Audit Events

List audit events

Changed on

List the organization's audit events, newest first, within a range of at most 90 days.

No 404 gate here: JWTAuth._finish_auth already rejects (401) any token whose organization_id doesn't resolve via the same TenantInfoCache lookup, so by the time this view runs the org is guaranteed to exist.

Required OAuth scope: audit:read

get/v2/audit-events/

Request

Query parameters

filter[channel]string nullable

Source channel, e.g. "mcp".

filter[user.id]string nullable

Opaque dashboard user id.

filter[action]string nullable

Action type, e.g. "update".

filter[target_type]string nullable

Target object type.

filter[request_id]string nullable

API request id.

filter[created_gte]string date-time nullable

Created on or after this timestamp. Defaults to 90 days before created_lte.

filter[created_lte]string date-time nullable

Created on or before this timestamp. Defaults to now. The range may span at most 90 days.

page[size]integer

Maximum number of records to return.

page[cursor]string nullable

Opaque cursor from the previous page's links.next.

Response

OK

metaobject nullable

Pagination metadata, e.g. {"page_size": 25}.

includedobject[] nullable

Related resources requested via ?include=. Absent when no include was requested.

Changes

    • breaking

      removed the required property from the response with the status

    • warning

      removed the optional property from the response with the status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

    • info

      removed the non-success response with the status

    • info

      added to the response property anyOf list for the response status

    • info

      removed subschema #1 from the response property anyOf list for the response status

    • info

      endpoint added