---
title: "Get audit-log filter options"
method: GET
path: "/api/audit-logs/filter-options"
tags: ["Audit Logs"]
---

# Get audit-log filter options

`GET /api/audit-logs/filter-options`

## Request

- Base URL: `https://app.cotool.ai`
- URL: `https://app.cotool.ai/api/audit-logs/filter-options`
- Auth: HTTP bearer

Retrieve the distinct event types, actors, user IDs, and tool family slugs that appear in this org's audit logs. Used by the audit-logs UI to populate filter dropdowns with only values that actually yield results.

## Response `200`

Successful response

- object: Pre-computed value lists used to populate the audit-log filter dropdowns. Each list is already scoped to values that appear in the org's audit logs after the native-tool exclusion.
  - `eventTypes` string[], required: Distinct event types present in audit logs for the organization
  - `actors` string[], required: Distinct actor values (user, agent, chat) present in audit logs for the organization
  - `userIds` string[], required: Distinct user IDs present in audit logs for the organization
  - `toolGroups` string[], required: Distinct tool family slugs (data.toolId first segment, split on "_") present in audit logs for the organization

## Other responses

- `400`: Bad request — input validation failed or the request was malformed
- `401`: Unauthorized — missing or invalid API key / session
- `403`: Forbidden — the authenticated user lacks the required permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/cotool/apis/cotool-api.md) - [All operations](https://skmtc.dev/cotool/apis/cotool-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cotool/apis/cotool-api/revisions/f5abe0add203?raw)