---
title: "Read Audits"
method: GET
path: "/api/v1/audits"
tags: ["Audit"]
---

# Read Audits

`GET /api/v1/audits`

## Request

- The document declares no server URL.
- Auth: one of:
  - OAuth 2
    - Password
    - Token URL: `api/v1/login`
  - API key in query parameter `x-api-key`
  - API key in header `x-api-key`

Every audit event, newest first, filtered and keyset-paginated on the server.

Filters: ``source``, ``kind``, ``resource_type``, ``action``, ``exclude_action``,
``operation``, ``result`` and ``actor_type`` repeat and OR within themselves;
``resource_id``, ``user_id``, ``actor_id``, ``request_id``, ``since`` and
``until`` narrow further. ``q`` keeps rows whose action, operation, resource
type or name, actor username or details contain it, ignoring case.
``include_total=true`` adds a count of every match. ``offset`` jumps to a
page by position instead of a cursor; ``next_cursor`` then continues from it.

## Query parameters

- `source` string[]
- `kind` string[]
- `resource_type` string[]
- `action` string[]
- `exclude_action` string[]
- `operation` string[]
- `result` string[]
- `actor_type` string[]
- `resource_id` string, uuid
- `user_id` string, uuid
- `actor_id` string, uuid
- `request_id` string, uuid
- `since` string, date-time
- `until` string, date-time
- `q` string
- `cursor` string
- `limit` integer
- `offset` integer
- `include_total` boolean

## Response `200`

Successful Response

- AuditFeedResponse
  - `items` AuditFeedItem[], required
    - `action` string, required
    - `actor` AuditFeedActor, required
      - `acting_issuer` string, nullable, required
      - `acting_subject` string, nullable, required
      - `id` string, uuid, nullable, required
      - `type` string, nullable, required
      - `user_id` string, uuid, nullable, required
    - `actor_id` string, uuid, nullable, required
    - `actor_type` string, nullable, required
    - `details` object, nullable, required
    - `error_code` string, nullable, required
    - `id` string, uuid, required
    - `kind` 'action' | 'check', required: Whether a row records a permission check or something that was done.
    - `operation` string, nullable, required
    - `request_id` string, uuid, nullable, required
    - `resource_id` string, uuid, nullable, required
    - `resource_name` string, nullable, required
    - `resource_type` string, nullable, required
    - `result` string, required
    - `source` 'resource' | 'authz', required: Which store a row came from.
    - `timestamp` string, required
    - `user_id` string, uuid, nullable, required
  - `next_cursor` string, nullable, required
  - `total` integer, nullable, required

## Changes

- **2026-10-21** `4349fbe90c64`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/langflow-ai/apis/langflow/changes/api/v1/audits/get.md)

---

[API](https://skmtc.dev/langflow-ai/apis/langflow.md) - [All operations](https://skmtc.dev/langflow-ai/apis/langflow/llms.txt) - [OpenAPI document](https://skmtc.dev/langflow-ai/apis/langflow/revisions/4349fbe90c64?raw)