---
title: "List Audit Logs"
method: GET
path: "/api/v1/audit-logs"
tags: ["Audit Logs"]
---

# List Audit Logs

`GET /api/v1/audit-logs`

Retrieve audit logs for your organization with cursor-based pagination. Requires an Enterprise subscription and organization admin or owner role.

## Query parameters

- `action` string
- `resourceType` string
- `resourceId` string
- `workspaceId` string, required
- `actorId` string
- `startDate` string, date-time
- `endDate` string, date-time
- `includeDeparted` boolean
- `limit` integer
- `cursor` string

## Response `200`

A paginated list of audit log entries.

- object
  - `data` AuditLogEntry[] — Array of audit log entries for the current page.
    - `id` string — Unique identifier for the audit log entry.
    - `workspaceId` string, nullable — The workspace where the action occurred.
    - `actorId` string, nullable — The user ID of the person who performed the action.
    - `actorName` string, nullable — Display name of the person who performed the action.
    - `actorEmail` string, nullable — Email address of the person who performed the action.
    - `action` string — The action that was performed (e.g., workflow.created, member.invited).
    - `resourceType` string — The type of resource affected (e.g., workflow, workspace, member).
    - `resourceId` string, nullable — The unique identifier of the affected resource.
    - `resourceName` string, nullable — Display name of the affected resource.
    - `description` string, nullable — Human-readable description of the action.
    - `metadata` object, nullable — Additional context about the action.
    - `createdAt` string, date-time — ISO 8601 timestamp when the action occurred.
  - `nextCursor` string, nullable — Cursor for fetching the next page. null when there are no more results.
  - `limits` Limits — Rate limit and usage information included in every API response.
    - `workflowExecutionRateLimit` object — Current rate limit status for workflow executions.
      - `sync` RateLimitBucket — Rate limit status for a specific execution type.
        - `requestsPerMinute` integer — Maximum number of requests allowed per minute.
        - `maxBurst` integer — Maximum number of concurrent requests allowed in a burst.
        - `remaining` integer — Number of requests remaining in the current rate limit window.
        - `resetAt` string, date-time — ISO 8601 timestamp when the rate limit window resets.
      - `async` RateLimitBucket — Rate limit status for a specific execution type.
        - `requestsPerMinute` integer — Maximum number of requests allowed per minute.
        - `maxBurst` integer — Maximum number of concurrent requests allowed in a burst.
        - `remaining` integer — Number of requests remaining in the current rate limit window.
        - `resetAt` string, date-time — ISO 8601 timestamp when the rate limit window resets.
    - `usage` object — Current billing period usage and plan limits.
      - `currentPeriodCost` number — Total spend in the current billing period in USD.
      - `limit` number — Maximum allowed spend for the current billing period in USD.
      - `plan` string — Your current subscription plan (e.g., free, pro, team).
      - `isExceeded` boolean — Whether the usage limit has been exceeded. Executions may be blocked when true.

## Other responses

- `400` — Invalid request parameters. Check the details array for specific validation errors.
- `401` — Invalid or missing API key. Ensure the X-API-Key header is set with a valid key.
- `403` — Access denied. You do not have permission to access this resource. For audit log endpoints, this requires an Enterprise subscription and organization admin/owner role.
- `429` — Rate limit exceeded. Wait for the duration specified in the Retry-After header before retrying. The X-RateLimit-* headers accompany every response from an authenticated v1 request — success and error alike — and are omitted only when the request fails authentication, since no rate-limit bucket is consulted in that case.

## Changes

- **2026-03-14** `86c22a5b6914` — 1 breaking
  - the `query` request parameter `workspaceId` became required
- **2026-03-02** `f8d20edc8aab` — 1 info
  - the `query` request parameter `workspaceId` became optional

[Change history](https://skmtc.dev/simstudioai/apis/sim-api/changes/api/v1/audit-logs/get.md)

---

[API](https://skmtc.dev/simstudioai/apis/sim-api.md) · [All operations](https://skmtc.dev/simstudioai/apis/sim-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/simstudioai/sim-api/revisions/66a471c5b1df/schema)