The workspace audit log
The audit log records who signed in and what changed in your workspace: members, billing, connections, tokens and projects. Owners and admins can open it on every plan.
Organization settings, Audit log: workspace events newest first with Export CSV, filters for person and action, a GitHub sign-in from Lisbon, a failed sign-in marked in amber, an invitation, a role change and a plan change, and the note that no IP addresses, passwords or tokens are stored.
Open the audit logLink to this section
Open Organization settings
Choose your name at the foot of the workspace sidebar, then Organization settings.
Choose Audit log
Audit log is under Workspace, between Roles and permissions and Danger zone. It lists Workspace events, newest first.
Members don't see Audit log in the list; opening its address shows that only workspace owners and admins can see it.
What is recordedLink to this section
- Sign-ins, with the method (Password, GitHub, Google or Token), the city and country, and the email. Failed sign-ins are tinted amber with a warning badge.
- Password changes and resets.
- Invitations, members joining, leaving and being removed, role changes and ownership transfers.
- Plan changes, extra seats and payment method changes. Changes made by billing itself show as Xodia.
- Connections added and removed, and tokens created and revoked: MCP access and the Xodia helper.
- Projects created and deleted, and workspace settings.
No IP addresses, passwords or tokens are stored.
Filter and exportLink to this section
Filter by person and by action, a single action or a whole group such as All sign-ins. Export CSV downloads up to 10,000 rows with the filters you have set.
How long it is keptLink to this section
Events are kept for 90 days on every plan.
NextLink to this section
Changes inside a site, by people and their AI, are in its Site activity: see Work together on a site.