---
title: "List Audit Entries"
method: GET
path: "/audit"
tags: ["Audit"]
---

# List Audit Entries

`GET /audit`

List audit entries with optional filters.

## Query parameters

- `target_type` 'revision' | 'permission' | 'user' | 'credential' | 'toolkit' | 'agent' | 'job' | 'organisation' | 'invite_token' | 'event' | 'execution_record' | 'service_account' | 'token' | 'overlay' | 'note' | 'api' | 'access_request' | 'toolkit_key' | 'credential_binding' | 'session' | 'provider_config' | 'oauth_client' — Entity types that can be the target of an audited action.
- `target_id` string, nullable
- `actor_id` string, nullable
- `origin` string, nullable
- `since` string, date-time, nullable
- `until` string, date-time, nullable
- `cursor` string, nullable
- `limit` integer

## Response `200`

Successful Response

- AuditListResponse — Paginated list of audit entries.
  - `data` AuditResponse[], required
    - `action` string, required
    - `actor_id` string, nullable
    - `actor_session_id` string, nullable
    - `actor_type` string, required
    - `after` object, nullable
    - `before` object, nullable
    - `diff` object, nullable
    - `id` string, required
    - `ip_address` string, nullable
    - `job_id` string, nullable
    - `occurred_at` string, date-time, required
    - `origin` string, nullable
    - `reason` string, nullable
    - `request_id` string, nullable
    - `target_id` string, required
    - `target_parent_id` string, nullable
    - `target_type` string, required
    - `trace_id` string, nullable
    - `user_agent` string, nullable
  - `has_more` boolean, required
  - `next_cursor` string, nullable

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `422` — Unprocessable Entity
- `500` — Internal Server Error
- `503` — Service Unavailable

## Changes

- **2026-08-31** `170ab6ea6e23` — 1 info
  - added the enum value `oauth_client` to the property `anyOf[subschema #1: AuditTargetType]/` of the `query` request parameter `target_type`
- **2026-07-01** `d65fcba0d25a` — 3 breaking, 4 warning, 29 info
  - for the `query` request parameter `limit`, the max was decreased from `500.00` to `200.00`
  - the response's body type/format changed from `array`/`` to `object`/`` for status `200`
  - the `detail` response's property type/format changed from `array`/`` to `string`/`` for status `422`
  - deleted the `query` request parameter `credential_id`
  - …32 more
- **2026-06-16** `ba15fae43892` — 1 info
  - endpoint added
- **2026-04-13** `76e8f6063728` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/jentic/apis/jentic-control-plane-api/changes/audit/get.md)

---

[API](https://skmtc.dev/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.dev/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jentic/jentic-control-plane-api/revisions/f4594f50f4d3/schema)