Activity and retention

Agent Control > Activity lists every request, whatever its outcome: allowed, held, approved, rejected, expired, executed, failed, denied and rolled back. Filter by status, agent (type:id) or action name, and click a row to open the request screen.

What is recorded#

Every gated call creates audit events with the agent, the credential, the transport (MCP, REST or PHP), the ability, the outcome and the risk. Calls that are refused before they run (denied, rate-limited, paused) are recorded too. Inputs and results are redacted before they are stored in the audit trail: keys such as password, secret, token, api_key, authorization, card_number, cvv, iban and ssn are replaced with [redacted], and very long strings are shortened.

Retention#

An hourly job removes requests, snapshots and events older than Keep history (days) (90 by default). Events are removed in whole days, and the last hash before the cutoff is kept, so the remaining trail still verifies.

The full, unredacted result of an approved call is kept only until the agent collects it, or for 24 hours, so the agent can receive it. After that only the redacted copy remains.