Audit log
See who made changes in your organization: members joining (including through invite links), leaving, or changing role; prototype access being turned on or off; environment variables, registry providers, and skills being added or removed; and plan and billing-interval changes. Some events may be missing; see the limits below.
Find it under Settings > Audit log. It’s visible to organization owners and admins.
What’s recorded
Each entry shows the actor (who did it), the action, the target it affected, a few details, and when it happened.
| Area | Events |
|---|---|
| Members | added, removed, role changed, publish capability changed (publisher/reviewer) |
| Invite links | invite link created, disabled, or regenerated; a member joined through an invite link; a join request filed, approved, or declined. Link entries record the link’s settings; join and request entries record the seat and who was involved. None records the link itself. |
| Access | prototype access toggled, version access toggled |
| Environment | variable set, variable deleted |
| Registry | provider added, removed |
| Skills | added, re-pinned, removed |
| Plan | plan changed, billing interval switch scheduled, scheduled interval switch cancelled |
| Spaces | created, renamed, deleted, member added/removed, role changed, opened to the org, content moved between spaces |
| Sharing | org-wide default for comments on new links changed (shown as “Comments default for new links changed”); a live public link’s settings changed; a live public link repointed to another version; a link password set, changed, or removed; the organization’s password requirement changed; whether org members outside a Space see all threads on shared links changed (shown as “Org member thread visibility on public links changed”) |
| Comments | a guest’s thread or message deleted by a moderator |
| Connected apps | an AI app connected (shown as “Connected an AI app”), revoked or an organization removed from it (both shown as “Disconnected an AI app”); one of its permissions turned off or on in Settings (shown as “Changed an AI app’s permissions”); a public link it created (shown as “Created a public link from an AI app”, with whether it has a password, never the link or the password) |
| Prototypes | moved to the trash (including by clearing a folder), restored, permanently deleted; a version deleted, with any named links it removed |
Secrets are never recorded. The log identifies what changed, never an environment variable’s value, a registry credential, a skill’s access token, or a link password.
Good to know
- Entries can’t be edited or deleted from the app.
- Some events may be missing. A change can succeed even if it cannot be recorded in the log.
- Most recent activity. The log shows the latest events; there’s no deep history export yet.
- Not every action is recorded. Everyday work (publishing, moving folders, writing and editing your own comments) isn’t logged. Deleting someone else’s content is, which is why guest-comment moderation appears here while a member tidying up their own comment doesn’t. A guest deleting their own thread isn’t logged either.
- Organization-specific. Owners and admins see their own organization’s activity.