---
title: "Summarize tenant audit activity"
method: GET
path: "/audit/summary"
tags: ["Audits"]
---

# Summarize tenant audit activity

`GET /audit/summary`

Requires an owner/admin browser session with recent MFA. Returns tenant-scoped, no-store audit data; agent tokens and tenant API keys are not sufficient. Summarizes transaction, approval, rejection, proxy, policy-violation, top-agent, and daily activity counts for 24h, 7d, 30d, or all when explicitly enabled by server configuration.

## Query parameters

- `range` '24h' | '7d' | '30d' | 'all'

## Response `200`

JSON response

- object
  - `ok` true, required
  - `data` object, required
    - `totalTransactions` integer, required
    - `totalApprovals` integer, required
    - `totalRejections` integer, required
    - `totalProxyRequests` integer, required
    - `policyViolations` integer, required
    - `topAgents` object[], required
      - `agentId` string, required
      - `name` string, required
      - `txCount` integer, required
    - `dailyActivity` object[], required
      - `date` string, date, required
      - `txCount` integer, required

## Other responses

- `400` — JSON response
- `401` — JSON response
- `403` — JSON response
- `404` — JSON response
- `409` — JSON response

## Changes

- **2026-08-17** `261a7c8070b2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/steward-fi/apis/steward-api/changes/audit/summary/get.md)

---

[API](https://skmtc.dev/steward-fi/apis/steward-api.md) · [All operations](https://skmtc.dev/steward-fi/apis/steward-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/steward-fi/steward-api/revisions/b88b4b97a664/schema)