Audit Trail

Every admin action, captured and exportable.

The Audit Trail records every admin action taken in your Agent Handler organization: member invitations, role changes, Access Key rotations, OAuth credential edits, security rule changes, Tool Pack edits, and the handful of reads worth recording on their own, such as a log search. It’s the artifact your security review will ask for, and the evidence you’ll pull when you need to know who changed what and when.

Different from the Tool Call Logs (which capture agent activity) and the API Request Logs (which capture your backend’s calls). The Audit Trail is specifically about administrative actions on the dashboard or via the management API.

What’s captured

For each event:

  • Event type. What was done, such as ROLE_UPDATED, PRODUCTION_API_KEY_REVOKED, or TOOL_PACK_CREATED.
  • Actor. The dashboard user (or the API key) that performed the action.
  • Resource. What was changed - Registered User ID, Tool Pack ID, rule ID, member ID.
  • Before/after diff. For updates, the specific fields that changed and their old and new values.
  • Source. Web dashboard, API, or system (for automated actions like SCIM-driven changes).
  • IP address of the actor, when available.
  • Timestamp.

Event catalog

Event types are uppercase strings, and the same value works as an ?event_type= filter on the audit-log endpoint. The authoritative list is the event_type enum on the audit-log endpoint in the API reference: it is generated from the source and picks up new values as features ship, so read it there before you hard-code a filter.

AreaEventFires when
Sign-in and MFALOGIN_SUCCESS / LOGIN_FAILED / LOGOUTA dashboard sign-in succeeds or fails, or a member signs out
Sign-in and MFAMFA_ENABLED / MFA_DISABLED / MFA_DEVICE_CHANGEDA member turns MFA on, turns it off, or re-enrolls an authenticator
Sign-in and MFAMFA_VERIFICATION_FAILEDAn MFA code is rejected at sign-in
Sign-in and MFAMFA_ADMIN_RESETAn admin clears a member’s MFA enrollment
Sign-in and MFAMFA_REQUIRED_ENABLED / MFA_REQUIRED_DISABLEDThe organization starts or stops requiring MFA
Members and rolesUSER_INVITED / USER_INVITATION_ACCEPTED / USER_INVITATION_CANCELLEDInvitation lifecycle
Members and rolesUSER_CREATED / USER_UPDATEDA member is added, or their details or role change
Members and rolesUSER_ENABLED / USER_DISABLEDA member’s dashboard access is restored or suspended
Members and rolesUSER_PASSWORD_RESETA member’s password is reset
Members and rolesROLE_CREATED / ROLE_UPDATED / ROLE_DELETEDCustom role lifecycle
Single sign-onSSO_PROVIDER_CREATED / SSO_PROVIDER_UPDATED / SSO_PROVIDER_DELETEDAn IdP connection is configured, edited, or removed
Single sign-onSSO_LOGIN_REQUIRED / SSO_LOGIN_NOT_REQUIRED / SSO_LOGIN_REQUIRED_ON / SSO_LOGIN_REQUIRED_OFFWhether members have to sign in through the IdP is turned on or off
SCIM provisioningSCIM_TOKEN_CREATED / SCIM_TOKEN_REVOKEDThe SCIM bearer token is generated or revoked
SCIM provisioningSCIM_USER_PROVISIONED / SCIM_USER_UPDATED / SCIM_USER_REACTIVATED / SCIM_USER_DEPROVISIONEDThe IdP creates, updates, reactivates, or deactivates an employee
SCIM provisioningSCIM_USER_ACCESS_UPDATEDOne employee’s tool access changes
SCIM provisioningSCIM_GROUP_CREATED / SCIM_GROUP_UPDATED / SCIM_GROUP_DELETEDGroup lifecycle from the IdP
SCIM provisioningSCIM_GROUP_ACCESS_UPDATEDA Group’s tool access changes
SCIM provisioningSCIM_DEFAULT_ACCESS_UPDATEDThe default access for a user whose Group has no mapping changes
Tool access requestsSCIM_TOOL_ACCESS_REQUEST_CREATEDAn employee requests a tool they don’t have
Tool access requestsSCIM_TOOL_ACCESS_REQUEST_APPROVED / SCIM_TOOL_ACCESS_REQUEST_DENIEDA reviewer approves or denies a request
Tool access requestsSCIM_TOOL_ACCESS_REQUEST_REVOKED / SCIM_TOOL_ACCESS_REQUEST_CANCELEDAn approved grant is withdrawn, or the requester cancels
Access keys and tokensPRODUCTION_API_KEY_CREATED / PRODUCTION_API_KEY_REVOKEDA production Access Key is created or revoked
Access keys and tokensPRODUCTION_API_KEY_REGENERATEDA production key is regenerated in place, which is how the master key rotates
Access keys and tokensTEST_API_KEY_CREATED / TEST_API_KEY_REGENERATED / TEST_API_KEY_REVOKED / TEST_API_KEY_DELETEDTest key lifecycle
Access keys and tokensPERSONAL_ACCESS_TOKEN_GENERATED / PERSONAL_ACCESS_TOKEN_ROTATED / PERSONAL_ACCESS_TOKEN_REVOKEDA member’s own token for the CLI and the API is issued, rotated, or revoked
ConnectorsCONNECTOR_IMPORTED / CONNECTOR_UPDATED / CONNECTOR_DELETEDA custom MCP server is registered as a Connector, edited, or removed
ConnectorsCONNECTOR_AUTH_SCOPE_RULE_CREATED / CONNECTOR_AUTH_SCOPE_RULE_UPDATED / CONNECTOR_AUTH_SCOPE_RULE_DELETEDAn OAuth scope override on a Connector changes
OAuth appsAPPLICATION_CREDENTIAL_CREATED / APPLICATION_CREDENTIAL_UPDATED / APPLICATION_CREDENTIAL_DELETEDYour own OAuth app for a Connector is added, edited, or removed
Connections and credentialsCREDENTIAL_CREATED / CREDENTIAL_UPDATED / CREDENTIAL_DELETEDA Registered User’s connection to a Connector is stored, changed, or revoked
Connections and credentialsCREDENTIAL_EXPORTED / CREDENTIAL_EXPORT_FAILEDA credential export succeeds or fails
Connections and credentialsCREDENTIAL_EXPORT_KEY_REGISTERED / CREDENTIAL_EXPORT_KEY_REVOKEDA public key for credential export is registered or revoked
Tool PacksTOOL_PACK_CREATED / TOOL_PACK_UPDATED / TOOL_PACK_DELETEDTool Pack lifecycle and configuration changes
Registered UsersREGISTERED_USER_CREATED / REGISTERED_USER_DELETEDA Registered User is created or deleted
Security rulesSECURITY_RULE_CREATED / SECURITY_RULE_UPDATED / SECURITY_RULE_DELETEDA Security Gateway rule or per-Tool-Pack override is created, edited, or deleted
SkillsSKILL_DRAFTED / SKILL_SUBMITTEDA skill is saved as a draft, or submitted for review
SkillsSKILL_APPROVED / SKILL_REJECTEDAn admin approves or rejects a submission
SkillsSKILL_PUBLISHED / SKILL_UNPUBLISHED / SKILL_REPUBLISHEDA skill or version is published, hidden from agents, or brought back
SkillsSKILL_ENABLED / SKILL_DISABLEDA Merge-provided skill is turned on or off for the org
SkillsSKILL_DELETEDA skill is deleted
SkillsSKILL_RETRIEVEDAn agent loads a skill with retrieve_skill
WebhooksOUTBOUND_WEBHOOK_CREATED / OUTBOUND_WEBHOOK_UPDATED / OUTBOUND_WEBHOOK_DELETEDOutbound webhook subscription lifecycle
WebhooksOUTBOUND_WEBHOOK_VERIFICATION_KEY_REFRESHEDThe key used to verify deliveries is rotated
WebhooksINBOUND_WEBHOOK_SETTINGS_UPDATEDInbound webhook settings change
Log accessTOOL_CALL_LOGS_SEARCHED / TOOL_CALL_LOG_DETAIL_VIEWEDA member searches the Tool Call Logs, or opens one call
Log accessAPI_LOGS_SEARCHED / API_LOG_DETAIL_VIEWEDA member searches the API Request Logs, or opens one request
Log accessAUDIT_LOG_EXPORTEDA member exports the Audit Trail
Desktop clientDESKTOP_DEVICE_ENROLLED / DESKTOP_DEVICE_RE_ENROLLEDA device enrolls with the Workforce desktop client, or enrolls again
Desktop clientDESKTOP_DEVICE_IDENTITY_RESOLVEDA device is matched to an employee
Desktop clientDESKTOP_PANEL_CONFIGUREDThe client’s panel configuration changes
Desktop clientDESKTOP_TOOL_AUTH_STARTEDAn employee starts authenticating a Connector from the desktop client
Chat sessionsCHAT_SESSION_CREATED / CHAT_SESSION_ENDEDAn agent chat session starts or ends
CopilotCOPILOT_INTEGRATION_BOUND / COPILOT_INTEGRATION_REBOUND / COPILOT_INTEGRATION_UNBOUNDA Copilot Studio integration is bound to a Tool Pack, rebound, or unbound
Organization settingsALLOWED_CALLBACK_ORIGIN_CREATED / ALLOWED_CALLBACK_ORIGIN_DELETEDA callback origin is added or removed
Organization settingsLINK_CONFIGURATION_UPDATEDLink customization changes
Organization settingsGIT_SETTINGS_CREATED / GIT_SETTINGS_UPDATED / GIT_SETTINGS_DELETEDThe organization’s Git settings change
Organization settingsDEFAULT_RESOURCES_CREATEDDefault resources are created for a new organization
Agent signupAGENT_SIGNUPAn agent creates its own organization, as covered in Agent quickstart
Agent signupORGANIZATION_CLAIMEDA person claims an agent-created organization and becomes its first Admin
Agent signupORGANIZATION_CLAIM_REISSUEDA claim link is revoked and replaced with a fresh one
BillingBILLING_PAYMENT_METHOD_ADDED / BILLING_PAYMENT_METHOD_UPDATEDA payment method is added or updated
BillingBILLING_PLAN_CHANGED / ORG_SWITCHED_TO_EMPLOYEES_PROThe organization’s plan changes
BillingBILLING_SUBSCRIPTION_CANCELLEDThe subscription is canceled
BillingBILLING_USER_SNAPSHOT_SUBMITTEDA user-count snapshot is submitted for billing

The Skills events are described alongside the flows that write them in Publishing skills, Reviewing submissions, and How agents load skills.

Where to view it

Settings → Audit Trail. The default view is the last 7 days, all events. The filter bar supports event type, actor, resource type, date range, and source.

Click any row to open the event detail with the full diff. For events that touched multiple fields, every field’s old and new value is shown side by side.

Investigation flow

“Who changed this?” Filter by resource type and ID. The Audit Trail shows every event against that resource in chronological order with the actor on each row.

“What did this person do?” Filter by actor. You’ll see everything that member touched across resources - useful when offboarding, before revoking access.

Exporting

The Export button produces CSV of whatever filter is currently applied. For compliance reviews where you need to show a 12-month window, set the date filter and export.

The CSV includes:

  • Event ID
  • Timestamp (ISO 8601, UTC)
  • Event type
  • Actor email and ID
  • Resource type and ID
  • Source (dashboard, API, system)
  • Diff (JSON-encoded before/after for update events)

For automated forwarding to a SIEM or data warehouse, the audit-trail export endpoint is documented in the API reference.

Data retention

One window covers audit events, Tool Call Logs, and the violation records behind Violations and alerts.

The default is 90 days. Some plans keep data longer, and an Enterprise contract can set a window of its own, so read the window that applies to you off your plan on Billing and usage or off your contract.

Records belonging to a user who is gone follow the same window. Deprovisioning through SCIM or deleting a Registered User revokes access immediately, and their audit entries and tool-call history are kept until the window closes, then purged.

If your compliance requirements need longer than your window, export on a schedule and keep the results in your own systems. CSV export covers any filtered view in the dashboard, the audit-log endpoint covers audit events, and the log endpoints feed a warehouse or a SIEM.

What it doesn’t capture

The Audit Trail covers administrative actions in the dashboard and over the management API. That is mostly changes to configuration and access, plus the few reads worth recording on their own: a log search, a log detail view, an agent loading a skill, and a sign-in. It doesn’t include tool calls (see Tool Call Logs), backend API requests (see API Request Logs), or the OAuth-flow steps that lead up to a CREDENTIAL_CREATED event. For the full picture, combine the three streams.

Next

Manage who on your team can do what with Team and roles.