diff --git a/kong/mcp/audit-log.yaml b/kong/mcp/audit-log.yaml
index 311176e..0e85083 100644
--- a/kong/mcp/audit-log.yaml
+++ b/kong/mcp/audit-log.yaml
@@ -4,12 +4,9 @@ metadata:
   name: ${NAME}-catalog-mcp-audit-log
   namespace: ${NAMESPACE}
 plugin: http-log
-# dev only: request/response bodies and the raw Authorization (JWT) header
-# are captured in clear text. Not acceptable as-is for a non-dev environment.
+# dev only: the raw Authorization (JWT) header is captured in clear text,
+# not acceptable as-is for a non-dev environment.
 config:
   http_endpoint: ${AUDIT_LOG_ENDPOINT}
   method: POST
   content_type: application/json
-  custom_fields_by_lua:
-    request_body: "return kong.request.get_raw_body()"
-    response_body: "return kong.response.get_raw_body()"
diff --git a/kong/rest/audit-log.yaml b/kong/rest/audit-log.yaml
index 7723d30..38e62a8 100644
--- a/kong/rest/audit-log.yaml
+++ b/kong/rest/audit-log.yaml
@@ -4,12 +4,9 @@ metadata:
   name: ${NAME}-catalog-api-audit-log
   namespace: ${NAMESPACE}
 plugin: http-log
-# dev only: request/response bodies and the raw Authorization (JWT) header
-# are captured in clear text. Not acceptable as-is for a non-dev environment.
+# dev only: the raw Authorization (JWT) header is captured in clear text,
+# not acceptable as-is for a non-dev environment.
 config:
   http_endpoint: ${AUDIT_LOG_ENDPOINT}
   method: POST
   content_type: application/json
-  custom_fields_by_lua:
-    request_body: "return kong.request.get_raw_body()"
-    response_body: "return kong.response.get_raw_body()"