Activity and API usage
Workspace activity helps owners and administrators understand who changed access or configuration and how people use automation surfaces. It does not contain repository source, scan input, credentials, or API token values.
Administration activity
Section titled “Administration activity”The activity view records bounded events for membership, invitations, Workspace lifecycle, API credentials, and supported administrative changes. Entries identify the actor, action, outcome, and time without copying request bodies or private product data into the audit record.
API and scan usage
Section titled “API and scan usage”Owners and administrators can review 30-day per-user Customer API request and hosted-scan counters. These counters help explain usage and plan capacity. They do not reveal payloads, source files, routes, or token secrets.
A user can create, name, rename, and revoke their own Personal API Tokens under API credentials. Revoking a token takes effect immediately. Removing the user’s Workspace membership also makes every token for that Workspace unusable.