---
title: "Search audit logs"
method: GET
path: "/v1/admin/audit-logs"
tags: ["admin"]
---

# Search audit logs

`GET /v1/admin/audit-logs`

## Request

- Base URL: `https://api.patricia.app` (the document declares no server; this is the origin it was published from)
- URL: `https://api.patricia.app/v1/admin/audit-logs`
- Auth: HTTP bearer

List audit logs with filtering, sorting, and pagination.

## Query parameters

- `q` string, nullable: ANTLR filter expression
- `limit` integer, nullable: Page size
- `sort_by` string, nullable: Sort expression (e.g. created_at:desc)
- `fields` string, nullable: Field projection (e.g. id,name)
- `pq` string, nullable: Pagination cursor query
- `from_prev` boolean: Backward pagination flag

## Response `200`

Paginated audit log list.

- ModelsAuditAuditLogSearchValidator: Typed cursor-paginated list response for the admin audit read.
  - `items` ModelsAuditAuditLogFullValidator[], required
    - `id` string, uuid, nullable
    - `tenant_id` string, uuid, nullable
    - `actor_id` string, uuid, nullable
    - `action` string, nullable
    - `target` string, nullable
    - `risk_tier_code` string, nullable
    - `metadata` object, nullable
    - `created_at` string, date-time, nullable
  - `first` string, nullable
  - `next` string, nullable
  - `previous` string, nullable

## Other responses

- `401`: Unauthorized
- `403`: Permission denied (PERMISSION_DENIED) or email not verified (EMAIL_NOT_VERIFIED)
- `422`: Validation error

---

[API](https://skmtc.dev/patricia/apis/patricia-api.md) · [All operations](https://skmtc.dev/patricia/apis/patricia-api/llms.txt) · [OpenAPI document](https://skmtc.dev/patricia/apis/patricia-api/revisions/0dfb44495ea1?raw)