All raw events > View > Tokens tab

Most of the tokens are cache read and cache write. It's possible that it's searching the whole codebase with these. My guess is they're embeddings tokens which are substantially cheaper.

Your 1213 should be somewhere in the input column. Probably less because of the caching. This is the magic where your $20 goes for more than $20 worth.