SaibleDocs
Exposure

Configuration exposure of each AI platform

Read-only, with the credentials you already gave Saible. Each finding comes with the script that fixes it. Built, but not yet run against a live account.

Readeach platform,read onlyCheckchained,two show driftFindingsplace of the fix,the scriptCoveragerequests thatcarry evidenceSeal reportproposed by anorganisation adminReview queuean organisationadmin seals it↺ every night over the last 30 days, or Run now
From each platform's configuration to a sealed report · nothing is changed on any platform
  • OpenAI
    the Admin key: projects, keys, model permissions and retention
  • Anthropic
    the Admin API key: workspaces, members and API keys
  • Azure OpenAI
    the service principal with the Reader role: accounts and deployments
  • Amazon Bedrock
    the connector's role with read grants: logging, guardrails and requests
  • Snowflake
    the reader role: Cortex settings, grants and Cortex usage
  • Databricks
    a token or a service principal: serving endpoints and their usage
Data read with the billing feed's credential · no reader has yet run against a live account
  • Fix from hereA control on the platform itself. The finding includes the script, and a person runs it.
  • Needs the gatewayOnly a control on the request path can address it.
  • Platform consoleOnly the platform's own console or a commercial agreement can address it.
Place where each finding is fixed · the report never writes to a platform
Steps
  1. 1Connect each platform's billing feed on Settings → Providers. Where a read needs an additional grant, the report names it.
  2. 2On Exposure, an organisation admin clicks Run now or waits for the nightly run.
  3. 3Open a finding to see the rows it is based on and the script that fixes it. Run the script yourself.
  4. 4An organisation admin clicks Acknowledge, or Resolve with a reason.
  5. 5Click Seal report. An organisation admin approves it in Review queue.
For your agents

This topic is also documented as Agent Skills that your agents can load: exposure-report. Request them from Saible.

Next · Overview · Getting startedShared service or Dedicated Saible →