---
title: "List the tenant's centralized audit trail"
method: GET
path: "/v1/audit-events"
tags: ["audit"]
---

# List the tenant's centralized audit trail

`GET /v1/audit-events`

## Request

- Base URL: `https://api.typenode.ai`
- URL: `https://api.typenode.ai/v1/audit-events`
- Auth: HTTP bearer

## Query parameters

- `resource_type` string
- `resource_id` string, uuid
- `actor_type` 'member' | 'service_account' | 'ai_agent' | 'system'
- `actor_id` string, uuid
- `action` string
- `outcome` 'success' | 'denied' | 'failure'
- `occurred_after` string, date-time
- `occurred_before` string, date-time
- `request_id` string, uuid
- `client_correlation_id` string
- `trace_id` string
- `after` string
- `limit` integer

## Response `200`

A page of audit events, newest first.

- object
  - `data` AuditEvent[], required
    - `action` string, required
    - `actor_context` object, required
      - `agent` object
        - `app` string, required
        - `grant_id` string, uuid, required
        - `name` string, required
    - `actor_id` string, uuid, nullable, required
    - `actor_type` 'member' | 'service_account' | 'ai_agent' | 'system', required
    - `after_state` object, nullable, required
    - `before_state` object, nullable, required
    - `client_correlation_id` string, nullable, required
    - `error_code` string, nullable, required
    - `id` string, uuid, required
    - `metadata` AuditMetadata, required
      - `active_changed` boolean
      - `added_capabilities` RoleCapabilityEntry[]
        - `all_capabilities` boolean, required
        - `capability_token` string, nullable, required
        - `environment_id` string, uuid, nullable, required
        - `expires_at` string, date-time, nullable, required
        - `resource_id` string, uuid, nullable, required
        - `resource_type` string, nullable, required
        - `scope_kind` 'workspace' | 'self' | 'resource' | 'parent' | 'parent_self', required
      - `ai_agent_id` string, uuid, nullable
      - `assignee_count` integer, nullable
      - `attempt_count` integer, nullable
      - `audience_count` integer, nullable
      - `audiences` string[]
      - `authority_revision` integer, nullable
      - `authorization_evidence` union
        - object
          - `actingAgentId` string, uuid
          - `authorityRevision` integer, required
          - `catalogModelId` string, required
          - `catalogModelRevision` integer, required
          - `configDigest` string, required
          - `credentialAudience` string, required
          - `credentialId` string, uuid, required
          - `credentialKind` 'user_jwt' | 'personal_key' | 'service_key' | 'oauth_access_token', required
          - `decisionAt` string, required
          - `environmentId` string, uuid, required
          - `environmentName` string, required
          - `oauthClientId` string
          - `projectionGeneration` integer, required
          - `publicationExpiresAt` string, nullable
          - `publicationId` string, uuid, required
          - `publisherId` string, uuid, required
          - `publisherKind` 'member' | 'service_account', required
          - `source` 'anonymous_publication', required
          - `tenantId` string, uuid, required
          - `triggerId` string, uuid, required
          - `workflowId` string, uuid, required
        - object
          - `actingAgentId` string, uuid
          - `authorityRevision` integer, required
          - `catalogModelId` string, required
          - `catalogModelRevision` integer, required
          - `credentialAudience` string, required
          - `credentialId` string, uuid, required
          - `credentialKind` 'user_jwt' | 'personal_key' | 'service_key' | 'oauth_access_token', required
          - `decisionEngine` 'postgres', required
          - `environmentId` string, uuid, required
          - `environmentName` string, required
          - `oauthClientId` string
          - `principalId` string, uuid, required
          - `principalKind` 'member' | 'service_account', required
          - `source` 'live_check', required
          - `tenantId` string, uuid, required
          - `triggerId` string, uuid
          - `workflowId` string, uuid, required
        - object
          - `actingAgentId` string, uuid
          - `authorityRevision` integer, required
          - `catalogModelId` string, required
          - `catalogModelRevision` integer, required
          - `credentialAudience` string, required
          - `credentialId` string, uuid, required
          - `credentialKind` 'user_jwt' | 'personal_key' | 'service_key' | 'oauth_access_token', required
          - `decisionEngine` 'edge', required
          - `edgeModelId` string, required
          - `environmentId` string, uuid, required
          - `environmentName` string, required
          - `oauthClientId` string
          - `principalId` string, uuid, required
          - `principalKind` 'member' | 'service_account', required
          - `source` 'live_check', required
          - `tenantId` string, uuid, required
          - `triggerId` string, uuid
          - `workflowId` string, uuid, required
        - object
          - `authorityRevision` integer, required
          - `candidateDigest` string, required
          - `catalogModelId` string, required
          - `catalogModelRevision` integer, required
          - `configDigest` string, required
          - `environmentId` string, uuid, required
          - `environmentName` string, required
          - `operationId` string, required
          - `projectionGeneration` integer, required
          - `source` 'managed_schedule', required
          - `tenantId` string, uuid, required
          - `triggerId` string, uuid, required
          - `workflowId` string, uuid, required
          - `workflowVersionId` string, uuid, required
          - `workflowVersionNumber` integer, required
        - object
          - `deliveryId` string, uuid, required
          - `environmentId` string, uuid, required
          - `environmentName` string, required
          - `mailboxId` string, uuid, required
          - `source` 'email_delivery', required
          - `tenantId` string, uuid, required
          - `triggerDefinitionDigest` string, required
          - `triggerId` string, uuid, required
          - `workflowId` string, uuid, required
        - object
          - `deploymentGeneration` integer, required
          - `deploymentId` string, uuid, required
          - `descriptorDigest` string, required
          - `destinationProfile` string, required
          - `environmentAssignmentId` string, uuid, required
          - `environmentId` string, uuid, required
          - `environmentName` string, required
          - `governanceRevision` integer, required
          - `installationId` string, uuid, required
          - `kind` 'static_secret' | 'hmac', required
          - `matchedName` string, required
          - `routeAuthorityOperationId` string, uuid, required
          - `runtimeDestinationId` string, uuid, required
          - `source` 'webhook_verifier', required
          - `tenantId` string, uuid, required
          - `triggerAuthorityRevision` integer, required
          - `triggerDefinitionDigest` string, required
          - `triggerId` string, uuid, required
          - `verifierGenerationId` string, required
          - `workflowId` string, uuid, required
      - `backend_type` string, nullable
      - `base_tools_changed` boolean
      - `capabilities` string[]
      - `capability` string, nullable
      - `catalog_model_id` string, uuid, nullable
      - `catalog_model_revision` integer, nullable
      - `changed` boolean
      - `check_environment_id` string, uuid, nullable
      - `check_parent_id` string, uuid, nullable
      - `check_parent_owner_id` string, uuid, nullable
      - `check_parent_owner_kind` 'member' | 'service_account', nullable
      - `check_parent_type` string, nullable
      - `check_resource_id` string, uuid, nullable
      - `check_resource_owner_id` string, uuid, nullable
      - `check_resource_owner_kind` 'member' | 'service_account', nullable
      - `check_resource_type` string, nullable
      - `closed_publication_count` integer, nullable
      - `closed_publication_ids` string[]
      - `config_digest` string, nullable
      - `connector_count` integer, nullable
      - `content_hash` string, nullable
      - `created_version` boolean
      - `creation_operation_id` string, uuid, nullable
      - `credential_audience` string, nullable
      - `credential_context` object, nullable
        - `acr` string, nullable
        - `act` string, nullable
        - `actingAgentId` string, uuid, nullable
        - `activationRevision` integer
        - `agentName` string
        - `appName` string
        - `audience` string
        - `authTime` integer, nullable
        - `capabilities` string[]
        - `ceiling` object[]
          - `capability` string, required
          - `environmentId` string, uuid, nullable, required
          - `expiresAt` integer, nullable, required
          - `resourceId` string, uuid, nullable, required
          - `resourceType` string, nullable, required
          - `rowId` string, uuid, required
          - `scopeKind` 'workspace' | 'self' | 'resource' | 'parent' | 'parent_self', required
        - `clientId` string
        - `credentialId` string, uuid
        - `environmentIds` string[]
        - `expiresAt` integer, nullable
        - `grantId` string, uuid
        - `holderId` string, uuid
        - `holderKind` 'member' | 'service_account'
        - `issuerId` string, uuid
        - `issuerKind` 'member' | 'service_account'
        - `kind` 'user_jwt' | 'personal_key' | 'service_key' | 'oauth_access_token'
        - `livenessRevision` integer
        - `memberIncarnation` integer
        - `offlineAccess` boolean
        - `resources` object[]
          - `resourceId` string, uuid, required
          - `resourceType` string, required
        - `restrictionExpiresAt` integer, nullable
        - `restrictionRevision` integer
        - `sessionId` string, uuid
        - `tokenExpiresAt` integer
        - `tokenIssuedAt` integer
      - `credential_id` string, uuid, nullable
      - `credential_kind` 'user_jwt' | 'personal_key' | 'service_key' | 'oauth_access_token', nullable
      - `current_workflow_id` string, uuid, nullable
      - `decision_at` string, date-time, nullable
      - `definition_revision` integer, nullable
      - `deleted_authority_revision` integer, nullable
      - `departure_report_id` string, uuid, nullable
      - `description` string, nullable
      - `description_changed` boolean
      - `edge_authority_revision` integer, nullable
      - `enabled` boolean
      - `enabled_changed` boolean
      - `environment_count` integer, nullable
      - `environment_id` string, uuid, nullable
      - `environment_ids` string[]
      - `epoch` integer, nullable
      - `everyone_role_id` string, uuid, nullable
      - `expected_version` integer, nullable
      - `expires_at` string, date-time, nullable
      - `fingerprint` string, nullable
      - `frozen_target_count` integer, nullable
      - `holder_id` string, uuid, nullable
      - `holder_kind` 'member' | 'service_account', nullable
      - `idempotency_key` string, uuid, nullable
      - `inventory` object
        - `credentials` integer, required
        - `environment_variables` integer, required
        - `environments` integer, required
        - `mcp_servers` integer, required
        - `members` integer, required
        - `roles` integer, required
        - `service_accounts` integer, required
        - `skills` integer, required
        - `workflow_triggers` integer, required
        - `workflow_versions` integer, required
        - `workflows` integer, required
      - `invitation_id` string, uuid, nullable
      - `is_everyone` boolean
      - `max_budget_changed` boolean
      - `max_skills` integer, nullable
      - `max_turns_changed` boolean
      - `mcp_server_id` string, uuid, nullable
      - `member_id` string, uuid, nullable
      - `member_incarnation` integer, nullable
      - `membership_id` string, uuid, nullable
      - `model_changed` boolean
      - `name` string, nullable
      - `name_changed` boolean
      - `new_auth_type` string, nullable
      - `new_authority_revision` integer, nullable
      - `new_config` object, nullable
      - `new_enabled` boolean
      - `new_route_authority_operation_id` string, uuid, nullable
      - `node_count` integer, nullable
      - `nodes` JsonValue[]
        - union
          - string
          - number
          - boolean
          - array (unresolved $ref)
          - object
      - `oauth_client_id` string, nullable
      - `old_auth_type` string, nullable
      - `old_authority_revision` integer, nullable
      - `old_config` object, nullable
      - `old_enabled` boolean
      - `old_route_authority_operation_id` string, uuid, nullable
      - `operation_count` integer, nullable
      - `operation_id` string, uuid, nullable
      - `operator_id` string, uuid, nullable
      - `owner_role_id` string, uuid, nullable
      - `patched_fields` union
        - string
        - number
        - boolean
        - array (unresolved $ref)
        - object
      - `permission_mode_changed` boolean
      - `principal_id` string, uuid, nullable
      - `principal_kind` 'member' | 'service_account', nullable
      - `publication_expires_at` string, date-time, nullable
      - `publications` object[]
        - `environment_id` string, uuid, required
        - `environment_name` string, required
        - `projection_generation` integer, required
        - `publication_expires_at` string, date-time, nullable, required
        - `publication_id` string, uuid, required
        - `route_authority_operation_id` string, uuid, required
        - `trigger_authority_revision` integer, required
      - `reason` string, nullable
      - `rejected_publication_ids` string[]
      - `relation_count` integer, nullable
      - `relation_id` string, uuid, nullable
      - `removed_exact_relations` boolean
      - `resource_count` integer, nullable
      - `resource_id` string, uuid, nullable
      - `resource_type` string, nullable
      - `resources` object[]
        - `resource_id` string, uuid, required
        - `resource_type` string, required
      - `retired_credential_ids` string[]
      - `revoked_auth_session_count` integer, nullable
      - `revoked_credential_count` integer, nullable
      - `revoked_personal_credential_count` integer, nullable
      - `role_id` string, uuid, nullable
      - `role_ids` string[]
      - `route_authority_operation_id` string, uuid, nullable
      - `server_id` string, uuid, nullable
      - `service_account_id` string, uuid, nullable
      - `session_id` string, uuid, nullable
      - `skill_id` string, uuid, nullable
      - `slug_changed` boolean
      - `source_artifact_id` string, uuid, nullable
      - `source_artifact_type` string, nullable
      - `source_catalog_model_id` string, uuid, nullable
      - `source_surface` string, nullable
      - `subject_id` string, uuid, nullable
      - `subject_kind` string, nullable
      - `system_prompt_text_changed` boolean
      - `system_prompt_type_changed` boolean
      - `target_catalog_model_id` string, uuid, nullable
      - `target_member_id` string, uuid, nullable
      - `token_kind` string, nullable
      - `trigger_authority_revision` integer, nullable
      - `trigger_config_changed` boolean
      - `trigger_count` integer, nullable
      - `trigger_id` string, uuid, nullable
      - `trigger_type` string, nullable
      - `validation_status` string, nullable
      - `version_after` integer, nullable
      - `version_before` integer, nullable
      - `workflow_id` string, uuid, nullable
      - `workflow_version_id` string, uuid, nullable
    - `occurred_at` string, date-time, required
    - `outcome` 'success' | 'denied' | 'failure', required
    - `request_id` string, uuid, nullable, required
    - `resource_id` string, uuid, required
    - `resource_type` string, required
    - `tenant_id` string, uuid, required
    - `trace_id` string, nullable, required
  - `has_more` boolean, required
  - `next_cursor` string, nullable, required

## Other responses

- `400`: A cursor, UUID-shaped filter, or timestamp filter is malformed.
- `401`: Authentication required.
- `default`: An error occurred (RFC 9457 problem+json).

---

[API](https://skmtc.dev/typenode/apis/typenode-management-api.md) · [All operations](https://skmtc.dev/typenode/apis/typenode-management-api/llms.txt) · [OpenAPI document](https://skmtc.dev/typenode/apis/typenode-management-api/revisions/9b943024aa98?raw)