Activity

Activity is the single feed of every state-changing event across the tenant: task created, project archived, PAT minted, webhook delivery failed, member invited. Every entry carries the actor (or PAT), the affected resource, and a structured diff where applicable.

• Filter by actor, resource type, or PAT prefix
• Deep links to the affected resource (task, project, or webhook)
• Webhook deliveries are first-class events; replay from the row
• Compliance-friendly: 90-day retention plus optional export

• Audit rows are immutable. The original record persists even after the resource is deleted.
• PAT-attributed actions show the token prefix (atlas_pat_xxxx...) so you can trace stolen-key abuse.
• Filtering is server-side; the URL holds your filter state for shareable links.

1. 1Open it with `g a` or click Activity in the sidebar.
2. 2Use the filter bar at the top to scope by actor, resource, or PAT.
3. 3Click any row to open the affected resource in a drawer.

How long are events retained?

Audit events are kept until a workspace owner or admin sets a retention window. After that, a nightly job removes events older than the window.

Can I subscribe to the stream?

Yes. Every audit event is also published to the webhook bus. Subscribe at /settings/webhooks with a topic of `audit.*`.

Can I tell which API token performed an action?

Yes. An action attributed to a personal access token shows the token prefix, so a suspected stolen key can be traced to its activity without exposing the token itself.