Render
NextSelected for the next certification batch. Live verification has not yet started. The page shows what we intend to investigate, not what we already read.
What we want to monitor
Documentation feasibility verdict: LIMITED. GET /v1/metrics/bandwidth exposes service time series, but current monthly Free instance hours and pipeline minutes remain dashboard-only, and bandwidth is not documented as the workspace billing rollup. Render uses a broad account API key; no read-only scope is documented.
Connection model
Personal access token(not yet verified)
A scoped token with read-only permissions. We never ask for write or admin scopes. Rotate or revoke the token from the provider at any time.
- Plan, usage, and limits (the data you see in the dashboard)
- Account or organization name (so you can pick the right one)
- ×Database rows, customer data, application source, env vars
- ×Anything write or admin scoped
What BeforeRed can read
Every capability reflects the real state of the provider. The V0 reconciliation harness (PRD §9) is the only thing that promotes a capability to certified.
Authentication BeforeRed can connect to the provider at all. | Supported |
OAuth OAuth is available, with a documented flow. | Not available |
Account discovery BeforeRed can list the user's account or organization. | Supported |
Project discovery BeforeRed can pick a specific project or service to monitor. | Supported |
Plan detection BeforeRed can read which plan you are on. | Supported |
Free-plan support Useful signal is available on the Free / Hobby tier. | Supported |
Usage monitoring Current usage values for the metrics you care about. | Under verification |
Historical usage BeforeRed can read past values, not only current usage. | Supported |
Limit retrieval BeforeRed can read the currently applicable limit. | Not available |
Cost monitoring Spending can be attributed to specific projects or services. | Not available |
Token refresh OAuth tokens are refreshed automatically without re-auth. | Not available |
Disconnect The user can revoke access from the provider side and we know. | Supported |