---
title: "List security audit events"
method: GET
path: "/api/audit"
tags: ["API Tokens"]
---

# List security audit events

`GET /api/audit`

## Request

- Base URL: `https://domani.run`
- URL: `https://domani.run/api/audit`
- Auth: HTTP bearer

Returns the account's security audit trail, newest first: token lifecycle (created, revoked, escalation attempts), spend-cap and max_price denials, charges, payout requests, and blocked account deletions. Use it to monitor what your agents' tokens are doing.

## Query parameters

- `limit` integer
- `cursor` string
- `type` string

## Response `200`

Audit events (newest first)

- object
  - `events` object[]
    - `id` string
    - `tokenId` string, nullable: Token that performed the action (null = dashboard/session)
    - `type` string
    - `targetType` string, nullable
    - `targetId` string, nullable
    - `metadata` object
    - `createdAt` string, date-time
  - `next_cursor` string, nullable
  - `hint` string

## Other responses

- `401`: Missing or invalid API key
- `429`: Rate limit exceeded - wait and retry

---

[API](https://skmtc.dev/domani/apis/domani-run-api.md) · [All operations](https://skmtc.dev/domani/apis/domani-run-api/llms.txt) · [OpenAPI document](https://skmtc.dev/domani/apis/domani-run-api/revisions/7679f8159533?raw)