---
title: "The operator audit log, newest first (operators only)"
method: GET
path: "/v1/admin/audit"
tags: ["admin"]
---

# The operator audit log, newest first (operators only)

`GET /v1/admin/audit`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/admin/audit`
- Auth: HTTP bearer

Every operator write leaves a row here before it runs: `started`, then `ok` or `failed` with the status it answered. `since` and `tenant` narrow it; reads are not logged.

## Query parameters

- `since` string, date-time
- `tenant` string
- `limit` integer

## Response `200`

The rows, newest first.

- object
  - `actions` object[], required
    - `id` string, required
    - `operator_sub` string, required
    - `operator_email` string, nullable, required
    - `action` string, required
    - `tenant_id` string, nullable, required
    - `subject` string, nullable, required
    - `params` object, required
    - `status` 'started' | 'ok' | 'failed', required
    - `http_status` integer, nullable, required
    - `created_at` string, required
    - `finished_at` string, nullable, required

## Other responses

- `400`: The body, query or path did not validate; `errors` lists the fields.
- `401`: No bearer token, or one that does not verify or has expired.
- `403`: The token verified but may not do this: no organisation, not provisioned, wrong role, or a device problem.
- `503`: A capability this service was not configured with, or a practice system that could not be reached; the `type` says which.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)