Skip to content

Activity log

Who changed a key, a pool, a spending limit, someone's role or two-factor — and when, and from where. Admins can see every change, filter it and export it.

In this article (4)

Once more than one person can change things, "who did this?" needs an answer. Settings → Activity records every change that matters — and every sign-in — so a mistake, or a session that should not exist, shows up after the fact instead of staying invisible.

Admins and owners can see it. Members and viewers cannot.

What is recorded

  • Keys and pools — keys added, changed or deleted; pools created, changed or deleted; every spending limit change, with the old and new amount.
  • People and access — invites sent, revoked and accepted; role changes (old and new role); members removed; sessions signed out.
  • Two-factor — turned on or off, new recovery codes, trusted devices removed, an admin resetting a member's two-factor, and the workspace's Require two-factor switch.
  • Sign-ins — successful sign-ins, wrong passwords, wrong two-factor codes and lockouts, for members.
  • Workspace settings, integrations (MCP servers and access tokens, agents, skills) and brand assets.
  • Automation that spends — webhook triggers and schedules created, changed or deleted, trigger secrets rotated, economy batches cancelled.
  • Sharing and workflows — share links created and revoked, workflows published or deleted.
  • Price overrides set or removed.

Each entry reads as a sentence — "[email protected] raised pool Claude daily budget $5.00 → $20.00" — with the time, and the country, device and network it came from.

What is not recorded

  • Secrets, ever. API keys, tokens, webhook secrets, two-factor secrets, recovery codes and passwords never enter the log; it records only that such a field changed.
  • Runs. Who ran what and what it cost is already on the Runs page and in Settings → Usage.
  • Day-to-day editing: saving a draft flow, favourites, folders, notification preferences, uploads.

Filtering and exporting

Filter by area, by person and by date. Export CSV downloads the current filter (up to 5,000 entries) for a spreadsheet or an auditor.

It cannot be edited

Entries can't be changed or deleted — not from the app, and not directly in the database either. A log someone could tidy up would not be worth much.