---
title: "Audit Logs"
method: GET
path: "/api/audit/logs"
tags: ["import"]
---

# Audit Logs

`GET /api/audit/logs`

## Request

- Base URL: `https://app.dataassist.io` (the document declares no server; this is the origin it was published from)
- URL: `https://app.dataassist.io/api/audit/logs`
- Auth: none declared

Per-call audit rows for the org with filters + pagination.

Always reachable (no ``audit_detailed`` gate on the endpoint itself).
The ``audit_detailed`` toggle acts as a hard privacy gate on the
payload fields: when ``FALSE``, the API masks ``request_args`` and
``response_data`` to ``None`` even for older rows captured while it
was ``TRUE`` — so flipping the toggle off is a real "I don't want
these payloads readable" action, not just a UI hide (SOC2 posture).
The audit_wrapper also never *writes* those fields while the toggle
is off, so the strip here is for historical rows. Viewers are
auto-restricted to their own ``user_id``.

Filters (all optional, AND'd together):
  * ``user_id``    — admin-only; viewer is force-scoped to themselves.
  * ``tool_name``  — exact match.
  * ``success``    — 'true' / 'false'.
  * ``date_from`` / ``date_to`` — inclusive day boundaries. Format
    ``YYYY-MM-DD`` (interpreted in server local time).

## Query parameters

- `user_id` integer, nullable
- `tool_name` string, nullable
- `success` string, nullable
- `date_from` string, nullable
- `date_to` string, nullable
- `team_id` integer, nullable
- `page` integer
- `page_size` integer

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/dataassist/apis/dataassist-io-server.md) · [All operations](https://skmtc.dev/dataassist/apis/dataassist-io-server/llms.txt) · [OpenAPI document](https://skmtc.dev/dataassist/apis/dataassist-io-server/revisions/43b22ccf75fe?raw)
