---
title: "List audit log entries"
method: GET
path: "/audit"
tags: ["Audit"]
---

# List audit log entries

`GET /audit`

## Request

- Base URL: `https://api.short.io`
- URL: `https://api.short.io/audit`
- Auth: API key in header `Authorization`

Lists audit log entries for a team or a domain.

## Query parameters

- `domainId` number, required
- `userId` number
- `teamId` number
- `actionType` string
- `linkId` string
- `limit` number
- `pageToken` string

## Response `200`

Default Response

- object
  - `records` object[], required
    - `id` string, required: Audit record TimeUUID
    - `UserId` number, required: Acting user id
    - `DomainId` number, required: Domain id the action was performed against
    - `TeamId` number, nullable, required: Team id, if the action was scoped to a team
    - `target` string, required: Audited entity, e.g. "link", "ipExclusion"
    - `actionType` string, required: Action performed, e.g. "create", "update"
    - `createdAt` string, required: ISO timestamp derived from the record TimeUUID
    - `ttl` string: ISO timestamp when the record expires
    - `userEmail` string, required: Email of the requesting user
    - `apiKeyId` string, nullable, required: API key id used to perform the action, if any
    - `linkId` string, nullable, required: Link id the action targeted, if any
    - `statusCode` integer, nullable, required: HTTP status code returned by the audited request. Null for legacy records written before status tracking.
    - `operationTime` integer, nullable, required: Total request duration in milliseconds (request received → response sent). Null for legacy records written before timing was tracked.
  - `nextPageToken` string, nullable, required: Cursor to pass as `pageToken` to fetch the next page, or null when the listing is exhausted

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response

---

[API](https://skmtc.dev/short/apis/short-io-api-2.md) · [All operations](https://skmtc.dev/short/apis/short-io-api-2/llms.txt) · [OpenAPI document](https://skmtc.dev/short/apis/short-io-api-2/revisions/9e4e60c560b1?raw)