Skip to content

Logs

The Logs page shows recent activity on your account, so you can spot a sign-in you don’t recognize or trace what a key has been doing. Only you can see your logs. Times show in UTC unless you choose a time zone on the Account page; CSV exports always use UTC.

Each sign-in records when it happened, how (link, GitHub or password), the browser and device, and the IP address. Wrong password attempts are listed too, so you can tell if someone is trying to get in.

Each request made with one of your keys records when it happened, the key’s name, the method and path, the status code and how long it took. Requests refused for a missing or invalid key are not recorded, since they are not tied to an account.

Your logs follow the best plan among all your organizations, including a running trial. Whichever limit is reached first applies; older entries are removed as new ones arrive.

Plan Kept for Sign-ins API requests
Free 90 days 200 5,000
Pro 1 year 1,000 25,000
Team 1 year 1,000 50,000
Business 3 years 2,000 100,000

Up to 50 wrong password attempts are kept on every plan. When a paid plan or trial ends, older entries are trimmed back to the limits of the plan you are left with. The Logs page shows the retention that applies to you.

Each log shows 10 rows a page. Export All to CSV downloads the whole log as a spreadsheet file, ready for your own records or a security review.