---
title: "Get Audit Events"
method: GET
path: "/v0/audit_events"
tags: ["k7m2q9w4z1x6b3v8"]
---

# Get Audit Events

`GET /v0/audit_events`

## Request

- Base URL: `https://api.skydio.com/api`
- URL: `https://api.skydio.com/api/v0/audit_events`
- Auth: API key in header `Authorization`

Search an organization's audit events.

## Query parameters

- `action` string: Limit results to a single audited action (e.g. `user.login`). Matches the action exactly.
- `order` 'asc' | 'desc': Sort order for results. `asc` returns oldest-first; `desc` returns newest-first.
- `since` string, date-time: Return events with an event time at or after this timestamp. The timestamp should follow the ISO 8601 standard format.
- `until` string, date-time: Return events with an event time at or before this timestamp. The timestamp should follow the ISO 8601 standard format.
- `cursor` string: Opaque pagination cursor from a previous response's `next_cursor`. Omit to fetch the first page.

## Response `200`

List of audit events returned from the GET /audit_events endpoint

- object
  - `data` object, required: List of audit events returned from the GET /audit_events endpoint
    - `audit_events` object[], required
      - `action` string, required: The audited action, as a dotted identifier (e.g. `user.login`, `flight.delete`).
      - `actor` object: The actor who triggered the action, if any.
        - `display_name` string: Display name of the actor (e.g. full name).
        - `email` string, email: Email of the actor who triggered the action.
        - `id` string, uuid, required: UUID of the actor who triggered the action.
        - `type` 'user' | 'api_token', required: The type of actor: a `user` or an `api_token`.
      - `created` string, date-time: When the event was recorded by the audit service (ISO 8601).
      - `event_time` string, date-time: When the audited action occurred (ISO 8601).
      - `id` string, uuid, required: Unique id of the audit event.
      - `modified` string, date-time: When the event was last modified by the audit service (ISO 8601).
      - `organization_id` string, uuid: UUID of the organization the audit event belongs to.
      - `payload` object: Action-specific event details as a JSON object.
    - `pagination` object, required
      - `has_next_page` boolean, required: Whether more events are available beyond this page.
      - `next_cursor` string: Opaque cursor for the next page of results. Pass it back as the `cursor` query arg to fetch the following page. `null` when there are no more events.
  - `error_message` string
  - `meta` object, required
    - `time` number
  - `skydio_error_code` integer, required
  - `status_code` integer, required

## Changes

- **2026-11-03** `6589167ebe70`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/skydio/apis/skydio-cloud-api/changes/v0/audit_events/get.md)

---

[API](https://skmtc.dev/skydio/apis/skydio-cloud-api.md) - [All operations](https://skmtc.dev/skydio/apis/skydio-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/skydio/apis/skydio-cloud-api/revisions/6589167ebe70?raw)