Activity log
Who changed a key, a pool, a spending limit, someone's role or two-factor — and when, and from where. Admins can see every change, filter it and export it.
Once more than one person can change things, "who did this?" needs an answer. Settings → Activity records every change that matters — and every sign-in — so a mistake, or a session that should not exist, shows up after the fact instead of staying invisible.
Admins and owners can see it. Members and viewers cannot.
What is recorded
- Keys and pools — keys added, changed or deleted; pools created, changed or deleted; every spending limit change, with the old and new amount.
- People and access — invites sent, revoked and accepted; role changes (old and new role); members removed; sessions signed out.
- Two-factor — turned on or off, new recovery codes, trusted devices removed, an admin resetting a member's two-factor, and the workspace's Require two-factor switch.
- Sign-ins — successful sign-ins, wrong passwords, wrong two-factor codes and lockouts, for members.
- Workspace settings, integrations (MCP servers and access tokens, agents, skills) and brand assets.
- Automation that spends — webhook triggers and schedules created, changed or deleted, trigger secrets rotated, economy batches cancelled.
- Sharing and workflows — share links created and revoked, workflows published or deleted.
- Price overrides set or removed.
Each entry reads as a sentence — "[email protected] raised pool Claude daily budget $5.00 → $20.00" — with the time, and the country, device and network it came from.
What is not recorded
- Secrets, ever. API keys, tokens, webhook secrets, two-factor secrets, recovery codes and passwords never enter the log; it records only that such a field changed.
- Runs. Who ran what and what it cost is already on the Runs page and in Settings → Usage.
- Day-to-day editing: saving a draft flow, favourites, folders, notification preferences, uploads.
Filtering and exporting
Filter by area, by person and by date. Export CSV downloads the current filter (up to 5,000 entries) for a spreadsheet or an auditor.
It cannot be edited
Entries can't be changed or deleted — not from the app, and not directly in the database either. A log someone could tidy up would not be worth much.