---
title: "List your team's audit log"
method: GET
path: "/v1/audit-events"
tags: ["audit"]
---

# List your team's audit log

`GET /v1/audit-events`

## Request

- Base URL: `https://api.pomerado.ai`
- URL: `https://api.pomerado.ai/v1/audit-events`
- Auth: HTTP bearer

Lists changes to your team, newest first: who made each one and what it changed.

- Owners and Admins only. An API key needs team:manage.
- Kinds: team members and invitations, login access, API keys created or revoked, and tools published or deleted.
- Filter by kind and time range.
- Events stay listed for 90 days.

## Query parameters

- `kind` 'team.member_added' | 'team.role_changed' | 'team.member_removed' | 'team.invitation_sent' | 'team.invitation_resent' | 'team.invitation_revoked' | 'login.access_granted' | 'login.access_changed' | 'login.access_revoked' | 'api_key.created' | 'api_key.revoked' | 'tool.published' | 'tool.deleted'
- `from` string
- `to` string
- `cursor` string
- `limit` string

## Response `200`

One page of events

- object
  - `data` AuditEvent[], required
    - `id` string, required
    - `occurred_at` string, required
    - `kind` 'team.member_added' | 'team.role_changed' | 'team.member_removed' | 'team.invitation_sent' | 'team.invitation_resent' | 'team.invitation_revoked' | 'login.access_granted' | 'login.access_changed' | 'login.access_revoked' | 'api_key.created' | 'api_key.revoked' | 'tool.published' | 'tool.deleted', required
    - `actor` object, nullable, required: Who made the change, and the API key they used for an API key change, a build, a requested change or a tool deletion. Null when Pomerado made it
      - `member_id` string, required: The member's user ID
      - `name` string, nullable, required
      - `email` string, nullable, required
      - `api_key` object, nullable, required
        - `id` string, required
        - `name` string, required
    - `target` object, required: What changed: the member, invitation, login, API key or tool
      - `id` string, required
      - `name` string, nullable, required
    - `member` object, nullable, required: On a login access event, the member whose access changed. Null for the whole team, and on other events
      - `member_id` string, required: The member's user ID
      - `name` string, nullable, required
      - `email` string, nullable, required
    - `from` string, nullable, required: The role or access level before
    - `to` string, nullable, required: The role or access level after
  - `next_cursor` string, nullable, required

## Other responses

- `400`: invalid_request
- `401`: unauthorized, reauthentication_required
- `403`: business_account_required, role_permission_missing, forbidden
- `500`: internal_error
- `503`: temporarily_unavailable

---

[API](https://skmtc.dev/pomerado/apis/pomerado-api.md) · [All operations](https://skmtc.dev/pomerado/apis/pomerado-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pomerado/apis/pomerado-api/revisions/c07cea59691c?raw)