---
title: "Inspect organization audit history"
method: GET
path: "/api/v1/organizations/{organization_id}/audit_events"
tags: ["organizations"]
---

# Inspect organization audit history

`GET /api/v1/organizations/{organization_id}/audit_events`

## Request

- Base URL: `https://composal.com` (the document declares no server; this is the origin it was published from)
- URL: `https://composal.com/api/v1/organizations/{organization_id}/audit_events`
- Auth: HTTP bearer

Administrator-only, paginated metadata history. Available without observability services; contains no secret values.

## Path parameters

- `organization_id` string, required

## Response `200`

Organization audit events

- object
  - `audit_events` AuditEvent[], required
    - `id` string, required
    - `observability_space_id` string, nullable, required
    - `organization_id` string, required
    - `actor_user_id` string, nullable, required
    - `actor_kind` 'user' | 'service' | 'system' | 'agent', required
    - `action` string, required
    - `subject_kind` string, required
    - `subject_id` string, required
    - `subject_name` string, nullable, required
    - `request_id` string, nullable, required
    - `severity` 'info' | 'notice' | 'warn' | 'error', required
    - `payload` unknown, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `created_at_label` string, nullable, required
    - `updated_at_label` string, nullable, required
  - `pagination` object, required

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not found
- `422`: Unprocessable entity
- `502`: Bad gateway

---

[API](https://skmtc.dev/composal/apis/vex-api.md) - [All operations](https://skmtc.dev/composal/apis/vex-api/llms.txt) - [OpenAPI document](https://skmtc.dev/composal/apis/vex-api/revisions/74298a24e040?raw)
