Agent Access and Operation Audit

This concept covers what happens when software, not just people, works inside a MoveTheWheels workspace. An Agent Access page lists the external AI agents connected to the workspace and the tools they can call, and an Operation audit page records every operation performed by a person, the built-in assistant or an agent in a single, filterable ledger.

Letting an AI agent create orders or resequence routes is useful only if operators can see who connected it, what it is allowed to do and what it actually did. Without that, automation becomes a blind spot in exactly the places, such as dispatch and billing, where mistakes are expensive. The design treats each agent as an actor with a scope and a record, the same way it treats a team member.

On Agent Access, a Connected agents table lists each client with the account it acts as, its scope (sample roles such as Dispatch Manager, Read Only and Finance Analyst), when it last called and whether it is Connected or Revoked, next to an Add connection button. A Connection health card counts calls today, denied calls and AI credits used. A Tool surface section groups the available tools by domain, from customers, drivers and vehicles to orders, shipments, routes, warehouses, inventory, reports and analytics, with a tool count on each group. Groups that include a destructive tool without a confirmation gate are marked, and a tooltip spells out the risk. Recent agent calls show the time, tool, record, actor and result, filterable by reads, writes and denied calls, including a vehicle deletion refused for missing permission.

The Operation audit page, under Settings, widens the lens to every actor. Filters for date, actor type, resource and result, plus quick chips for Person, Assistant and Agent, narrow the table, while tiles count the day's operations, writes, denials and agent activity. Selecting an entry opens its details, including workspace, record, result and a partly masked client IP address, along with its variables, where sensitive fields such as license numbers, email addresses and phone numbers are redacted before the entry is stored. An Export CSV action is designed to hand that evidence to reviewers.