---
title: "Audit Log"
description: "User and organization audit logs on localskills.sh. Track skill publishes, SSO logins, SCIM provisioning, token management, and more with 90-day retention."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.localskills.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit Log

localskills.sh maintains audit logs at both user and organization level to
provide visibility into all platform activity.

## Organization audit log

The organization log lives under **Organization > Audit Log** and requires a
role with the audit log read permission (built into `owner` and `admin`). It
aggregates all member activity: skill and folder changes, invitations, role and
team changes, SSO and SCIM events, GitHub Sync, and OIDC token exchanges.
Entries are filterable by action type.

## Your account scope

The same page has a **Your account** scope, visible to every member, showing
your own account's activity: skill publishes, token management, profile
updates, and CLI logins.

## Events tracked

| Event | Description |
| --- | --- |
| `skill.created` | New skill published (web, CLI, or MCP) |
| `skill.updated` | Skill settings changed |
| `skill.version_created` | New version pushed (web, CLI, or MCP) |
| `skill.version_imported` | New version imported from a GitHub push |
| `skill.created_via_import` | New skill created from a GitHub push (new repo directory) |
| `skill.deleted` | Skill deleted |
| `skill.version_reverted` | Version rollback |
| `folder.created` | Folder created |
| `folder.updated` | Folder renamed or moved |
| `folder.deleted` | Folder deleted |
| `folder.acl_updated` | Folder restriction or access grants changed |
| `personal_workspace.provisioning_scheduled` | Member workspace provisioning scheduled |
| `personal_workspace.provisioned` | Member workspace provisioned |
| `personal_workspace.enabled` | Personal Workspaces enabled |
| `personal_workspace.disabled` | Personal Workspaces disabled |
| `personal_workspace.backfill_scheduled` | Existing-member backfill scheduled |
| `personal_workspace.retry_scheduled` | Failed provisioning retry scheduled |
| `personal_workspace.namespace_updated` | Managed namespace renamed or moved |
| `personal_workspace.repaired` | Managed workspace access repaired |
| `mcp_server.created` | MCP server registered |
| `mcp_server.imported` | MCP server imported from the localskills catalog |
| `mcp_server.catalog_updated` | Unedited catalog import auto-updated to a new catalog definition |
| `mcp_server.updated` | MCP server configuration changed |
| `mcp_server.deleted` | MCP server removed |
| `user.token_created` | API token created |
| `user.token_deleted` | API token revoked |
| `user.profile_updated` | Profile changes |
| `user.cli_login` | CLI device code login |
| `user.anonymous_registered` | Anonymous CLI credential registered |
| `mfa.enabled` | Two-factor authentication enabled |
| `mfa.disabled` | Two-factor authentication disabled |
| `mfa.passkey_added` | Passkey registered |
| `mfa.passkey_removed` | Passkey removed |
| `mfa.org_requirement_updated` | Organization MFA requirement changed |
| `organization.created` | Organization created |
| `organization.updated` | Organization settings changed |
| `organization.avatar_uploaded` | Organization avatar uploaded |
| `organization.avatar_deleted` | Organization avatar removed |
| `organization.member_invited` | Member invited to organization |
| `organization.member_joined` | Member accepted invitation |
| `organization.auto_join_updated` | Domain auto-join enabled or disabled |
| `organization.auto_join_invitation_created` | Invitation auto-created for a matching email domain |
| `organization.member_role_updated` | Member role changed |
| `organization.token_created` | Organization API token created |
| `organization.token_revoked` | Organization API token revoked |
| `team.created` | Team created |
| `team.updated` | Team renamed or roles changed |
| `team.deleted` | Team deleted |
| `team.member_added` | Member added to a team |
| `team.member_removed` | Member removed from a team |
| `role.created` | Custom role created |
| `role.updated` | Custom role permissions changed |
| `role.deleted` | Custom role deleted |
| `sso.provider_created` | SSO provider configured |
| `sso.provider_updated` | SSO settings modified |
| `sso.provider_deleted` | SSO provider removed |
| `sso.login_success` | Successful SSO login |
| `sso.user_created` | User provisioned via SSO |
| `sso.domain_claimed` | Domain verification started |
| `sso.domain_verified` | Domain ownership verified |
| `sso.domain_removed` | Domain claim removed |
| `sso.group_mappings_updated` | SSO group→team mappings changed |
| `sso.team_sync` | Member's teams reconciled from IdP groups |
| `scim.provider_created` | SCIM provisioning enabled |
| `scim.provider_deleted` | SCIM provisioning disabled |
| `scim.user_provisioned` | User provisioned via SCIM |
| `scim.user_updated` | User updated via SCIM |
| `scim.user_deprovisioned` | User removed via SCIM |
| `oidc.policy_created` | OIDC trust policy created |
| `oidc.policy_updated` | OIDC trust policy updated |
| `oidc.policy_deleted` | OIDC trust policy deleted |
| `oidc.token_exchanged` | CI token exchanged via OIDC |
| `github_sync.connect` | GitHub repo sync connected |
| `github_sync.disconnect` | GitHub repo sync disconnected |
| `github_sync.manual_sync` | Manual GitHub sync triggered |

## Retention

Audit log entries are retained for **90 days** and auto-purged after that
period. Logs are paginated and filterable by action type.

Source: https://docs.localskills.sh/audit-log/index.mdx