Access keys and audit logs
Create access keys for the OpsLyft API and MCP, and review who did what.
Access keys
Settings → MCP & Access Keys is where you create and revoke access keys (API tokens). A key lets a script call the OpsLyft API, or an AI client such as Claude connect through MCP, with the access you give it. Every key has an end date of at most a year.
See Access keys for how to create one, what it can access, and how to revoke it.
Audit logs
Settings → Audit Logs records who did what, and when, across the workspace: sign-ins, setting changes, connection changes, and actions on findings.
The Audit Logs page is rolling out in v2.