---
title: "Credential lifecycle audit"
method: GET
path: "/credits/tenants/me/credentials/audit"
tags: ["Tenants"]
---

# Credential lifecycle audit

`GET /credits/tenants/me/credentials/audit`

## Request

- Base URL: `https://api.paywithlocus.com/api`
- URL: `https://api.paywithlocus.com/api/credits/tenants/me/credentials/audit`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Issue, rotate, and revoke events for API keys, agent connections, end-user tokens, and webhook secrets, newest first. Raw credentials and key hashes are never returned.

## Query parameters

- `limit` integer

## Response `200`

Credential audit events

- object
  - `success` unknown, required
  - `events` CredentialAuditEvent[], required
    - `id` string, uuid, required
    - `credentialType` string, required: Which credential family the event describes, for example api_key, agent_connection, end_user_token, or webhook_secret.
    - `credentialId` string, nullable, required
    - `action` string, required: issued, rotated, or revoked.
    - `actorType` string, required: Whether a signed-in member, a secret key, or the system performed it.
    - `actorId` string, nullable, required
    - `metadata` object, nullable, required
    - `createdAt` string, date-time, required

## Other responses

- `403`: The authenticated management credential lacks one or more required scopes

---

[API](https://skmtc.dev/paywithlocus/apis/locus-pro-api.md) - [All operations](https://skmtc.dev/paywithlocus/apis/locus-pro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/paywithlocus/apis/locus-pro-api/revisions/aab8fa5d6cef?raw)