Getting Started
What is Node9?Quick StartHow It WorksForecastAgent IntegrationsAccount & Machine
Configuration
ConfigurationPrivacy & Cloud ModeSmart RulesEffective ConfigurationPersistent DecisionsPause & Resume
Protections
ShieldsSandboxSecurity PostureContent Scanner (DLP)Trusted HostsCanary CredentialsSkill PinningRepository ScanningEgress ControlBadges
Integrations
MCP GatewayMCP ServerPython SDKGoverned Agents
Operations
Mission ControlReportSecurityAgentic Threat CoverageBlast RadiusSessions & Live ActivityRedacting Session HistoryCloud Policy Rules
Help
Help & SupportAbout Node9

Sessions & Live Activity · node9 documentation

Sessions & Live Activity

What the agent did, grouped by session, and what it is doing right now.

After the fact
node9 sessions              # last 7 days
node9 sessions --days 30
node9 sessions --all
One line per session with tool calls, cost and files changed. This is the view for "what happened yesterday".
One session in full
node9 sessions --detail <sessionId>
The full tool trace for a single session, in order. Use it when a session's summary line raises a question.

Watching it live

Stream
node9 tail
node9 tail --history    # replay recent, then follow
node9 tail --clear      # empty the buffer and exit
Live agent activity in the terminal. Worth having open in a second window the first time you let an agent run unattended, because the moment a rule fires is more informative than the summary afterwards.
A pause is visible here
Calls made while enforcement is paused still appear, marked as such. A quiet stream during a pause means the agent was quiet, not that node9 stopped recording.