i think you can ask Anthropic to provide access data (IP addresses, User Agents etc) specific to your key.

Then you can challenge hugging-face (eg paying customer) even sue them if you wish to...