---
title: "Fetch audit log events."
method: GET
path: "/admin/audit"
tags: ["admin"]
---

# Fetch audit log events.

`GET /admin/audit`

## Query parameters

- `page` integer
- `per_page` integer

## Response `200`

List of audit logs.

- object[]
  - `id` string, uuid
  - `payload` object
    - `actor_id` string
    - `actor_username` string
    - `actor_name` string
    - `traits` object
    - `action` string — Usually one of these values: - login - logout - invite_accepted - user_signedup - user_invited - user_deleted - user_modified - user_recovery_requested - user_reauthenticate_requested - user_confirmation_requested - user_repeated_signup - user_updated_password - token_revoked - token_refreshed - generate_recovery_codes - factor_in_progress - factor_unenrolled - challenge_created - verification_attempted - factor_deleted - recovery_codes_deleted - factor_updated - mfa_code_login
    - `log_type` string — Usually one of these values: - account - team - token - user - factor - recovery_codes
  - `created_at` string, date-time
  - `ip_address` string

## Other responses

- `401` — HTTP Unauthorizred response.
- `403` — HTTP Forbidden response.

## Changes

- **2023-02-01** `144a34ca6d74` — 5 warning
  - removed the optional property `error_code` from the response with the `401` status
  - removed the optional property `error_code` from the response with the `403` status
  - removed the optional property `items/payload/actor_via_sso` from the response with the `200` status
  - removed the optional property `weak_password` from the response with the `401` status
  - …1 more

[Change history](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/admin/audit/get.md)

---

[API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/revisions/144a34ca6d74/schema)