Audit Log
A record of every change in your organization: who made it, what changed, and whether it was a person, an API key, or an AI agent acting for someone.
The audit log records every change made anywhere in your organization. That includes configurations, experiments, dashboards, queries, cohorts, members, roles, API keys and billing. Each entry shows:
- Who made the change: a person, an API key, a personal access token, Gamebeast support, or an AI agent (an MCP client like Claude or Cursor, or the Gamebeast assistant).
- What they did, and to which resource.
- What changed: the value of every field before and after. A configuration edit shows which keys changed and from what to what. A renamed query shows its old and new name.
- Where it came from: the project and environment, the request, the IP address and the user agent.
Open it from Audit log in the sidebar, beside Settings.
AI agents
Changes made by AI agents are recorded twice over: once as the agent, and once as the person it acted for. An update made through Claude over MCP reads "Jane Doe via Claude · MCP updated configuration “Shop prices”".
Selecting an agent entry shows:
- the tool the agent called and its call id;
- the reason the agent gave, when the tool asks for one;
- for the assistant, the conversation it happened in and who approved the change.
Agent attempts that fail or are refused are recorded too, with outcome Failed or Denied.
To see only agent activity, filter Actor type to MCP or Assistant.
Searching and filtering
- Search matches resource names, change summaries, people's names and emails, and ids.
- Filters narrow by time range, actor, actor type, feature, action, project and outcome.
- Security events shows only security-relevant actions: credentials, access, membership and exports.
- Every filter is kept in the page URL, so you can share or bookmark any view.
- From an entry you can jump to the resource's full history, other changes made in the same request, or everything from the same assistant conversation.
Exporting
Export downloads the current view as CSV or JSON Lines (one event per line, with every field), up to 10,000 events.
For more, choose Request full export. Gamebeast builds the file in the background and emails you a download link, which works for 7 days. Your organization can have one export in progress at a time, and up to 5 per day. Exports are free on every plan.
Exporting is itself recorded in the audit log.
From AI agents
The assistant and MCP clients can search the audit log too, which helps when you're trying to find out when something changed or what an agent did:
| Tool | Use it for |
|---|---|
search_audit_log | Find events by time, action, feature, actor type, resource or text |
get_audit_event | One event's field-by-field changes |
get_resource_history | Every change to one configuration, query, dashboard and so on |
API
The audit log is also available from the API with a personal access token that holds audit_log:read:
GET /organization/{organizationId}/audit-log/eventstakes the same filters as the page and returns a cursor for the next page.GET /organization/{organizationId}/audit-log/events/{eventId}returns one event in full.
See the API reference for every parameter.
Who can see it
Admins and owners can view and export the audit log by default. You can grant audit_log:read and audit_log:export to custom roles in Settings > Roles.
Retention
How far back you can see depends on your plan:
| Plan | History |
|---|---|
| Free | 7 days |
| Beast | 90 days |
| Enterprise | 1 year |
Gamebeast keeps events for two years whatever your plan. Upgrading makes older history visible again, and downgrading doesn't delete anything.
API Keys
API keys authenticate your game and your backend with Gamebeast. Every request to the Gamebeast API — whether it comes from the in-game SDK or from one of your own servers — is authenticated with a key.
Data Management
The **Data Management** page in the Gamebeast dashboard is where you manage the data Gamebeast collects for your application, including handling player privacy requests such as GDPR data deletion.