Audit Log

List audit entries

Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. resource_srn is a prefix match (e.g. srn:{project}:secret: matches every secret action); every other filter is exact.

get/v1/projects/{project_id}/audit-log

Request

  • Base URL: https://api.naturali.ai
  • URL: https://api.naturali.ai/v1/projects/{project_id}/audit-log
  • Auth: one of:
    • HTTP bearer
    • OAuth 2 (authorization code, authorization URL https://api.naturali.ai/authorize, token URL https://api.naturali.ai/token, scopes: mcp:access)

Query parameters

actionstring
Example:secrets:DeleteSecret

Exact permission-action string, e.g. secrets:DeleteSecret

principal_idstring

Public id of the principal (user_… or key_…)

resource_public_idstring

Exact target resource public id, e.g. sec_…

resource_srnstring

SRN prefix match, e.g. srn:{project}:secret:. The log is append-only, so a stored SRN is never rewritten; the filter matches it as stored.

fromstring date-time

Only entries created at or after this timestamp (ISO 8601)

tostring date-time

Only entries created at or before this timestamp (ISO 8601)

limitinteger

Results per page. Above 200 it is clamped, and limit in the response reports the page served; below 1 or not an integer it is 400 VALIDATION_FAILED.

offsetinteger

Results to skip. Negative or not an integer it is 400.

Response

A page of audit entries

totalinteger
limitinteger
offsetinteger

Example response

{
  "data": [
    {
      "id": "audit_V1StGXR8Z5jdHi6B",
      "principal_type": "user",
      "on_behalf_of": {
        "tool_id": "tool_V1StGXR8Z5jdHi6B",
        "agent_id": "agent_V1StGXR8Z5jdHi6B",
        "generation_id": "gen_V1StGXR8Z5jdHi6B",
        "session_id": "sess_V1StGXR8Z5jdHi6B",
        "actor_id": "actor_V1StGXR8Z5jdHi6B"
      },
      "action": "secrets:DeleteSecret",
      "resource_srn": "srn:proj_V1StGXR8Z5jdHi6B:secret:sec_V1StGXR8Z5jdHi6B",
      "status": 200
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.