Skip to main content
Island AI Protect hero Openlayer connects to Island AI Protect and pulls the AI conversations people have in the Island Enterprise Browser into your workspace. Conversations from apps such as Claude AI, Gemini, and Island Chat become traces where you can run tests and review real usage. This is the right integration when Island already captures AI activity across your organization and you want to evaluate that activity without adding an SDK to each AI app.

​
How it works

Once connected, Openlayer:
  1. Discovers AI apps. Each app Island reports appears as a product, such as Claude AI, Gemini, or Island Chat.
  2. Maps each app to one project. By default, a discovered app gets an Island · <app> project. You can instead map it to an existing project and pipeline. Every connection that sees the app writes to that same project.
  3. Pulls on a schedule. The first sync reads the previous 7 days. Later syncs bring in new conversations.
  4. Preserves conversations and turns. Each Island conversation becomes one Openlayer session, and each user turn becomes one trace.

​
Prerequisites

  • An Island tenant with AI Protect capturing AI conversations.
  • An Island API key with the Security Admin role, the smallest built-in role that can both view AI events and read their conversation content. Full Admin also works. Read Only and AI Protection Admin do not: Read Only cannot read conversation content, and AI Protection Admin cannot view AI events.
  • An Openlayer workspace where you are an admin. Connecting and configuring Island are admin-only actions.

​
Create the Island API key

In the Island Management Console, go to System Settings → Integrations → API → Create. Create the key with the Security Admin role, then copy the key.
Openlayer only reads from Island: AI events and their conversation content. Island lets a role open conversation content only when that role can also edit Content Monitoring, which is why a read-only role is not enough.

​
Setup guide

​
Step 1: Connect

A workspace can have several Island connections, for example several Island accounts or API keys. In Openlayer, go to Settings → Integrations, open Island in the AI Usage & Security section, and click Add connection. Name the connection, enter the API key, click Test connection to check both that Island accepts the key and that it can read AI conversation content, then click Connect. The first sync starts immediately. The integrations catalog card shows the connection count, for example Connected · 1 connection or Connected · 2 connections. The Island Add connection dialog in Openlayer, with the connection name Acme, a masked API key, the checks Island accepts the API key and The key can read AI conversation content, 1 tenant found, and the Connect and Test connection buttons You can also connect from an LLM project’s Monitoring setup → Manual setup → AI usage & security. Open a connection to reach its General, Tenants, and Products tabs. The Tenants tab lists the tenant for that API key. The same Island tenant is never synced by two connections. If you add a key for a tenant another connection already syncs, Openlayer refuses it and names that connection.

​
Step 2: Review the sync settings

Open the connection’s General tab. Periodic sync is on by default and runs every 5 minutes. You can change the frequency to every 10 minutes, 30 minutes, or hour, pause periodic sync without disconnecting, or click Sync now. The first sync reads conversations from the previous 7 days. There is no earlier backfill. Create a project for new products is on by default. Each newly discovered AI app is enabled into its own Island · <app> project. When another connection already syncs that app, this connection uses the same project. Turn it off to leave newly discovered apps disabled until you map them yourself. The overview reports the connection status, Content access, enabled products, tenants syncing, turns synced, last sync, and the last error. The Island connection's General tab: the overview (Connected, content access granted, 3 of 3 products enabled, 1 of 1 tenant syncing, 6 turns synced), what is collected, and the Settings section with Periodic sync, Sync frequency set to Every 5 minutes, and Create a project for new products turned on

​
Products and projects

On a connection, the Products tab lists each AI app Island has reported, the Openlayer project it writes to, its status, imported turns, and when activity was last seen. The Island Products tab with Claude AI, Island Chat, and Gemini, each active and mapped to its own Island · app project The same app uses one project across connections. A connection that sees an app another connection already syncs writes to that project. To enable a disabled product, choose one of these destinations:
  • Create new project — create an Island · <app> project and pipeline
  • Map to existing project — choose an existing project and pipeline that uses Openlayer’s default storage
Pipelines backed by BigQuery or Snowflake cannot receive Island rows. Changing a product’s project sends new conversations to the new destination. Existing data stays in the previous project. Disabling a product stops new imports and keeps its project, pipeline, and existing data.
Conversations seen while a product is disabled are not backfilled when you enable it later.

​
What lands in Openlayer

Each Island conversation becomes one Openlayer session. Each user turn becomes a trace containing:
  • The full prompt and assistant response
  • An Assistant response step with the app, provider, and model Island reported
  • One tool step per tool call, including its name, label, action, and identifiers
  • The conversation title, Island app, user, policy rule, and verdict when Island provides them
An Island turn in Openlayer: the trace tree with an Assistant response step and a web_search tool step, the user's prompt, and the assistant's reply Island does not provide tool outputs or token usage. Cost is recorded as 0. MCP Gateway activity is not imported. Selecting a tool step shows what Island captured: the tool’s label, action, and ID. A web_search tool step from Island, showing its action, label, and tool ID Openlayer waits until the newest event in a turn is 15 minutes old before writing it, so related prompt, response, and tool events can arrive together. If Island has not captured a response after 30 minutes, Openlayer writes the prompt-only turn.

​
Evaluating the ingested data

Once traces are flowing, evaluate Island-captured AI usage the same way you evaluate application traffic:

​
Disconnecting

On the connection’s General tab, click Disconnect Island and confirm Remove Island. Disconnecting stops syncing for that connection and deletes its stored API key and sync state. Other connections keep syncing. Projects, pipelines, and traces already ingested are kept. If you connect again with Create a project for new products on, an app that no other connection syncs gets a new Island · <app> project. To keep using the previous projects, turn that setting off and map each app to its existing project.

​
Troubleshooting