ForgeSendDocs

Audit log

The Audit Log tab, under the Advanced group in Settings, is a paginated, workspace-scoped record of real actions — who did them, what kind of action it was, and, for many entries, exactly which records were touched. It's read-only by design: a reference for tracking down and manually reversing something, not an undo button.

The log

A date-range filter sits above a table of entries — Action, Actor, User, Resource, and Timestamp — 25 rows per page.

Audit Log — read only

Audit Log

From
To
Filter
ActionActorUserResourceTimestamp
CreateLeads added to campaignAPI Keyalex@meridian.coQ3 enterprise rollout24 Jul 2026, 11:08
DeleteLeads removed from campaignManualpriya@meridian.coMeridian expansion outreach24 Jul 2026, 09:47
UpdateCampaign startedAI Assistantjordan@meridian.coFall pipeline sequence23 Jul 2026, 16:22
Showing 1–3 of 41 entries
PreviousNext

The Action pill is a plain-language classifier — green Create, amber Update, red Delete — matched from the action text itself rather than stored as its own field, so it's a rough grouping, not a strict taxonomy. With nothing recorded yet, the tab shows "No activity recorded yet" / "Actions taken in your workspace will appear here."

Who the actor is

Every entry is tagged with one of three actor types, shown as a colored pill next to the User column:

  • Manual (gray) — a real person, signed in through the normal dashboard, took the action themselves.
  • AI Assistant (indigo) — an agent connected through MCP OAuth took the action on the workspace's behalf.
  • API Key (teal) — the action came in through a request authenticated with a workspace API key rather than a browser session.

"Manual" is also the default for anything with no live request behind it at all — a scheduled background job, for instance — not just human clicks. If you're trying to tell a person's own action apart from an automated one, check the User column and the action itself alongside the actor pill, not the pill in isolation.

Expandable detail

Rows with recorded detail get a chevron on the right. Clicking it expands a full-width panel directly below that row — not a separate modal — listing exactly which records the action touched, by ID.

Expanded row — read only
CreateLeads added to campaign
Contact IDs2 — cm3f8h2a10001qzoh5k2p, cm3f8h2a10002qzoh8j4m
List IDcm3f7d1a90003qzoh2n8q

Detail fields vary by action — a lead-removal entry lists the affected campaignLeadIds and contactIds, an inbox daily-limit change lists the inboxId and the new limit, and so on. Field names render in Title Case (contactIdsContact IDs), and lists render as a count followed by the raw values, comma-separated.

There's no undo button here, on this row or anywhere else in the Audit Log — expanding a row is purely informational. The IDs it shows are meant to let you go find and manually reverse an action elsewhere in the app (remove those specific contacts from the campaign again, for instance), not to trigger a reversal from this screen. Not every action has expandable detail; rows without any recorded metadata show no chevron at all.

What gets logged

Real, meaningful changes across Campaigns, Sending, Inboxes, and Lists — campaign creation and edits, sequence step and variant changes, leads added or removed, a campaign starting, pausing, or resuming, an inbox connecting or disconnecting, a list being created, and contacts being imported, added, or updated.

Contact deletion and restoration (Trash and recovery) and API key management aren't logged here today — if you're specifically tracking those, the Deleted Contacts tab and the Active keys table are each their own source of truth for that history.

Where to go next

Next: Settings overview