---
title: "Read privileged operation admission audit"
method: GET
path: "/audit/privileged"
tags: ["Account"]
---

# Read privileged operation admission audit

`GET /audit/privileged`

## Request

- Base URL: `https://api.imprezahost.com/v1`
- URL: `https://api.imprezahost.com/v1/audit/privileged`
- Auth: API key in header `X-API-Key` and API key in header `X-API-Secret`

Available through the REST API and hosted MCP. Read scope is required.
Only this account's events are returned; resource-confined credentials
only see permitted service/deployment events. Identifiers, plan digest,
approval, request/start/return timestamps and bounded outcomes only.
No environment, secrets, command output, file content or caller IPs.
Acceptance does not certify completion on the host. Root/database
compromise can alter the trail. Fixed retention: operational 7 days,
security 30, destructive 90, refusal 7; daily pruning by class.

## Query parameters

- `limit` integer
- `before` string

## Response `200`

Events, storage state, next_cursor and retention_days; migration_required before schema update

## Other responses

- `400`: Invalid cursor or limit
- `403`: Read scope required
- `503`: Audit or credential policy storage unavailable

---

[API](https://skmtc.dev/imprezahost/apis/impreza-host-public-api.md) · [All operations](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/revisions/db86511f604f?raw)