- All token usage

- All tool invocations

All of these records are associated to an "interception" record, which maps 1:1 with requests received from clients but may involve several interactions with upstream providers.

`coderd` runs an in-memory instance ofhttps://github.com/coder/aibridge. In future releases we will support running external instances for higher throughput and complete memory isolation from`coderd`.

`coderd` runs an in-memory instance of`aibridged`, whose logic is mostly contained inhttps://github.com/coder/aibridge. In future releases we will support running external instances for higher throughput and complete memory isolation from`coderd`.

<details>

<summary>See a diagram of how AI Bridge interception works</summary>

AI Bridge makes use of[External Auth](../admin/external-auth/index.md) applications, as they define OAuth2 connections to upstream services. If your External Auth application hosts a remote MCP server, you can configure AI Bridge to connect to it, retrieve its tools and inject them into requests automatically - all while using each individual user's access token.

- Too many tools

- Coder MCP tools not being listed

- External Auth tools not being injected

-**Too many tools**: should you receive an error like`Invalid 'tools': array too long. Expected an array with maximum length 128, but got an array with length 132 instead`, you can reduce the number by filtering out tools using the allow/deny patterns documented in the[MCP](#mcp) section.

-**Coder MCP tools not being injected**: in order for Coder MCP tools to be injected, the internal MCP server needs to be active. Follow the instructions in the[MCP Server](mcp-server.md) page to enable it.

-**External Auth tools not being injected**: this is generally due to the requesting user not being authenticated against the External Auth app; when this is the case, no attempt is made to connect to the MCP server.

- Codex CLI currently does not work with AI Bridge due to a JSON marshaling issue:https://github.com/coder/aibridge/issues/19

- Claude Code web searches do not report correctly:https://github.com/coder/aibridge/issues/11

-**Intercepted**: requests are intercepted, audited, and augmented - full AI Bridge functionality

-**Passthrough**: requests are proxied directly to the upstream, no auditing or augmentation takes place

Where relevant, both streaming ando

Where relevant, both streaming andnon-streaming requests are supported.