Platform
Audit trail
An organization-wide record of who did what, when - browsable, exportable, and built for compliance questions.
The Audit Trail page is your organization’s memory: a chronological record of administrative and security-relevant events, from invitations to integration changes to agent registrations and terminations.
What’s recorded
| Event | Fires when |
|---|---|
human.invited / human.removed | People join or leave the organization |
agent.registered | An agent registers |
agent.termination_requested | Someone terminates an agent |
api_key.created / api_key.terminated | API keys are issued or revoked |
integration.connected / integration.disconnected | GitHub or Azure is connected or removed |
webhook.created / webhook.updated / webhook.deleted | Webhook endpoints change |
Reading it
Each row shows the event, the actor (a person, or “System”), a short details summary, and the date in your local time. Click a row for the full picture: the complete event payload, pretty-printed, with a copy button. The list loads newest-first and pages automatically as you scroll.

Exporting
Export CSV downloads the most recent five thousand events. Timestamps in the export are UTC on purpose - audit records are evidence, and evidence shouldn’t depend on the exporter’s time zone.