Who did what in your organization: members, tokens, project changes in Studio and changes made with the CLI, CI and the Management API. Filter, export as CSV, read with the API.
The audit log lists who did what in your organization and its projects, newest first. Owners and administrators open it in the dashboard under Team › Audit log (or search for "Audit log"). Entries are kept for 180 days.
#What is recorded
| Where | Examples |
|---|---|
| Organization | Members invited, joined, changed or removed; invitations revoked; the organization renamed or transferred; organization tokens created or revoked; apps disconnected; webhooks added |
| Projects (dashboard and Studio) | Projects created, deleted, restored or restarted; API keys rotated; Auth settings; network restrictions; GraphQL on or off; database roles; buckets, users, secrets, cron jobs, extensions, rate limits, log drains, integrations; rows changed in the Table Editor |
| API, CLI and CI | Every successful change made with the Management API or the Edge Functions API: the method and path (for example POST /projects/<ref>/migrations), who made it and with which kind of token |
Reads are not recorded, and neither are checks that change nothing (database/query/check, migrations/check). Request bodies, SQL text, passwords, keys and tokens are never stored in the log.
#Filter and export
Filter by type (projects, API, members, organization, tokens), by project and by the e-mail of the person. Download CSV exports what the filters show, up to 10,000 entries, with the time, person, action, description, target, project, how it was done (dashboard, personal token, organization token, OAuth app) and the details.
#With the API
curl "https://stitchdb.com/platform/v1/organizations/<org>/audit-log?action=api&since=2026-10-01" \
-H "Authorization: Bearer $STITCHDB_TOKEN"[
{
"id": "48213",
"at": "2026-10-26T09:14:03.120Z",
"actor_email": "[email protected]",
"action": "api.request",
"description": "POST /projects/abcdefghijklmnop/migrations",
"target": "abcdefghijklmnop",
"project_name": "shop",
"detail": { "method": "POST", "path": "/projects/abcdefghijklmnop/migrations", "via": "pat" }
}
]Use a personal access token of an owner or administrator. action takes a group (project, api, member, org, org_token) or one action (member.invite). Up to 200 entries per page (?limit=); pass the X-Next-Cursor header as ?before= for the next page. ?format=csv returns the CSV file.