Stream – Activity Log & Audit Trail

What the author says it does

Stream is a complete activity log and audit trail for your WordPress site: see what changed, who changed it, and when. From plugin activations to post edits, login attempts to new user creation, every user and system action is recorded in an audit log built for debugging, security monitoring, and compliance.

Every logged action is displayed in an activity stream and organized for easy filtering by User, Role, Context, Action or IP address. Admins can highlight entries in the activity log—such as suspicious user activity—to investigate what’s happening in real time. Stream also lets you configure email alerts and webhooks for integrations like Slack and IFTTT, so your team knows the moment something goes wrong.

Stream keeps its own logs healthy too: records are automatically purged on the retention schedule you choose, with batched deletion and orphaned-data cleanup that stay reliable even on very large sites.

Stream is also AI-ready: its abilities are exposed through the WordPress Abilities API and MCP Adapter, so AI assistants and other tools can securely query your site’s activity records.

For advanced users, Stream supports a network view of all activity records on your Multisite, exclude rules to ignore certain kinds of user activity, and a WP-CLI command for querying records.

The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.

Latest changelog entry

4.4.0 – August 31, 2026

Security:

• Keep multisite record reads inside the current site, and make a network capability necessary for changes to network-wide settings.
• Remove integration credentials from option-change records. Secret values now show as [redacted].
• Withhold alert destination credentials, such as Slack webhook URLs, from the stream/get-alerts ability.

Bug Fixes:

• Correct a false “SITE IS DISCONNECTED” error from wp stream query on a site with no records.
• Correct a fatal error when a Stream capability check runs before init.