Related pages
- See Organization audit logs to stream token issuance and revocation to your SIEM.
- See Platform audit logs to capture administration above the organization boundary.
- See Architecture for the permission model behind MCP connections.
Security
MCP access logs
Review OAuth connections, personal access tokens, and external MCP client activity in a workspace.
This page is a work in progress.
External MCP clients connect to Tracecat and call tools as a real user. Review their connections, tokens, and activity from the workspace sidebar under MCP access.