Audit Log

Get an audit entry

Returns a single audit-log entry, including its detail payload

get/v1/projects/{project_id}/audit-log/{entry_id}

Request

  • Base URL: https://api.naturali.ai
  • URL: https://api.naturali.ai/v1/projects/{project_id}/audit-log/{entry_id}
  • Auth: one of:
    • HTTP bearer
    • OAuth 2 (authorization code, authorization URL https://api.naturali.ai/authorize, token URL https://api.naturali.ai/token, scopes: mcp:access)

Path parameters

entry_idstring required
Example:audit_V1StGXR8Z5jdHi6B

Audit entry ID

Response

Audit entry details

idstring
project_idstring nullable

Project the action targeted; null for global actions

principal_type'user' | 'api_key' | 'agent' | 'automation' | 'approval' | 'system'

What kind of principal acted. user and api_key are authenticated callers, and the id is the user's (user_…) or the key's own (key_…), so a record names which key acted rather than its owner. agent is an agent writing under its own identity (agent_…). automation is the task engine acting on a dispatch outcome and approval an approval resolution; neither carries an id. system is the platform itself, with an id naming the mechanism (retention_sweep, zero_retention).

principal_idstring nullable

Public id of the principal (user_… or key_…); null for platform-originated entries

actionstring

The permission-action string that authorized the request

resource_srnstring nullable

SRN the action targeted (type-level srn:{project}:{type}:* on creates)

resource_public_idstring nullable

Target resource public id (from the SRN, or the response body on creates)

statusinteger

HTTP status of the response

request_idstring nullable

Per-request correlation id (also returned in the X-Request-Id header)

ipstring nullable
user_agentstring nullable
detailobject nullable

Kind-specific payload. Multi-check routes record the remaining checks under additional_checks. Platform-originated entries set a detail.kind discriminator, e.g. quota_monitor_breach or guardrail_evaluation.

created_atstring date-time

Example response

{
  "id": "audit_V1StGXR8Z5jdHi6B",
  "principal_type": "user",
  "on_behalf_of": {
    "tool_id": "tool_V1StGXR8Z5jdHi6B",
    "agent_id": "agent_V1StGXR8Z5jdHi6B",
    "generation_id": "gen_V1StGXR8Z5jdHi6B",
    "session_id": "sess_V1StGXR8Z5jdHi6B",
    "actor_id": "actor_V1StGXR8Z5jdHi6B"
  },
  "action": "secrets:DeleteSecret",
  "resource_srn": "srn:proj_V1StGXR8Z5jdHi6B:secret:sec_V1StGXR8Z5jdHi6B",
  "status": 200
}

Changes

No recorded changes to this operation across all 1 revision of this API.