---
title: "Guides: 26 questions answered at length"
canonical_url: "https://tokenobserve.com/guides"
published: 2026-09-02
last_updated: 2026-10-21
---

# Guides: 26 questions answered at length

Each guide answers one question in enough depth to be worth the read whether or not anything is ever bought, and names Token Observe only where it is the answer to how you would do that.

- How do I connect OpenAI billing to Token Observe? (https://tokenobserve.com/guides/connect-openai-billing)
- How do I connect Anthropic billing to Token Observe? (https://tokenobserve.com/guides/connect-anthropic-billing)
- How do I connect xAI billing to Token Observe? (https://tokenobserve.com/guides/connect-xai-billing)
- How do I connect Google Cloud billing to Token Observe? (https://tokenobserve.com/guides/connect-google-cloud-billing)
- Why does our AI bill differ from our token estimate? (https://tokenobserve.com/guides/reconcile-ai-provider-spend)
- How do I give Claude Code a budget and inspect its evidence? (https://tokenobserve.com/guides/claude-code-spend-controls)
- What is AI agent governance, and what does it require? (https://tokenobserve.com/guides/ai-agent-governance)
- How do you defend an AI agent against prompt injection? (https://tokenobserve.com/guides/prompt-injection-defence)
- What does the EU AI Act require of an organisation deploying AI agents? (https://tokenobserve.com/guides/eu-ai-act-for-agents)
- How do you stop AI agent spend running away? (https://tokenobserve.com/guides/llm-cost-control)
- How should you model what an AI agent is allowed to do? (https://tokenobserve.com/guides/agent-permissions-model)
- What counts as audit evidence for an AI agent’s actions? (https://tokenobserve.com/guides/ai-audit-evidence)
- How do you secure Model Context Protocol tool servers? (https://tokenobserve.com/guides/mcp-security)
- How do you find AI use that is not going through your controls? (https://tokenobserve.com/guides/shadow-ai-discovery)
- How do you secure an AI agent? (https://tokenobserve.com/guides/ai-agent-security)
- How should an LLM gateway be architected? (https://tokenobserve.com/guides/llm-gateway-architecture)
- Do I need agent observability or governance, or both? (https://tokenobserve.com/guides/agent-observability-vs-governance)
- Should AI governance run in my own network? (https://tokenobserve.com/guides/self-hosted-vs-saas-ai-governance)
- What do you do when an agent does something it should not have? (https://tokenobserve.com/guides/ai-incident-response)
- How should one agent be allowed to ask another for something? (https://tokenobserve.com/guides/agent-to-agent-delegation)
- How do you keep agent traffic inside a jurisdiction? (https://tokenobserve.com/guides/llm-data-residency)
- What should you ask an AI vendor? (https://tokenobserve.com/guides/ai-vendor-security-questionnaire)
- How do you decide which agents are risky? (https://tokenobserve.com/guides/measuring-ai-agent-risk)
- How do you express an AI policy so it can be tested? (https://tokenobserve.com/guides/policy-as-code-for-ai)
- How do you take an agent from prototype to governed production? (https://tokenobserve.com/guides/ai-agent-onboarding)
- Why don’t existing API controls work for agents? (https://tokenobserve.com/guides/why-agents-need-different-controls)