Configure toolkits, query audit logs, and revoke access via natural language at app.civic.com
Civic Chat at app.civic.com is your control plane for AI agent security — not a general-purpose AI assistant. It is purpose-built for three tasks: configuring your Hub, querying audit logs, and revoking access.
Civic Chat is restricted to control-plane tasks only. Requests outside of configuration, audit, and revocation are blocked. All Civic Chat commands consume credits from the same pool as your agents’ tool calls — use it deliberately.
Three specialized agents are available, each purpose-built for a different control task.
Query your agent’s complete activity log. The Audit Agent can answer questions about what your agent did, when, and with what parameters.What’s logged: every tool call, tool name, parameters, response, timestamp, and agent identity. Retained for approximately 30 days.Example prompts:
"What did my agent do in the last 24 hours?"
"Show me every tool call from yesterday with timestamps"
"Export my audit log as a CSV"
"Did my agent try to delete anything this week?"
"Show me a summary of tool usage for the production-agent toolkit this month"
Three output formats available:
Aggregated summary — high-level overview of what happened
Line-by-line detail — every tool call with full parameters and responses
CSV export — up to 5,000 lines per export, downloadable
Audit access is currently via Civic Chat only. A UI view is coming soon.
Revoke access instantly at any granularity. Revocation is immediate — no delay, no grace period.Example prompts:
"Block the send_email tool on my Gmail server immediately"
"Revoke all access for my production-agent toolkit"
"Remove Google Calendar from my agent's permissions"
"Block the delete_event tool on Calendar but keep the rest"
Why Chat-only for revocation: The Civic Chat endpoint is separated from the AI agent layer by design. If revocation were available via the same API your agent calls, a compromised agent could revoke its own constraints or another agent’s access. The human-in-the-loop requirement is intentional.You can also revoke via the UI at app.civic.com → Authorizations → Revoke.