---
title: "List audit log events for the calling client (newest first, cursor-paginated)."
method: GET
path: "/admin/api/v1/audit-logs"
tags: ["Audit Logs"]
---

# List audit log events for the calling client (newest first, cursor-paginated).

`GET /admin/api/v1/audit-logs`

## Request

- Base URL: `https://dashboard-prd-eus2-api-app.azurewebsites.net`
- URL: `https://dashboard-prd-eus2-api-app.azurewebsites.net/admin/api/v1/audit-logs`
- Auth: HTTP bearer

## Query parameters

- `from` string, date-time
- `to` string, date-time
- `eventTypes` string
- `environment` string
- `cursor` string
- `pageSize` integer

## Response `200`

Page of audit events

- AuditLogListResponseApiResult
  - `status` 'ok' | 'serverFailure' | 'permissionDenied' | 'badRequest' | 'notFound' | 'conflict' | 'tooManyRequest' | 'locked' | 'unavailableForLegalReasons' | 'serviceUnavailable'
  - `message` string, nullable: A message generated by the API
  - `displayMessage` string, nullable: User-friendly display message that can be presented to the end user
  - `errorHash` string, nullable: An error grouping hash from string components and caller information. Used by bugsnag on FE for correct error grouping
  - `teamCode` string, nullable: Opaque team code for error routing. Resolved from exception origin or caller file path via CODEOWNERS. Format: 2-character code (e.g., "7K", "M2"). Use for alerting/routing, not display.
  - `errorType` string, nullable: Strictly-typed error type that is explaining the reason of an unsuccessful status of the operation. All possible error types are available in the documentation.
  - `errorData` unknown
  - `content` AuditLogListResponse: Paginated audit-log page for `GET /admin/api/v1/audit-logs`.
    - `items` AuditEventDto[], nullable, required: Events on this page, newest first.
      - `id` string, uuid, required: Unique, immutable event id (safe for de-duplication).
      - `timestamp` string, date-time, required: When the event occurred (ISO 8601 UTC).
      - `eventType` string, nullable, required: Event type, e.g. `api_key.created`, `api_key.deleted`, `configuration.updated`.
      - `environment` string, nullable, required: Business environment the event was captured under (`Sandbox` or `Production`).
      - `actor` AuditEventActorDto, required: Who performed the audited action (Kraken Audit Logs API contract).
        - `type` string, nullable, required: One of `user`, `api_key`, or `system`.
        - `id` string, nullable: Stable actor id (portal user id or api key id), when available.
        - `email` string, nullable: Point-in-time email when Org.Front.Core.Contracts.Models.B2B.Audit.AuditEventActorDto.Type is `user`.
      - `target` AuditEventTargetDto, required: The resource acted on (Kraken Audit Logs API contract).
        - `type` string, nullable, required: The kind of resource acted on, e.g. `api_key`, `user`, `configuration`.
        - `id` string, nullable: Id of the resource acted on, when available.
        - `name` string, nullable: Human-readable name of the resource, e.g. an API key name.
      - `sourceIp` string, nullable: Source IP the action originated from, when available.
      - `details` unknown
    - `nextCursor` string, nullable: Opaque continuation cursor — pass it back verbatim as `cursor`; do not construct or decode it. Null when Org.Front.Core.Contracts.Models.B2B.Audit.AuditLogListResponse.HasMore is false.
    - `hasMore` boolean, required: True when more events are available via Org.Front.Core.Contracts.Models.B2B.Audit.AuditLogListResponse.NextCursor.

## Other responses

- `400`: Invalid parameter (timestamp range, cursor, too many eventTypes, unknown environment)
- `401`: Missing or expired bearer token
- `403`: Token valid but not permitted (feature gate / IP allowlist)
- `429`: Rate limit exceeded — honor Retry-After
- `500`: Unexpected server failure retrieving audit logs

## Changes

- **2026-11-03** `ac9d647737b7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/meshconnect/apis/admin-api/changes/admin/api/v1/audit-logs/get.md)

---

[API](https://skmtc.dev/meshconnect/apis/admin-api.md) - [All operations](https://skmtc.dev/meshconnect/apis/admin-api/llms.txt) - [OpenAPI document](https://skmtc.dev/meshconnect/apis/admin-api/revisions/ac9d647737b7?raw)