Using the Activity Log
Last updated January 23, 2026
Activity Log is available on all plans
The Activity Log provides a list of all events on a team, chronologically organized since its creation. These events include:
- User(s) involved with the event
- Type of event performed
- Type of account
- Time of the event (hover over the time to reveal the exact timestamp)
Vercel does not emit any logs to third-party services. The Activity Log is only available to the account owner and team members.
Example events list on the Activity page.
Common use cases for viewing the Activity log include:
- If a user was removed or deleted by mistake, use the list to find when the event happened and who requested it
- A domain can be disconnected from your deployment. Use the list to see if a domain related event was recently triggered
- Check if a specific user was removed from a team
The table below shows a list of events logged on the Activity page.
Event Name | Description |
|---|---|
| access-group-created | A user created an access group. |
| access-group-deleted | A user deleted an access group. |
| access-group-project-updated | A project was changed in an access group. |
| access-group-user-added | A user was added to an access group. |
| access-group-user-removed | A user was removed from an access group. |
| alert-rule-created | An alert rule was created. |
| alert-rule-deleted | An alert rule was deleted. |
| alert-rule-updated | An alert rule was updated. |
| alias | An alias was assigned. |
| alias-delete | An alias was deleted. |
| alias-invite-created | An invite was sent for an alias. |
| alias-invite-joined | A user joined an alias they were given access to. |
| alias-invite-revoked | An invite was revoked for an alias. |
| alias-protection-bypass-created | A shareable link was created for an alias. |
| alias-protection-bypass-exception | A Deployment Protection Exception was updated for an alias. |
| alias-protection-bypass-regenerated | A shareable link was regenerated for an alias. |
| alias-protection-bypass-revoked | A shareable link was revoked for an alias. |
| alias-system | A system alias was assigned. |
| alias-user-scoped-access-denied | User-scoped access was denied for an alias. |
| alias-user-scoped-access-granted | User-scoped access was granted for an alias. |
| alias-user-scoped-access-requested | A user requested access to an alias. |
| alias-user-scoped-access-revoked | User-scoped access was revoked for an alias. |
| attack-mode-disabled | Attack challenge mode was disabled. |
| attack-mode-enabled | Attack challenge mode was enabled. |
| auto-expose-system-envs | Automatically exposing System Environment Variables for the project. |
| avatar | An avatar was created for the profile of a personal account. |
| bulk-redirects-settings-updated | The capacity for bulk redirects was updated. |
| bulk-redirects-version-promoted | A bulk redirects version was promoted. |
| bulk-redirects-version-restored | A bulk redirects version was restored. |
| cert | An SSL certificate was created for a custom domain in a personal account or team. |
| cert-autorenew | An SSL certificate was auto-renewed. |
| cert-clone | An SSL certificate was successfully cloned. |
| cert-delete | An SSL certificate connected to a custom domain was deleted. |
| cert-renew | An SSL certificate was renewed. |
| cert-replace | An SSL certificate connected to a custom domain was successfully replaced by a new one, such as by uploading a new certificate in the dashboard. |
| cert-system-create | A system SSL certificate was created. |
| concurrent-builds-update | The concurrent builds limit was updated. |
| connect-bitbucket | A BitBucket account was connected to a personal. |
| connect-bitbucket-app | A Bitbucket app was connected. |
| connect-configuration-created | A Secure Compute network was created. |
| connect-configuration-deleted | A Secure Compute network was deleted. |
| connect-configuration-link-updated | A Secure Compute network link was updated. |
| connect-configuration-linked | A project was linked to a Secure Compute network. |
| connect-configuration-unlinked | A project was unlinked from a Secure Compute network. |
| connect-configuration-updated | A Secure Compute network was updated. |
| connect-github | A GitHub account was connected to a personal. |
| connect-github-custom-host | A GitHub Enterprise host was connected. |
| connect-github-limited | A GitHub account was connected with limited access. |
| connect-gitlab | A GitLab account was connected to a personal. |
| connect-gitlab-app | A GitLab app was connected. |
| custom-suffix-clear | A custom deployment suffix was cleared. |
| custom-suffix-disable | A custom suffix for a project was disabled. |
| custom-suffix-enable | A custom suffix for a project was enabled. |
| custom-suffix-pending | A custom deployment suffix is pending verification. |
| custom-suffix-ready | A custom deployment suffix is ready. |
| deploy-hook-created | A deploy hook was created. |
| deploy-hook-deduped | If a deploy hook triggers a deployment for a commit that already triggered a deployment via Git, then the deployment from the deploy hook is stopped. This action is reported with the deploy-hook-deduped event. |
| deploy-hook-deleted | A deploy hook was deleted. |
| deploy-hook-processed | A deployment was successfully triggered by a specific deploy hook. |
| deployment | A deployment was created for a project. |
| deployment-creation-blocked | A deployment was blocked because the Git user is not part of the team. |
| deployment-delete | A specific deployment was deleted. |
| disconnect-bitbucket-app | A Bitbucket app was disconnected. |
| disconnect-github | A GitHub account was disconnected. |
| disconnect-github-custom-host | A GitHub Enterprise host was disconnected. |
| disconnect-github-limited | A limited GitHub account was disconnected. |
| disconnect-gitlab-app | A GitLab app was disconnected. |
| dns-add | A DNS record was added to the personal account or team domain records for a specific domain. |
| dns-delete | A DNS record was deleted from the personal account or team domain records for a specific domain. |
| dns-update | A DNS record was updated in the personal account or team domain records for a specific domain. |
| dns-zonefile-import | A DNS zone file was imported. |
| domain | A domain connection was created in a personal account or team. |
| domain-buy | A domain was successfully purchased in a personal account or team. |
| domain-cdn | The CDN feature for a domain was enabled or disabled. |
| domain-custom-ns-change | Domain custom nameservers were changed. |
| domain-delegated | A domain was successfully delegated to another personal account or team so it can also be used there. |
| domain-delete | A domain was removed from a personal account or team. |
| domain-move-in | A domain was moved in from another personal account or team to the current personal account or team. |
| domain-move-out | A domain was moved out from the current personal account or team to another personal account or team. |
| domain-move-out-request-sent | The request to move a domain from the current personal account or team to another personal account or team was sent. |
| domain-renew-change | A domain hosted with Vercel was renewed. |
| domain-service-type-updated | Domain DNS service type was updated. |
| domain-transfer-in | A domain was transferred from an external provider to Vercel. |
| domain-transfer-in-canceled | A domain transfer-in was canceled. |
| domain-transfer-in-completed | A domain transfer-in was completed. |
| drain-created | A drain was created. |
| drain-deleted | A drain was deleted. |
| drain-disabled | A drain was disabled. |
| drain-enabled | A drain was enabled. |
| drain-updated | A drain was updated. |
| edge-cache-dangerously-delete-by-src-images | The edge cache was dangerously deleted by source images. |
| edge-cache-dangerously-delete-by-tags | The edge cache was dangerously deleted by tags. |
| edge-cache-invalidate-by-src-images | The edge cache was invalidated by source images. |
| edge-cache-invalidate-by-tags | The edge cache was invalidated by tags. |
| edge-cache-purge-all | The edge cache was purged. |
| edge-cache-rollback-purge | The edge cache purge was rolled back. |
| edge-config-created | An Edge Config was created. |
| edge-config-deleted | An Edge Config was deleted. |
| edge-config-items-updated | The values in an Edge Config were updated. |
| edge-config-schema-deleted | An Edge Config schema was deleted. |
| edge-config-schema-updated | An Edge Config schema was updated. |
| edge-config-token-created | An access token for an Edge Config was created. |
| edge-config-token-deleted | An access token for an Edge Config was deleted. |
| edge-config-transfer-in | An Edge Config was transferred in. |
| edge-config-transfer-out | An Edge Config was transferred out. |
| edge-config-updated | An Edge Config was updated. |
| The email of the current user was updated. | |
| enforce-sensitive-environment-variables | Sensitive environment variable enforcement was updated. |
| env-variable-add | An automatically encrypted environment variable was added to a project. |
| env-variable-delete | An existing environment variable was deleted from a project. |
| env-variable-edit | An existing environment variable in a project was updated. |
| env-variable-read | The plain text value of an encrypted environment variable was read. |
| env-variable-read:cli:dev | An environment variable was decrypted via CLI dev. |
| env-variable-read:cli:env:add | An environment variable was decrypted via CLI env add. |
| env-variable-read:cli:env:ls | An environment variable was decrypted via CLI env ls. |
| env-variable-read:cli:env:pull | An environment variable was decrypted via CLI env pull. |
| env-variable-read:cli:env:rm | An environment variable was decrypted via CLI env rm. |
| env-variable-read:cli:pull | An environment variable was decrypted via CLI pull. |
| env-variable-read:unknown-source | An environment variable was decrypted from an unknown source. |
| firewall-bypass-created | A bypass of system firewall rules was created |
| firewall-bypass-deleted | A bypass of system firewall rules was deleted |
| firewall-config-promoted | A firewall configuration was promoted. |
| instant-rollback-created | An instant rollback was created. |
| integration-configuration-owner-changed | An integration configuration owner was changed. |
| integration-configuration-scope-change-confirmed | The permissions upgrade request from an installed integration was confirmed. |
| integration-configurations-disabled | One or more integrations were disabled because their owner has left the team |
| integration-installation-billing-plan-updated | An integration billing plan was updated. |
| integration-installation-completed | An integration was installed in one or all projects under a personal account or team. |
| integration-installation-permission-updated | The permissions for an installed integration was updated. |
| integration-installation-removed | An integration was removed from a project or personal account or team. |
| integration-scope-changed | The scopes for an integration were changed. |
| log-drain-created | A log drain was created. |
| log-drain-deleted | A log drain was deleted. |
| log-drain-disabled | A log drain was disabled. |
| log-drain-enabled | A log drain was enabled. |
| manual-deployment-promotion-created | A deployment was manually promoted to production. |
| microfrontend-group-added | A new microfrontend group was created |
| microfrontend-group-deleted | A microfrontend group was deleted |
| microfrontend-group-updated | A microfrontend group was updated |
| microfrontend-project-added-to-group | A project was added to a microfrontend group |
| microfrontend-project-removed-from-group | A project was removed from a microfrontend group |
| microfrontend-project-updated | A microfrontend project configuration was updated. |
| monitoring-disabled | Monitoring was disabled for the team |
| monitoring-enabled | Monitoring was enabled for the team. |
| oauth-app-connection-created | A user authorized an app. |
| oauth-app-connection-removed | A user removed an app authorization. |
| oauth-app-connection-updated | A user updated an app authorization. |
| oauth-app-created | A user created an app. |
| oauth-app-deleted | A user deleted an app. |
| oauth-app-secret-deleted | A user deleted a secret for an app. |
| oauth-app-secret-generated | A user generated a secret for an app. |
| oauth-app-token-created | A token was created for an app. |
| oauth-app-updated | A user updated an app. |
| observability-disabled | Observability Plus was disabled for the team. |
| observability-enabled | Observability Plus was enabled for the team. |
| passkey-created | A new passkey was created. |
| passkey-deleted | An existing passkey was deleted. |
| passkey-updated | The name of the existing passkey was updated. |
| password-protection-disabled | Advanced Deployment Protection was disabled for the team. |
| password-protection-enabled | Advanced Deployment Protection was enabled for the team. |
| plan | A payment plan (hobby, pro or enterprise) was added to a personal account. |
| preview-deployment-suffix-disabled | The preview deployment suffix for a team was disabled. |
| preview-deployment-suffix-enabled | The preview deployment suffix for a team was enabled. |
| preview-deployment-suffix-update | The preview deployment suffix for a team was updated. |
| production-branch-updated | The production branch for a project was updated. |
| project-add-alias | An alias was added to a project domain. |
| project-add-redirect | A redirect was added to a project domain. |
| project-affected-projects-deployments-updated | The skip deployments when root and dependencies are unchanged setting for a project was updated. |
| project-alias-configured-change | A project alias configuration was changed. |
| project-analytics-disabled | Legacy Speed Insights was disabled for a specific project. |
| project-analytics-enabled | Legacy Speed Insights was enabled for a specific project. |
| project-auto-assign-custom-production-domains-updated | The auto-assign custom production domains setting was updated for a project. |
| project-automation-bypass | Protection Bypass for Automation for a project was modified. |
| project-build-command-updated | The build command for a project was updated. |
| project-build-logs-and-source-protection-updated | Build logs and source protection was updated for a project. |
| project-build-machine-updated | The build machine for a project was updated. |
| project-client-cert-delete | A client certificate was deleted from a project. |
| project-client-cert-upload | A client certificate was uploaded to a project. |
| project-created | A new project was created. |
| project-cron-jobs-toggled | Cron jobs were toggled for a project. |
| project-custom-environment-created | A custom environment was created for a project. |
| project-custom-environment-deleted | A custom environment was deleted from a project. |
| project-custom-environment-updated | A custom environment branch tracking was updated for a project. |
| project-customer-success-code-visibility-updated | Customer success code visibility was updated for a project. |
| project-delete | A specific project was deleted. |
| project-deployment-retention-updated | The deployment retention policy was updated for a project. |
| project-directory-listing | The directory listing setting was updated for a project. |
| project-domain-deleted | A domain was deleted from a project. |
| project-domain-moved | A domain was moved between projects. |
| project-domain-unverified | The ownership of a domain added to Vercel became unverified. |
| project-domain-updated | A project domain configuration was updated. |
| project-domain-verified | The project domain ownership was verified. |
| project-elastic-concurrency-updated | On-demand concurrency for a project was updated. |
| project-framework-updated | The framework for a project was updated. |
| project-function-cpu-memory | Function CPU and memory settings were updated for a project. |
| project-function-failover | Function failover settings were updated for a project. |
| project-function-max-duration | Function max duration was updated for a project. |
| project-function-regions | Function regions were updated for a project. |
| project-functions-fluid-disabled | Fluid compute was disabled for a specific project. |
| project-functions-fluid-enabled | Fluid compute was enabled for a specific project. |
| project-git-commit-comments-toggled | The Git commit comments setting for a project was updated. |
| project-git-create-deployments-toggled | The GitHub deployments setting for a project was updated. |
| project-git-fork-protection-updated | Git fork protection was updated for a project. |
| project-git-lfs-toggled | The Git LFS setting for a project was updated. |
| project-git-pr-comments-toggled | The Git PR comments setting for a project was updated. |
| project-git-repository-connected | A Git repository was connected to a project. |
| project-git-repository-disconnected | A Git repository was disconnected from a project. |
| project-git-repository-dispatch-events-toggled | The repository dispatch events setting for a project was updated. |
| project-git-require-verified-commits-toggled | The verified commits requirement setting for a project was updated. |
| project-ignored-build-step-updated | The ignored build step setting was updated for a project. |
| project-install-command-updated | The install command for a project was updated. |
| project-member-added | A user was added to a project. |
| project-member-invited | A user was invited to a project. |
| project-member-removed | A user was removed from a project. |
| project-member-removed-batch | Multiple members were removed from a project. |
| project-member-updated | A user was updated in a project. |
| project-move-in-success | The transfer of a project to the current personal account or team succeeded. |
| project-move-out-failed | The transfer of a project from the current personal account or team failed. |
| project-move-out-started | The transfer of a project from the current personal account or team was initiated. |
| project-move-out-success | The transfer of a project from the current personal account or team succeeded. |
| project-name | A project was renamed. |
| project-node-version-updated | The Node.js version for a project was updated. |
| project-oidc-issuer-mode-updated | The OIDC issuer mode was updated for a project. |
| project-options-allowlist | OPTIONS Allowlist was modified. |
| project-output-directory-updated | The output directory for a project was updated. |
| project-password-protection | Password Protection for a project was modified. |
| project-paused | A project was paused. |
| project-preview-deployment-suffix | The preview deployment suffix was updated for a project. |
| project-preview-environment-branch-tracking-updated | Preview environment branch tracking was updated for a project. |
| project-prioritize-production-builds-updated | The prioritize production builds setting was updated for a project. |
| project-protected-sourcemaps-updated | The protected sourcemaps setting was updated for a project. |
| project-rolling-release-aborted | A production canary rollout was aborted for a project. |
| project-rolling-release-approved | Advancing to the next stage of a production canary rollout was approved for a project. |
| project-rolling-release-completed | A production canary rollout was completed for a project. |
| project-rolling-release-configured | The rolling release configuration was updated for a project. |
| project-rolling-release-disabled | Rolling releases were disabled for a project. |
| project-rolling-release-enabled | Rolling releases were enabled for a project. |
| project-rolling-release-started | A production canary rollout was started for a project. |
| project-rolling-release-timer | A production canary rollout was automatically advanced to the next stage for a project. |
| project-root-directory-updated | The root directory was updated for a project. |
| project-routes-version-promoted | A project routes version was promoted. |
| project-routes-version-restored | A project routes version was restored. |
| project-skew-protection-allowed-domains-updated | Skew Protection allowed domains were updated for a project. |
| project-skew-protection-max-age-updated | Skew Protection max age was updated for a project. |
| project-skew-protection-threshold-updated | Skew Protection threshold was updated for a project. |
| project-source-files-outside-root-directory-updated | The include files outside root directory setting for a project was updated. |
| project-speed-insights-disabled | Speed Insights was disabled for a specific project. |
| project-speed-insights-enabled | Speed Insights was enabled for a specific project. |
| project-sso-protection | Vercel Authentication (formerly SSO protection) for a project was modified. |
| project-static-ips-updated | Static IPs were updated for a project. |
| project-trusted-ips | Trusted IPs for a project was modified. |
| project-unpaused | A project was unpaused. |
| project-web-analytics-disabled | Web Analytics was disabled for a project. |
| project-web-analytics-enabled | Web Analytics was enabled for a project. |
| protected-git-scope-added | A Protected Git Scope was added for the team. |
| protected-git-scope-removed | A Protected Git Scope was removed from the team. |
| runtime-cache-purge-all | All runtime cache was purged. |
| scale | A deployment was scaled. |
| scale-auto | Auto-scaling was configured for a deployment. |
| secondary-email-added | An email was added to the account |
| secondary-email-removed | An email was removed from the account |
| secondary-email-verified | An email was verified |
| secret-add | An encrypted environment variable was added to a project. (Only possible through the API and CLI) |
| secret-delete | An encrypted environment variable was deleted from a project. (Only possible through the API and CLI) |
| secret-rename | An encrypted environment variable was renamed in a project. (Only possible through the API and CLI) |
| set-scale | If a deployment needs to be scaled up or down by increasing or decreasing the docker container size, this event is created. |
| shared-env-variable-create | An automatically encrypted shared environment variable was created. |
| shared-env-variable-delete | An existing shared environment variable was deleted. |
| shared-env-variable-read | The plain text value of an encrypted shared environment variable was read. |
| shared-env-variable-update | An existing shared environment variable was updated. |
| show-ip-addresses | The show IP addresses setting was updated. |
| signup | A new user account was created. |
| signup-via-bitbucket | A new user account was created via Bitbucket. |
| signup-via-github | A new user account was created via GitHub. |
| signup-via-gitlab | A new user account was created via GitLab. |
| speed-insights-settings-updated | Speed Insights settings were updated. |
| spend-created | A spend management budget was added. |
| spend-deleted | A spend management budget was deleted. |
| spend-updated | A spend management budget was updated. |
| storage-accept-tos | Acceptance of storage terms of service |
| storage-access-token-set | A storage access token was set. |
| storage-accessed-data-browser | Made a query to the store from the Data tab |
| storage-connect-project | A store was connected to a project |
| storage-create | A new store was created |
| storage-delete | A store was deleted |
| storage-disconnect-project | A store was disconnected to a project |
| storage-disconnect-projects | A store was disconnected from multiple projects. |
| storage-inactive-store-deleted | An inactive store was deleted |
| storage-reset-credentials | The credentials for a store were reset |
| storage-resource-repl-command | A storage REPL command was executed. |
| storage-update | A store was updated |
| storage-view-secret | Viewed a secret for a store |
| team | A team was created in a personal account. |
| team-avatar-update | The avatar of a specific team was updated. |
| team-delete | A specific team was deleted. |
| team-email-domain-update | The team email domain was updated. |
| team-ended-trial | A team trial ended. |
| team-invite-code-reset | The team invite code was reset. |
| team-member-add | A member was added to a specific team. |
| team-member-confirm-request | The request for a user to join a team was confirmed. |
| team-member-decline-request | The request for a user to join a team was declined. |
| team-member-delete | A specific team member was deleted from a team. |
| team-member-entitlement-added | A team member was added to an entitlement. |
| team-member-entitlement-canceled | A team member entitlement was canceled and set not to renew. |
| team-member-entitlement-reactivated | A team member had an entitlement reactivated. |
| team-member-entitlement-removed | A team member was removed from an entitlement. |
| team-member-join | A team member joined the current team. |
| team-member-leave | A team member left the current team. |
| team-member-request-access | A user requested access to join a team. |
| team-member-role-update | The role of a specific team member was updated. |
| team-mfa-enforcement-updated | The 2FA enforcement of a team was updated. |
| team-name-update | The name of a team was updated. |
| team-paid-invoice | A team invoice was paid. |
| team-remote-caching-update | The Remote Caching status was changed. |
| team-slug-update | The slug of a team was updated. |
| unlink-login-connection | A login connection was unlinked. |
| user-delete | A user account was deleted. |
| user-mfa-challenge-verified | A two-factor challenge was verified |
| user-mfa-configuration-updated | Two-factor configuration was updated |
| user-mfa-recovery-codes-regenerated | Two-factor recovery codes were regenerated |
| user-mfa-totp-verified | A Two-factor authenticator app was added |
| user-primary-email-updated | The primary email was changed |
| username | The username of a personal account was updated. |
| vercel-app-installation-request-dismissed | A user dismissed an app installation request. |
| vercel-app-installation-requested | A user requested an app installation. |
| vercel-app-installation-updated | A user updated an app installation. |
| vercel-app-installed | A user installed an app. |
| vercel-app-tokens-revoked | A user revoked tokens for an app. |
| vercel-app-uninstalled | A user uninstalled an app. |
| vercel-toolbar | The Vercel Toolbar setting was updated. |
| vpc-peering-connection-accepted | A VPC peering connection was accepted. |
| vpc-peering-connection-deleted | A VPC peering connection was deleted. |
| vpc-peering-connection-rejected | A VPC peering connection was rejected. |
| vpc-peering-connection-updated | A VPC peering connection was updated. |
| web-analytics-tier-updated | The Web Analytics subscription tier was changed. |
Was this helpful?