---
title: "GET /vault/audit"
method: GET
path: "/vault/audit"
---

# GET /vault/audit

`GET /vault/audit`

## Request

- Base URL: `https://api.useanima.sh/v1`
- URL: `https://api.useanima.sh/v1/vault/audit`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

## Query parameters

- `credentialId` string: Filter by credential ID
- `agentId` union: Filter by agent ID
  - string
  - string
- `action` string: Filter by action type
- `since` string, date-time: Filter entries after this timestamp
- `until` string, date-time: Filter entries before this timestamp
- `cursor` string: Cursor for pagination
- `limit` integer: Maximum entries to return

## Response `200`

OK

- object: Paginated list of credential audit log entries
  - `items` object[], required: List of audit log entries
    - `id` string, required: Unique audit log entry identifier
    - `credentialId` string, required: Credential that was accessed or modified
    - `agentId` string, required: Agent that owns the credential
    - `orgId` string, required: Organization the credential belongs to
    - `action` string, required: Action performed (e.g. access, store, delete, refresh, refresh_failed)
    - `actor` string, required: Who performed the action (e.g. user ID, 'system')
    - `ipAddress` string, nullable: IP address of the actor
    - `metadata` object, nullable: Additional metadata about the action
    - `createdAt` string, date-time, required: Timestamp when the action occurred
  - `pagination` object, required: Cursor-based pagination metadata
    - `nextCursor` string, nullable, required: Cursor to pass as the `cursor` parameter to retrieve the next page, or null if no more results
    - `hasMore` boolean, required: Whether additional pages of results are available

---

[API](https://skmtc.dev/useanima/apis/anima-api.md) · [All operations](https://skmtc.dev/useanima/apis/anima-api/llms.txt) · [OpenAPI document](https://skmtc.dev/useanima/apis/anima-api/revisions/aaa148188980?raw)