Agent Audit Log
When to use
You need a per-action record of what an agent did — for compliance, debugging, or dispute resolution.
Before you begin
The agent’s DID. You can read any agent’s audit log (the endpoint is authenticated but not principal-only).
API
(agent.go:232, router.go:139.)
Response:
Filtering
Query parameters: from, to, action, resource, outcome. Combine for forensic queries:
Verify
Cross-check selected entries against your runtime logs. Each entry’s ibct (jti) is reproducible across both sides of every action.
Export
Click Download CSV in the portal’s audit log viewer for a CSV export.
Troubleshooting
💡 Tip — For long-running agents, set up a daily export job that writes the CSV to your archival store. The audit log endpoint paginates and supports
from/toranges, so cron-friendly extraction is straightforward.