Audit Logs V2

List Audit Log Entries

Changed on

Returns a paginated list of audit log entries for the specified organization, newest first. Supports filtering by time range, endpoint, method, authorization outcome, and actor. Requires audit_logs:read scope.

get/v2/audit-logs

Request

  • Base URL
    https://api.superwall.com
  • URL
    https://api.superwall.com/v2/audit-logs
  • Auth
    • HTTP bearer
    • or API key in cookie accounts_superwall_token
    • or HTTP bearer

Query parameters

limitstring
starting_afterstring

Cursor for forward pagination - returns items after this ID

ending_beforestring

Cursor for backward pagination - returns items before this ID

organization_idstring required
start_timestring

Only return entries with timestamp >= this ISO datetime

end_timestring

Only return entries with timestamp <= this ISO datetime

endpoint_idstring

Filter by OpenAPI endpoint name (exact match)

methodstring

Filter by HTTP method (e.g. GET, POST)

route_family'public_v2' | 'internal_v2'

Which route family served the request

authorized'true' | 'false'

Filter by authorized flag (true = success, false = failure)

failure_stage'authn' | 'authz'

Stage at which the request was rejected, if any

failure_codestring

Filter by machine-readable failure code

user_idstring

Filter by acting user id

token_idstring

Filter by acting API token id

mutation'true' | 'false'

Filter to only mutations (true) or only reads (false)

session_idstring

Filter to entries from a single login session

Response

AuditLogList

object'list' required

Object type, always list

url'/v2/audit-logs' required

API endpoint URL for this list

has_moreboolean required

Whether there are more results available beyond this page

Changes

    • warning

      added the new credentials_missing enum value to the / response property for the response status

    • warning

      added the new credentials_missing enum value to the / response property for the response status

    • warning

      added the new credentials_missing enum value to the / response property for the response status

    • warning

      added the new credentials_missing enum value to the / response property for the response status

    • info

      added subschema #1 subschema #2 subschema #3 subschema #4 subschema #5 to the response body anyOf list for the response status

    • info

      removed subschema #1 subschema #2 subschema #3 subschema #4 subschema #5 from the response body anyOf list for the response status

    • warning

      added the new workspace_token enum value to the /// response property for the response status

    • warning

      added the new workspace_token enum value to the /// response property for the response status