---
title: "Sensitive-mutation security audit"
method: GET
path: "/credits/tenants/me/security/audit"
tags: ["Tenants"]
---

# Sensitive-mutation security audit

`GET /credits/tenants/me/security/audit`

## Request

- Base URL: `https://api.paywithlocus.com/api`
- URL: `https://api.paywithlocus.com/api/credits/tenants/me/security/audit`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Append-only record of sensitive workspace mutations with actor, auth method, request id, source IP, outcome, and before/after state. Written before the success response, so a failed audit write fails the mutation. Newest first.

## Query parameters

- `limit` integer

## Response `200`

Security audit events

- object
  - `success` unknown, required
  - `events` SecurityAuditEvent[], required
    - `id` string, uuid, required
    - `tenantId` string, uuid
    - `action` string, required
    - `resourceType` string, required
    - `resourceId` string, nullable
    - `actorType` string, required
    - `actorId` string, nullable
    - `authMethod` string, required
    - `requestId` string, required
    - `sourceIp` string, nullable
    - `outcome` string, required
    - `httpStatus` integer, required
    - `beforeState` object, nullable
    - `afterState` object, nullable
    - `errorCode` string, nullable
    - `createdAt` string, date-time, required

## Other responses

- `403`: The authenticated management credential lacks one or more required scopes

---

[API](https://skmtc.dev/paywithlocus/apis/locus-pro-api.md) - [All operations](https://skmtc.dev/paywithlocus/apis/locus-pro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/paywithlocus/apis/locus-pro-api/revisions/aab8fa5d6cef?raw)