---
title: "List organization audit logs"
method: GET
path: "/organizations/{orgId}/audit-logs"
tags: ["Audit Logs"]
---

# List organization audit logs

`GET /organizations/{orgId}/audit-logs`

Retrieve audit logs for a specific organization with optional filtering and pagination.

## Query parameters

- `startTime` string, date-time
- `endTime` string, date-time
- `cursor` string
- `limit` integer — Defaults to 20

## Parameters

- `#/paths/~1logs/get/parameters/3` — unresolved $ref

## Response `200`

OK

- AuditLogWithCursor[]
  - `cursor` string, required
  - `auditLog` AuditLog, required
    - `id` string, required — Unique identifier for the audit log entry
    - `timestamp` string, date-time, required — When the event occurred (ISO 8601 format)
    - `event` 'AcceptOrgInviteEvent' | 'AcceptTeamInviteEvent' | 'AddOrgMemberEvent' | 'ApplyBlueprintEvent' | 'ChangeEnvironmentProtectionEvent' | 'ChangeOrg2FAEnforcementEvent' | 'ChangeOrgAllowedLoginMethodsEvent' | 'ChangeOrgNameEvent' | 'ChangeOrgRoleEvent' | 'ChangeTeam2FAEnforcementEvent' | 'ChangeTeamAllowedLoginMethodsEvent' | 'ChangeTeamMemberRoleEvent' | 'ChangeWorkspaceDeployHandlingEvent' | 'ChangeWorkspacePrivacyEvent' | 'CreateArtifactSourceEvent' | 'CreateCronJobEvent' | 'CreateEnvVarsEvent' | 'CreateEnvironmentEvent' | 'CreateOrgDomainEvent' | 'CreateOtelIntegrationEvent' | 'CreatePostgresEvent' | 'CreatePrivateLinkEvent' | 'CreateProjectEvent' | 'CreateRedisEvent' | 'CreateSSOConnectionEvent' | 'CreateServerDiskEvent' | 'CreateServerEvent' | 'CreateWebhookEvent' | 'CreateWorkspaceEvent' | 'DeleteCronJobEvent' | 'DeleteEnvGroupEvent' | 'DeleteEnvVarsEvent' | 'DeleteEnvironmentEvent' | 'DeleteOrgDomainEvent' | 'DeleteOtelIntegrationEvent' | 'DeletePostgresEvent' | 'DeletePrivateLinkEvent' | 'DeleteProjectEvent' | 'DeleteRedisEvent' | 'DeleteSSOConnectionEvent' | 'DeleteServerDiskEvent' | 'DeleteServerEvent' | 'DeleteWebhookEvent' | 'DeleteWorkspaceEvent' | 'DocumentDownloadEvent' | 'DownloadDatabaseBackupEvent' | 'EnableRedisInternalAuthEvent' | 'InviteToOrgEvent' | 'InviteToTeamEvent' | 'JoinTeamEvent' | 'LoginEvent' | 'LogoutEvent' | 'MaintenanceModeEnabledEvent' | 'MaintenanceModeURIUpdatedEvent' | 'MoveEnvironmentResourceEvent' | 'ProvisionOrganizationSCIMToken' | 'RemoveOrgMemberEvent' | 'RemoveUserFromTeamEvent' | 'RestoreDiskSnapshotEvent' | 'ResumePostgresEvent' | 'ResumeServiceEvent' | 'RevokeOrganizationSCIMToken' | 'SignNDAEvent' | 'EndShellEvent' | 'StartShellEvent' | 'SuspendPostgresEvent' | 'SuspendServiceEvent' | 'UpdateEnvVarsEvent' | 'UpdateIPAllowListEvent' | 'UpdateOtelIntegrationEvent' | 'UpdateSSOConnectionEvent' | 'UpdateServiceNameEvent' | 'UpdateWebhookEvent' | 'VerifyOrgDomainEvent' | 'ViewConnectionInfoEvent' | 'ViewEnvVarValuesEvent' | 'GrantOAuthAccessEvent' | 'RevokeOAuthAccessEvent', required — The type of event that occurred
    - `status` 'success' | 'error', required — The status of the event
    - `actor` AuditLogActor, required
      - `type` 'user' | 'rest_api' | 'system', required — The type of actor that performed the action
      - `email` string — Email address of the actor (if applicable)
      - `id` string — Unique identifier of the actor (if applicable)
    - `metadata` object, required — Additional context information about the event

## Other responses

- `400` — The request could not be understood by the server.
- `401` — Authorization information is missing or invalid.
- `403` — You do not have permissions for the requested resource.
- `404` — Unable to find the requested resource.
- `406` — Unable to generate preferred media types as specified by Accept request header.
- `410` — The requested resource is no longer available.
- `429` — Rate limit has been surpassed.
- `500` — An unexpected server error has occurred.
- `503` — Server currently unavailable.

---

[API](https://skmtc.dev/render/apis/render-public-api.md) · [All operations](https://skmtc.dev/render/apis/render-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/render/render-public-api/revisions/80e0ff74d033/schema)