---
title: "List Audit Events"
method: GET
path: "/audit-events"
tags: ["audit"]
---

# List Audit Events

`GET /audit-events`

## Request

- Base URL: `https://api.notte.cc` (the document declares no server; this is the origin it was published from)
- URL: `https://api.notte.cc/audit-events`
- Auth: OAuth 2
  - Password
  - Token URL: `token`

## Query parameters

- `limit` integer: Events per page
- `cursor` string, nullable: `next_cursor` from the previous page
- `since` string, date-time, nullable: Only events at or after this time (ISO-8601)
- `until` string, date-time, nullable: Only events before this time (ISO-8601)
- `action` string, nullable: Only events with this action, e.g. `created`
- `entity_type` string, nullable: Only events about this kind of resource, e.g. `api_key`
- `actor_id` string, nullable: Only events performed by this user

## Headers

- `x-notte-request-origin` string, nullable
- `x-notte-sdk-version` string, nullable

## Response `200`

Successful Response

- AuditEventListResponse
  - `items` AuditEvent[], required
    - `id` integer, required
    - `created_at` string, date-time, required
    - `entity_type` string, required
    - `entity_id` string, required
    - `action` string, required
    - `user_id` string, nullable
    - `actor_id` string, nullable
    - `actor_type` string, required
    - `actor_email` string, nullable: Email of the actor when it is a workspace member the caller may see. Null for system actors.
    - `actor_name` string, nullable
    - `resource_name` string, nullable: Human-readable name of the resource (an API key's label, a secret's name, a member's email) when one is known. Never a secret value.
    - `source` string, required
    - `metadata` object
    - `org_id` string, nullable
  - `next_cursor` string, nullable: Opaque cursor for the next (older) page. Null when there are no more events.
  - `has_more` boolean, required

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-08** `2e24585b8d95`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/notte/apis/notte-api/changes/audit-events/get.md)

---

[API](https://skmtc.dev/notte/apis/notte-api.md) - [All operations](https://skmtc.dev/notte/apis/notte-api/llms.txt) - [OpenAPI document](https://skmtc.dev/notte/apis/notte-api/revisions/d56fcbf39bc9?raw)