Skip to content
Status

AI Control Plane · Logging & telemetry

Logging & telemetry

Control which tool-call logs, telemetry, and agent session data the platform records for an organization.

The Logs page controls what the platform captures from instrumented agents, from tool-call traces to agent session transcripts. Everything on the Observe pages is powered by these switches. Open it from Settings > Logging & Telemetry in the dashboard.

Viewing this page requires the org:read scope, so both default Admin and Member roles can see current settings. Changing any toggle requires the org:admin scope, which only the default Admin role holds. Members without that scope see the switches rendered but disabled.

Tool logs and agent sessions are retained for 90 days, then age out automatically. See platform security for how that data is stored and isolated.

The page presents a set of toggle rows that control what the platform records. Every setting except Upload Skill Content is off until an admin turns it on.

  • Enable Logs records tool-call traces and telemetry. This is the master switch for the settings below it.
  • Upload Skill Content uploads each skill’s SKILL.md content at activation so captured skills can be inspected. When disabled, the platform receives only skill names, source details, hashes, users, and hostnames at activation. This row appears only when skills are enabled for the organization, and it is on by default. The same toggle also appears on the Skills settings page, and the two stay in sync.
  • Record Tool I/O stores the inputs and outputs of tool calls. Stored payloads may expose sensitive data, so enable it deliberately.
  • Agent Session Capture captures user prompts and assistant responses from supported coding agents. Captured sessions appear in Agent Sessions. The toggle applies to every instrumented agent, including ones without an OpenTelemetry exporter such as OpenCode and OpenClaw, whose transcripts arrive through the observability plugin instead.
  • Fail Open During Outages lets tool calls proceed when the platform is unreachable instead of blocking them (blocking is the default). Blocking policies go unenforced during the outage; events are still recorded and scanned after recovery, and invalid credentials always block. Flipping this setting is recorded in Audit Logs.
  • Hook Browser Sign-In lets hook plugins sign users in through the browser so events record under their own identity. When off, plugins use the organization key or explicitly configured credentials.

The Logs settings card with toggles for logging, skill content, tool I/O, session capture, fail-open, and browser sign-in

Record Tool I/O and Agent Session Capture both depend on Enable Logs:

  • Turning Enable Logs off also turns Record Tool I/O off.
  • While Enable Logs is off, both switches are frozen at their stored value and cannot be changed. Turn logs back on to edit them.

Upload Skill Content, Fail Open During Outages, and Hook Browser Sign-In are independent of Enable Logs.

Settings save immediately, one switch at a time, and the rest of the page is locked while a change is in flight. If a save fails, the switch reverts to its stored value and an error appears.

  • Data export sends normalized OTLP logs, metrics, and traces from each project to an external collector.
  • AI Integrations connects provider compliance and admin APIs for Cursor, Anthropic, and OpenAI on its own settings page. Those integrations are optional; the platform works with basic instrumentation alone.