Admin Logs
- Supported events
- Access control events
- API key and secret events
- Application events
- Billing events
- Discount and partnership events
- Domain and proxy events
- Enterprise and SSO connection events
- Feature and Plan events
- Fraud and security events
- Instance setting events
- Integration events
- JWT events
- Machine and machine token events
- Native application events
- OAuth provider and application events
- Organization events
- Redirect URL events
- Role and Permission events
- Template events
- Update events
- User and waitlist events
- User events
- Webhook events
- Workspace billing events
- Workspace events
The Admin Logs page of the Clerk Dashboard provides a detailed audit log of workspace admin actions — whether performed by a workspace member through the Dashboard, programmatically through the Backend API using a Clerk Secret Key, or through the Platform API. Admin Logs track actions such as creating OAuth applications, updating instance settings, rotating secrets, and managing Roles and Permissions.
Note
Changes to end-user resources — such as the user and organization events below — are recorded in Admin Logs when made from the Dashboard or through the Backend API, and also appear in Application Logs so the affected instance's timeline stays complete. Actions end users take themselves in your application are recorded in Application Logs only.
To learn how to filter entries, inspect event details, and understand retention, see the Logs overview.
Supported events
The following tables list all event types that can appear in Admin Logs, organized by category. Use these identifiers when filtering logs in the Clerk Dashboard.
Access control events
| Event type | Description |
|---|---|
allowlist_identifier.created | Identifier was added to the allowlist |
allowlist_identifier.deleted | Identifier was removed from the allowlist |
blocklist_identifier.created | Identifier was added to the blocklist |
blocklist_identifier.deleted | Identifier was removed from the blocklist |
instance.restriction_settings.updated | Instance restriction settings were updated |
instance.subdomain_allowlist.updated | Instance subdomain allowlist was updated |
API key and secret events
| Event type | Description |
|---|---|
api_keys.disabled | API keys were disabled |
api_keys.enabled | API keys were enabled |
api_keys.settings.updated | API keys settings were updated |
clerk_secret_key.created | Clerk secret key was created |
clerk_secret_key.deleted | Clerk secret key was deleted |
testing_token.created | Testing token was created |
Application events
| Event type | Description |
|---|---|
accountless_application.claimed | Accountless application was claimed into the workspace |
application.created | Application was created |
application.deleted | Application was deleted |
application.favicon.deleted | Application favicon was deleted |
application.favicon.updated | Application favicon was updated |
application.logo.deleted | Application logo was deleted |
application.logo.updated | Application logo was updated |
application.product.subscribed | Application was subscribed to a product (legacy per-application Clerk subscriptions only) |
application.product.unsubscribed | Application was unsubscribed from a product (legacy per-application Clerk subscriptions only) |
application.subscription_plan.changed | Application subscription plan was changed |
application.transfer.canceled | Application transfer was canceled |
application.transfer.created | Application transfer was created |
application.transferred | Application was transferred into this workspace |
application.transferred_by_code | Application was transferred via a claim code |
application.transferred_out | Application was transferred out of this workspace |
application.updated | Application was updated |
aws_credentials.created | AWS credentials were created |
aws_credentials.deleted | AWS credentials were deleted |
aws_credentials.updated | AWS credentials were updated |
Billing events
| Event type | Description |
|---|---|
billing.discount.created | Billing discount was created |
billing.discount.updated | Billing discount was updated |
billing.initialized | Billing was initialized |
billing.payee.account_link.created | Billing payee account link was created |
billing.payee.created | Billing payee was created |
billing.payee.disconnected | Billing payee was disconnected |
billing.payee.updated | Billing payee was updated |
billing.payer.created | Billing payer was created |
billing.plan.created | Billing Plan was created |
billing.plan.deleted | Billing Plan was deleted |
billing.plan.feature_created | Feature was added to a Billing Plan |
billing.plan.feature_deleted | Feature was removed from a Billing Plan |
billing.plan.free_trials_updated | Free trials for Billing Plans were updated |
billing.plan.updated | Billing Plan was updated |
billing.price.created | Billing price was created |
billing.product.created | Billing product was created |
billing.product.updated | Billing product was updated |
billing.settings.updated | Billing settings were updated |
organization.credits.adjusted | Organization's credit balance was adjusted from the Dashboard |
organization.subscription_item.canceled | Organization's Subscription was canceled from the Dashboard |
organization.subscription_item.discount.applied | Discount was applied to an Organization's Subscription from the Dashboard |
organization.subscription_item.discount.removed | Discount was removed from an Organization's Subscription from the Dashboard |
organization.subscription_item.free_trial.extended | Free trial for an Organization's Subscription was extended from the Dashboard |
organization.subscription_item.price_transition.created | Price transition was created for an Organization's Subscription from the Dashboard |
user.credits.adjusted | User's credit balance was adjusted from the Dashboard |
user.subscription_item.canceled | User's Subscription was canceled from the Dashboard |
user.subscription_item.discount.applied | Discount was applied to a user's Subscription from the Dashboard |
user.subscription_item.discount.removed | Discount was removed from a user's Subscription from the Dashboard |
user.subscription_item.free_trial.extended | Free trial for a user's Subscription was extended from the Dashboard |
user.subscription_item.price_transition.created | Price transition was created for a user's Subscription from the Dashboard |
Discount and partnership events
| Event type | Description |
|---|---|
discount_request.created | Discount request was created (recorded only for requests tied to an application in the workspace) |
github_student_pack.claimed | GitHub Student Pack was claimed |
Domain and proxy events
| Event type | Description |
|---|---|
domain.created | Domain was created |
domain.deleted | Domain was deleted |
domain.dns.retried | Domain DNS check was retried |
domain.mail.retried | Domain mail check was retried |
domain.ssl.retried | Domain SSL check was retried |
domain.updated | Domain was updated |
domain_intent.canceled | Domain intent was canceled |
domain_intent.created | Domain intent was created |
instance.domain.changed | Instance domain was changed |
instance_domain.created | Instance domain was created |
instance_domain.deleted | Instance domain was deleted |
proxy_configuration.verified | Proxy configuration was verified |
Enterprise and SSO connection events
| Event type | Description |
|---|---|
easie_connection.created | EASIE connection was created |
easie_connection.deleted | EASIE connection was deleted |
easie_connection.updated | EASIE connection was updated |
enterprise_connection.created | Enterprise connection was created |
enterprise_connection.deleted | Enterprise connection was deleted |
enterprise_connection.test_run.created | Enterprise connection test run was started |
enterprise_connection.updated | Enterprise connection was updated |
saml_connection.created | SAML connection was created |
saml_connection.deleted | SAML connection was deleted |
saml_connection.updated | SAML connection was updated |
scim.group_role_mapping.created | SCIM group-role mapping was created |
scim.group_role_mapping.deleted | SCIM group-role mapping was deleted |
scim.group_role_mapping.updated | SCIM group-role mappings were updated |
scim_directory.api_key_rotated | API key for a SCIM directory was rotated |
scim_directory.created | SCIM directory was created |
scim_directory.deleted | SCIM directory was deleted |
scim_directory.updated | SCIM directory was updated |
sso_built_in_provider.deleted | Built-in SSO provider was deleted |
Feature and Plan events
| Event type | Description |
|---|---|
feature.created | Feature was created |
feature.deleted | Feature was deleted |
feature.permission.deleted | Permission was removed from a Feature |
feature.plan.created | Feature was added to a Plan |
feature.plan.deleted | Feature was removed from a Plan |
feature.updated | Feature was updated |
Fraud and security events
| Event type | Description |
|---|---|
fraud_settings.updated | Fraud settings were updated |
instance.client_trust.toggled | Client trust for the instance was toggled |
instance.compliance_settings.updated | Instance compliance settings were updated |
instance.password_compromised.set | Instance password was flagged as compromised |
instance.password_compromised.unset | Compromised flag on the instance password was cleared |
instance.protect_settings.updated | Instance protection settings were updated |
Instance setting events
| Event type | Description |
|---|---|
instance.account_portal.updated | Account portal settings were updated |
instance.account_portal_urls.updated | Account portal URLs were updated |
instance.api_version.updated | Instance API version was updated |
instance.communication_settings.updated | Instance communication settings were updated |
instance.deleted | Instance was deleted |
instance.display_config.updated | Instance display configuration was updated |
instance.display_config_urls.updated | Instance display configuration URLs were updated |
instance.image_settings.updated | Instance image settings were updated |
instance.mail.retried | Instance mail check was retried |
instance.organization_settings.updated | Organization settings for the instance were updated |
instance.production.created | Production instance was created |
instance.session_settings.updated | Instance session settings were updated |
instance.social_provider.updated | Instance social provider was updated |
instance.ssl.retried | Instance SSL check was retried |
instance.test_users.deleted | Test users were deleted from the instance |
instance.theme.updated | Instance theme was updated |
instance.updated | Instance was updated |
instance.user_settings.updated | Instance user settings were updated |
instance.users.exported | Instance users were exported |
instance_settings.updated | Instance settings were updated |
Integration events
| Event type | Description |
|---|---|
integration.created | Integration was created |
integration.deleted | Integration was deleted |
integration.linked | Integration was linked |
integration.updated | Integration was updated |
JWT events
| Event type | Description |
|---|---|
jwt_service.updated | JWT service was updated |
jwt_template.created | JWT template was created |
jwt_template.deleted | JWT template was deleted |
jwt_template.updated | JWT template was updated |
Machine and machine token events
| Event type | Description |
|---|---|
machine.created | Machine was created |
machine.deleted | Machine was deleted |
machine.scope.created | Machine scope was added |
machine.scope.deleted | Machine scope was removed |
machine.secret_key.rotated | Machine secret key was rotated |
machine.updated | Machine was updated |
machine_token.created | Machine token was created |
machine_token.revoked | Machine token was revoked |
Native application events
| Event type | Description |
|---|---|
android_application.created | Android application was created |
android_application.deleted | Android application was deleted |
android_application.updated | Android application was updated |
ios_application.created | iOS application was created |
ios_application.deleted | iOS application was deleted |
ios_application.updated | iOS application was updated |
native_settings.updated | Native settings were updated |
OAuth provider and application events
| Event type | Description |
|---|---|
custom_oauth_provider.created | Custom OAuth provider was created |
custom_oauth_provider.debug_run.created | Debug run was started for a custom OAuth provider |
custom_oauth_provider.deleted | Custom OAuth provider was deleted |
custom_oauth_provider.logo.deleted | Logo for a custom OAuth provider was deleted |
custom_oauth_provider.logo.updated | Logo for a custom OAuth provider was updated |
custom_oauth_provider.updated | Custom OAuth provider was updated |
oauth_application.created | OAuth application was created |
oauth_application.deleted | OAuth application was deleted |
oauth_application.logo.updated | Logo for an OAuth application was updated |
oauth_application.secret_rotated | Secret for an OAuth application was rotated |
oauth_application.settings.updated | Settings for an OAuth application were updated |
oauth_application.updated | OAuth application was updated |
Organization events
| Event type | Description |
|---|---|
organization.created | Organization was created |
organization.deleted | Organization was deleted |
organization.logo.deleted | Organization logo was deleted |
organization.logo.updated | Organization logo was updated |
organization.metadata.updated | Organization metadata was updated |
organization.updated | Organization was updated |
organization_domain.affiliation.verified | Organization domain affiliation was verified |
organization_domain.affiliation_verification.prepared | Affiliation verification for an Organization domain was prepared |
organization_domain.created | Domain was added to an Organization |
organization_domain.deleted | Domain was removed from an Organization |
organization_domain.enrollment_mode.updated | Enrollment mode for an Organization domain was updated |
organization_domain.ownership_verified | Ownership of an Organization domain was verified |
organization_domain.updated | Organization domain was updated |
organization_invitation.accepted | Invitation to join an Organization was accepted |
organization_invitation.created | Organization invitation was created |
organization_invitation.revoked | Organization invitation was revoked |
organization_membership.created | Member was added to an Organization |
organization_membership.deleted | Member was removed from an Organization |
organization_membership.metadata.updated | Organization membership metadata was updated |
organization_membership.updated | Organization membership was updated |
organization_membership_request.accepted | Organization Membership Request was accepted |
organization_membership_request.rejected | Organization Membership Request was rejected |
organization_suggestion.accepted | Suggestion to join an Organization was accepted |
Redirect URL events
| Event type | Description |
|---|---|
redirect_url.created | Redirect URL was created |
redirect_url.deleted | Redirect URL was deleted |
Role and Permission events
| Event type | Description |
|---|---|
organization_permission.created | Organization Permission was created |
organization_permission.deleted | Organization Permission was deleted |
organization_permission.updated | Organization Permission was updated |
organization_role.created | Organization Role was created |
organization_role.deleted | Organization Role was deleted |
organization_role.permission.assigned | Permission was assigned to an Organization Role |
organization_role.permission.removed | Permission was removed from an Organization Role |
organization_role.updated | Organization Role was updated |
role_set.created | Role Set was created |
role_set.deleted | Role Set was deleted |
role_set.role.added | Role was added to a Role Set |
role_set.role.removed | Role was removed from a Role Set |
role_set.updated | Role Set was updated |
Template events
| Event type | Description |
|---|---|
template.deleted | Template was deleted |
template.delivery_toggled | Template delivery was toggled |
template.disabled | Template was disabled |
template.draft.canceled | Template draft was canceled |
template.draft.created | Template draft was created |
template.enabled | Template was enabled |
template.reverted | Template was reverted |
template.updated | Template was updated |
Update events
| Event type | Description |
|---|---|
update.opted_in | Update was opted in to |
update.opted_out | Update was opted out of |
User and waitlist events
| Event type | Description |
|---|---|
instance.waitlist_entries.exported | Waitlist entries were exported |
invitation.created | Instance invitation was created |
invitation.revoked | Instance invitation was revoked |
user_actions.bulk_update.started | Bulk user actions update was started |
waitlist_entry.created | Waitlist entry was created |
waitlist_entry.deleted | Waitlist entry was deleted |
waitlist_entry.invited | Invitation was sent to the waitlist entry |
waitlist_entry.rejected | Waitlist entry was rejected |
User events
| Event type | Description |
|---|---|
actor_token.created | Impersonation (actor) token was created for a user from the Dashboard |
email_address.created | Email address was added to a user from the Dashboard |
email_address.deleted | Email address was deleted from a user from the Dashboard |
email_address.updated | User's email address was updated from the Dashboard |
phone_number.created | Phone number was added to a user from the Dashboard |
phone_number.deleted | Phone number was deleted from a user from the Dashboard |
phone_number.updated | User's phone number was updated from the Dashboard |
session.revoked | User's session was revoked from the Dashboard |
user.all_totps.deleted | User's TOTP authenticators were deleted from the Dashboard |
user.backup_codes.deleted | User's backup codes were deleted from the Dashboard |
user.banned | User was banned from the Dashboard |
user.created | User was created from the Dashboard |
user.deleted | User was deleted from the Dashboard |
user.external_account.disconnected | External account was disconnected from a user from the Dashboard |
user.locked | User was locked from the Dashboard |
user.metadata.updated | User metadata was updated from the Dashboard or Backend API |
user.mfa.disabled | User's MFA was disabled from the Dashboard |
user.passkey.deleted | Passkey was deleted from a user from the Dashboard |
user.password.deleted | User's password was removed from the Dashboard |
user.password_compromised.set | User's password was marked as compromised from the Dashboard |
user.password_compromised.unset | User's password was cleared of compromised status from the Dashboard |
user.profile_image.deleted | User's profile image was deleted from the Dashboard |
user.profile_image.updated | User's profile image was updated from the Dashboard |
user.unbanned | User was unbanned from the Dashboard |
user.unlocked | User was unlocked from the Dashboard |
user.updated | User was updated from the Dashboard |
web3_wallet.deleted | Web3 wallet was removed from a user from the Dashboard |
Webhook events
| Event type | Description |
|---|---|
svix_app.created | Svix app was created |
svix_app.deleted | Svix app was deleted |
svix_dashboard_url.created | Svix dashboard URL was created |
Workspace billing events
| Event type | Description |
|---|---|
workspace.checkout_session.completed | A workspace checkout session was completed |
workspace.checkout_session.created | A workspace checkout session was started |
workspace.customer_info.updated | The workspace customer info was updated |
workspace.customer_portal_session.created | A workspace customer portal session was opened |
workspace.customer_tax_id.deleted | The workspace customer tax ID was deleted |
workspace.default_payment_method.updated | The workspace default payment method was updated |
workspace.payment_method.attached | A payment method was added to a workspace |
workspace.payment_method.detached | A workspace payment method was detached |
workspace.payment_method_setup.initiated | A workspace payment method setup was initiated |
workspace.pricing.migrated | The workspace pricing was migrated |
workspace.subscription.addon.added | A workspace subscription add-on was added |
workspace.subscription.addon.reactivated | A workspace subscription add-on was reactivated |
workspace.subscription.addon.removed | A workspace subscription add-on was removed |
workspace.subscription.canceled | The workspace subscription was canceled |
workspace.subscription.created | The workspace subscription was created |
workspace.subscription.reactivated | The workspace subscription was reactivated |
workspace.subscription_change.previewed | A workspace subscription change was previewed |
workspace.subscription_plan.changed | The workspace subscription plan was changed |
Workspace events
| Event type | Description |
|---|---|
workspace.created | A workspace was created |
workspace.domain.affiliation.verified | A workspace domain was verified |
workspace.domain.affiliation_verification.prepared | Verification of a workspace domain was started |
workspace.domain.created | A domain was added to a workspace |
workspace.domain.deleted | A domain was removed from a workspace |
workspace.domain.enrollment_mode.updated | A workspace domain's enrollment mode was changed |
workspace.invitation.accepted | A workspace invitation was accepted |
workspace.invitation.created | A member was invited to a workspace |
workspace.invitation.revoked | A workspace invitation was revoked |
workspace.logo.deleted | A workspace logo was deleted |
workspace.logo.updated | A workspace logo was updated |
workspace.member.added | A member was added to a workspace |
workspace.member.removed | A member was removed from a workspace |
workspace.member.updated | A workspace member's role was changed |
workspace.membership_request.accepted | A request to join a workspace was approved |
workspace.membership_request.rejected | A request to join a workspace was rejected |
workspace.suggestion.accepted | A suggestion to join a workspace was accepted |
workspace.updated | A workspace was updated |
Feedback
Last updated on