Audit log

Every change in your organization is written to an append-only audit log — who did it, what they touched, their IP address, and when. The log is immutable: entries are only ever added, never edited or deleted.

What gets recorded

An entry is written automatically for every successful change-making request (create, update, or delete) made by a signed-in member. Each entry captures:

User — the member who made the change.
Action — the kind of request (POST, PUT, PATCH, DELETE).
Resource — the type of thing affected and its id.
IP address — the originating address (honouring X-Forwarded-For).
Timestamp — when it happened.

Read-only activity (viewing pages, listing resources) is not recorded — only changes are.

Who can see it

The audit log is restricted to organization owners and admins. Members and viewers cannot read it.

From the dashboard

Open Settings → Audit Log. Entries are listed newest-first and paginated, each showing the action, resource, member, and time.

From the API

The audit log is read-only and organization-scoped:

GET /v1/organizations/{org_id}/audit-logs/

The endpoint requires an owner or admin token and returns the standard paginated shape (count, next, previous, results). There is no write, update, or delete endpoint — the log cannot be altered through the API.