AL
5 developers · 1 CI · 1 unknown · $21.47 total spend
User-Centered Topology
A user map should show identity, spend, preferred stack, and where anomalous activity branches off.
Useful per user: role, session volume, cost, primary agent/model, machine footprint, credentials used, and whether the identity is human, CI, or unresolved.
Identity, adjacency, activity, and posture around one representative item.
Identity
How this user should be understood by platform and security.
developerrole
qpoint-devorg context
bob-thinkpad.localprimary host
Preferred Stack
The recurrent choices this user makes.
Cursor v0.42.0agent
claude-opus-4-6model
sk-ant-...A3F2credential
User
bob@company.com
High-spend developer profile with a strong preference for Cursor plus claude-opus-4-6.
4 sessions · $12.40 total
Activity Shape
The work pattern behind the spend.
31 turnslargest live session
$8.20top single session
1h 12mlongest session
Risk Lens
What makes this identity worth attention.
outlier spendabove org avg
unknown peerscompare against unknown users
session driftwatch for new hosts
Role
developer
Primary agent
Cursor v0.42.0
Primary model
claude-opus-4-6
Identity posture
known account
| User | Role | Sessions | Total cost | Primary agent | Primary model | First seen | Last seen |
|---|---|---|---|---|---|---|---|
| alice@company.com | developer | 6 | $2.14 | Claude Code v1.2.0 | claude-sonnet-4-6 | Mar 15 | today |
| bob@company.com | developer | 4 | $12.40 | Cursor v0.42.0 | claude-opus-4-6 | Mar 22 | today |
| carol@company.com | developer | 5 | $1.82 | Claude Code v1.2.0 | claude-sonnet-4-6 | Mar 20 | today |
| dave@company.com | developer | 3 | $0.92 | Claude Code v1.2.0 | claude-sonnet-4-6 | Mar 28 | today |
| eve@company.com | developer | 7 | $3.40 | Cursor v0.42.0 | claude-sonnet-4-6 | Mar 18 | today |
| ci-runner-04 | ci | 11 | $0.18 | LangChain v0.3.1 | claude-haiku-4-5 | Apr 1 | today |
| unknown (10.0.1.44) | unknown | 1 | $0.61 | Claude Code v1.2.0 | claude-sonnet-4-6 | today | today |