---
title: "List audit events"
method: GET
path: "/audit"
tags: ["Audit"]
---

# List audit events

`GET /audit`

## Query parameters

- `type` string[]
- `agentId` union
  - ''
  - string
- `limit` integer
- `offset` integer

## Response `200`

Audit events matching the filters, with a total count

- object
  - `events` union[], required
    - union
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'policy_eval', required
        - `id` string, required
        - `agentId` string, nullable, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `agentName` string
          - `actor` object
            - `actorType` 'agent' | 'user' | 'staff', required
            - `actorId` string, required
          - `accountId` string
          - `amount` object
            - `amount` string, required
            - `asset_id` string, required
          - `decision` 'approved' | 'pending_approval' | 'blocked', required
          - `reasons` string[], required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'state_transition', required
        - `id` string, required
        - `agentId` string, nullable, required
        - `timestamp` string, date-time, required
        - `evidenceLookup` object
          - `key` 'intentId' | 'transactionId' | 'walletTransactionId', required
          - `id` string, required
        - `data` object, required
          - `intentId` string
          - `actor` object
            - `actorType` 'agent' | 'user' | 'staff', required
            - `actorId` string, required
          - `walletTransactionId` string
          - `from` string, required
          - `to` string, required
          - `dwellMs` number, nullable, required
          - `recoveryReason` string
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'approval_action', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `evidenceLookup` object
          - `key` 'intentId' | 'transactionId' | 'walletTransactionId', required
          - `id` string, required
        - `data` object, required
          - `intentId` string, required
          - `actorId` string
          - `actor` string, required
          - `action` 'approve' | 'deny', required
          - `notes` string, nullable, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'policy_change', required
        - `id` string, required
        - `agentId` string, nullable, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `policyId` string, required
          - `field` string, required
          - `oldValue` string, required
          - `newValue` string, required
          - `actor` string, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'policy_grant', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `action` 'granted' | 'revoked', required
          - `grantId` string, required
          - `policyId` string, required
          - `policyName` string, required
          - `agentName` string, required
          - `actor` string, required
          - `actorUserId` string, nullable, required
          - `expiresAt` string, date-time, nullable, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'agent_created', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `agentName` string, required
          - `actor` object, required
            - `actorType` 'user', required
            - `actorId` string, required
            - `email` string, required
            - `role` string, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'agent_linked', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `agentName` string, required
          - `clientKind` 'mcp' | 'cli' | 'remote_mcp' | 'service'
          - `clientLabel` string, nullable
          - `operatorId` string, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'counterparty_payment_request', required
        - `id` string, required
        - `agentId` string, nullable, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `counterpartyId` string, required
          - `action` 'requested' | 'resent' | 'submitted', required
          - `methods` object
            - `bank` boolean, required
            - `wallet` boolean, required
          - `railCount` number
          - `operatorId` string
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'device_link_decision', required
        - `id` string, required
        - `agentId` string, nullable, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `decision` 'approved' | 'denied', required
          - `agentName` string, nullable, required
          - `clientLabel` string, nullable
          - `requesterIp` string, nullable
          - `operatorId` string, required
          - `scope` 'agent:link' | 'agent:connect'
          - `agentCreated` boolean
          - `policyId` string, nullable
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'agent_key_created', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `agentName` string, required
          - `keyName` string, required
          - `keyThumbprint` string, required
          - `operatorId` string, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'agent_key_revoked', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `agentName` string, required
          - `keyName` string, nullable, required
          - `keyThumbprint` string, required
          - `operatorId` string, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'agent_link_reauthorized', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `data` object, required
          - `agentName` string, required
          - `agentLinkId` string, required
          - `clientKind` 'mcp' | 'cli' | 'remote_mcp' | 'service', required
          - `clientLabel` string, nullable, required
          - `previousAuthorizerUserId` string, required
          - `newAuthorizerUserId` string, required
          - `previousAuthorizerEmail` string
          - `newAuthorizerEmail` string
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'custody_topology', required
        - `id` string, required
        - `agentId` string, nullable, required
        - `timestamp` string, date-time, required
        - `data` object, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'signer_lifecycle', required
        - `id` string, required
        - `agentId` string, required
        - `timestamp` string, date-time, required
        - `data` object, required
      - object
        - `policy` object
          - `id` string, required
          - `name` string, required
          - `version` number
          - `grantId` string
          - `evaluationId` string
        - `type` 'wallet_signer_enrollment', required
        - `id` string, required
        - `agentId` unknown, required
        - `timestamp` string, date-time, required
        - `data` object, required
  - `total` number, required

---

[API](https://skmtc.dev/catena/apis/catena-api.md) · [All operations](https://skmtc.dev/catena/apis/catena-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/catena/catena-api/revisions/f0a9c99d458d/schema)