Query audit log

GET

/v1/audit-log

curl --request GET \
  --url 'https://example.com/v1/audit-log?limit=50' \
  --header 'X-API-Key: <X-API-Key>' \
  --header 'X-Tenant-ID: 2489E9AD-2EE2-8E00-8EC9-32D5F69181C0'

Authorizations

• ApiKeyAuth
• BearerAuth

Parameters

Header Parameters

X-Tenant-ID

required

string format: uuid

Tenant identifier. Must match the tenant associated with the credential. Returns 403 tenant_mismatch if the credential and header belong to different tenants.

Query Parameters

limit

integer

default: 50 <= 250

Maximum number of items to return.

cursor

string

Opaque pagination cursor from a previous response. Omit for the first page.

actor_id

string

resource_type

string

resource_id

string

action

string

from

string format: date-time

to

string format: date-time

Responses

200

OK

Media type application/json

object

data

required

Array<object>

object

id

required

string format: uuid

actor_id

required

string

actor_type

required

string

Allowed values: api_key oidc system

action

required

string

resource_type

required

string

resource_id

required

string

metadata

required

object

key

additional properties

any

reasoning

string

nullable

created_at

required

string format: date-time

next_cursor

string

nullable

has_more

required

boolean

Example

{
  "data": [
    {
      "actor_type": "api_key"
    }
  ]
}

401

Unauthenticated

Media type application/json

object

code

required

Machine-readable error code (e.g. “not_found”, “tenant_mismatch”).

string

message

required

Human-readable description of the error.

string

details

Optional additional context about the error.

object

key

additional properties

any

notices

Policy notices from determining Cedar rules, if applicable.

Array<string>

Example ^generated

{
  "code": "example",
  "message": "example",
  "details": {},
  "notices": [
    "example"
  ]
}

403

Forbidden

Media type application/json

object

code

required

Machine-readable error code (e.g. “not_found”, “tenant_mismatch”).

string

message

required

Human-readable description of the error.

string

details

Optional additional context about the error.

object

key

additional properties

any

notices

Policy notices from determining Cedar rules, if applicable.

Array<string>

Example ^generated

{
  "code": "example",
  "message": "example",
  "details": {},
  "notices": [
    "example"
  ]
}