---
title: "Get Audit Log Details"
method: GET
path: "/api/v1/audit-logs/{id}"
tags: ["Audit Logs"]
---

# Get Audit Log Details

`GET /api/v1/audit-logs/{id}`

Retrieve a single audit log entry by ID. Requires an Enterprise subscription and organization admin or owner role.

## Path parameters

- `id` string, required

## Response `200`

The audit log entry.

- object
  - `data` AuditLogEntry — An enterprise audit log entry recording an action taken in the workspace.
    - `id` string — Unique identifier for the audit log entry.
    - `workspaceId` string, nullable — The workspace where the action occurred.
    - `actorId` string, nullable — The user ID of the person who performed the action.
    - `actorName` string, nullable — Display name of the person who performed the action.
    - `actorEmail` string, nullable — Email address of the person who performed the action.
    - `action` string — The action that was performed (e.g., workflow.created, member.invited).
    - `resourceType` string — The type of resource affected (e.g., workflow, workspace, member).
    - `resourceId` string, nullable — The unique identifier of the affected resource.
    - `resourceName` string, nullable — Display name of the affected resource.
    - `description` string, nullable — Human-readable description of the action.
    - `metadata` object, nullable — Additional context about the action.
    - `createdAt` string, date-time — ISO 8601 timestamp when the action occurred.
  - `limits` Limits — Rate limit and usage information included in every API response.
    - `workflowExecutionRateLimit` object — Current rate limit status for workflow executions.
      - `sync` RateLimitBucket — Rate limit status for a specific execution type.
        - `requestsPerMinute` integer — Maximum number of requests allowed per minute.
        - `maxBurst` integer — Maximum number of concurrent requests allowed in a burst.
        - `remaining` integer — Number of requests remaining in the current rate limit window.
        - `resetAt` string, date-time — ISO 8601 timestamp when the rate limit window resets.
      - `async` RateLimitBucket — Rate limit status for a specific execution type.
        - `requestsPerMinute` integer — Maximum number of requests allowed per minute.
        - `maxBurst` integer — Maximum number of concurrent requests allowed in a burst.
        - `remaining` integer — Number of requests remaining in the current rate limit window.
        - `resetAt` string, date-time — ISO 8601 timestamp when the rate limit window resets.
    - `usage` object — Current billing period usage and plan limits.
      - `currentPeriodCost` number — Total spend in the current billing period in USD.
      - `limit` number — Maximum allowed spend for the current billing period in USD.
      - `plan` string — Your current subscription plan (e.g., free, pro, team).
      - `isExceeded` boolean — Whether the usage limit has been exceeded. Executions may be blocked when true.

## Other responses

- `401` — Invalid or missing API key. Ensure the X-API-Key header is set with a valid key.
- `403` — Access denied. You do not have permission to access this resource. For audit log endpoints, this requires an Enterprise subscription and organization admin/owner role.
- `404` — The requested resource was not found. Verify the ID is correct and belongs to your workspace.
- `429` — Rate limit exceeded. Wait for the duration specified in the Retry-After header before retrying. The X-RateLimit-* headers accompany every response from an authenticated v1 request — success and error alike — and are omitted only when the request fails authentication, since no rate-limit bucket is consulted in that case.

---

[API](https://skmtc.dev/simstudioai/apis/sim-api.md) · [All operations](https://skmtc.dev/simstudioai/apis/sim-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/simstudioai/sim-api/revisions/66a471c5b1df/schema)