Skip to main content
AgentCat lets you export your analytics data to your own Amazon S3 bucket. Once configured, your data is exported as Parquet files: ready for your data warehouse, BI tools, or compliance archives. Exports include two tables — sessions and events — with user and agent-goal details denormalized into each row. See Privacy & Security for details on how AgentCat protects your data.

​
Prerequisites

  • Data export enabled for your organization
  • An AWS account where you can create IAM roles
  • An S3 bucket in your AWS account to receive exports

​
Setting up a destination

Navigate to Settings > Destinations > Add Destination to start the setup wizard. Export destinations list

​
Step 1: Choose destination type

Currently S3 is the only supported destination type. Select it and continue.

​
Step 2: Configure your S3 bucket

​
Step 3: Set up the IAM role in your AWS account

AgentCat uses cross-account IAM role assumption — your data stays in your AWS account and AgentCat never sees your AWS credentials. AgentCat generates the exact IAM policies you need. The wizard provides setup instructions in five formats:
  • AWS Console — step-by-step manual instructions
  • AWS CLI — copyable shell commands
  • Terraform — HCL code you can add to your infrastructure
  • Pulumi — TypeScript code for Pulumi users
  • CloudFormation — one-click “Launch Stack” button that creates everything automatically
The generated IAM role includes:
  • A trust policy that allows AgentCat’s service role to assume it, with your organization ID as an external ID for security
  • A permissions policy granting s3:PutObject, s3:PutObjectAcl, and s3:DeleteObject on your bucket path (and kms:GenerateDataKey / kms:Decrypt if KMS is configured)

​
Step 4: Verify the connection

After creating the IAM role in your AWS account, return to AgentCat and click Verify Connection. AgentCat will:
  1. Assume your IAM role via STS
  2. Write a test object to your bucket
  3. Delete the test object
If verification fails, AgentCat shows which step failed with a specific error message (e.g., “Role assumption failed”, “Write denied”, “KMS access denied”) to help you troubleshoot.

​
Assigning projects to a destination

After your destination is verified and active:
  1. Navigate to Settings > Projects and select a project
  2. In the Exports section, click Add Destination
  3. Select from your verified destinations
  4. Toggle the export on or off per project
A project can be assigned to multiple destinations, and a destination can receive data from multiple projects.

​
What gets exported

AgentCat exports your data as two Parquet tables:
Sessions are exported once they finalize (a session finalizes after it has been inactive long enough to be considered complete). Each hourly export picks up newly finalized sessions and their events, and a cursor ensures every session is exported exactly once.
Privacy: By default, the event parameters, response, and error columns are excluded from exports — those columns are omitted from the Parquet files entirely. This is controlled by a per-destination column denylist, which you can edit to exclude additional columns or to include these three. All other columns are exported as stored, including IP addresses and user identification data, so the server-side and client-side redaction applied when events are ingested determines what sensitive values an export can contain.

​
Export path structure

Exports are written as Hive-partitioned datasets:
Example:
Each export batch also writes a manifest under mcpcat/v1/_manifests/ recording the files and row counts it produced, and each table root carries a _common_metadata file so the datasets load directly in Spark, DuckDB, and other Parquet readers.

​
Managing destinations

  • Enable/disable: Toggle a destination on or off without deleting it
  • Edit: Update the name or S3 configuration (changing config resets verification — you’ll need to re-verify)
  • Delete: Permanently remove a destination (also removes all project assignments)
  • Re-verify: Test the connection again anytime from the destination detail page