---
title: "Export audit logs (SIEM)"
method: GET
path: "/api/v1/audit/export"
---

# Export audit logs (SIEM)

`GET /api/v1/audit/export`

## Request

- Base URL: `https://app.axiorank.com`
- URL: `https://app.axiorank.com/api/v1/audit/export`
- Auth: HTTP bearer

Stream redacted audit-log rows as newline-delimited JSON (`application/x-ndjson`), one row per line, keyset-paginated by `(created_at, id)`. Follow the `x-axiorank-next-cursor` response header to page. Requires the `logs:read` scope and a Pro plan or above (`siemExport`).

## Query parameters

- `from` string
- `to` string
- `cursor` string
- `limit` integer
- `source` 'sdk' | 'mcp' | 'coding-agent' | 'browser-agent'
- `decision` 'allow' | 'deny' | 'hold'

## Response `200`

NDJSON stream of redacted audit rows.

## Other responses

- `400`: Invalid query parameter.
- `401`: Missing or invalid API key.
- `403`: Missing `logs:read` scope or plan does not include SIEM export.

---

[API](https://skmtc.dev/axiorank/apis/axiorank-gateway-api.md) · [All operations](https://skmtc.dev/axiorank/apis/axiorank-gateway-api/llms.txt) · [OpenAPI document](https://skmtc.dev/axiorank/apis/axiorank-gateway-api/revisions/d8a7a33656e4?raw)