Logs & audit
EndpointOS keeps two append-only logs: request logs (every public-API call) and the audit log (every privileged action a user takes in the dashboard).
Request logs
Each row captures method, path, status, latency, key prefix, consumer (if any), source IP, user-agent, request size, and the request body (truncated to 4 KiB). Retention depends on your plan (Free: 7 days).
Filter by method, status class, exact status code, key, consumer, date window, or path substring. Export the filtered view to CSV from the Export button.
Audit log
Every action that creates, modifies, or destroys configuration writes an audit row: who, what, when, from where. Surfaces in account settings. Action names follow a stable noun.verb shape (e.g. api_key.rotated, workspace.member.invited). Filter by action, target type, project, or date range; export to CSV.
What's not logged
- Response bodies (only sizes). Request bodies are truncated at 4 KiB.
- Read-only dashboard browsing. Only state-changing actions write audit rows.
- API key plaintext. The hash is in the request log; the secret never is.