platform's own ingestion and storage costs still apply.
General availability
The feature is in beta under Anthropic's Beta Services terms. No date for general availability is given.
Other clouds
API tracing is listed for the Claude API and Claude Platform on AWS. The pages we read do not cover Claude on Amazon Bedrock, Google Cloud or Microsoft Foundry.
Where Anthropic processes the export
The documentation says where the data ends up, not the region it passes through on the way.

Sources: [1] [2] [3]

For engineers: endpoints, limits, delivery rules and counting tokens

Setting up a destination

API tracing needs an OTLP/HTTP endpoint that accepts protobuf at an HTTPS URL on port 443, with a hostname rather than an IP address. A self-hosted OpenTelemetry Collector listens on 4318 by default, so it needs HTTPS on 443 or a load balancer in front. Credentials go in request headers, which the Console does not show again after saving. Destinations can also be created through the Admin API with the telemetry-destinations-2026-08-11 beta header.

Limits: 10 destinations per organisation, 1,000 selected workspaces per destination, 20 request headers, 4,096 bytes per header value and 16,384 bytes for all headers together. Your endpoint must finish the TLS handshake and send response headers within 5 seconds each, and each delivery times out after 10 seconds.

Sources: [3]

Connecting API spans to your own traces

The API reads W3C trace context from the traceparent header, so API spans can nest under your application's spans. Claude Platform on AWS does not support the header yet, and its API spans always start their own traces. With the MCP connector, the API passes a traceparent to your MCP server in params._meta, so the server's spans can sit under the tool call.

Sources: [2] [3]

Content limits and counting tokens

With full content, each span holds up to 0.75 MB of content by default. When content is over the limit the system prompt and earliest messages are dropped first and anthropic.content.truncated is set to true. A full 1M-token context needs about 4 MB.

To count tokens once, sum one source per request. Where a request has both an SDK span and an API span, both named anthropic.messages.create, sum the API (SERVER) spans. gen_ai.usage.input_tokens already includes cache reads and writes, and compaction tokens are counted separately.

Sources: [2]

Where 1AYM fits

The decisions in this post are the ones our AI governance implementation work turns into controls the system enforces, with the evidence produced as it runs: which workspaces may export content, where the audit record for an agent's actions lives, and who is alerted when monitoring stops. For teams building agents on the Claude Platform, our Enterprise AI Platform & Agentic Workflows work builds internal copilots, workflow agents and the middleware underneath them, designed around who is allowed to see what, what gets logged, and where a human signs off.

If the open question is which agent workloads are worth running at all, we would start with our AI Opportunity & Feasibility Sprint: fixed scope, typically two to four weeks.

Sources

  1. [1]Anthropic, Agent observability on the Claude Platform, 14 October 2026 (checked 15 October 2026)
  2. [2]Anthropic, OpenTelemetry for the Claude API, documentation (checked 15 October 2026)
  3. [3]Anthropic, Use OpenTelemetry with the Claude API, documentation (checked 15 October 2026)

Frequently asked questions

What did Anthropic release on 14 October 2026?

A public beta that exports OpenTelemetry traces from Claude Managed Agents, the Messages API and the Claude SDKs to any monitoring tool that accepts a standard OTLP endpoint, including twelve named partners such as Datadog, Splunk and Grafana Cloud.

Do the traces include prompts and responses?

Only if you choose the full content mode. The default, metadata only, holds identifiers, timing, status, token counts and the names you give agents and tools. Organisations with a HIPAA, FERPA or K-12 restriction get metadata only from API destinations.

Can the traces be used as an audit log?

Not on their own. Anthropic says delivery is not guaranteed, a span can be lost, and a caller can switch tracing off per request. It points to the Usage API for complete usage counts.

Does zero data retention still apply?

On the Messages API, full content export works with zero data retention and the content is held in memory only until delivered. Claude Managed Agents is not eligible for zero data retention. Once delivered, the data sits under your monitoring platform's retention.

Who can switch it on?

Adding or changing an API destination needs the admin role in the Claude Console organisation. SDK tracing is set up in application code and needs no role.

Further

Agents in production without a clear record?

Half an hour is enough to agree what to trace, what to keep out of traces and where the audit record lives.

Last reviewed · 1AYM