Security
Audit Logs
Hatchet records audit logs for key actions performed across your organization, giving you visibility into who did what, when, and from where.
Audit logs are available on Business plans and above. If you're on the open-source edition and need audit logs, contact us to learn more about upgrading.
What gets logged
Every audit log entry captures the following:
| Field | Description |
|---|---|
| Actor | The user or API key that performed the action |
| Action | The operation performed (e.g. ApiTokenCreate, TenantMemberDelete) |
| Resource type | The type of resource acted upon (e.g. workflow-run, api-token) |
| Resource ID | The specific resource that was affected |
| IP address | The IP address of the actor (HTTP requests only) |
| User agent | The user agent string of the request (HTTP requests only) |
| Timestamp | When the action occurred |
| Correlation ID | An optional ID for grouping related actions together (gRPC requests) |
Audited actions
The following actions are currently recorded as audit log entries:
| Action | Resource Type | Description |
|---|---|---|
TenantInviteAccept | tenant-invite | A user accepts a tenant invitation |
TenantMemberDelete | tenant-member | A tenant member is removed |
ApiTokenCreate | api-token | A new API token is created |
ApiTokenUpdateRevoke | api-token | An API token is revoked |
V1WorkflowRunCreate | workflow-run | A workflow run is triggered via the API |
ScheduledWorkflowRunCreate | scheduled-workflow | A scheduled workflow run is created |
Actor types
Audit log entries distinguish between two types of actors:
- User — actions performed by a logged-in user through the dashboard or API. These entries include the actor's IP address and user agent.
- API key — actions performed programmatically via an API key (e.g. triggering workflow runs over gRPC). These entries may include a correlation ID for grouping related actions.
Retention
Audit log entries are retained for 6 years.
Exporting audit logs
To get an export of your organization's audit logs, contact support@hatchet.run.
Last updated on November 5, 2026