> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cotool.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit Event Reference

> Every event type the Cotool audit log can record

This page lists every audit-log event type the platform can emit, regardless of whether it has appeared in your organization's logs yet.

This catalog is also available programmatically via the [Get audit-log event catalog](https://docs.cotool.ai/api-reference/audit-logs/get-audit-log-event-catalog) API endpoint. Note that the [Get audit-log filter options](https://docs.cotool.ai/api-reference/audit-logs/get-audit-log-filter-options) endpoint is different: it returns only the values that already appear in your organization's audit logs, for populating filter dropdowns.

## User events

Events performed directly by a user (actor: `user`).

| Event                                    | Description                                                          |
| ---------------------------------------- | -------------------------------------------------------------------- |
| `user.login`                             | A user signed in.                                                    |
| `user.logout`                            | A user signed out.                                                   |
| `user.create`                            | A new user account was created.                                      |
| `user.update`                            | A user account was updated.                                          |
| `user.updatedSamlSettings`               | A user changed the organization's SAML SSO settings.                 |
| `user.updatedScimSettings`               | A user changed the organization's SCIM provisioning settings.        |
| `user.enrolledTool`                      | A user connected (authenticated) a tool integration.                 |
| `user.createdChat`                       | A user started a new chat.                                           |
| `user.sentChatMessage`                   | A user sent a message in a chat.                                     |
| `user.createdAgent`                      | A user created an agent.                                             |
| `user.updatedAgent`                      | A user updated an agent's name, description, instructions, or tools. |
| `user.deletedAgent`                      | A user deleted an agent.                                             |
| `user.createdAgentTrigger`               | A user created an agent trigger.                                     |
| `user.updatedAgentTrigger`               | A user updated an agent trigger.                                     |
| `user.deletedAgentTrigger`               | A user deleted an agent trigger.                                     |
| `user.triggeredAgent`                    | A user manually triggered an agent run.                              |
| `user.confirmedChatToolUse`              | A user approved a tool call requested in a chat.                     |
| `user.rejectedChatToolUse`               | A user rejected a tool call requested in a chat.                     |
| `user.createdCustomModel`                | A user created a custom model configuration.                         |
| `user.updatedCustomModel`                | A user updated a custom model configuration.                         |
| `user.deletedCustomModel`                | A user deleted a custom model configuration.                         |
| `user.deletedUser`                       | A user deleted another user from the organization.                   |
| `user.updatedGroupPermissions`           | A user changed the permissions assigned to a role.                   |
| `user.startedAgentInstruction`           | A user started an agent-instruction feedback session.                |
| `user.submittedAgentInstructionFeedback` | A user submitted feedback in an agent-instruction session.           |
| `user.generatedAgentInstructionDiff`     | A user generated proposed instruction changes from feedback.         |
| `user.appliedAgentInstructions`          | A user applied proposed instruction changes to an agent.             |
| `chat.shared`                            | A user shared a chat.                                                |
| `chat.unshared`                          | A user unshared a chat.                                              |

## Agent events

Events emitted by autonomous agent runs (actor: `agent`).

| Event                | Description                                                              |
| -------------------- | ------------------------------------------------------------------------ |
| `agent.createdChat`  | An agent run created a new chat.                                         |
| `agent.runStarted`   | An agent run started (via HTTP, cron, webhook, job, tool, or detection). |
| `agent.invokedTool`  | An agent invoked a tool during a run.                                    |
| `agent.runCompleted` | An agent run completed (successfully or with an error).                  |

## Chat events

Events emitted during interactive chats (actor: `chat`).

| Event               | Description                                            |
| ------------------- | ------------------------------------------------------ |
| `chat.runCompleted` | A chat turn completed (successfully or with an error). |
| `chat.invokedTool`  | A tool was invoked during a chat.                      |