API tokens and audit logs

API access tokensCopy Anchor Link

Settings → API Access Tokens is where you create and rotate tokens for:

• the OpsLyft API;
• MCP servers that FinOps Copilot connects to.

When a token expires, the feature that uses it stops and OpsLyft adds an item to Needs attention with a Rotate button.

Audit logsCopy Anchor Link

Settings → Audit Logs records who did what, and when, across the workspace: sign-ins, setting changes, connection changes, and actions on findings.