---
title: "Export permission-safe Organization audit evidence as JSON"
method: GET
path: "/organizations/{id}/audit-events/export.json"
tags: ["Workspaces"]
---

# Export permission-safe Organization audit evidence as JSON

`GET /organizations/{id}/audit-events/export.json`

## Request

- Base URL: `https://app.openpo.st/api/v1`
- URL: `https://app.openpo.st/api/v1/organizations/{id}/audit-events/export.json`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `openpost_session`

## Path parameters

- `id` string, required: Organization ID

## Query parameters

- `workspace_id` string: Restrict evidence to one Workspace
- `actor_user_id` string: Restrict evidence to one opaque actor user ID
- `action` string: Restrict evidence to one exact domain action
- `resource_type` 'provider' | 'policy' | 'domain' | 'session' | 'identity' | 'reauthentication' | 'identity_configuration' | 'organization' | 'workspace' | 'workspace_member' | 'workspace_invitation' | 'organization_ownership_transfer' | 'impersonation' | 'billing' | 'mcp_tool_call' | 'publication' | 'publication_authorization' | 'provider_write': Restrict evidence to one resource type
- `result` 'succeeded' | 'failed' | 'pending': Restrict evidence to one result
- `from` string: Inclusive RFC 3339 start time
- `before` string: Exclusive RFC 3339 end time
- `cursor` string: Opaque cursor for stable older-page pagination
- `limit` integer: Maximum events to return

## Response `200`

OK

- OrganizationAuditJSONExport
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `format_version` string, required
  - `generated_at` string, date-time, required
  - `items` OrganizationAuditEvent[], nullable, required
    - `action` string, required
    - `actor_user_id` string
    - `changed_fields` AuditChangedField[], nullable, required
      - `current` string
      - `field` string, required
      - `previous` string
    - `effective_actor_user_id` string
    - `id` string, required
    - `occurred_at` string, date-time, required
    - `resource` OrganizationAuditResource, required
      - `id` string
      - `organization_id` string
      - `type` string, required
      - `workspace_id` string
    - `result` string, required
    - `source` string, required
  - `organization_id` string, required

## Other responses

- `400`: Bad Request
- `403`: Forbidden
- `422`: Unprocessable Entity
- `500`: Internal Server Error

---

[API](https://skmtc.dev/openpo/apis/openpost-api.md) · [All operations](https://skmtc.dev/openpo/apis/openpost-api/llms.txt) · [OpenAPI document](https://skmtc.dev/openpo/apis/openpost-api/revisions/67d3964458a7?raw)