View the audit log and export CSV
The audit log records passkey registrations, logins, revocations and settings changes. Signatures and key material are never recorded. Records are kept for one year.
View the audit log
- Open an environment of the project and click "Audit log" in the menu.
- If needed, choose a type in the type filter and dates in "From" and "To". The list is filtered as soon as you choose.
Records are shown newest first, 200 at a time, with the time, action, result (succeeded or failed) and target (user ID, passkey ID, IP address). Click "Next 200" below the list to see older records and "First page" to go back.
Times and the date filters use Japan time (UTC+9). "From" includes records from 00:00 on that date, and "To" includes records up to 23:59 on that date (before 00:00 the next day).
All roles, including Viewers, can see the audit log.
Export CSV
- On the audit log screen, filter by type and date if needed.
- Click "Export CSV".
- Up to 10,000 records are exported, newest first, with the same filters as the screen (type, From and To).
- When more than 10,000 records match, the audit log screen shows "More than 10,000 records match." and the file name ends with
-newest-10000. Use "From" and "To" to export smaller periods. - The file is UTF-8 with a BOM. Columns:
at,event,ok,end_user_id,credential_id,ip,user_agent,detail. at(the time) is in Japan time, as on the screen, with the offset included (for example,2026-10-25T09:00:00.000+09:00).
Recorded events
| Shown as | event |
|---|---|
| Registration started / completed / failed | register.started / register.completed / register.failed |
| Login started / succeeded / failed | login.started / login.succeeded / login.failed |
| Passkey revoked | credential.revoked |
| Passkey renamed | credential.renamed |
| All passkeys of a user revoked | user.revoked |
| User deleted | user.deleted |
| Recovery token issued / used | recovery.issued / recovery.used |
| Environment settings changed | app.updated |
| API key created / renamed / revoked | api_key.created / api_key.renamed / api_key.revoked |
Related pages
API reference
For the API, browser SDK and MCP, see the API reference. If you have questions, please contact us.