Documentation / Answers / Shadow AI found
Shadow AI found
Audience: IT admin. Topic: shadow ai. Last reviewed 2026-11-07.
Short answer. Shadow AI lists AI use that a Discovery event key observed. It is not spend until a billing source records it. An empty page is either a missing events:write key or a filter with no rows.
Open the page
Analytics & Insights has a Shadow AI tab. The line under the title on that tab is "Unmanaged AI discovery from Discovery event keys." There is also a Shadow AI page. Both read the same discoveries.
The setup card stays up until an integration key with the events:write scope is active. Create that key under Settings → Discovery event keys. A Usage ingest key does not satisfy this scope. After the key is in the caller, wait for events.
"No discoveries in this filter yet" means the current filter has no rows. Clear or change the filter before treating it as an outage.
What a row means
A discovery is evidence that something reached an AI service. It does not, by itself, add dollars to Dashboard. Spend arrives from a connected provider, a gateway, or a confirmed invoice. If the same tool should be a managed source, connect it on Integrations and then attribute it. Until then it stays a discovery.
What to do with it
Decide whether the tool is allowed. If it is, connect the source that can report its spend and assign an owner. If it is not, the block is in the network or the endpoint tool that saw it. Meridian does not disable the tool from this page.
For the security packet that includes this page, see A security review of Onaro.