---
title: "List user audit logs"
method: GET
path: "/api/audit-log-service/v3/audit-logs"
tags: ["Audit log"]
---

# List user audit logs

`GET /api/audit-log-service/v3/audit-logs`

Lists audit logs for the authenticated user within an enterprise.
Returns audit logs based on the user's role (auditor, admin, or member)
with appropriate filtering. Results are paginated and sorted by
timestamp in descending order.

**Requires access token scopes:** `auditlogs_view_all` or `user_manage`

## Query parameters

- `filter[enterpriseId]` string, required
- `filter[targetId]` string
- `filter[targetType]` 'user' | 'wallet' | 'enterprise' | 'organization' — Type of entity that was the target of the action
- `filter[type]` AuditLogEventType[]
- `filter[actorId]` string
- `filter[actorType]` 'admin' | 'user' | 'bitgo'
- `filter[bucket]` 'enterprise' | 'login' | 'organization' | 'policy' | 'safe' | 'transaction' | 'unknown' | 'user' | 'wallet'
- `filter[correlationId]` string
- `filter[createdAt][gte]` string, date-time
- `filter[createdAt][lt]` string, date-time
- `page[after]` string
- `page[size]` integer

## Response `200`

Successfully retrieved audit logs

## Other responses

- `400` — Invalid request parameters
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not found
- `500` — Internal server error

## Changes

- **2026-09-03** `a7126d55243d` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/bitgo/apis/bitgo-api/changes/api/audit-log-service/v3/audit-logs/get.md)

---

[API](https://skmtc.dev/bitgo/apis/bitgo-api.md) · [All operations](https://skmtc.dev/bitgo/apis/bitgo-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bitgo/apis/bitgo-api/revisions/021ae042735e?raw)