Key points
- Monitoring is authorization-filtered: you see the runs, pipelines, and resources you are allowed to see.
- Coverage spans runs, pipelines, steps, tasks, triggers, external triggers, runners, LLM usage, reliability, efficiency, and security.
GET /metricsexposes Prometheus metrics including identity-provider capability and authorization grant ownership series.- Metrics are public by default for scraper compatibility and can require bearer auth with
metrics_require_auth. - Alert rules can be created, evaluated on demand, and produce alert events.
- Recommendations can be acknowledged or resolved so the same finding does not resurface indefinitely.
Examples
curl -s -H "Authorization: Bearer $NOPSAI_TOKEN" "$NOPSAI_URL/v1/monitoring/summary" | jq
curl -s -H "Authorization: Bearer $NOPSAI_TOKEN" "$NOPSAI_URL/v1/monitoring/reliability" | jq
# Prometheus scrape target; set METRICS_REQUIRE_AUTH=true to require a token
curl -s "$NOPSAI_URL/metrics" | head -20How it works
AI usage telemetry records hashes, revision markers, cache and session identity, provider-state IDs and support, cached input tokens, cache-write tokens where providers expose them, and bounded workspace retrieval sizes — without storing prompt bodies.
Saved monitoring views let a team keep a filter set rather than rebuilding it each time.
Implementation evidence
services/nopsai/monitoring_analytics_schema.goAnalytics schema and filters.
services/nopsai/routes.goThe monitoring route surface.

