audit

List audit log entries

Changed on

Returns audit log entries matching the filter criteria. Manager or admin only.

get/audit

Request

  • Base URL
    http://localhost/api/v1
  • Auth
    • HTTP bearer
    • or HTTP basic
    • or none

Query parameters

remoteNodestring

name of the remote node

categorystring

Filter by audit category (e.g., terminal, user, dag)

actionstring

Filter by audit action

sourcestring

Filter by audit source (e.g., mcp, ui, rest, cli)

surfacestring

Filter by accepted credential surface (e.g., mcp, rest_api)

resultstring

Filter by result (succeeded, failed, denied)

correlationIdstring

Filter by correlation ID

resourceTypestring

Filter by resource type

resourceIdstring

Filter by resource ID

workspacestring

Filter by canonical workspace

credentialIdstring

Filter by credential ID

credentialTypestring

Filter by credential type

mcpToolstring

Filter by MCP tool name

ipAddressstring

Filter by client IP address

userIdstring

Filter by user ID

startTimestring date-time

Filter entries after this time (ISO 8601 format)

endTimestring date-time

Filter entries before this time (ISO 8601 format)

limitinteger

Maximum number of entries to return (default 100)

offsetinteger

Number of entries to skip (for pagination)

Response

List of audit log entries

totalinteger required

Total number of entries matching the filter (before pagination)

Changes

    • warning

      added the new conflict enum value to the response property for the response status

    • warning

      added the new conflict enum value to the response property for the response status

    • warning

      added the new conflict enum value to the response property for the response status

    • warning

      added the new human_task_resume_failed enum value to the response property for the response status

    • warning

      added the new human_task_resume_failed enum value to the response property for the response status

    • warning

      added the new human_task_resume_failed enum value to the response property for the response status

    • warning

      added the new payload_too_large enum value to the response property for the response status

    • warning

      added the new payload_too_large enum value to the response property for the response status

    • warning

      added the new payload_too_large enum value to the response property for the response status

    • warning

      added the new rate_limited enum value to the response property for the response status

    • warning

      added the new rate_limited enum value to the response property for the response status

    • warning

      added the new rate_limited enum value to the response property for the response status