Everything an AI agent can do with the Honeycomb API.

A reference guide for building AI agents: every method, how to authenticate, and the permissions each one needs.

Endpoints40
API versionv1
Last updated23 June 2026
Orientation

How the Honeycomb API works.

The Honeycomb API is how an app or AI agent works with a Honeycomb account: sending telemetry events to a dataset, running a query, building a board, and setting a trigger or an SLO that watches the data. Access is granted through an API key, where the key type and the permissions it carries set what a call can do, from an ingest key that only sends events to a configuration key that manages an environment to a management key that works across a team. Honeycomb does not push events; instead a trigger or burn alert notifies a registered recipient when monitored data crosses a threshold.

40Endpoints
9Capability groups
16Read
24Write
10Permissions
Authentication
Honeycomb authenticates with API keys rather than OAuth for first-party calls. The v1 API takes an Ingest Key or a Configuration Key in the X-Honeycomb-Team header, where an Ingest Key is the Key ID and Secret joined with no separator and a Configuration Key is its Token value. The v2 management API takes a Management Key in the Authorization header as a Bearer token, with the Key ID and Secret joined by a colon. Each key type carries a distinct prefix: hc[x]ik_ for ingest, hc[x]lk_ for configuration, and hc[x]mk_ for management.
Permissions
A key's type and its permission set are the scoping system. An Ingest Key only sends events and carries one permission, whether it may implicitly create a dataset, fixed at creation. A Configuration Key carries granular permissions chosen at creation, like Send Events, Manage Queries and Columns, Manage Triggers, Manage SLOs, Manage Markers, Manage Public Boards, Create Datasets, and Run Queries, and reaches one environment. A Management Key works across the whole team and is required for the v2 key and environment endpoints. A call without the needed permission returns 403.
Versioning
Honeycomb versions by path prefix, not by a dated version string. The v1 prefix covers event ingestion, queries, boards, triggers, SLOs, datasets, and columns, while the newer v2 prefix covers team-level management like API keys and environments. The two use different content types and authenticate with different key types. New resources are added under the prefix that fits, so an existing integration is not forced to migrate.
Data model
Honeycomb is built around events, the structured records sent to a dataset, and the resources that query and watch them. Most v1 resources are scoped to a dataset by slug in the path, and the special slug __all__ targets the whole environment where an endpoint supports it. A saved query is a reusable specification, referenced by id from boards and triggers, and run separately to produce a result. Honeycomb does not push events; instead a trigger or burn alert notifies a recipient when a threshold is crossed.
Connect & authenticate

Connection & authentication methods.

How an app or AI agent connects to Honeycomb determines what it can reach. There is a route for sending telemetry, a route for managing the resources in an environment, a team-level route for managing keys and environments, and a hosted server that exposes Honeycomb tools to agents, and each is governed by the key behind it and the permissions that key carries.

Ways to connect

REST API (v1)

The v1 API handles event ingestion and the resources inside an environment, like queries, boards, triggers, SLOs, datasets, and columns. It answers at https://api.honeycomb.io in the US and https://api.eu1.honeycomb.io in the EU, takes and returns JSON, and authenticates with an Ingest Key or a Configuration Key in the X-Honeycomb-Team header.

Best forSending telemetry and managing an environment's resources.
Governed byThe key and the permissions it carries.
Docs ↗

REST API (v2 management)

The v2 API handles team-level management, like API keys and environments. It uses the JSON:API content type application/vnd.api+json, authenticates with a Management Key sent as an Authorization Bearer token, and pages through lists with a cursor.

Best forManaging keys and environments across a team.
Governed byThe Management Key and the permissions it carries.
Docs ↗

Notifications (Triggers & Burn Alerts)

Honeycomb does not push raw events. A Trigger or a Burn Alert sends a notification to a registered recipient when a threshold is crossed or an SLO budget burns down. Recipients can be Email, Slack, PagerDuty, Microsoft Teams, or a webhook URL.

Best forReceiving alerts at an app or AI agent.
Governed byThe recipient registered on the trigger or burn alert.
Docs ↗

MCP server (Model Context Protocol)

Honeycomb's hosted Model Context Protocol server lets an agent query traces, metrics, and logs, check the state of triggers and SLOs, and create boards through natural language. It authenticates with OAuth or an API key, and is offered to one-click clients like Cursor, VS Code, and Claude Desktop. A self-hosted version exists at github.com/honeycombio/honeycomb-mcp but is deprecated in favor of the hosted server.

Best forConnecting an AI agent to Honeycomb through MCP.
Governed byThe OAuth grant or the API key and the permissions it carries.
Docs ↗
Authentication

Ingest Key

An Ingest Key sends telemetry data to one environment. It carries a single permission, whether it may implicitly create a dataset when an event names one that does not exist, and that permission cannot be changed after the key is created. It is passed in the X-Honeycomb-Team header as the Key ID and Secret joined with no separator.

TokenEnvironment key (hc[x]ik_...)
Best forSending events from a service or agent
Docs ↗

Configuration Key

A Configuration Key manages the resources in one environment. It carries granular permissions chosen at creation, like Send Events, Manage Queries and Columns, Manage Triggers, Manage SLOs, Manage Markers, Manage Public Boards, Create Datasets, and Run Queries. Its Token value is passed in the X-Honeycomb-Team header.

TokenEnvironment key (hc[x]lk_...)
Best forManaging an environment's queries, boards, triggers, and SLOs
Docs ↗

Management Key

A Management Key works at the team level across all environments, and is required by the v2 API for managing API keys and environments. It is sent in the Authorization header as a Bearer token, with the Key ID and Secret joined by a colon.

TokenTeam key (hc[x]mk_...)
Best forTeam-level management of keys and environments
Docs ↗
Capability map

What an AI agent can do in Honeycomb.

The Honeycomb API is split into areas an agent can act on, like events, queries, boards, triggers, SLOs, and datasets. Each area has its own methods and its own permissions, and some grant access to far more than others.

Events

2 endpoints

Send a single telemetry event, or send a batch of events, to a dataset.

Writes here add real telemetry data to a dataset.
View endpoints

Markers

4 endpoints

List, create, update, and delete the markers that flag points in time on a graph, like deploys.

Writes here change real marker data.
View endpoints

Triggers

5 endpoints

List, read, create, update, and delete the triggers that notify recipients when data crosses a threshold.

Writes here change real trigger data and can change who gets paged.
View endpoints

Boards

5 endpoints

List, read, create, update, and delete the boards that collect saved queries and panels.

Writes here change real board data.
View endpoints

Queries & query results

4 endpoints

Create and read a saved query specification, and run a query to get its results.

Writes here create real query data; running a query reads event data.
View endpoints

SLOs & burn alerts

7 endpoints

List, read, create, update, and delete service level objectives and the burn alerts that watch their budget.

Writes here change real SLO and burn alert data and can change who gets paged.
View endpoints

Datasets

3 endpoints

List, read, create, update, and delete the datasets that hold events.

Writes here change real dataset data.
View endpoints

Columns & derived columns

5 endpoints

List, read, create, update, and delete the columns in a dataset and the calculated fields derived from them.

Writes here change real column and calculated field data.
View endpoints

API keys

5 endpoints

List, read, create, update, and delete the API keys for a team, through the team-level v2 management API.

Writes here change real API key data and can grant or revoke access.
View endpoints
Endpoint reference

Every Honeycomb API method.

Filter by method, access, or permission, or search any path. Select a row for version detail, rate limits, the related webhook event, and the source.

MethodEndpointWhat it doesAccessPermissionVersion

Events

Send a single telemetry event, or send a batch of events, to a dataset.2

Best sent with an Ingest Key. A Configuration Key works if it has the Send Events permission.

Acts onevent
Permission (capability)Send Events
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

The preferred way to send events. Best sent with an Ingest Key; a Configuration Key works if it has the Send Events permission.

Acts onevent
Permission (capability)Send Events
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Markers

List, create, update, and delete the markers that flag points in time on a graph, like deploys.4

Configuration Key with the Manage Markers permission.

Acts onmarker
Permission (capability)Manage Markers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Markers permission.

Acts onmarker
Permission (capability)Manage Markers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Markers permission.

Acts onmarker
Permission (capability)Manage Markers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Markers permission.

Acts onmarker
Permission (capability)Manage Markers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Triggers

List, read, create, update, and delete the triggers that notify recipients when data crosses a threshold.5

Configuration Key with the Manage Triggers permission.

Acts ontrigger
Permission (capability)Manage Triggers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Triggers permission.

Acts ontrigger
Permission (capability)Manage Triggers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Triggers permission. Recipients can be Email, Slack, PagerDuty, Microsoft Teams, or a webhook.

Acts ontrigger
Permission (capability)Manage Triggers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Triggers permission.

Acts ontrigger
Permission (capability)Manage Triggers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Triggers permission.

Acts ontrigger
Permission (capability)Manage Triggers
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Boards

List, read, create, update, and delete the boards that collect saved queries and panels.5

Configuration Key with the Manage Public Boards permission.

Acts onboard
Permission (capability)Manage Public Boards
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Public Boards permission.

Acts onboard
Permission (capability)Manage Public Boards
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Public Boards permission. A create call with type classic now fails.

Acts onboard
Permission (capability)Manage Public Boards
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Public Boards permission.

Acts onboard
Permission (capability)Manage Public Boards
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Public Boards permission.

Acts onboard
Permission (capability)Manage Public Boards
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Queries & query results

Create and read a saved query specification, and run a query to get its results.4

Configuration Key with the Manage Queries and Columns permission. Use __all__ for an environment-wide query.

Acts onquery
Permission (capability)Manage Queries and Columns
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Queries and Columns permission.

Acts onquery
Permission (capability)Manage Queries and Columns
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Enterprise plan only. Needs the Manage Queries and Columns and Run Queries permissions on a Configuration Key.

Acts onquery_result
Permission (capability)Run Queries
VersionAvailable since the API’s base version
Webhook eventNone
Rate limit10 requests per minute (1 per minute with relational fields)

Enterprise plan only. Needs the Manage Queries and Columns and Run Queries permissions on a Configuration Key.

Acts onquery_result
Permission (capability)Run Queries
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

SLOs & burn alerts

List, read, create, update, and delete service level objectives and the burn alerts that watch their budget.7

Configuration Key with the Manage SLOs permission.

Acts onslo
Permission (capability)Manage SLOs
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage SLOs permission.

Acts onslo
Permission (capability)Manage SLOs
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage SLOs permission.

Acts onslo
Permission (capability)Manage SLOs
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage SLOs permission.

Acts onslo
Permission (capability)Manage SLOs
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage SLOs permission.

Acts onslo
Permission (capability)Manage SLOs
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Burn alerts are part of the SLOs API and use the Manage SLOs permission.

Acts onburn_alert
Permission (capability)Manage SLOs
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Filtered by the SLO id passed as a query parameter. Uses the Manage SLOs permission.

Acts onburn_alert
Permission (capability)Manage SLOs
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Datasets

List, read, create, update, and delete the datasets that hold events.3

Configuration Key with a dataset permission.

Acts ondataset
Permission (capability)Manage Datasets
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with a dataset permission.

Acts ondataset
Permission (capability)Manage Datasets
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Create Datasets permission.

Acts ondataset
Permission (capability)Create Datasets
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Columns & derived columns

List, read, create, update, and delete the columns in a dataset and the calculated fields derived from them.5

Configuration Key with the Manage Queries and Columns permission. An optional key_name parameter filters to one column.

Acts oncolumn
Permission (capability)Manage Queries and Columns
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Queries and Columns permission.

Acts oncolumn
Permission (capability)Manage Queries and Columns
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Queries and Columns permission.

Acts oncolumn
Permission (capability)Manage Queries and Columns
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Queries and Columns permission.

Acts onderived_column
Permission (capability)Manage Queries and Columns
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

Configuration Key with the Manage Queries and Columns permission.

Acts onderived_column
Permission (capability)Manage Queries and Columns
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

API keys

List, read, create, update, and delete the API keys for a team, through the team-level v2 management API.5

A v2 endpoint. Authenticates with a Management Key sent as Authorization Bearer, and uses the JSON:API content type. Cursor-paginated.

Acts onapi_key
Permission (capability)Management Key
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

A v2 endpoint. Authenticates with a Management Key sent as Authorization Bearer.

Acts onapi_key
Permission (capability)Management Key
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

A v2 endpoint. Authenticates with a Management Key. The secret of the new key is returned once, at creation.

Acts onapi_key
Permission (capability)Management Key
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

A v2 endpoint. Authenticates with a Management Key.

Acts onapi_key
Permission (capability)Management Key
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply

A v2 endpoint. Authenticates with a Management Key.

Acts onapi_key
Permission (capability)Management Key
VersionAvailable since the API’s base version
Webhook eventNone
Rate limitStandard limits apply
No endpoints match those filters.
Webhooks

Webhook events.

Honeycomb does not push events to an integration. Instead, a Trigger or a Burn Alert sends a notification to a registered recipient, like a Slack channel, an email address, or a webhook URL, when monitored data crosses a threshold or an SLO burns through its budget.

EventWhat it signalsTriggered by
No events match that search.
Rate limits & pagination

Rate limits, pagination & request size.

Honeycomb limits how fast an app or AI agent can call, through a per-team request quota measured over a short window, with stricter limits on a few heavy endpoints like running a query.

Request rate

Honeycomb meters requests per team over a short rolling window, and reports the state in response headers: a RateLimit header gives limit, remaining, and reset in seconds, and a RateLimit-Policy header gives the request count and window, for example 100 requests per 60 seconds. A few endpoints are far stricter: running a query through Create Query Result is limited to 10 requests per minute, and 1 per minute when the query uses relational fields. Exceeding a limit returns HTTP 429; most 429 responses carry a Retry-After header, except the Events, Batch Events, and Query Data APIs.

Pagination

Cursor-based pagination applies to the v2 list endpoints, like List all API Keys and List all Environments. The page[size] parameter sets the page size, defaulting to 20 and capping at 100, and page[after] takes the opaque cursor from the previous response's links.next field. Pagination ends when links.next is null. Cursors are opaque and should be passed through, not parsed. The v1 list endpoints return their full set without a cursor.

Request size

A request may be at most 100,000 bytes, and exceeding it returns 413 Payload Too Large, so large telemetry should be split across batches. The v1 API takes and returns application/json, while the v2 API uses the JSON:API content type application/vnd.api+json.

Errors

Status codes & error handling.

The status codes an agent should handle, and what to do about each.

StatusCodeMeaningWhat to do
400Bad RequestThe request body could not be parsed or is invalid.Fix the request body and resend.
401UnauthorizedThe API key is missing or invalid.Send a valid key in the right header for the API version, the X-Honeycomb-Team header for v1 or an Authorization Bearer token for v2.
403ForbiddenThe key is valid but does not carry the permission this operation needs.Grant the missing permission on the key, such as Manage Triggers or Run Queries, or use a key type that allows the call.
404Not FoundThe requested resource does not exist, or the key cannot see it.Confirm the dataset slug and resource id, and that the key reaches that environment.
409ConflictThe request conflicts with the current state, such as a duplicate name.Use a different name, or update the existing resource instead of creating it.
413Payload Too LargeThe request exceeds the maximum size of 100,000 bytes.Send fewer events per batch, or split the request.
415Unsupported Media TypeThe Content-Type header does not match what the endpoint expects: application/json for v1 and application/vnd.api+json for v2.Set the Content-Type header to the value the API version expects.
422Validation FailedThe request was well-formed but a field held an invalid value. The body carries a type_detail array naming each failed field with a code like invalid, missing, incorrect_type, or already_exists.Read the type_detail array, correct the named fields, and resend.
429Rate LimitedThe request rate exceeded the per-team quota. A v1 response uses the RFC 7807 problem format, and a v2 response uses a JSON:API errors array with code rate-limited/may-retry.Back off and retry, using the Retry-After header where present and the RateLimit header to pace requests.
500Internal Server ErrorAn unexpected error occurred on Honeycomb's side.Retry with backoff, and contact Honeycomb support if it persists.
Versioning & freshness

Version history.

Honeycomb versions its API by path prefix rather than by a dated version string. The v1 API covers event ingestion and the resources inside an environment, and a newer v2 API covers team-level management like API keys and environments.

Version history

What changed, and when

Latest versionv1
v1Current version
Path-prefix versioning (v1 and v2)

Honeycomb versions its API by path prefix rather than a dated version string. The v1 prefix covers event ingestion and the resources inside an environment, and the v2 prefix covers team-level management. New resources are added under the prefix that fits, so an existing integration is not forced to migrate, and breaking changes are communicated through the API changelog rather than a version bump.

What changed
  • v1: event ingestion, queries, boards, triggers, SLOs, burn alerts, datasets, columns, and calculated fields, authenticated with Ingest or Configuration Keys
  • v2: team-level management of API keys and environments, authenticated with a Management Key and using the JSON:API content type
2025-08-29Requires migration
Legacy (classic) Boards removed

The Boards API stopped accepting legacy classic boards. From 15 August 2025 a create call with type classic, or with the type omitted, fails, and on 29 August 2025 any remaining legacy boards were automatically migrated to flexible boards. New boards use the flexible panel layout with a layout_generation field set to manual or auto.

What changed
  • Create calls with type classic now fail
  • Remaining legacy boards auto-migrated to flexible boards on 29 August 2025
  • Flexible boards add a layout_generation field (manual default, or auto) and support text panels and preset filters
2025-07-17Feature update
Hosted MCP server (public beta)

Honeycomb announced a hosted Model Context Protocol server that lets an AI agent query traces, metrics, and logs, check triggers and SLOs, and create boards. It authenticates with OAuth or an API key and offers one-click setup for clients like Cursor, VS Code, and Claude Desktop.

What changed
  • Hosted MCP server with OAuth or API key authentication
  • One-click integration for Cursor, VS Code, and Claude Desktop
2021-04-16Feature update
Management API introduced

Honeycomb made its Management API generally available, letting teams programmatically manage configuration like queries, datasets, derived columns, boards, triggers, and SLOs, the foundation the v1 resource endpoints and later the v2 key and environment endpoints build on.

What changed
  • Programmatic management of queries, datasets, derived columns, boards, triggers, and SLOs
  • Usable directly or through the Honeycomb Terraform provider

An integration calls the prefix it needs and is not forced to migrate when new resources are added.

Honeycomb API changelog ↗
Questions

Honeycomb API, answered.

What's the difference between an Ingest Key, a Configuration Key, and a Management Key?+
The three key types do different jobs. An Ingest Key only sends telemetry to one environment and carries a single permission, whether it may implicitly create a dataset, set when the key is created and not changeable afterward. A Configuration Key manages the resources in one environment, like queries, boards, triggers, and SLOs, and carries granular permissions chosen at creation. A Management Key works at the team level across all environments and is required by the v2 API to manage API keys and environments.
How do I authenticate, and which header do I use?+
It depends on the key type and the API version. For the v1 API, pass an Ingest Key or a Configuration Key in the X-Honeycomb-Team header: an Ingest Key is the Key ID and Secret joined with no separator, and a Configuration Key is its Token value. For the v2 management API, pass a Management Key in the Authorization header as a Bearer token, with the Key ID and Secret joined by a colon.
What's the difference between the v1 and v2 APIs?+
Honeycomb versions by path prefix. The v1 prefix covers event ingestion and the resources inside an environment, like queries, boards, triggers, SLOs, datasets, and columns, takes JSON, and authenticates with an Ingest or Configuration Key in the X-Honeycomb-Team header. The v2 prefix covers team-level management like API keys and environments, uses the JSON:API content type, authenticates with a Management Key as a Bearer token, and pages through lists with a cursor.
How does an agent get notified, since Honeycomb has no webhooks for raw events?+
Honeycomb does not push raw events to an integration. Instead, a Trigger watches a query and notifies its recipients when a threshold is crossed, and a Burn Alert notifies its recipients when an SLO is burning through its error budget. A recipient can be Email, Slack, PagerDuty, Microsoft Teams, or a webhook URL, so an agent receives alerts at a webhook rather than a stream of every event.
What are the rate limits?+
Requests are metered per team over a short rolling window, reported in a RateLimit header that gives the limit, the remaining count, and the seconds until reset, plus a RateLimit-Policy header that gives the count and window. A few endpoints are far stricter: running a query through Create Query Result is capped at 10 requests per minute, and 1 per minute for a query with relational fields. Going over returns 429, usually with a Retry-After header, though the Events, Batch Events, and Query Data APIs omit it.
Why is sending one event at a time discouraged?+
The single-event endpoint exists mainly for testing. Sending events in batches through the batch endpoint is far more efficient, because one request carries many events rather than one request per event. A request is also capped at 100,000 bytes and returns 413 if it is larger, so very large payloads should be split across batches.
How do I run a query and get its data back?+
Running a query is a two-step flow on the Enterprise plan. First create a query specification, which returns an id, then create a query result for that query, which starts the run, and finally fetch the query result to read the data once it is complete. Running a query needs the Manage Queries and Columns and Run Queries permissions, and Create Query Result is limited to 10 requests per minute.
Related

More developer API guides for agents

What is Bollard AI?

Control what every AI agent can do in Honeycomb.

Bollard AI sits between a team's AI agents and Honeycomb. Grant each agent exactly the access it needs, read or write, resource by resource, and every call is checked and logged.

  • Set read, write, or full access per agent, never a shared Honeycomb key.
  • Denied by default, so an agent reaches only what has been explicitly allowed.
  • Every call recorded in plain English: who, what, where, and the decision.
Honeycomb
Observability Agent
Send telemetry events ActionOffReadFull use
Read boards and queries ResourceOffReadFull use
Manage triggers and alerts ResourceOffReadFull use
Per-agent access, set in Bollard AI, not in Honeycomb