---
title: "List exec-audit sessions (internal)"
method: GET
path: "/internal/exec-audit/sessions"
tags: ["Exec-Audit"]
---

# List exec-audit sessions (internal)

`GET /internal/exec-audit/sessions`

## Query parameters

- `workspace_id` string, required
- `exe_id` string
- `user_id` string
- `turn_id` string
- `since` string
- `until` string
- `limit` integer

## Headers

- `X-Internal-Secret` string, required

## Response `200`

OK

- ListAuditSessionsResponse
  - `next_cursor` string
  - `sessions` AuditSessionSummary[], required
    - `bytes_to_backend` integer
    - `bytes_to_client` integer
    - `client_ip` string
    - `close_reason` string
    - `closed_at` string — RFC3339
    - `exe_id` string, required
    - `frames_to_backend` integer
    - `frames_to_client` integer
    - `id` string, required
    - `opened_at` string, required — RFC3339
    - `stream_id` string, required
    - `turn_id` string
    - `user_id` string
    - `workspace_id` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `500` — Internal Server Error

## Changes

> 20 revisions in range; 1 could not be searched.

- **2026-05-23** `04ebb6ce7b06` — 1 info
  - endpoint added
- **2026-05-22** `1ba39f384b63` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/agentserver/apis/agentserver-api/changes/internal/exec-audit/sessions/get.md)

---

[API](https://skmtc.dev/agentserver/apis/agentserver-api.md) · [All operations](https://skmtc.dev/agentserver/apis/agentserver-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/agentserver/agentserver-api/revisions/e8c329825b4e/schema)