Docs Connect Every endpoint, checked

Every endpoint, checked.

For each of 11 vendors, what Valistry does with the billing, usage and admin API. We read money, names and limits; we leave out speed, traces, content and anything that changes a setting.

Anthropic

141 endpoints in the vendor's own reference, read Sep 30, 2026: 8 read, 108 left out by rule, 25 not read yet.

Read

/v1/organizations/analytics/cost_reportEnterprise: organization cost over time by product, model and cost type, including API keys
/v1/organizations/analytics/user_cost_reportEnterprise: cost per seat user per model/product
/v1/organizations/analytics/user_usage_reportEnterprise: tokens per seat user
/v1/organizations/analytics/usersEnterprise: per-user daily activity counts and role group
/v1/organizations/cost_reportCost in dollars per day by description (model, cost_type, token_type) and workspace; no per-key split
/v1/organizations/usage_report/claude_codeClaude Code per person or key per day: sessions, lines, commits, PRs, tokens and estimated cost by model
/v1/organizations/usage_report/messagesTokens per bucket by model, key, workspace, service account, tier, geo; web search count
/v1/organizations/usersOrganization members: id, email, name, role

Left out by rule

Who changed what in the vendor's console: not spend3

/v1/compliance/activitiesAudit activity feed
/v1/compliance/organizations/{organization_id}/settingsEffective organization settings
/v1/organizations/compliance_settingsWhether Compliance API is on

Prompts, responses or files: never read21

/v1/compliance/apps/artifacts/{artifact_version_id}Chats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/artifacts/{artifact_version_id}/contentChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/chatsChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/chats/files/{claude_file_id}Chats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/chats/files/{claude_file_id}/contentChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/chats/generated-files/{claude_gen_file_id}Chats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/chats/generated-files/{claude_gen_file_id}/contentChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/chats/{claude_chat_id}/messagesChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/code/artifactsChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/code/artifacts/{artifact_id}/versions/{version_id}Chats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/projectsChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/projects/documents/{document_id}Chats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/projects/documents/{document_id}/metadataChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/projects/{project_id}Chats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/projects/{project_id}/attachmentsChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/projects/{project_id}/collaboratorsChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/sessions/localChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/sessions/local/{local_session_id}Chats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/sessions/local/{local_session_id}/messagesChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/sessions/remoteChats, messages, files, projects, sessions or artifacts content
/v1/compliance/apps/sessions/remote/{claude_remote_session_id}/messagesChats, messages, files, projects, sessions or artifacts content

It changes the vendor's settings: we only read54

/v1/compliance/apps/chats/files/{claude_file_id}Deletes user content
/v1/compliance/apps/chats/{claude_chat_id}Deletes user content
/v1/compliance/apps/code/artifacts/{artifact_id}Deletes user content
/v1/compliance/apps/projects/documents/{document_id}Deletes user content
/v1/compliance/apps/projects/{project_id}Deletes user content
/v1/organizations/api_keys/{api_key_id}Mutates organization state
/v1/organizations/compliance_settingsMutates organization state
/v1/organizations/external_keysMutates organization state
/v1/organizations/external_keys/{external_key_id}Mutates organization state
/v1/organizations/external_keys/{external_key_id}Mutates organization state
/v1/organizations/external_keys/{external_key_id}/validateMutates organization state
/v1/organizations/federation_issuersMutates organization state
/v1/organizations/federation_issuers/{federation_issuer_id}Mutates organization state
/v1/organizations/federation_issuers/{federation_issuer_id}/archiveMutates organization state
/v1/organizations/federation_rulesMutates organization state
/v1/organizations/federation_rules/{federation_rule_id}Mutates organization state
/v1/organizations/federation_rules/{federation_rule_id}/archiveMutates organization state
/v1/organizations/federation_rules/{federation_rule_id}/workspacesMutates organization state
/v1/organizations/federation_rules/{federation_rule_id}/workspaces/{workspace_id}Mutates organization state
/v1/organizations/invitesMutates organization state
/v1/organizations/invites/{invite_id}Mutates organization state
/v1/organizations/rbac_groupsMutates organization state
/v1/organizations/rbac_groups/{rbac_group_id}Mutates organization state
/v1/organizations/rbac_groups/{rbac_group_id}Mutates organization state
/v1/organizations/rbac_groups/{rbac_group_id}/membersMutates organization state
/v1/organizations/rbac_groups/{rbac_group_id}/members/{user_id}Mutates organization state
/v1/organizations/service_accountsMutates organization state
/v1/organizations/service_accounts/{service_account_id}Mutates organization state
/v1/organizations/service_accounts/{service_account_id}/archiveMutates organization state
/v1/organizations/service_accounts/{service_account_id}/workspacesMutates organization state
/v1/organizations/service_accounts/{service_account_id}/workspaces/{workspace_id}Mutates organization state
/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}/approveMutates organization state
/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}/denyMutates organization state
/v1/organizations/spend_limitsMutates organization state
/v1/organizations/spend_limits/{spend_limit_id}Mutates organization state
/v1/organizations/tunnels/{tunnel_id}/archiveMutates organization state
/v1/organizations/tunnels/{tunnel_id}/certificatesMutates organization state
/v1/organizations/tunnels/{tunnel_id}/certificates/{certificate_id}/archiveMutates organization state
/v1/organizations/tunnels/{tunnel_id}/reveal_tokenMutates organization state
/v1/organizations/tunnels/{tunnel_id}/rotate_tokenMutates organization state
/v1/organizations/users/{user_id}Mutates organization state
/v1/organizations/users/{user_id}Mutates organization state
/v1/organizations/workspacesMutates organization state
/v1/organizations/workspaces/{workspace_id}Mutates organization state
/v1/organizations/workspaces/{workspace_id}/archiveMutates organization state
/v1/organizations/workspaces/{workspace_id}/membersMutates organization state
/v1/organizations/workspaces/{workspace_id}/members/{user_id}Mutates organization state
/v1/organizations/workspaces/{workspace_id}/members/{user_id}Mutates organization state
/v1/organizations/workspaces/{workspace_id}/service_accountsMutates organization state
/v1/organizations/workspaces/{workspace_id}/service_accounts/{service_account_id}Mutates organization state
/v1/organizations/workspaces/{workspace_id}/service_accounts/{service_account_id}Mutates organization state
/v1/user_profilesMutates organization state
/v1/user_profiles/{user_profile_id}Mutates organization state
/v1/user_profiles/{user_profile_id}/enrollment_urlMutates organization state

One item of a list: we read the whole list11

/v1/compliance/groups/{group_id}Compliance API: one group
/v1/organizations/api_keys/{api_key_id}One API key
/v1/organizations/invites/{invite_id}One invite
/v1/organizations/rbac_groups/{rbac_group_id}One role group
/v1/organizations/service_accounts/{service_account_id}One service account
/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}One increase request
/v1/organizations/spend_limits/{spend_limit_id}One spend limit: amount (minor units), currency, period, scope
/v1/organizations/users/{user_id}One member
/v1/organizations/workspaces/{workspace_id}One workspace
/v1/organizations/workspaces/{workspace_id}/members/{user_id}One workspace member
/v1/organizations/workspaces/{workspace_id}/service_accounts/{service_account_id}One workspace service account

A setting that is not spend, a name or a limit19

/v1/compliance/organizations/{org_uuid}/rolesRoles
/v1/compliance/organizations/{org_uuid}/roles/{role_id}One role
/v1/compliance/organizations/{org_uuid}/roles/{role_id}/permissionsRole permissions
/v1/organizations/external_keysCustomer-managed key configs, no money
/v1/organizations/external_keys/{external_key_id}One external key config
/v1/organizations/federation_issuersWorkload identity issuers
/v1/organizations/federation_issuers/{federation_issuer_id}One issuer
/v1/organizations/federation_rulesFederation rules
/v1/organizations/federation_rules/{federation_rule_id}One rule
/v1/organizations/federation_rules/{federation_rule_id}/workspacesRule workspaces
/v1/organizations/rbac_rolesRole catalog, no money
/v1/organizations/rbac_roles/{rbac_role_id}One role
/v1/organizations/rbac_roles/{rbac_role_id}/permissionsRole permissions
/v1/organizations/tunnelsMCP tunnels (deprecated)
/v1/organizations/tunnels/{tunnel_id}One tunnel
/v1/organizations/tunnels/{tunnel_id}/certificatesTunnel certificates
/v1/organizations/tunnels/{tunnel_id}/certificates/{certificate_id}One tunnel certificate
/v1/user_profilesUser profiles (beta), not billing
/v1/user_profiles/{user_profile_id}One user profile

AWS for Bedrock

161 endpoints in the vendor's own reference, read Sep 30, 2026: 19 read, 10 covered another way, 67 left out by rule, 65 not read yet.

Read

ce:GetCostAndUsageThe bill, by day, service, usage type and tag
ce:GetTagsCost-allocation tag keys/values on Bedrock rows
budgets:DescribeBudgetsAll budgets: limit, filters, actual and forecast spend (IAM: budgets:ViewBudget); AI-service budgets shown beside ours
cloudwatch:ListMetricsSeries that exist per namespace/metric (model ids, projects, guardrails)
cloudwatch:GetMetricDataDaily totals for the metrics below
cloudwatch:GetMetricData AWS/Bedrock:InputTokenCountInput tokens per ModelId
cloudwatch:GetMetricData AWS/Bedrock:OutputTokenCountOutput tokens per ModelId
cloudwatch:GetMetricData AWS/Bedrock:InvocationsSuccessful calls per ModelId
cloudwatch:GetMetricData AWS/Bedrock:CacheReadInputTokenCountCache read tokens per ModelId
cloudwatch:GetMetricData AWS/Bedrock:CacheWriteInputTokenCountCache write tokens per ModelId
cloudwatch:GetMetricData AWS/Bedrock:OutputImageCountImages per ModelId, ImageSize, BucketedStepSize
cloudwatch:GetMetricData AWS/BedrockMantle:TotalInputTokensBedrock-mantle input tokens by Project, Model
cloudwatch:GetMetricData AWS/BedrockMantle:TotalOutputTokensBedrock-mantle output tokens by Project, Model
cloudwatch:GetMetricData AWS/BedrockMantle:InferencesBedrock-mantle completed calls by Project, Model
cloudwatch:GetMetricData AWS/Bedrock/Guardrails:TextUnitCountText units per guardrail and policy type: the billed unit
bedrock:GetInferenceProfileOne profile
bedrock:GetModelInvocationLoggingConfigurationWhether model calls are logged, on or off, for Compliance; never the logs or where they go
bedrock:ListTagsForResourceTags on profiles and provisioned throughput: team keys
sts:AssumeRoleOne-hour keys for a connected role

Covered another way

Valistry forecasts and explains change from the ledger itself4

ce:GetCostForecastAWS's own cost forecast; a comparison, not a fact
ce:GetUsageForecastAWS's own usage forecast
ce:GetCostAndUsageComparisonsMonth-over-month cost deltas
ce:GetCostComparisonDriversDrivers of a month-over-month change

AWS's own advice to buy: Valistry's opportunities come from your runs6

ce:GetSavingsPlansPurchaseRecommendationAWS purchase recommendation
ce:GetSavingsPlanPurchaseRecommendationDetailsRecommendation detail
ce:GetReservationPurchaseRecommendationRI recommendation
ce:GetRightsizingRecommendationEC2 rightsizing; GPU instances
ce:GetCommitmentPurchaseAnalysisResult of a commitment analysis
ce:ListCommitmentPurchaseAnalysesCommitment analyses list

Left out by rule

A setting that is not spend, a name or a limit12

ce:ListCostAllocationTagBackfillHistoryTag backfill history
ce:ListSavingsPlansPurchaseRecommendationGenerationGeneration job status
ce:ListTagsForResourceTags on CE resources
bcm-data-exports:ListTagsForResourceTags on exports
budgets:ListTagsForResourceTags on budgets
bedrock:ListModelCopyJobsCopy jobs
bedrock:ListModelImportJobsImport jobs
bedrock:ListAdvancedPromptOptimizationJobsSkip
bedrock:ListAutomatedReasoningPoliciesPolicies
bedrock:GetAccountDataRetentionRetention setting
bedrock:GetUseCaseForModelAccessModel access form
bedrock:GetResourcePolicyResource policy

A per-minute series: the day's total is what the ledger keeps10

ce:GetApproximateUsageRecordsRecord counts for sizing resource-level data
cloudwatch:GetMetricStatisticsOlder one-metric read; GetMetricData covers it
cloudwatch:GetMetricData AWS/Bedrock:EstimatedTPMQuotaUsageEstimated TPM quota use per minute
cloudwatch:GetMetricData AWS/Bedrock:InvocationClientErrorsErrors
cloudwatch:GetMetricData AWS/Bedrock:InvocationServerErrorsErrors
cloudwatch:GetMetricData AWS/Bedrock:InvocationThrottlesThrottles
cloudwatch:GetMetricData AWS/Bedrock:ModelInvocationLogs*Delivery*Invocation-log delivery health
cloudwatch:GetMetricData AWS/BedrockMantle:InputTokensPer-inference datum for percentiles
cloudwatch:GetMetricData AWS/BedrockMantle:OutputTokensPer-inference datum
cloudwatch:GetMetricData AWS/BedrockMantle:InferenceClientErrorsErrors

It changes the vendor's settings: we only read40

ce:CreateAnomalyMonitorMutates Cost Explorer config
ce:CreateAnomalySubscriptionMutates Cost Explorer config
ce:CreateCostCategoryDefinitionMutates Cost Explorer config
ce:DeleteAnomalyMonitorMutates Cost Explorer config
ce:DeleteAnomalySubscriptionMutates Cost Explorer config
ce:DeleteCostCategoryDefinitionMutates Cost Explorer config
ce:ProvideAnomalyFeedbackMutates Cost Explorer config
ce:StartCommitmentPurchaseAnalysisMutates Cost Explorer config
ce:StartCostAllocationTagBackfillMutates Cost Explorer config
ce:StartSavingsPlansPurchaseRecommendationGenerationMutates Cost Explorer config
ce:TagResourceMutates Cost Explorer config
ce:UntagResourceMutates Cost Explorer config
ce:UpdateAnomalyMonitorMutates Cost Explorer config
ce:UpdateAnomalySubscriptionMutates Cost Explorer config
ce:UpdateCostAllocationTagsStatusMutates Cost Explorer config
ce:UpdateCostCategoryDefinitionMutates Cost Explorer config
bcm-data-exports:CreateExportMutates exports
bcm-data-exports:DeleteExportMutates exports
bcm-data-exports:UpdateExportMutates exports
bcm-data-exports:TagResourceMutates exports
bcm-data-exports:UntagResourceMutates exports
cur:PutReportDefinitionMutates legacy CUR
cur:ModifyReportDefinitionMutates legacy CUR
cur:DeleteReportDefinitionMutates legacy CUR
budgets:CreateBudgetMutates budgets
budgets:CreateBudgetActionMutates budgets
budgets:CreateNotificationMutates budgets
budgets:CreateSubscriberMutates budgets
budgets:DeleteBudgetMutates budgets
budgets:DeleteBudgetActionMutates budgets
budgets:DeleteNotificationMutates budgets
budgets:DeleteSubscriberMutates budgets
budgets:ExecuteBudgetActionMutates budgets
budgets:TagResourceMutates budgets
budgets:UntagResourceMutates budgets
budgets:UpdateBudgetMutates budgets
budgets:UpdateBudgetActionMutates budgets
budgets:UpdateNotificationMutates budgets
budgets:UpdateSubscriberMutates budgets
bedrock:Create*/Update*/Delete*/Put*/Start*/Stop*Every mutating Bedrock control-plane action

Who changed what in the vendor's console: not spend1

budgets:DescribeBudgetActionHistoriesAction history

Speed, not money: observability, which we leave to the tools built for it4

cloudwatch:GetMetricData AWS/Bedrock:InvocationLatencySkip
cloudwatch:GetMetricData AWS/Bedrock:TimeToFirstTokenSkip
cloudwatch:GetMetricData AWS/Bedrock/Guardrails:Invocations*/LatencyGuardrail calls, errors, latency
cloudwatch:GetMetricData AWS/Bedrock/Agents:*Latency,*Errors,*ThrottlesSkip

Azure for OpenAI and AI services

70 endpoints in the vendor's own reference, read Oct 23, 2026: 7 read, 14 covered another way, 26 left out by rule, 23 not read yet.

Read

/providers/Microsoft.Billing/billingAccounts/{billingAccountId}/providers/Microsoft.CostManagement/queryThe same cost query at a billing account: every subscription with cost, each filtered to itself
/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.CostManagement/queryThe same cost query at a management group
/subscriptions/{subscriptionId}/providers/Microsoft.Consumption/tagsYour tag keys on a subscription's cost, to find the ones that name owners
/subscriptions/{subscriptionId}/providers/Microsoft.CognitiveServices/accountsAI services accounts in the subscription: name, kind, region
/subscriptions/{subscriptionId}/providers/Microsoft.CostManagement/queryCost per day by meter, for OpenAI, partner models in Marketplace and every other AI service; actual, amortized beside, and by your tags
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}/providers/Microsoft.Insights/metricsTokens per model deployment per day: prompt, generated, cached
/subscriptions?api-version=2022-12-01Subscriptions the app can see, each one read

Covered another way

The same cost per meter per day, read from Cost Management's query3

/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Consumption/aggregatedcostCost summed over a management group
/{scope}/providers/Microsoft.Consumption/chargesCharges per billing period
/{scope}/providers/Microsoft.Consumption/usageDetailsUsage and cost per meter per day, older API

The same token counts, read per account from the metrics endpoint2

/subscriptions/{subscriptionId}/providers/Microsoft.Insights/metricsThe same metrics for every resource of a type in a region
/subscriptions/{subscriptionId}/metrics:getBatchThe same metrics for many resources in one call

The same accounts, read for the whole subscription1

/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accountsThe same accounts, one resource group

The vendor's own advice to buy: Valistry's opportunities come from your runs3

/{billingScope}/providers/Microsoft.CostManagement/benefitRecommendationsAzure's advice on savings plans to buy
/{scope}/providers/Microsoft.Consumption/reservationRecommendationDetailsDetail of one reservation recommendation
/{scope}/providers/Microsoft.Consumption/reservationRecommendationsAzure's advice on reservations to buy

Partner models read from the cost query by publisher type, with the offer and the meter1

/{scope}/providers/Microsoft.Consumption/marketplacesMarketplace charges, such as partner models sold through Azure

The same tag keys, read per subscription1

/{scope}/providers/Microsoft.Consumption/tagsTag keys and values on cost records

Valistry forecasts and explains change from the ledger itself1

/{scope}/providers/Microsoft.CostManagement/forecastAzure's own cost forecast; a comparison, not a fact

Cost split by your tags, and amortized beside, read from the query1

/{scope}/providers/Microsoft.CostManagement/generateCostDetailsReportLine-by-line cost file with tags, actual or amortized

The same cost per meter per day, read from the query1

/{scope}/providers/Microsoft.CostManagement/generateDetailedCostReportOlder detailed cost file

Left out by rule

A setting that is not spend, a name or a limit16

/providers/Microsoft.CostManagement/operationsOperations the service offers
/subscriptions/{subscriptionId}/providers/Microsoft.CognitiveServices/deletedAccountsDeleted accounts that can still be restored
/subscriptions/{subscriptionId}/providers/Microsoft.CognitiveServices/locations/{location}/commitmentTiersCommitment tiers on offer: a price list, not your spend
/subscriptions/{subscriptionId}/providers/Microsoft.CognitiveServices/locations/{location}/modelsModels offered in a region
/subscriptions/{subscriptionId}/providers/Microsoft.CognitiveServices/modelCapacitiesWhere capacity is free for a model
/subscriptions/{subscriptionId}/providers/Microsoft.CognitiveServices/skusAccount types and tiers on offer
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}/listKeysThe account's keys: secrets, never read
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}/modelsModels this account can deploy
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}/raiPoliciesContent filter policies
/{resourceUri}/providers/Microsoft.Insights/metricDefinitionsWhich metrics a resource has
/{resourceUri}/providers/Microsoft.Insights/metricNamespacesMetric namespaces of a resource
/{scope}/providers/Microsoft.CostManagement/exportsScheduled cost exports to a storage account
/{scope}/providers/Microsoft.CostManagement/exports/{exportName}/runHistoryWhen an export ran and whether it worked
/{scope}/providers/Microsoft.CostManagement/scheduledActionsScheduled cost emails and anomaly alerts
/{scope}/providers/Microsoft.CostManagement/settingsCost Management settings for a scope
/{scope}/providers/Microsoft.CostManagement/viewsSaved cost views

One item of a list: we read the whole list5

/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}One account
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}/deployments/{deploymentName}One deployment
/{scope}/providers/Microsoft.CostManagement/budgets/{budgetName}One budget
/{scope}/providers/Microsoft.CostManagement/costDetailsOperationResults/{operationId}The file one cost details report produced
/{scope}/providers/Microsoft.CostManagement/operationStatus/{operationId}Status of one detailed cost report

It changes the vendor's settings: we only read5

/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}Creates or changes an account
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/{accountName}/deployments/{deploymentName}Creates or changes a deployment
/{scope}/providers/Microsoft.CostManagement/budgets/{budgetName}Creates or changes a budget
/{scope}/providers/Microsoft.CostManagement/exports/{exportName}Creates or changes an export
/{scope}/providers/Microsoft.CostManagement/exports/{exportName}/runRuns an export now

GitHub Copilot

59 endpoints in the vendor's own reference, read Sep 30, 2026: 6 read, 1 covered another way, 21 left out by rule, 31 not read yet.

Read

/app/installations/{installation_id}The organization the Valistry app is installed on
/installation/repositoriesRepositories the Valistry app was given
/orgs/{org}/copilot/billingCopilot plan, seat counts this cycle, and policies
/orgs/{org}/copilot/billing/seatsEach seat: holder, team, last activity and editor
/orgs/{org}/reposRepositories, newest push first
/repos/{owner}/{repo}/pullsClosed pull requests: merged or not, when, and the branch

Covered another way

The same merged pull requests, read per repository1

/search/issuesPull requests found by search

Left out by rule

It changes the vendor's settings: we only read12

/enterprises/{enterprise}/copilot/policies/coding_agentSets the enterprise cloud agent policy
/enterprises/{enterprise}/settings/billing/budgetsCreates an enterprise budget
/enterprises/{enterprise}/settings/billing/cost-centersCreates a cost center
/enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}/resourceAdds people or repositories to a cost center
/organizations/{org}/settings/billing/budgetsCreates a budget
/organizations/{org}/settings/billing/budgets/{budget_id}Deletes a budget
/organizations/{org}/settings/billing/budgets/{budget_id}Changes a budget
/orgs/{org}/copilot/billing/selected_teamsCancels teams' seats
/orgs/{org}/copilot/billing/selected_teamsGives teams Copilot seats
/orgs/{org}/copilot/billing/selected_usersCancels people's seats
/orgs/{org}/copilot/billing/selected_usersBuys seats for people
/orgs/{org}/copilot/coding-agent/permissionsChanges where the cloud agent may work

One item of a list: we read the whole list5

/enterprises/{enterprise}/settings/billing/budgets/{budget_id}One enterprise budget
/enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}One cost center
/organizations/{org}/settings/billing/budgets/{budget_id}One budget
/orgs/{org}/members/{username}/copilotOne member's seat
/repos/{owner}/{repo}/pulls/{pull_number}One pull request

A setting that is not spend, a name or a limit1

/orgs/{org}/copilot/coding-agent/permissionsWhich repositories Copilot's cloud agent may work in

Prompts, responses or files: never read3

/repos/{owner}/{repo}/pulls/{pull_number}/commitsCommits and their messages
/repos/{owner}/{repo}/pulls/{pull_number}/filesChanged files and their diffs
/repos/{owner}/{repo}/pulls/{pull_number}/reviewsReview comments

Cursor

69 endpoints in the vendor's own reference, read Sep 30, 2026: 3 read, 3 covered another way, 37 left out by rule, 26 not read yet.

Read

/teams/daily-usage-dataPer person per day: requests, lines, model most used, active or not
/teams/filtered-usage-eventsEach request: person, model, kind, tokens, cents charged beyond the plan
/teams/membersTeam members: email, name, role, removed or not

Covered another way

The same use per request, read from filtered usage events2

/analytics/by-user/modelsModel use per day per person
/analytics/team/modelsModel use per day across the team

Who was active each day, read from daily usage data1

/analytics/team/dauDaily active people

Left out by rule

Prompts, responses or files: never read5

/analytics/ai-code/changesEach accepted AI change
/analytics/ai-code/changes.csvThe same changes, as a file
/analytics/ai-code/commits/{commitHash}One commit with line-by-line blame
/analytics/team/bugbot-reviewsEach Bugbot review and its findings
/analytics/team/conversation-insightsInsights drawn from conversations

A setting that is not spend, a name or a limit10

/grok-bot/accessGrok Bot access
/grok-bot/auto-reviewGrok Bot auto review
/grok-bot/capabilitiesGrok Bot capabilities
/grok-bot/networkGrok Bot network
/grok-bot/setup-manifestsGrok Bot setup manifests
/grok-bot/team-rulesGrok Bot team rules
/settings/repo-blocklists/reposRepositories Cursor must not index
/teams/model-access/configurationWhich models the team may use (preview)
/teams/model-access/providersProviders and models, with access settings
/teams/model-access/providers/{provider}/modelsModels of one provider

It changes the vendor's settings: we only read19

/grok-bot/enableTurns Grok Bot on or off, and changes its rules
/settings/repo-blocklists/repos/upsertCreates or replaces a blocklist
/settings/repo-blocklists/repos/{repoId}Removes a blocklist
/teams/directory-groupsCreates a directory group
/teams/directory-groups/{groupId}Deletes an empty group
/teams/directory-groups/{groupId}Renames a group or changes its limits
/teams/directory-groups/{groupId}/members/bulk-addAdds members to a group
/teams/directory-groups/{groupId}/members/bulk-removeRemoves members from a group
/teams/groupsCreates a billing group
/teams/groups/{groupId}Deletes a billing group
/teams/groups/{groupId}Changes a billing group
/teams/groups/{groupId}/membersRemoves members from a billing group
/teams/groups/{groupId}/membersAdds members to a billing group
/teams/model-access/configurationChanges the model policy
/teams/model-access/providers/{provider}Turns a provider on or off
/teams/model-access/providers/{provider}/models/{model}Turns a model on or off
/teams/remove-memberRemoves a member
/teams/user-spend-limitSets one person's spend limit
/teams/user-spend-limitsSets spend limits for up to 100 people

Who changed what in the vendor's console: not spend1

/teams/audit-logsAudit log of admin changes

One item of a list: we read the whole list2

/teams/directory-groups/{groupId}One directory group
/teams/groups/{groupId}One billing group and its members

Databricks

48 endpoints in the vendor's own reference, read Sep 30, 2026: 4 read, 2 covered another way, 26 left out by rule, 16 not read yet.

Read

/api/2.0/sql/statementsRuns one read query on the billing system tables
/api/2.0/sql/statements/{statement_id}That query's result, polled until done
system.billing.list_pricesList price of each SKU over time
system.billing.usageBillable use per day: SKU, workspace, DBUs, tags, who ran it

Covered another way

The same use, read from system.billing.usage1

/api/2.0/accounts/{account_id}/usage/downloadBillable use as a file, per workspace and SKU

The outside provider bills it; read from that provider's connector1

system.ai_gateway.external_model_spendDatabricks' estimate of spend on outside models through its gateway

Left out by rule

A setting that is not spend, a name or a limit3

/api/2.0/accounts/{account_id}/dashboardThe account's usage dashboard
/api/2.0/accounts/{account_id}/log-deliveryWhere logs are delivered
/api/2.0/serving-endpoints/{name}/openapiThe endpoint's request schema

It changes the vendor's settings: we only read12

/api/2.0/accounts/{account_id}/dashboardCreates a usage dashboard
/api/2.1/accounts/{account_id}/budget-policiesCreates a budget policy
/api/2.1/accounts/{account_id}/budgetsCreates a budget
/api/2.1/accounts/{account_id}/budgets/{budget_id}Changes a budget
/api/2.0/serving-endpointsCreates a serving endpoint
/api/2.0/serving-endpoints/ptCreates a provisioned throughput endpoint
/api/2.0/serving-endpoints/{name}Deletes an endpoint
/api/2.0/serving-endpoints/{name}/ai-gatewayChanges gateway settings: limits, logging, guardrails
/api/2.0/serving-endpoints/{name}/configChanges an endpoint
/api/2.0/serving-endpoints/{name}/rate-limitsChanges an endpoint's rate limits
/api/2.0/serving-endpoints/{name}/tagsChanges an endpoint's tags
/api/2.0/sql/statements/{statement_id}/cancelCancels a query

One item of a list: we read the whole list4

/api/2.1/accounts/{account_id}/budget-policies/{policy_id}One budget policy
/api/2.1/accounts/{account_id}/budgets/{budget_id}One budget
/api/2.0/serving-endpoints/{name}One serving endpoint
/api/2.0/sql/statements/{statement_id}/result/chunks/{chunk_index}One chunk of a large result

A per-minute series: the day's total is what the ledger keeps2

/api/2.0/serving-endpoints/{name}/metricsEndpoint metrics: requests, latency, errors
system.compute.node_timelineMachine use by the minute

Traces of single calls: observability, and they can carry content2

/api/2.0/serving-endpoints/{name}/served-models/{served_model_name}/build-logsA served model's build logs
/api/2.0/serving-endpoints/{name}/served-models/{served_model_name}/logsA served model's recent logs

Prompts, responses or files: never read2

system.access.assistant_eventsMessages sent to the assistant
system.query.historyEvery query run, with its text

Who changed what in the vendor's console: not spend1

system.access.auditAudit events from every workspace

LiteLLM

122 endpoints in the vendor's own reference, read Sep 30, 2026: 4 read, 25 covered another way, 66 left out by rule, 27 not read yet.

Read

{proxy}/spend/logs/v2Each request: spend, tokens, model, key, team and person. If your proxy stores prompts, we drop them before saving
{proxy}/spend/logsFallback for proxies without v2, with summarize=false; per-request rows (same content caveat)
{proxy}/key/listKeys: hashed token, alias, team, user, organization, spend, max_budget, tpm/rpm limits, expiry
{proxy}/team/listTeams: alias, organization, members, spend, max_budget, budget_duration, tpm/rpm, models

Covered another way

The same money as the spend log we read, summed25

{proxy}/spend/tagsSpend per request tag over a date range (Enterprise)
{proxy}/spend/keysSpend per key (all-time)
{proxy}/spend/usersSpend per internal user
{proxy}/spend/calculateComputes cost for a model and token counts from the proxy price map; not a record of spend
{proxy}/global/spendTotal spend and max budget for the proxy
{proxy}/global/spend/reportDaily spend grouped by team, customer or api_key, with model breakdown (Enterprise)
{proxy}/global/spend/logsDaily spend totals, optionally for one key
{proxy}/global/spend/keysTop keys by spend
{proxy}/global/spend/teamsSpend per team per day
{proxy}/global/spend/modelsTop models by spend
{proxy}/global/spend/tagsSpend per tag over a date range (Enterprise)
{proxy}/global/spend/providerSpend per provider
{proxy}/global/spend/end_usersTop end users by spend
{proxy}/key/spend/reportSpend report for keys over a date range
{proxy}/user/spend/reportSpend report per internal user
{proxy}/team/spend/reportSpend report per team
{proxy}/organization/spend/reportSpend report per organization
{proxy}/user/daily/activityDaily spend, tokens, requests by model, provider, key (pre-aggregated table); cheaper than raw logs
{proxy}/user/daily/activity/aggregatedSame, summed over the range
{proxy}/team/daily/activityDaily spend and tokens per team, by model and key
{proxy}/team/daily/activity/aggregatedSame, summed over the range
{proxy}/team/spend/by_userTeam spend split by member
{proxy}/organization/daily/activityDaily spend and tokens per organization
{proxy}/tag/daily/activityDaily spend and tokens per tag
{proxy}/customer/daily/activityDaily spend and tokens per customer (end user); also /end_user/daily/activity

Left out by rule

Prompts, responses or files: never read2

{proxy}/spend/logs/ui/{request_id}Request and response body for one call
{proxy}/spend/logs/session/uiSession log view for the UI

A per-minute series: the day's total is what the ledger keeps5

{proxy}/spend/capture_rateShare of requests whose spend was logged; a data-quality check worth one read
{proxy}/global/activityRequests and tokens per day, UI chart
{proxy}/global/activity/modelRequests and tokens per model per day
{proxy}/global/activity/exceptionsError counts
{proxy}/global/activity/exceptions/deploymentError counts per deployment

It changes the vendor's settings: we only read57

{proxy}/global/spend/resetResets spend counters
{proxy}/global/spend/refreshRefreshes spend views
{proxy}/key/generateMutates proxy state
{proxy}/key/service-account/generateMutates proxy state
{proxy}/key/updateMutates proxy state
{proxy}/key/bulk_updateMutates proxy state
{proxy}/team/key/bulk_updateMutates proxy state
{proxy}/key/deleteMutates proxy state
{proxy}/key/{key}/regenerateMutates proxy state
{proxy}/key/{key}/reset_spendMutates proxy state
{proxy}/key/blockMutates proxy state
{proxy}/key/unblockMutates proxy state
{proxy}/key/healthMutates proxy state
{proxy}/team/newMutates proxy state
{proxy}/team/updateMutates proxy state
{proxy}/team/{team_id}Mutates proxy state
{proxy}/team/member_addMutates proxy state
{proxy}/team/member_deleteMutates proxy state
{proxy}/team/member_updateMutates proxy state
{proxy}/team/{team_id}/member/{user_id}/reset_spendMutates proxy state
{proxy}/team/{team_id}/member/{user_id}/reset_budgetMutates proxy state
{proxy}/team/bulk_member_addMutates proxy state
{proxy}/team/deleteMutates proxy state
{proxy}/team/blockMutates proxy state
{proxy}/team/unblockMutates proxy state
{proxy}/team/model/addMutates proxy state
{proxy}/team/model/deleteMutates proxy state
{proxy}/team/permissions_updateMutates proxy state
{proxy}/team/permissions_bulk_updateMutates proxy state
{proxy}/user/newMutates proxy state
{proxy}/user/updateMutates proxy state
{proxy}/user/bulk_updateMutates proxy state
{proxy}/user/deleteMutates proxy state
{proxy}/customer/newMutates proxy state
{proxy}/customer/updateMutates proxy state
{proxy}/customer/deleteMutates proxy state
{proxy}/customer/blockMutates proxy state
{proxy}/customer/unblockMutates proxy state
{proxy}/budget/newMutates proxy state
{proxy}/budget/updateMutates proxy state
{proxy}/budget/deleteMutates proxy state
{proxy}/organization/newMutates proxy state
{proxy}/organization/updateMutates proxy state
{proxy}/v2/organization/{organization_id}Mutates proxy state
{proxy}/organization/deleteMutates proxy state
{proxy}/organization/member_addMutates proxy state
{proxy}/organization/member_updateMutates proxy state
{proxy}/organization/member_deleteMutates proxy state
{proxy}/tag/newMutates proxy state
{proxy}/tag/updateMutates proxy state
{proxy}/tag/deleteMutates proxy state
{proxy}/model/newMutates proxy state
{proxy}/model/updateMutates proxy state
{proxy}/model/{model_id}/updateMutates proxy state
{proxy}/model/deleteMutates proxy state
{proxy}/model/blockMutates proxy state
{proxy}/model/unblockMutates proxy state

A setting that is not spend, a name or a limit2

{proxy}/team/metadata_schemaTeam metadata schema
{proxy}/team/permissions_listTeam member permissions

OpenAI

112 endpoints in the vendor's own reference, read Sep 30, 2026: 5 read, 8 covered another way, 82 left out by rule, 17 not read yet.

Read

/v1/organization/costsCost in dollars, per day by line_item and project (also api_key_id); the bill, including fine-tuning and storage
/v1/organization/data_retentionData retention setting, for Compliance
/v1/organization/usage/audio_transcriptionsTranscription seconds by model, project (read to join minutes to bill lines)
/v1/organization/usage/completionsTokens (input, cached, output, audio) and requests by model, project, key and person (kept as a hash), batch, service_tier. Read by model+project+key
/v1/fine_tuning/jobsFine-tuning runs: base model and trained tokens (needs a project key)

Covered another way

Priced from each line of the bill, which we read8

/v1/organization/usage/audio_speechesTTS characters and requests by model, project, key
/v1/organization/usage/code_interpreter_sessionsCode interpreter/container sessions by project
/v1/organization/usage/embeddingsInput tokens and requests by model, project, key, user
/v1/organization/usage/file_search_callsFile search tool calls by project (and vector store)
/v1/organization/usage/imagesImages by model, size, source (generation/edit/variation), project, key
/v1/organization/usage/moderationsInput tokens and requests by model, project, key, user
/v1/organization/usage/vector_storesVector store bytes by project; storage the bill charges per GB-day
/v1/organization/usage/web_search_callsWeb search tool calls by model, project, key

Left out by rule

It changes the vendor's settings: we only read57

/v1/organization/admin_api_keysMutates organization state
/v1/organization/admin_api_keys/{key_id}Mutates organization state
/v1/organization/certificatesMutates organization state
/v1/organization/certificates/activateMutates organization state
/v1/organization/certificates/deactivateMutates organization state
/v1/organization/certificates/{certificate_id}Mutates organization state
/v1/organization/certificates/{certificate_id}Mutates organization state
/v1/organization/data_retentionMutates organization state
/v1/organization/groupsMutates organization state
/v1/organization/groups/{group_id}Mutates organization state
/v1/organization/groups/{group_id}Mutates organization state
/v1/organization/groups/{group_id}/rolesMutates organization state
/v1/organization/groups/{group_id}/roles/{role_id}Mutates organization state
/v1/organization/groups/{group_id}/usersMutates organization state
/v1/organization/groups/{group_id}/users/{user_id}Mutates organization state
/v1/organization/invitesMutates organization state
/v1/organization/invites/{invite_id}Mutates organization state
/v1/organization/projectsMutates organization state
/v1/organization/projects/{project_id}Mutates organization state
/v1/organization/projects/{project_id}/api_keys/{api_key_id}Mutates organization state
/v1/organization/projects/{project_id}/archiveMutates organization state
/v1/organization/projects/{project_id}/certificates/activateMutates organization state
/v1/organization/projects/{project_id}/certificates/deactivateMutates organization state
/v1/organization/projects/{project_id}/data_retentionMutates organization state
/v1/organization/projects/{project_id}/groupsMutates organization state
/v1/organization/projects/{project_id}/groups/{group_id}Mutates organization state
/v1/organization/projects/{project_id}/hosted_tool_permissionsMutates organization state
/v1/organization/projects/{project_id}/model_permissionsMutates organization state
/v1/organization/projects/{project_id}/model_permissionsMutates organization state
/v1/organization/projects/{project_id}/rate_limits/{rate_limit_id}Mutates organization state
/v1/organization/projects/{project_id}/service_accountsMutates organization state
/v1/organization/projects/{project_id}/service_accounts/{service_account_id}Mutates organization state
/v1/organization/projects/{project_id}/service_accounts/{service_account_id}Mutates organization state
/v1/organization/projects/{project_id}/spend_alertsMutates organization state
/v1/organization/projects/{project_id}/spend_alerts/{alert_id}Mutates organization state
/v1/organization/projects/{project_id}/spend_alerts/{alert_id}Mutates organization state
/v1/organization/projects/{project_id}/usersMutates organization state
/v1/organization/projects/{project_id}/users/{user_id}Mutates organization state
/v1/organization/projects/{project_id}/users/{user_id}Mutates organization state
/v1/organization/rolesMutates organization state
/v1/organization/roles/{role_id}Mutates organization state
/v1/organization/roles/{role_id}Mutates organization state
/v1/organization/spend_alertsMutates organization state
/v1/organization/spend_alerts/{alert_id}Mutates organization state
/v1/organization/spend_alerts/{alert_id}Mutates organization state
/v1/organization/users/{user_id}Mutates organization state
/v1/organization/users/{user_id}Mutates organization state
/v1/organization/users/{user_id}/rolesMutates organization state
/v1/organization/users/{user_id}/roles/{role_id}Mutates organization state
/v1/organization/external_storageMutates organization state
/v1/organization/external_storage/{external_storage_id}Mutates organization state
/v1/organization/external_storage/{external_storage_id}/validateMutates organization state
/v1/organization/spend_limitMutates organization state
/v1/organization/spend_limitMutates organization state
/v1/organization/projects/{project_id}/spend_limitMutates organization state
/v1/organization/projects/{project_id}/spend_limitMutates organization state
/v1/organization/projects/{project_id}/service_accounts/{service_account_id}/api_keysMutates organization state

One item of a list: we read the whole list12

/v1/organization/admin_api_keys/{key_id}One admin key
/v1/organization/groups/{group_id}One group
/v1/organization/groups/{group_id}/users/{user_id}One group membership
/v1/organization/invites/{invite_id}One invite
/v1/organization/projects/{project_id}One project
/v1/organization/projects/{project_id}/api_keys/{api_key_id}One project key
/v1/organization/projects/{project_id}/groups/{group_id}One project group
/v1/organization/projects/{project_id}/service_accounts/{service_account_id}One service account
/v1/organization/projects/{project_id}/spend_alerts/{alert_id}One project spend alert
/v1/organization/projects/{project_id}/users/{user_id}One project member
/v1/organization/spend_alerts/{alert_id}One organization spend alert
/v1/organization/users/{user_id}One member

Who changed what in the vendor's console: not spend1

/v1/organization/audit_logsAudit event feed

A setting that is not spend, a name or a limit12

/v1/organization/certificatesMTLS certificates, no money
/v1/organization/certificates/{certificate_id}One certificate
/v1/organization/groups/{group_id}/rolesRoles on a group
/v1/organization/groups/{group_id}/roles/{role_id}One group role
/v1/organization/projects/{project_id}/certificatesProject certificates
/v1/organization/projects/{project_id}/data_retentionProject data retention setting
/v1/organization/rolesCustom role catalog
/v1/organization/roles/{role_id}One role
/v1/organization/users/{user_id}/rolesA user's custom roles
/v1/organization/users/{user_id}/roles/{role_id}One user role
/v1/organization/external_storageCustomer-managed storage configs
/v1/organization/external_storage/{external_storage_id}One storage config

OpenRouter

49 endpoints in the vendor's own reference, read Sep 30, 2026: 1 read, 1 covered another way, 36 left out by rule, 11 not read yet.

Read

/api/v1/activitySpend and tokens per day, model and provider, last 30 days

Covered another way

A management key spends nothing; spend is read from activity1

/api/v1/keyThe calling key's own spend and limit

Left out by rule

A setting that is not spend, a name or a limit16

/api/v1/analytics/metaWhat the analytics query can group and filter by
/api/v1/batchesBatch jobs and their state
/api/v1/byokYour own provider keys used through OpenRouter
/api/v1/datasets/rankings-dailyPublic daily token totals of top models
/api/v1/datasets/session-costPublic cost per session across apps, not your spend
/api/v1/embeddings/modelsEmbedding models
/api/v1/endpoints/zdrEndpoints that keep no data
/api/v1/modelsModel catalog with list prices
/api/v1/models/countHow many models exist
/api/v1/models/userModels your settings allow
/api/v1/models/{author}/{slug}/endpointsProviders serving one model, with their prices
/api/v1/observability/destinationsWhere OpenRouter sends traces
/api/v1/presetsSaved request presets
/api/v1/private-endpointsPrivate endpoints and their prices
/api/v1/providersUpstream providers and their policies
/api/v1/scim/group-mappingsHow directory groups map to workspaces

Prompts, responses or files: never read2

/api/v1/filesUploaded files
/api/v1/generation/contentOne request's prompt and response

Traces of single calls: observability, and they can carry content1

/api/v1/generationOne request's tokens, cost and timing

It changes the vendor's settings: we only read10

/api/v1/generation/feedbackSends feedback on a request
/api/v1/guardrailsCreates a guardrail, and assigns or removes keys and members
/api/v1/keysCreates a key
/api/v1/keys/{hash}Deletes a key
/api/v1/keys/{hash}Changes a key's name, limit or state
/api/v1/scim/sync-jobsStarts a directory sync
/api/v1/workspacesCreates a workspace
/api/v1/workspaces/{id}Changes a workspace
/api/v1/workspaces/{id}/members/addAdds members to a workspace
/api/v1/workspaces/{workspace_ref}/budgets/{interval}Sets a workspace budget

One item of a list: we read the whole list7

/api/v1/guardrails/{id}One guardrail
/api/v1/guardrails/{id}/assignments/keysKeys under one guardrail
/api/v1/guardrails/{id}/assignments/membersMembers under one guardrail
/api/v1/keys/{hash}One key
/api/v1/model/{author}/{slug}One model
/api/v1/workspaces/{id}One workspace
/api/v1/workspaces/{workspace_ref}/budgets/{interval}One workspace budget

Snowflake Cortex

40 endpoints in the vendor's own reference, read Sep 30, 2026: 3 read, 5 covered another way, 5 left out by rule, 27 not read yet.

Read

SNOWFLAKE.ACCOUNT_USAGE.CORTEX_AI_FUNCTIONS_USAGE_HISTORYAI functions per hour: function, model, credits, tokens, pages
/api/v2/statementsRuns one read query on the Cortex usage view
/api/v2/statements/{statementHandle}That query's result, polled and read part by part

Covered another way

The same AI functions, read from CORTEX_AI_FUNCTIONS_USAGE_HISTORY3

SNOWFLAKE.ACCOUNT_USAGE.CORTEX_AISQL_USAGE_HISTORYAI SQL function credits, earlier name
SNOWFLAKE.ACCOUNT_USAGE.CORTEX_FUNCTIONS_QUERY_USAGE_HISTORYAI function credits per query
SNOWFLAKE.ACCOUNT_USAGE.CORTEX_FUNCTIONS_USAGE_HISTORYOlder view of AI function credits per hour

Valistry forecasts and explains change from the ledger itself1

SNOWFLAKE.ORGANIZATION_USAGE.ANOMALIES_IN_CURRENCY_DAILYSnowflake's own spend anomalies

The same view, read in each connected account1

SNOWFLAKE.ORGANIZATION_USAGE.CORTEX_AI_FUNCTIONS_USAGE_HISTORYAI functions across every account in the organization

Left out by rule

It changes the vendor's settings: we only read2

<budget>!SET_SPENDING_LIMITChanges a budget's limit
/api/v2/statements/{statementHandle}/cancelCancels a query

Who changed what in the vendor's console: not spend1

SNOWFLAKE.ACCOUNT_USAGE.LOGIN_HISTORYSign-ins

A per-minute series: the day's total is what the ledger keeps1

SNOWFLAKE.ACCOUNT_USAGE.METERING_HISTORYCredits per hour by service type

Prompts, responses or files: never read1

SNOWFLAKE.ACCOUNT_USAGE.QUERY_HISTORYEvery query run, with its text

Google Cloud for Vertex AI

42 endpoints in the vendor's own reference, read Sep 30, 2026: 2 read, 4 covered another way, 23 left out by rule, 13 not read yet.

Read

gcp_billing_export_v1_{billingAccountId}Standard billing export: cost per SKU, project and day, with credits
/bigquery/v2/projects/{projectId}/queriesOne read query on your billing export, for Vertex and other AI

Covered another way

The billing export names each project on its rows3

/v1/billingAccounts/{billingAccountId}/projectsProjects paid by a billing account
/v1/projects/{projectId}/billingInfoWhich billing account pays for a project
/v3/projectsProjects by name

Priced from each line of the bill, which we read1

/v1/services/{serviceId}/skusList prices per SKU, Vertex models included

Left out by rule

A setting that is not spend, a name or a limit7

/bigquery/v2/projects/{projectId}/datasetsDatasets in a project
/bigquery/v2/projects/{projectId}/datasets/{datasetId}/tablesTables in a dataset
/v1/billingAccounts/{billingAccountId}:getIamPolicyWho can see or pay the billing account
/v1/servicesGoogle Cloud services in the price catalog
/v1/projects/{projectId}/locations/global/quotaPreferencesQuota increases asked for
/v3/projects/{projectId}/metricDescriptorsWhich metrics exist
/v1beta1/publishers/{publisher}/modelsModel Garden catalog

It changes the vendor's settings: we only read9

/bigquery/v2/projects/{projectId}/jobsStarts a job, which can write tables
/v1/billingAccounts/{billingAccountId}/budgetsCreates a budget
/v1/billingAccounts/{billingAccountId}/budgets/{budgetId}Changes a budget
/v1/billingAccountsCreates a billing account
/v1/billingAccounts/{billingAccountId}Renames a billing account
/v1/billingAccounts/{billingAccountId}/subAccountsCreates a sub-account
/v1/billingAccounts/{billingAccountId}:moveMoves a billing account
/v1/billingAccounts/{billingAccountId}:setIamPolicyChanges who can use the billing account
/v1/projects/{projectId}/billingInfoChanges which account pays for a project

One item of a list: we read the whole list4

/bigquery/v2/projects/{projectId}/queries/{jobId}The rest of one query's result
/v1/billingAccounts/{billingAccountId}/budgets/{budgetId}One budget
/v1/billingAccounts/{billingAccountId}One billing account
/v1/projects/{projectId}/locations/{location}/endpoints/{endpointId}One endpoint

A per-minute series: the day's total is what the ledger keeps2

/v3/projects/{projectId}/timeSeriesVertex tokens, requests and latency per model, by the minute
/v3/projects/{projectId}/timeSeries:queryThe same metrics, by query

Prompts, responses or files: never read1

/v1/projects/{projectId}/locations/{location}/cachedContentsCached prompt content