Telemetry (OpenTelemetry)
Stream Claude Code and Codex token usage and cost into SecureAuth Agent Authority via OpenTelemetry to power per-user LLM usage analytics.
In the Agent Authority console this page is labeled Telemetry.
Coding agents like Claude Code and Codex emit OpenTelemetry (OTLP) metrics and logs about their model usage — tokens consumed, sessions, and requests. Point that telemetry at the gateway and it powers the LLM Usage analytics tab: per-user and per-model token and cost trends across your whole organization. Claude Code reports cost directly; for Codex, which sends token counts only, the gateway derives cost from its model pricing.
Ingest keys
Open the Telemetry page and choose Create API key. The gateway returns:
- an ingest key (
saai_ingest_…) — shown once, so copy it immediately; and - an OTLP endpoint of the form
https://telemetry.<your-gateway-host>/api/v1/telemetry.
Agents authenticate with the key as a bearer token (Authorization: Bearer saai_ingest_…) and post to a provider-specific path under that endpoint — …/claude for Claude, …/codex for Codex. Revoke a key any time from the same page to cut off the agents using it.
Turning it on for everyone
Telemetry is configured agent-side, so the scalable path is to push the configuration to every machine rather than relying on each developer to set it up:
- Mint one ingest key for a fleet (for example, "Engineering laptops") on the Telemetry page.
- Distribute the agent configuration through your device-management tooling (MDM, fleet config, a provisioning script) so it applies to every user automatically:
- Claude Code — ship the telemetry block in managed settings; managed settings apply to all users on the machine.
- Codex — ship the
config.tomltelemetry block to each developer machine.
- New machines pick up the configuration on enrollment, and usage starts flowing into LLM Usage analytics with no per-user steps.
Per-agent setup
Claude
Send Claude Code and Claude Cowork telemetry to the gateway.
Codex
Send Codex telemetry to the gateway.
Note: Gemini CLI and Copilot telemetry are coming soon.
Who can see the data
The LLM Usage tab in Analytics and the LLM usage card on the Dashboard are permission-gated: they render only for users whose role grants view_llm_analytics, and the analytics endpoints enforce the same permission. If telemetry is flowing but neither surface appears, check the role rather than the agent configuration.