Audit log

Track who changed members, tokens, and webhooks with request IDs for every action.

Audit log

Audit entries provide accountability across org membership, tokens, and webhooks.

What is logged

• Member changes (added, removed, role changes).
• Token creation and revocation.
• Webhook rotations, pause/resume, and redeliveries.

Structure

Each entry stores actor user ID/email, target type/id, action, metadata, and request ID for correlation.

await writeAuditLog({
  orgId: ctx.org.id,
  actorUserId: ctx.user.id,
  targetType: 'member',
  targetId: membership.userId,
  action: 'member.removed',
  meta: { removedRole: membership.role, requestId },
});

Export and search

• Filter by actor, target type, or action.
• Export CSV when you need to hand evidence to security or compliance teams.
• When a locale is not translated, the data still appears with English labels.