---
title: "List audit log entries"
method: GET
path: "/api/v1/account/audit-log-entries"
tags: ["account"]
---

# List audit log entries

`GET /api/v1/account/audit-log-entries`

## Request

- Base URL: `https://point11.ai`
- URL: `https://point11.ai/api/v1/account/audit-log-entries`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://auth.point11.ai/oauth2/authorize`, token URL `https://auth.point11.ai/oauth2/token`)

List the organization's audit log, oldest first, filtered by text, action, actor, and time range.

## Query parameters

- `limit` integer: Number of items to return (1–1000)
- `cursor` string: Opaque cursor returned as nextCursor by the previous page
- `q` string: Text matched against the action or target
- `action` string: Text matched against the action
- `actor` string: Text matched against the actor
- `from` string, date-time: Earliest entry time, inclusive (ISO 8601)
- `to` string, date-time: Latest entry time, inclusive (ISO 8601)

## Headers

- `Point11-Organization` string, uuid

## Response `200`

Success.

- AccountAuditLogEntriesListResponse
  - `data` object[], required
    - `id` string, required
    - `createdAt` string, date-time, required
    - `action` string, required
    - `actorType` 'user' | 'api_key' | 'system' | 'webhook', required
    - `actorId` string, nullable, required: The acting user's id; null for an API key, the system, or Point11 support
    - `actedBy` 'Point11 support (View as)' | 'Point11 support', nullable, required: "Point11 support (View as)" when Point11 support made this change while viewing as the actor; "Point11 support" when Point11 support made it from Point11's own console; otherwise null
    - `targetType` string, nullable, required
    - `targetId` string, nullable, required
    - `targetEmail` string, nullable, required: The address a member or invitation target holds now, read with the entry: the member's while their account is live, and an invitation's while it is pending or a live account holds its address; null for every other target, once that account is closing, and for the address of Point11 staff who were never a member
    - `door` 'session' | 'rest' | 'mcp' | 'agent' | 'operator', nullable, required: How the change was made: the dashboard (session), the REST API (rest), MCP (mcp), a Point11 AI assistant acting for the actor (agent) or Point11's operator console (operator); null for an entry made outside an operation, by the system, or before doors were recorded
    - `oauthClientId` string, nullable, required: The OAuth client id of the AI client or app the actor acted through (see account_connected_apps_list); null for every other entry
    - `ipAddress` string, nullable, required: The request's IP address; null when Point11 support made the change, and on a sign-in entry (an `auth.` action) read while Point11 support is viewing as a member
    - `metadata` object, nullable, required
  - `nextCursor` string, nullable, required

## Other responses

- `400`: The input, query, or Idempotency-Key is invalid.
- `401`: The bearer is missing, expired, or not accepted.
- `403`: The credential lacks the operation's scope or role, or the operation needs a different door.
- `404`: The resource or organization does not exist for this caller.
- `405`: This path takes another HTTP method, named in `Allow`.
- `409`: The request conflicts with current state or with prior use of its Idempotency-Key.
- `413`: The request, or the answer it asks for, is too large; narrow it.
- `429`: The credential's rate budget is spent; retry after `Retry-After` seconds.
- `500`: An unexpected server failure; retry later. Only `request_id` identifies it.
- `503`: A dependency is temporarily unavailable; retry after `Retry-After` seconds.
- `default`: Another status a product answers for its own refusal (for example `415` for an unsupported attachment); branch on `code`.

---

[API](https://skmtc.dev/point11/apis/point11-api.md) · [All operations](https://skmtc.dev/point11/apis/point11-api/llms.txt) · [OpenAPI document](https://skmtc.dev/point11/apis/point11-api/revisions/36a84c7aca11?raw)