View the audit log and export CSV

The audit log records passkey registrations, logins, revocations and settings changes. Signatures and key material are never recorded. Records are kept for one year.

View the audit log

  1. Open an environment of the project and click "Audit log" in the menu.
  2. If needed, choose a type in the type filter and dates in "From" and "To". The list is filtered as soon as you choose.

Records are shown newest first, 200 at a time, with the time, action, result (succeeded or failed) and target (user ID, passkey ID, IP address). Click "Next 200" below the list to see older records and "First page" to go back.

Times and the date filters use Japan time (UTC+9). "From" includes records from 00:00 on that date, and "To" includes records up to 23:59 on that date (before 00:00 the next day).

All roles, including Viewers, can see the audit log.

Export CSV

  1. On the audit log screen, filter by type and date if needed.
  2. Click "Export CSV".
  • Up to 10,000 records are exported, newest first, with the same filters as the screen (type, From and To).
  • When more than 10,000 records match, the audit log screen shows "More than 10,000 records match." and the file name ends with -newest-10000. Use "From" and "To" to export smaller periods.
  • The file is UTF-8 with a BOM. Columns: at, event, ok, end_user_id, credential_id, ip, user_agent, detail.
  • at (the time) is in Japan time, as on the screen, with the offset included (for example, 2026-10-25T09:00:00.000+09:00).

Recorded events

Shown asevent
Registration started / completed / failedregister.started / register.completed / register.failed
Login started / succeeded / failedlogin.started / login.succeeded / login.failed
Passkey revokedcredential.revoked
Passkey renamedcredential.renamed
All passkeys of a user revokeduser.revoked
User deleteduser.deleted
Recovery token issued / usedrecovery.issued / recovery.used
Environment settings changedapp.updated
API key created / renamed / revokedapi_key.created / api_key.renamed / api_key.revoked

API reference

For the API, browser SDK and MCP, see the API reference. If you have questions, please contact us.