What credentials on this account have actually done

The agent activity ledger (PLAN §8.2): every MCP tool call, newest first, with the credential that made it, the arguments as recorded, and whether it succeeded.

This is the audit log surfaced, not a second log. "Which credential did this" was always recorded; until now nobody could read it back without database access, which made it an audit trail only we could audit.

Arguments are stored scrubbed: identifiers are kept so a row says WHICH thing was touched, and secrets were never written.

format=csv returns the exportable audit extract: the same scrubbed rows, one per line, with each credential's label resolved in a credential_label column — the file that answers "which agent did this" for an auditor without a second lookup.