---
title: "List current sandbox agency audit events"
method: GET
path: "/agencies/current/audit-events"
tags: ["Agencies"]
---

# List current sandbox agency audit events

`GET /agencies/current/audit-events`

## Request

- Base URL: `https://platform-api.homejourney.sg/v1`
- URL: `https://platform-api.homejourney.sg/v1/agencies/current/audit-events`
- Auth: HTTP bearer

Returns synthetic, redacted sandbox audit event summaries for the current sandbox agency when the authenticated automation client has `agency.audit.read`. External URL: `/v1/agencies/current/audit-events`. Current Next.js implementation path: `/api/platform/v1/agencies/current/audit-events`. This read-only route does not require `Idempotency-Key`; SDK, CLI, and MCP audit-event inspection may call this sandbox route, while live audit events, raw request payloads, raw response payloads, request headers, response bodies, IP addresses, user agents, API key digests, customer PII, private notes, and delegated impersonation controls remain deferred.

## Headers

- `X-Correlation-Id` string

## Response `200`

Current sandbox agency redacted audit event summaries.

- CurrentAgencyAuditEventsResponse
  - `audit_events` object, required: Sandbox-only redacted audit event summaries. Customer PII, contact fields, private notes, raw request payloads, raw response payloads, request headers, response bodies, IP addresses, user agents, API key digests, and live audit events are not returned.
    - `agency` Agency, required (unresolved $ref)
    - `summary` object, required
      - `total_events` integer, required
      - `returned_events` integer, required
      - `redaction_version` integer, required
      - `live_events_included` false, required
      - `raw_payloads_returned` false, required
      - `request_headers_returned` false, required
      - `response_bodies_returned` false, required
      - `ip_addresses_returned` false, required
      - `user_agents_returned` false, required
      - `api_key_digests_returned` false, required
      - `customer_pii_returned` false, required
    - `events` object[], required
      - `audit_event_id` string, required
      - `occurred_at` string, date-time, required
      - `category` 'agency_access' | 'agency_delegation', required
      - `action` string, required
      - `outcome` 'allowed' | 'denied', required
      - `scope` 'organizations.read' | 'onboarding.write' | 'credentials.write' | 'listings.read' | 'listings.write' | 'viewings.read' | 'viewings.write' | 'webhooks.read' | 'webhooks.write' | 'sandbox.reset' | 'agent.profile.read' | 'agent.profile.write' | 'agent.listings.read' | 'agent.listings.write' | 'agent.listings.publish' | 'agent.leads.read' | 'agent.leads.write' | 'agent.clients.read' | 'agent.clients.write' | 'agent.viewings.read' | 'agent.viewings.write' | 'agent.distribution.read' | 'agent.distribution.manage' | 'agent.analytics.read' | 'agency.roster.read' | 'agency.roster.manage' | 'agency.teams.manage' | 'agency.listings.read' | 'agency.listings.manage' | 'agency.leads.route' | 'agency.analytics.read' | 'agency.audit.read' | 'agency.integrations.manage' | 'sites.read' | 'sites.write' | 'sites.publish' | 'sites.domains.manage' | 'forms.read' | 'forms.write' | 'forms.submissions.read' | 'scheduling.read' | 'scheduling.write' | 'crm.read' | 'crm.write' | 'crm.sync' | 'widgets.embed' | 'developers.projects.read' | 'developers.projects.write' | 'developers.inventory.read' | 'developers.inventory.write' | 'developers.inventory.publish' | 'developers.prices.read' | 'developers.prices.write' | 'developers.media.write' | 'developers.showflat.read' | 'developers.showflat.write' | 'developers.leads.read' | 'developers.leads.route' | 'renovations.projects.read' | 'renovations.projects.write' | 'development_professional_services.projects.read' | 'valuation_appraisal.cases.read' | 'valuations.read' | 'valuations.embed_keys.read' | 'valuations.embed_keys.write' | 'portfolio.read' | 'property_management.units.read' | 'geospatial.read' | 'insurance_move_in.cases.read' | 'insurance_move_in.cases.write' | 'advertising.campaigns.read' | 'advertising.campaigns.write' | 'advertising.analytics.read' | 'business_directory.profiles.read' | 'business_directory.profiles.write' | 'banks.frontends.read' | 'banks.frontends.write' | 'banks.frontends.publish' | 'banks.eligibility.read' | 'banks.rates.read' | 'banks.products.read' | 'banks.applications.read' | 'banks.applications.write' | 'banks.applications.status.write' | 'banks.documents.read' | 'banks.documents.manifest.write' | 'banks.callbacks.manage' | 'banks.staff.read' | 'banks.staff.manage' | 'banks.audit.read' | 'official_sources.read' | 'official_sources.datasets.read' | 'official_sources.freshness.read' | 'official_sources.audit.read' | 'official_sources.refresh' | 'official_sources.credentials.manage' | 'official_sources.admin' | 'services.bookings.read' | 'services.payments.read' | 'services.payments.write' | 'services.payouts.read' | 'services.payouts.manage' | 'services.payouts.admin' | 'services.settlement.reconcile' | 'platform.billing_owner_visibility.read' | 'platform.import_export_readiness.read' | 'provider_workspace.read' | 'provider_leads.read' | 'provider_leads.manage' | 'provider_bookings.read' | 'provider_bookings.manage' | 'provider_conversations.write' | 'provider_integrations.manage' | 'provider_integrations.sync' | 'provider_catalog.read' | 'provider_sites.read' | 'provider_sites.write' | 'provider_sites.publish' | 'provider_ai.permissions.manage' | 'transactions.read' | 'transactions.write' | 'transactions.documents.read' | 'transactions.documents.write' | 'transactions.milestones.write' | 'conveyancing.matters.read' | 'conveyancing.matters.write' | 'conveyancing.law_firms.manage' | 'conveyancing.audit.read' | 'conveyancing.shares.write' | 'stamp_duty.status.read' | 'stamp_duty.status.write' | 'consents.read' | 'consents.write' | 'document_shares.read' | 'document_shares.write' | 'agent_hosts.read' | 'agent_hosts.write', required: Approved additive platform scope string. Domain scopes are contract-defined for future routes but are not granted to the slice-1 sandbox fixture by default.
      - `actor` object, required
        - `actor_type` 'api_key', required
        - `actor_ref` string, required
        - `delegated` false, required
        - `subject_agent_ref` string, nullable, required
      - `resource` object, required
        - `resource_type` 'agency' | 'agent' | 'listing', required
        - `resource_ref` string, required
      - `reason_code` 'delegation_required' | 'null', nullable, required
      - `metadata` object, required
        - `request_ref` string, required
        - `route` string, required
        - `redaction` 'public_safe', required
        - `livemode` false, required
        - `customer_pii_returned` false, required
        - `raw_payload_returned` false, required
    - `public_safety` object, required
      - `synthetic_events_only` true, required
      - `customer_pii_returned` false, required
      - `customer_contact_returned` false, required
      - `private_notes_returned` false, required
      - `raw_request_payloads_returned` false, required
      - `raw_response_payloads_returned` false, required
      - `request_headers_returned` false, required
      - `response_bodies_returned` false, required
      - `ip_addresses_returned` false, required
      - `user_agents_returned` false, required
      - `api_key_digests_returned` false, required
      - `delegated_impersonation_allowed` false, required
  - `authorization` Authorization, required (unresolved $ref)
  - `principal` Principal, required (unresolved $ref)
  - `livemode` false, required
  - `request_id` string, required

## Other responses

- `400`: Request validation failed.
- `401`: Missing or invalid platform API key.
- `403`: Credential, environment, or scope is not allowed.
- `404`: Platform API feature or resource is not available.
- `429`: Rate limit exceeded.
- `500`: Unexpected platform API failure.

---

[API](https://skmtc.dev/homejourney/apis/homejourney-platform-api.md) · [All operations](https://skmtc.dev/homejourney/apis/homejourney-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/homejourney/apis/homejourney-platform-api/revisions/a2c6fe063db1?raw)