Credentials & the access log
Every credential in Settings → Credentials keeps an access log: who used it, when, and whether the provider accepted it. This page explains how to read it and what to do when a credential stops working. The MCP servers your AI Nodes connect to keep theirs on their own page, in Settings → MCP Servers.
One Google credential, one product
A Google credential is connected for one product, not for your whole Google account: Sheets, Docs, Drive, Calendar, Gmail, Contacts or Analytics. Google is asked only for that product's permissions, and the App column of Settings → Credentials says which one it is — Google Sheets, Google Docs, Gmail… A credential marked sensitive says Google OAuth2 there instead, because the product would give its permissions away.
A node only offers credentials for its own product: the Sheets node and trigger list Google Sheets credentials, the Docs node Google Docs ones, and so on. Drive comes in three levels — only the files HostWebhook created, read-only, or full — and Contacts in two, and any level counts as a Drive or a Contacts credential. To use two products with the same Google account, connect it once for each.
Sheets and Docs credentials also reach the Drive files you choose in Google's own window — Choose from Google Drive on the node or trigger — and nothing else in your Drive. That is how the Sheets trigger watches a spreadsheet for changes and how new files land in the folder you picked, so their logs can show Drive calls. That doesn't make them Drive credentials — the Drive node doesn't offer them. Credentials connected before October 11, 2026 still carry read-only access to all of Drive until you reconnect them.
Reading the log
The log opens on Runs and has four views:
| View | What it shows |
|---|---|
| Runs | Nodes using the credential to do work — a Sheets append, a Docs create, a Gmail send — plus token refreshes and scheduled checks. This is the view that answers “what did my flows do with it?” |
| Browsing | What a node page loads when you open it — tabs, columns, folder names, calendars — and each time you open Google's file window. Each is a real use of the token, so it is logged — but it is you browsing, not a flow running. Opening one Sheets node can add a few of these. |
| Failures | Every row the provider or the platform refused, from any view. |
| All | Everything, newest first. |
Each row says what it was for in plain words (“Sheets node — listing spreadsheets, tabs and columns”, “Docs node — run”) with the raw purpose code underneath, and who triggered it: the node, with a link, when a flow ran; You, browsing from the dashboard when it was a page you opened; Internal only for scheduled checks and token refreshes.
The outcome is also in words. ok means the token was served and the provider accepted it; rejected by the provider — reconnect means it was not. One use is one row: a rejected use never leaves an ok row behind it.
When a provider rejects a credential
When Google (or any provider) answers that a token has expired or been revoked, the credential is marked as rejected. From that moment:
- Every node that uses it shows a red Configuration issue banner with a Reconnect → link, and the credential card shows NEEDS RECONNECT — both take you to the credential's page, where the Reconnect button is.
- Node pages stop asking the provider for their lists. The spreadsheet or document picker shows “The provider rejected this credential” with the same link, and nothing is logged for it.
- A flow that runs with it fails without calling the provider again, and leaves one row per attempt: Not retried — rejected by the provider on <date>. Reconnect the credential. Retrying does not help; the provider's answer will not change until you reconnect.
ok row and the banners disappear on their own.Two other outcomes look similar but are not: provider didn't answer is a temporary outage on the provider's side and is retried normally; issued for a different app means the token belongs to another OAuth client — reconnecting will not fix that one, and the page says so.