APIAnalytics

LLM session activity

Time-bucketed token/cost activity and per-model rollup for one session.

GET
/analytics/llm-session-activity

Time-bucketed token/cost activity and per-model rollup for one session.

Authorization

ApiKeyAuth
headerAuthorizationBearer <token>

Bearer token authentication. Send an API key (a saai_api_-prefixed token) as Authorization: Bearer <token>.

Required permission

view_llm_analytics

Query Parameters

scope?string

own returns only the caller's own records, even when they may see the whole organization. all, the default, returns everything the caller may see. It never widens what the caller may see.

Value in"all""own"
start_time*string

Start of the time range to report on, inclusive.

Formatdate-time
end_time*string

End of the time range to report on, exclusive.

Formatdate-time
session_key*string

The session to report on, identified by its provider session key.

provider*string

Telemetry provider of the session.

Value in"claude""codex""gemini""copilot"

Response Body

The request has succeeded.

application/json
  1. response

Time-bucketed usage plus a per-model rollup for one session.

buckets*array<>

Token and cost activity over time.

models*array<>

Per-model totals for the session.

Example Request
curl -X GET 'https://your-org.aisecurity.services.us.connect.secureauth.com/api/v1/analytics/llm-session-activity?start_time=2019-08-24T14%3A15%3A22Z&end_time=2019-08-24T14%3A15%3A22Z&session_key=string&provider=claude'
Example Response
{  "buckets": [    {      "bucket_start": "2019-08-24T14:15:22Z",      "tokens": 0,      "cost": 0.1    }  ],  "models": [    {      "model": "string",      "calls": 0,      "tokens": 0,      "cost": 0.1,      "duration_ms": 0    }  ]}