Onboarding your team

How to add a teammate and ship them their first ingest token.

Onboarding your team

Two-minute flow. Admin issues a token, teammate drops in a config file, refreshes their terminal — they show up in the dashboard within 30 seconds.

1 · Admin: add the teammate as a member

Open the dashboard and scroll to the Settings panel (visible only to admins). Add their email:

Email: dev@yourcompany.com
Role: member (or admin if they should manage tokens themselves)

If their email domain isn’t already covered by your Cloudflare Access policy, add it there too — otherwise they can’t log in. From the Cloudflare dashboard: Zero Trust → Access → Applications → metric-ai dashboard → Edit policy → add their email or domain.

2 · Admin: issue an ingest token

Still in the Settings panel, under Ingest tokens:

Label: dev's laptop (free-form, helps you remember which token is which)
Assigned to: dev@yourcompany.com
Click Issue

The plaintext token is shown once. Copy it now.

3 · Send the teammate their config

Send them this ~/.claude/managed-settings.json file (replace <THEIR_TOKEN>):

{
  "env": {
    "CLAUDE_CODE_ENABLE_TELEMETRY": "1",
    "CLAUDE_CODE_ENHANCED_TELEMETRY_BETA": "1",
    "OTEL_METRICS_EXPORTER": "otlp",
    "OTEL_LOGS_EXPORTER": "otlp",
    "OTEL_TRACES_EXPORTER": "otlp",
    "OTEL_EXPORTER_OTLP_PROTOCOL": "http/json",
    "OTEL_EXPORTER_OTLP_ENDPOINT": "https://otlp.metric-ai.nativekloud.com",
    "OTEL_EXPORTER_OTLP_HEADERS": "Authorization=Bearer <THEIR_TOKEN>",
    "OTEL_METRIC_EXPORT_INTERVAL": "30000",
    "OTEL_LOGS_EXPORT_INTERVAL": "5000",
    "OTEL_TRACES_EXPORT_INTERVAL": "5000",
    "OTEL_RESOURCE_ATTRIBUTES": "team=core,deployment.environment=dev"
  }
}

4 · Teammate: drop the file in and restart

mkdir -p ~/.claude
# paste the JSON above into ~/.claude/managed-settings.json
# then restart any running claude session

Within 30 seconds of next activity their spans land in D1; within 15 minutes the cron rolls daily costs into the dashboard.

5 · Teammate: log in

Send them https://app.metric-ai.nativekloud.com/. Cloudflare Access prompts for an email one-time PIN; once verified, they see only their org’s data.

Revoking a teammate

Settings panel → Ingest tokens → click revoke on their row. The token stops authenticating ingest immediately (KV is purged at the same time). Then under Members → click remove to drop them from the org.

If they leave the company entirely, also remove their email from the Cloudflare Access policy so they can’t log in to the dashboard.

Tagging by team or environment

Edit their OTEL_RESOURCE_ATTRIBUTES — the dashboard segments by these:

team=platform,deployment.environment=prod

Numbers in cost-per-user / cost-per-repo will start segmenting on these tags as soon as the consumer indexes their next batch of spans.