Skip to main content

Documentation Index

Fetch the complete documentation index at: https://zite.com/llms.txt

Use this file to discover all available pages before exploring further.

This page lists every event type captured by Zite audit logs. Each event includes a timestamp, actor, outcome, and an event-specific payload with additional details. Events marked with a shield icon are considered security-critical — actions that could affect account security or data integrity.

Database tables

EventDescription
db.table.createA new table was created in a database.
db.table.renameA table was renamed. Payload includes the old and new names.
db.table.updateA table’s settings were updated. Payload includes the full set of changes.
db.table.reorderTables were reordered within a database.
db.table.deleteA table was soft-deleted.
db.table.restoreA previously deleted table was restored.
db.table.duplicateA table was duplicated. Payload includes the source table ID.

Database fields

EventDescription
db.field.createA new field (column) was added to a table. Payload includes the field type.
db.field.renameA field was renamed. Payload includes the old and new names.
db.field.typeChangeA field’s type was converted (e.g., text → number). Payload includes the old and new types.
db.field.updateA field’s settings were updated. Payload includes the full set of changes.
db.field.reorderFields were reordered within a table.
db.field.deleteA field was soft-deleted.
db.field.restoreA previously deleted field was restored.
db.field.undoTypeConversionA field type conversion was undone, restoring the original type.

Database views

EventDescription
db.view.createA new view was created in a table.
db.view.updateA view’s configuration was updated.
db.view.deleteA view was deleted.
db.view.updateSettingsA view’s display settings (column widths, sort order, etc.) were changed.

Databases

EventDescription
db.base.createA new database was created.
db.base.deleteA database and all its data were deleted.
db.base.copyA database was duplicated. Payload includes the source database ID.
db.base.importDatabase metadata was imported.
db.base.migrateToIsolatedA database was migrated to isolated architecture.
db.organization.deleteAllBasesAll databases in the organization were deleted.

Imports

EventDescription
import.airtableAn Airtable base was imported. Payload includes the Airtable base ID.
import.csvA CSV file was imported. Payload includes the table and record counts.

Authentication

EventDescription
auth.login.successUser logged in successfully. Payload includes the login method (password, google, microsoft, sso).
auth.login.failureLogin attempt failed. Payload includes the attempted email and failure reason.
auth.logoutUser logged out.
auth.impersonateA super-user logged in as another user. Payload includes the target user.

Passwords & MFA

EventDescription
auth.password.resetRequestA password reset email was requested.
auth.password.resetCompleteA password was successfully reset via the reset link.
auth.password.selfChangeA user changed their own password from settings.
auth.password.adminChangeAn admin changed another user’s password.
auth.mfa.enableMFA was enabled for a user account.
auth.mfa.disableMFA was disabled for a user account.

Sessions & SSO

EventDescription
auth.sso.deprovisionA user was deprovisioned via SSO.
auth.session.deleteAllAll sessions were invalidated for a user.

API keys

EventDescription
api.key.enableAPI access was enabled for the organization.
api.key.regenerateThe organization’s API key was regenerated.

Developer apps (OAuth)

EventDescription
developer.app.createA new OAuth application was created.
developer.app.deleteAn OAuth application was deleted.
developer.app.resetSecretAn OAuth application’s client secret was regenerated.

User management

EventDescription
user.inviteA user was invited to the organization. Payload includes the email and role.
user.invite.resendAn invitation email was resent.
user.invite.revokeA pending invitation was revoked.
user.disableA user account was disabled.
user.roleChangeA user’s role was changed. Payload includes the new role.
user.accessChangeA user’s workspace or resource access was updated.

Organization

EventDescription
org.requireMfaThe organization-wide MFA requirement was toggled.
org.changeNameThe organization’s name was changed.
org.deleteThe organization was deleted.

Groups

EventDescription
group.createA new user group was created.
group.renameA group was renamed. Payload includes the old and new names.
group.deleteA group was deleted.
group.membersChangeMembers were added or removed from a group.
group.accessChangeA group’s workspace or resource access was updated.

Event payload

Every event includes a JSON payload in the detail view with event-specific data. Common payload fields include:
FieldDescription
target.typeThe type of resource affected (e.g., table, field, user)
target.idThe ID of the affected resource
target.nameThe display name of the affected resource at the time of the event
basePublicIdThe database ID (for database events)
emailThe email address involved (for auth and invite events)
from / toThe old and new values (for rename and role change events)
fieldTypeThe field type (for field creation events)
countThe number of items affected (for bulk operations)
changesThe full set of changes applied (for update events)
Last modified on May 14, 2026