IDEs
Monitor IDE AI Usage
Once editors send model requests through your gateway, you can see each decision, the captured conversation, and what it cost. Each question has its own place to look:
| Question | Where to look |
|---|---|
| Was a request allowed or blocked, and why? | Runtime events |
| What did the conversation say? | History, when capture is on |
| How many tokens, and what cost? | Usage |
| Who changed configuration or access? | Trail |
Use a short, clearly labeled test prompt when you look for one request, so it stands out from other traffic.
Before you start
- A gateway from Gateway Setup for IDEs, started with
--agent. - At least one editor that sends model requests to the gateway. An MCP-only connection sends no model requests.
- A CLI session with
events:read, fromVERDICTAN_API_TOKENorverdictan auth login. - For conversation content in History: a
history.captureblock withenabled: trueandmode: rawormode: redacted. See Runtime Configuration.
To tell editor traffic apart, run the editor gateway under its own --agent value, such as ide-gateway, and give each developer or team its own client API token. Usage can then group cost by agent and by API key.
Read recent events
-
Read the events from the last ten minutes while someone uses the editor:
verdictan events tail --since 10m --json -
Show only blocked decisions:
verdictan events tail --since 10m --event-type decision --verdict block --json -
Show one gateway:
verdictan events tail --since 30m --gateway-id <gateway-id> --json
Each command reads one page, newest first. Run it again to see events that arrived later. Use --json: each event then shows its timestamp, verdict, and reason_code, while the text lines show - for the time, model, and policy. --verdict matches the stored value exactly, such as allow, block, redact, or escalate. The API equivalent is GET /v1/events, which requires since. See verdictan events.
Review one request
- Find the event in the tail or in
GET /v1/events, and read the verdict and reason code. - Read the policy results, not just the verdict: a request can be allowed after a redaction.
- If capture is on, open History and find the session. With
mode: rawormode: redacted, it shows the content as well as the metadata. - For configuration or access changes around the request, open Trail.
- If the request was escalated, open Inbox.
Notifications don't report ordinary IDE decisions, gateway health, configuration reloads, export completion, or budget thresholds. See Notifications.
Read IDE cost in Usage
- Open Usage in the Console and set Time to your review period.
- Set Group by to Agent to compare the editor gateway with other agents, or to API key to compare developers.
- Add a filter for the editor agent.
Costs are estimates from token counts and pricing metadata; see Usage Costs and Budgets. From the CLI, run verdictan spend summary --since 30d --json.
Export evidence
-
For a short window, write events to a file:
verdictan events export --since 7d --format csv > ide-events-7d.csv -
For a long window or a handoff to another team, use an export job:
verdictan export-jobs create --since 30d --format csv verdictan export-jobs list --json verdictan export-jobs download --job-id <job-id> > ide-audit.csv -
Note the request IDs, escalation IDs, or incident references the export supports.
Export only the window the review needs. See verdictan export-jobs for job states and formats.
Verify
- Send one request from the editor, then run
verdictan events tail --since 10m --json. A new event appears with atimestampfrom the moment you sent the request. - If capture is on, find the session in History by request or session ID; use the time only to narrow the search.
- In Usage, group by Agent and check tokens and estimated cost. A tiny amount shows as
<$0.01, and a blocked request may have no upstream cost.
Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
No events found. | The window or filters exclude the request, or the CLI is on another region | Widen --since, drop filters, and check verdictan regions current. |
| The editor gets a reply but no event appears | The endpoint, event delivery, organization, region, or time window differs | Check the editor's base URL and model. See IDE Integration Troubleshooting. |
| No session in History | history.capture.enabled is false | Set it to true and choose a mode. |
| Metadata but no content | history.capture.mode is metadata_only, the default | After a data review, set mode to redacted or raw. |
| A blocked request is missing from History | history.capture.include_blocked is false, the default | Set it to true. The event records the block either way. |
| No cost for the editor agent | The target has no pricing metadata, or the traffic used another agent | Check the target's pricing and the gateway's --agent value. |
verdictan events export fails to authenticate | No API token or session | Set VERDICTAN_API_TOKEN or run verdictan auth login. |
Next steps
- Configure Policies for IDE Traffic: the controls behind the verdicts you review.
- Investigate a Blocked Request: trace one blocked request to its policy.
- Export Evidence for a Review: package event and Trail evidence for an audit.