Merge API Documentation

The audit trail is an append-only record of privileged actions in your organization (settings, key, credential, member, and role changes, sign-ins, and exports) for compliance reviews and “who changed this?”. Inference requests are in the request logs instead.

View and export

Open Settings → Audit trail in the dashboard, filter by date, event type, and member, and Export CSV to download the filtered set. There is no API or streaming export. Both need View audit trail, which all four built-in roles include. Each export is recorded as AUDIT_LOG_EXPORTED and appears in the file it produces.

The CSV columns are Timestamp, User Name, User Email, Role, IP Address, Event Type, and Event Description. Cells starting with =, +, -, @, a tab, or a carriage return get a leading single quote so spreadsheets don’t run them as formulas.

Entry fields

Field	Description
Timestamp	When the event was recorded, in UTC
User	Name and email of the member who acted, captured at write time. Empty for system-driven events.
Role	The member’s role at the time of the event, kept even if the role is later renamed or deleted
IP address	The client IP as seen by Cloudflare (`CF-Connecting-IP`), otherwise the connection IP
URL and method	The request path and HTTP method that caused the event
Request body	The submitted body. Omitted for API keys, credentials, SSO, sign-in, password reset, and self-hosted endpoints, so secrets never reach the audit trail.
Event type	One of the event types below
Event description	A readable summary. Update events list each changed field, for example `Changed allowed_models: added openai/gpt-5.5; removed openai/gpt-5-mini`, with values cut to 100 characters.

Entries are never edited and are kept indefinitely. Failed actions write no entry (it commits with the change), except failed sign-ins (LOGIN_FAILED).

Reference

Event type names are the prefix plus the action, for example API_KEY_CREATED. The Event type filter lists every current type; new features add more.

Resource	Prefix	Actions
API keys	`API_KEY_`	`CREATED`, `UPDATED`, `DELETED`
Management keys	`MANAGEMENT_KEY_`	`CREATED`, `DELETED`
Vendor credentials (BYOK)	`CREDENTIAL_`	`CREATED`, `UPDATED`, `DELETED`
Members	`MEMBER_`	`INVITED`, `JOINED`, `INVITATION_RESENT`, `INVITATION_REVOKED`, `ROLE_CHANGED`, `REMOVED`
Roles	`ROLE_`	`CREATED`, `UPDATED`, `DELETED`
Sign-in	none	`LOGIN_SUCCESS`, `LOGIN_FAILED`, `LOGOUT`, `PASSWORD_RESET`
MFA	`MFA_`	`ENABLED`, `DISABLED`, `DEVICE_CHANGED`, `ADMIN_RESET`, `VERIFICATION_FAILED`, `REQUIRED_ENABLED`, `REQUIRED_DISABLED`
SSO	`SSO_`	`PROVIDER_CREATED`, `PROVIDER_UPDATED`, `PROVIDER_DELETED`, `LOGIN_REQUIRED_ON`, `LOGIN_REQUIRED_OFF`
Organization	`ORG_`	`CREATED`, `SETTINGS_UPDATED`, `DEACTIVATED`, `REACTIVATED`, `DELETED`
Agent signup	none	`AGENT_SIGNUP`, `AGENT_CLAIM_REISSUED`, `ORGANIZATION_CLAIMED`
Projects	`PROJECT_`	`CREATED`, `UPDATED`, `DELETED`, `PI_SETTINGS_UPDATED`, `PI_SETTINGS_DELETED`, `DLP_SETTINGS_UPDATED`, `DLP_SETTINGS_DELETED`
Customers	`CUSTOMER_`	`CREATED`, `UPDATED`, `DELETED`, `PI_SETTINGS_UPDATED`, `PI_SETTINGS_DELETED`, `DLP_SETTINGS_UPDATED`, `DLP_SETTINGS_DELETED`
Routing policies	`ROUTING_POLICY_`	`CREATED`, `UPDATED`, `DELETED`
Routing rules	`ROUTING_RULE_`	`CREATED`, `UPDATED`, `DELETED`
Unified routing	`UNIFIED_ROUTING_CONFIG_`	`CREATED`, `UPDATED`, `DELETED`, `REORDERED`
Prompt classifiers	`ROUTING_CLASSIFIER_`	`CREATED`, `UPDATED`, `DELETED`
Model aliases	`MODEL_ALIAS_`	`CREATED`, `UPDATED`, `DELETED`
Custom routing	`BYOR_`	`CONFIG_`, `DATASET_`, `DATASET_SOURCE_*` (each `CREATED`, `UPDATED`, `DELETED`), `PROMPTS_IMPORTED`, `PROMPTS_IMPORTED_FROM_SOURCE`, `EVAL_RUN_TRIGGERED`, `RESULT_OVERRIDDEN`, `RESULT_RESTORED`
Custom routing benchmarks	`BYOR_BENCHMARK_`	`CREATED`, `UPDATED`, `DELETED`, `SCORES_UPLOADED`, `SCORE_OVERRIDE_SET`, `SCORE_OVERRIDE_DELETED`
Evals	`EVAL_`	`SUITE_`, `CASE_` (each `CREATED`, `UPDATED`, `DELETED`), `RUN_CANCELLED`
Experiments	`EXPERIMENT_`	`SUITE_CREATED`, `SUITE_UPDATED`, `SUITE_ARCHIVED`, `CASE_`, `CASES_IMPORTED`, `CASES_SYNCED`, `RUN_TRIGGERED`, `RUN_CANCELLED`, `ALERT_ACKNOWLEDGED`, `ALERT_WEBHOOK_`, `SCHEDULE_UPDATED`, `SCHEDULE_DELETED`
Model migrations	`MODEL_MIGRATION_`	`CREATED`, `UPDATED`, `COMPLETED`, `ABANDONED`
Self-hosted endpoints	`SELF_HOSTED_ENDPOINT_`	`CREATED`, `UPDATED`, `DELETED`
Telemetry export	`TELEMETRY_EXPORT_DESTINATION_`	`CREATED`, `UPDATED`, `DELETED`
DLP rules	`DLP_RULE_`	`CREATED`, `UPDATED`, `DELETED`
Blocklist rules	`BLOCKLIST_RULE_`	`CREATED`, `UPDATED`, `DELETED`
Compression	`COMPRESSION_SETTING_`	`CREATED`, `UPDATED`, `DELETED`
Billing	none	`PAYMENT_METHOD_CREATED`, `PAYMENT_METHOD_UPDATED`, `PAYMENT_METHOD_DELETED`, `BILLING_SETTINGS_UPDATED`, `CREDITS_PURCHASED`, `CREDITS_PURCHASE_RETRIED`, `CREDITS_PURCHASE_BLOCKED`, `CREDITS_REFUNDED`, `AUTO_TOPUP_PAUSED`, `AUTO_TOPUP_RESUMED`
Audit trail	none	`AUDIT_LOG_EXPORTED`

Org-level prompt injection changes aren't recorded

Changes under Security → Prompt injection write no entry. Project and customer PI overrides do, as PROJECT_PI_SETTINGS_* and CUSTOMER_PI_SETTINGS_*.

A deleted member’s entries keep the name, email, and role captured at write time. A deleted organization’s entries can no longer be listed.

Next steps

Roles and permissions

Control who performs audited actions and views the trail

Per-customer restrictions

Block or pin models per customer

Data loss prevention

Scan prompts for PII and secrets