Overview

The OpenAI Inspector provides visibility into your organization's OpenAI Platform environment, helping you monitor users, credentials, projects, and API usage that power your AI applications and automations. As organizations increasingly rely on GPT-powered integrations, AI agents, and custom applications, the OpenAI Platform has become a critical system for managing access, security, and operational costs.

The inspector automatically discovers the OpenAI Organizations available through your Admin API key and collects detailed information about each one, including organization members, service accounts, API keys, projects, usage, and spending. It also gathers project-level details—such as project members, API keys, and rate limits—and presents them within the associated organization's dataprint, giving you a centralized view of your AI environment without creating additional systems for every project.

By continuously inventorying these resources, the OpenAI Inspector helps you improve governance, identify unused or overprivileged credentials, monitor AI platform usage, and maintain visibility into the resources supporting your AI-powered workflows.

Inspector Setup:

Step 1: Generate an OpenAI Admin API Key

Before you can configure the OpenAI Inspector, you must create an Admin API key in the OpenAI Platform.

Create the Admin API Key

1. Sign in to platform.openai.com using an Organization Owner account.

2. Navigate to Settings → Organization → Admin keys.

3. Click Create new admin key.

4. Enter a descriptive name, such as Liongard – OpenAI Inspector.

5. Click Create.

6. Copy the generated sk-admin-... API key immediately.

   • OpenAI only displays the key once. Be sure to store it in a secure location before leaving the page.

     📘

     Note:

     The OpenAI Inspector requires an Admin API key (sk-admin-...). Standard Project API keys (sk-proj-...) do not have permission to access the administrative endpoints used by the inspector and cannot be used for authentication.

Step 2: Configure the OpenAI Inspector in Liongard

1. Log in to the Liongard platform.
2. In Liongard, navigate to Admin > Inspectors > Inspector Types > Navigate to the OpenAI Inspector > Select Add System.

Since the OpenAI Inspectors are multi-tenant systems where a single portal can be used to manage many Environments, you will set up a single "Parent" Inspector that will then auto-discover "Child" Inspectors for each Environment.

Fill in the following information:

• Type of Inspector: Parent
• Environment: Select your MSP's Environment
• Friendly Name: Suggested Naming: [Customer Name] OpenAI Parent
• Agent: Select On-Demand Agent (or the on-premises agent for this Environment). Linux/Windows only.
• Inspector Version: Latest
• OpenAI Admin API Key: The sk-admin-... key from Step 1. The Parent uses this for discovery; every child inherits it.
• OpenAI API Base URL: Optional override; defaults to https://api.openai.com/v1 — leave blank unless instructed otherwise
• Usage Lookback (Days): Calendar days of usage rollups to collect on child runs. Default 7, max 90. Raise this if a Partner wants a fuller usage trend than the 7-day default.
• Stale API Key Threshold (Days): Flags org/project API keys and users with no recent API key use after this many days. Default 30.
• Cost Lookback (Days): Calendar days of cost data to collect on child runs. Default 30, max 90.
• Scheduling: The Inspector will default to run once a day at the time the Inspector is set up. Here you can adjust the schedule
• Select Save. The Inspector will now be triggered to run within the minute.

Step 3: Child Inspector Setup

After the first run of the Parent Inspector, your client OpenAI organizations will be auto-discovered in the Discovered Systems tab on the Inspectors > OpenAI Inspector page.

Assign and Activate a Discovered Organization

Important: Don't skip this step. A discovered OpenAI Organization won't collect data until you assign it to an environment and activate its launchpoint.

Step 1: Open the Discovered Systems

1. Navigate to Admin > Inspectors > OpenAI.
2. Select the Discovered Systems tab.

Each OpenAI Organization available to your Admin API key appears as a pending discovered system with:

• Inspector Type: OpenAI
• Status: Not Triggered
• Environment: Not assigned

---

Step 2: Assign the Organization

1. Open the discovered launchpoint for editing.
2. Configure the following fields:

3. Click Save.

---

Step 3: Activate the Launchpoint

1. Return to the Discovered Systems tab.
2. Select the checkbox next to the Organization you just configured.
3. Click Actions.
4. Select Activate Launchpoints.

The child launchpoint typically begins its first inspection within approximately one minute.

---