I cannot create CAM users or policies.

Ask the cloud account administrator to configure the dedicated user. Do not give the monitoring user administrator access or submit the administrator’s password.

Why can I not find my custom policy?

Filter to Custom, search the exact saved name, and verify it was created in the same cloud account. Confirm attachment on the target user afterward.

Why is the policy JSON rejected?

Replace the entire editor content with the copied JSON, without Markdown fences, comments, or typographic quotes. Keep version and statement casing, and use finance:DescribeAccountBalance, never billing:DescribeAccountBalance or finance:*.

I saved only SecretId. Can I recover SecretKey?

Check trusted storage. SecretKey cannot be viewed again. Create and save a replacement pair under the dedicated user; coordinate rotation if the key limit is reached. Do not disable unrelated production keys.

Can I use a Hunyuan key, and should the user sign in to the console?

Use CAM SecretId / SecretKey. A programmatic-only user cannot sign in to the console; this is expected. An administrator performs setup and reconciliation.

Why are my credentials or permissions rejected?

Check active, complete, matching China-site keys and the user’s attached policy. Verify finance:DescribeAccountBalance, resource *, explicit denies, and restrictions. Do not switch to primary-account or administrator keys. Share only redacted error codes and times.

Why does the amount differ from cash or credit?

RealBalance includes promotional funds and subtracts holds and arrears. CreditBalance and RealCreditBalance are different measures. Decimal precision is preserved when converting fen to yuan.

What about HTTP 200 errors, time errors, or missing fields?

Response.Error is checked even on HTTP 200. Missing RealBalance is not replaced with Balance, credit, or zero. Ask an administrator to check persistent clock errors; old snapshots remain historical.

Tencent Cloud China Balance and CAM Key Setup

Live test reported

Guide updated 2026-09-28

A user reported China-site success on September 28, 2026. Exact amounts, the CAM policy used, and MCP reconciliation were not independently recorded. Verify your own account, permissions, and amounts.

Required credentials: CAM SecretId + SecretKey
Monitoring currency: CNY · Chinese yuan
What is monitored: Real available cloud balance · Excludes credit; Official RealBalance converted exactly from fen to CNY by dividing by 100. It includes cash, transferred earnings, and promotional funds less holds and arrears. Balance compatibility fields and credit are not substitutes. CreditBalance, RealCreditBalance, and temporary credit are shown separately.

Connect Tencent Cloud / Hunyuan (China) to Quota Monitor

Confirm the China account and administrator
Open the paying account’s Billing Center and verify CNY. For group or partner settlement, confirm the funding account with finance. An administrator must create the CAM user, policy, and key; never submit their own key.
Open official Tencent Cloud / Hunyuan (China) page(opens in a new tab)
02
Create a balance-query policy
In CAM → Policies → Create Custom Policy → Policy Syntax → Blank Template, name the policy QuotaMonitorBalanceReadOnly and replace the editor content with the complete JSON below. If the name exists, inspect it or choose a new name without overwriting a business policy.
Keep finance:DescribeAccountBalance exactly; the prefix is finance, not billing. Resource * is required for this account action and does not grant all operations. No IDs, regions, or credentials are needed. Verify the custom policy contains only this action.
Tencent Cloud / Hunyuan (China) read-only policy JSON
```
{
  "version": "2.0",
  "statement": [
    {
      "effect": "allow",
      "action": [
        "finance:DescribeAccountBalance"
      ],
      "resource": [
        "*"
      ]
    }
  ]
}
```
Copies the complete JSON without keys or account details.
Open official Tencent Cloud / Hunyuan (China) page(opens in a new tab)
Use custom sub-user creation
Open Users → User List → New User → Custom Creation. Choose a user that can access resources and receive messages, not a notification-only identity. Avoid quick creation, which may select administrator access. An existing dedicated balance-only user can proceed to policy verification.
Open official Tencent Cloud / Hunyuan (China) page(opens in a new tab)
Enable programmatic access only
Name the user quota-monitor. Enable Programmatic Access without console access; no console password is needed. Complete required contact fields and administrator identity verification normally.
Attach the custom policy and create the user
Select policies from the list, filter Custom, and select QuotaMonitorBalanceReadOnly. Do not add AdministratorAccess, QCloudFinanceFullAccess, or a privileged group. Review and create. If keys appear on completion, save the matching pair securely.
Verify the user’s effective policy
Open the user’s Permission Policies and confirm the custom policy is attached. If missing, use Authorize on that user, choose the custom policy, and check again. A policy merely existing in the policy list is insufficient. No payment, resource, model, or administrator permissions should be added.
Open official Tencent Cloud / Hunyuan (China) page(opens in a new tab)
Save a matching SecretId and SecretKey
If not already saved, open this sub-user’s API Keys → Create Key and complete verification. Copy both values from the same pair into secure storage. SecretKey is shown only at creation. Do not use Hunyuan or temporary STS credentials, and do not remove keys used by other business systems.
Open official Tencent Cloud / Hunyuan (China) page(opens in a new tab)
Save the connection in your project
In Quota Monitor, create or open a project, choose Add provider → Add new connection → Tencent Cloud / Hunyuan (China). Enter SecretId and SecretKey in the correct fields. No region, Uin, or Hunyuan project ID is needed. Save and connect; both credentials are encrypted and only the ID’s last four characters are displayed.
Refresh and reconcile RealBalance
Wait for success or refresh manually. Compare RealBalance in the same account’s Billing Center. The API uses fen and the dashboard displays CNY. Expand details for cash, earnings, promotional funds, holds, arrears, and credit; do not add credit to the main balance. Use the official platform for top-ups.
Open official Tencent Cloud / Hunyuan (China) page(opens in a new tab)

What Quota Monitor reads from Tencent Cloud / Hunyuan (China)

China CNY accounts only. The endpoint omits currency; CNY is based on the supported site, not automatic detection. International billing needs a separate integration.
Cloud products, projects, and keys share funds. This is not a Hunyuan wallet. Model packs, free tokens, voucher lists, and Coding Plan quotas are excluded. Promotional account funds are not a voucher list.
Snapshots may lag settlement. Low or zero RealBalance does not establish service availability when credit is present. Align account, settlement relationship, field, and time.
The dashboard shows the latest successful snapshot. Manual refresh queries the provider again but cannot eliminate upstream billing delays. An old balance is not a new result after a failed query.

Tencent Cloud / Hunyuan (China) FAQ and troubleshooting

I cannot create CAM users or policies.: Ask the cloud account administrator to configure the dedicated user. Do not give the monitoring user administrator access or submit the administrator’s password.
Why can I not find my custom policy?: Filter to Custom, search the exact saved name, and verify it was created in the same cloud account. Confirm attachment on the target user afterward.
Why is the policy JSON rejected?: Replace the entire editor content with the copied JSON, without Markdown fences, comments, or typographic quotes. Keep version and statement casing, and use finance:DescribeAccountBalance, never billing:DescribeAccountBalance or finance:*.
I saved only SecretId. Can I recover SecretKey?: Check trusted storage. SecretKey cannot be viewed again. Create and save a replacement pair under the dedicated user; coordinate rotation if the key limit is reached. Do not disable unrelated production keys.
Can I use a Hunyuan key, and should the user sign in to the console?: Use CAM SecretId / SecretKey. A programmatic-only user cannot sign in to the console; this is expected. An administrator performs setup and reconciliation.
Why are my credentials or permissions rejected?: Check active, complete, matching China-site keys and the user’s attached policy. Verify finance:DescribeAccountBalance, resource *, explicit denies, and restrictions. Do not switch to primary-account or administrator keys. Share only redacted error codes and times.
Why does the amount differ from cash or credit?: RealBalance includes promotional funds and subtracts holds and arrears. CreditBalance and RealCreditBalance are different measures. Decimal precision is preserved when converting fen to yuan.
What about HTTP 200 errors, time errors, or missing fields?: Response.Error is checked even on HTTP 200. Missing RealBalance is not replaced with Balance, credit, or zero. Ask an administrator to check persistent clock errors; old snapshots remain historical.

Official Tencent Cloud / Hunyuan (China) references

Prepared by Quota Monitor, not an official provider tutorial. Interfaces and permissions may change; check official pages. Verification is limited to the scope stated here.