Audit
Every call needs Authorization: Bearer <key>. 1 call:
- The workspace's audit log:
GET /v1/audit-log
The workspace's audit log
GET /v1/audit-log
Query parameters
| Name | Type | Required | Description |
|---|---|---|---|
limit | integer | No | From 1 to 100. Default 50. |
cursor | string | No | Opaque cursor from next_cursor. Up to 512 characters. |
actor_type | enum | No | One of: user, api_key, service, staff, system. |
actor_id | string | No | Up to 100 characters. |
action | string | No | Up to 100 characters. |
target_type | string | No | Up to 60 characters. |
target_id | string | No | Up to 100 characters. |
from | string (date-time) | No | ISO 8601 timestamp. |
to | string (date-time) | No | ISO 8601 timestamp. |
Headers
| Name | Type | Required | Description |
|---|---|---|---|
x-workspace-id | string | No | Workspace for session (JWT) callers. API keys carry their own workspace. |
Response 200
| Field | Type | Description |
|---|---|---|
data | object[] | |
data[].action | string | |
data[].actor_id | string or null | |
data[].actor_label | string or null | |
data[].actor_type | enum | One of: user, api_key, service, staff, system. |
data[].id | string (uuid) | |
data[].ip | string or null | |
data[].metadata | object | |
data[].occurred_at | string (date-time) | ISO 8601 timestamp. |
data[].request_id | string or null | |
data[].target_id | string or null | |
data[].target_type | string or null | |
data[].workspace_id | string or null | Workspace id (ws_...). |
next_cursor | string or null | Pass as cursor to get the next page; null at the end. |
Errors: 400, 401, 403, 404, 409, 413, 415, 429, 500. See errors for the shape and codes.