Trace agent access across enterprise data and systems. Review the identity, operation, and outcome, with request context to investigate the work behind it.
CISOs and security teams need evidence of how enterprise data is being used. Trace the authority, data access, and actions behind agent activity across connected systems.
Identify the connected system and data operation involved in a request, with query details where available.
The system, the operation, and the query details where available
Associate activity with the user or agent identity under which access was authorized.
Every request tied to the identity that authorized it
Use supplied task or request context to connect access to the work it served. Administrators can inspect operations and outcomes and export activity for review.
$ activity list --agent svc:agent-42 --since 24h09:14 query snowflake.ledger allowed09:15 read salesforce.account allowed09:15 update payments.vendor denied$ activity export --format csv✓ exported for review▍
Use activity records to investigate how an agent reached enterprise data. Review the recorded operations alongside the task and the access it was meant to have.
Review when an operation ran, the MarcoPolo identity and connection involved, its action, and its outcome. Depending on the operation, details can include query text, tool name, row count, and duration.
Examine the associated trace and any saved query files or artifacts. Use the supplied task or request context to understand the work; an activity record does not infer a business purpose that was never supplied.
Administrators can review organization activity and export the events shown. OpenTelemetry logging and tracing bring these operations into existing monitoring and SIEM tools.
Tool response payloads are not captured in traces by default. Capturing the exact data returned requires a separate decision about response capture, redaction, access, and retention.
Walk through an operation, the evidence it leaves, and how your team will use it for investigation and oversight.
