Activity Log
The Activity Log is a running record of the meaningful changes made across your organization — who did what, and when. Use it to answer questions like "who revoked this API key?", "when was this member's entitlement granted?", or "what changed in our settings last week?".
Go to Activity Log in the navigation to open it. The Activity Log is available to administrators only.
Viewing the Activity Log requires the Admin role — the same access that governs organization settings. Members and Viewers do not see it. See Permissions.
Reading the log
Each row is one recorded change. The list is newest-first and shows:
| Column | What it shows |
|---|---|
| When | How long ago the change happened (for example, "2 hours ago"). |
| Actor | Who made the change — a team member's name, an API key, or System for automated activity. |
| Category | The area of the product the change belongs to (see Categories). |
| Activity | A one-line description of what happened, along with the specific item it affected. |
| Details | A button that opens the full entry. |
When a team member acts through an API token rather than the dashboard, the Actor column shows their name with a · via API marker.
Viewing the details of a change
Many rows include an inline summary of the fields that changed. Click Details on any row to open the full entry, which shows:
- When, Actor, Category, and the specific Event.
- The Subject — the item that was changed.
- Attribute changes — a before-and-after value for each field that changed.
- Context — any extra information recorded with the event.
Some changes touch secrets — an API key's value, a signing key, an OAuth client secret. The Activity Log records that the value changed, but the value itself is replaced with a hidden marker and is never displayed.
Filtering the log
The filters at the top of the page narrow the list as you change them. You can combine any of them:
| Filter | What it does |
|---|---|
| Search | Matches text in the activity description or the name of the item that was changed. |
| Category | Limits the list to a single category. |
| Actor | Limits the list to changes made by a User, an API key, or the System. |
| Event | Limits the list to a single kind of event. |
| Start / End date | Limits the list to a date range. |
The list paginates at 25 entries per page, with a running count of how many entries match your filters.
Categories
Every entry is filed under one category so you can narrow the log to the area you care about:
| Category | Covers changes to… |
|---|---|
| Settings | Organization settings and organization-wide branding. |
| Content | Templates, email templates, and interactions — including when they are published, unpublished, duplicated, imported, or restored from a revision. |
| Commerce | Products, plans, offers, and purchase refunds. |
| Properties | Properties and property-level branding overrides. |
| Security | Signing keys and OAuth clients. |
| Authentication | Staff sign-ins, two-factor and passkey changes, password and profile changes, and connected-app removals (see below). |
| Developer | Webhooks and the embed snippet. |
| GitHub Sync | Template changes applied by a sync from your connected repository. |
| Audience | Audience-member changes made from the dashboard, the API, or an AI assistant (see below). |
| Exports | Data exports that were created. |
| Users | Team-member invitations sent, resent, and accepted; role changes; and removals. |
Account security
The Authentication category records what your team members do with their own accounts, so you can see sign-in activity and security changes across your organization. It captures:
- Successful and failed sign-ins, sign-outs, and sign-ins that were locked out after too many failed attempts.
- Turning two-factor authentication on or off, regenerating recovery codes, a failed two-factor challenge, and signing in with a recovery code.
- Adding or removing a passkey.
- Changing or resetting a password.
- Changing a name or email address, or deleting an account.
- Disconnecting a connected app.
Sign-in and lockout entries record the IP address they came from. Because these changes follow a person wherever they work, each one appears in the log of every organization that person belongs to.
Audience activity
The Audience category records the deliberate changes you or your tools make to an audience member — from the dashboard, through the API, or through an AI assistant. It captures:
- Creating, restoring, or deleting a member.
- Changing a member's name or email address.
- Marking a member as verified or unverified.
- Granting or revoking an entitlement.
- Updating a member's profile fields (which fields changed is recorded; the values are not).
- Linking or unlinking an external profile or an external ID.
- Starting a sync of a member with a connected provider.
- Generating a session to sign in as a member (impersonation).
A member's own everyday activity — signing in, or updating their own profile — is not recorded here, so the log stays focused on changes made on their behalf.
Retention
Entries are kept for one year and then removed automatically. The Activity Log is a record of recent change, not a permanent archive.
Related Links
- Permissions — who can see the Activity Log
- Settings — the organization settings whose changes are logged
- Users — the team members who appear as actors