Set up OpenTelemetry for Cowork, Claude Code, and Codex

Send Cowork, Claude Code, and Codex telemetry to Tokenize for your whole organization from each vendor's admin settings.

Cowork, Claude Code, and Codex can each send OpenTelemetry (OTel) data straight to Tokenize. You set it up once in each vendor's admin settings, and it applies across your organization. The setup lives at the bottom of Settings → Providers, in the Cowork OTel, Claude Code OTel, and Codex OTel sections.

Who can do this: Admins. You also need admin access to the tool you're configuring, listed below.

Each section follows the same three steps: create an ingest key, paste the config into the vendor's admin settings, then restart.

Requirements

SectionWhat you need
Cowork OTelA Claude Team or Enterprise plan and organization admin access
Claude Code OTelA Claude Team or Enterprise Owner
Codex OTelAccess to Agent Security in the OpenAI Admin Console

Step 1: Create an ingest key

  1. Go to Settings → Providers and scroll to the section you want.
  2. Click Generate key.
  3. Copy the key and save it in your secret manager.

The key is shown once. You can't view it again later. Use a separate key for each tool, so you can revoke one without breaking the others. Revoke keys in Settings → API keys. See API keys.

If Generate key is disabled and you see "Ask someone with API key access to generate a key.", your role can't create keys. Ask an admin.

Step 2: Install the config

After you generate a key, the section shows the values to paste, with your key already filled in.

Cowork

In Claude, open Admin settings → Cowork and configure OpenTelemetry with the three values shown:

  • OTLP endpoint
  • OTLP protocol: http/protobuf
  • OTLP headers: Authorization=Bearer followed by your key

Claude Code

Click Open Claude and paste the JSON into Claude Code managed settings. It is an env block that turns on telemetry and points it at Tokenize.

Codex

Click Setup guide for OpenAI's instructions. In the OpenAI Admin Console, go to Agent Security and paste the [otel] config into the managed configuration.

Step 3: Restart

  • Cowork: save your settings, then start a new Cowork session.
  • Claude Code: users approve the change the next time they start Claude Code.
  • Codex: the config applies the next time users start Codex.

What gets sent

By default, these configs send prompt content to Tokenize. Change the config before you paste it if you don't want that.

  • Claude Code sends prompts, responses, and tool content. Remove the OTEL_LOG_* lines to leave them out.
  • Codex sends prompt text. Remove log_user_prompt to leave it out.
  • Cowork content follows Claude's monitoring settings. Review them before you include prompts, responses, or tool content.

For how Tokenize handles this data, see Privacy and redaction and What data Tokenize collects.

Troubleshooting

  • "Couldn't generate a key. Try again." The key wasn't created. Click Generate key again.
  • "Your role does not include telemetry setup." Your role can't set up OTel. Ask an admin.
  • No data after setup: make sure people started a new session after the change. Claude Code users must approve the managed settings change first.