# Huntress Billing

> Huntress billing and summary reports: what each report type contains, the list/get tools for both, and the monthly reconciliation, QBR security summary, and cost-analysis workflows an MSP builds from them.

- Skill: `wyre-ai/huntress-billing` (Agent Skill)
- Install (CLI): `npx skillmds@latest add wyre-ai/huntress-billing`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wyre-ai/huntress-billing/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: WYRE-AI (https://skillmd.com/u/wyre-ai)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/wyre-ai/huntress-billing

---


# Huntress Billing & Reports

## Overview

Huntress provides billing and summary reports for MSP partners. Billing reports detail per-organization agent counts for invoicing, while summary reports provide security posture overviews for client-facing communications.

## Key Concepts

### Billing Reports

Billing reports show agent counts per organization for a billing period. Use these for client invoicing and cost reconciliation.

### Summary Reports

Summary reports provide security posture overviews including incidents detected, escalations raised, and overall threat landscape — ideal for client QBRs and monthly security reviews.

## API Patterns

### List Billing Reports

```
huntress_billing_reports_list
```

Parameters:
- `page_token` — Pagination token

**Example response:**

```json
{
  "billing_reports": [
    {
      "id": "bill-2026-02",
      "period": "2026-02",
      "generated_at": "2026-03-01T00:00:00Z",
      "total_agents": 1250,
      "organization_count": 45
    }
  ],
  "next_page_token": null
}
```

### Get Billing Report

```
huntress_billing_reports_get
```

Parameters:
- `report_id` — The billing report ID

**Example response:**

```json
{
  "billing_report": {
    "id": "bill-2026-02",
    "period": "2026-02",
    "organizations": [
      {
        "id": "org-456",
        "name": "Acme Corporation",
        "agent_count": 150
      },
      {
        "id": "org-789",
        "name": "TechStart Inc",
        "agent_count": 75
      }
    ],
    "total_agents": 1250
  }
}
```

### List Summary Reports

```
huntress_summary_reports_list
```

Parameters:
- `page_token` — Pagination token

### Get Summary Report

```
huntress_summary_reports_get
```

Parameters:
- `report_id` — The summary report ID

**Example response:**

```json
{
  "summary_report": {
    "id": "sum-2026-02",
    "period": "2026-02",
    "total_incidents": 23,
    "total_escalations": 5,
    "incidents_by_severity": {
      "critical": 2,
      "high": 8,
      "low": 13
    },
    "top_threat_categories": [
      "Persistent Footholds",
      "Malicious Scripts",
      "Unauthorized Access"
    ]
  }
}
```

## Common Workflows

### Monthly Billing Reconciliation

1. List billing reports with `huntress_billing_reports_list`
2. Get the current period's report
3. Compare agent counts per organization with expected counts
4. Flag discrepancies for review
5. Generate invoices based on per-org agent counts

### Client Security Summary (QBR)

1. Get summary report for the review period
2. Get billing report for agent counts
3. List incidents filtered by organization
4. Compile per-client security posture summary
5. Present: agents protected, threats detected, incidents resolved

### Cost Analysis

1. Pull billing reports for multiple periods
2. Track agent count trends per organization
3. Identify growing or shrinking clients
4. Forecast billing for upcoming periods

## Error Handling

### Report Not Found

**Cause:** Report for the specified period hasn't been generated yet
**Solution:** Check available reports with the list endpoint first

### No Reports Available

**Cause:** Account is new or billing hasn't been processed yet
**Solution:** Reports are typically generated monthly; wait for the billing cycle

## Best Practices

- Pull billing reports at the start of each month for invoicing
- Use summary reports for client-facing communications
- Track agent count trends for capacity planning
- Cross-reference billing reports with PSA contract terms
- Archive reports for historical trend analysis
- Combine billing and summary reports for comprehensive QBR materials

## Related Skills

- [api-patterns](../api-patterns/SKILL.md) - Pagination and authentication
- [organizations](../organizations/SKILL.md) - Organization details for billing context
- [incidents](../incidents/SKILL.md) - Incident data for summary reports
- [agents](../agents/SKILL.md) - Agent counts for billing verification