Logs

List organization audit logs

Returns a cursor-paginated list of audit log entries for the organization, newest first. type=activity lists member actions (logins, workbench/drawing changes, exports, member management, …); type=access lists access events with IP address and device information. Pass pagination.nextCursor from a response as the cursor parameter to fetch the next page. Requires the workspace:read scope and a plan that includes audit logs.

get/api/organizations/{organizationId}/logs

Path parameters

organizationIdstring required

Example:a1b2c3d4-0000-0000-0000-000000000000

UUID of the organization whose logs to list. Must be the organization the API key belongs to.

Query parameters

type'activity' | 'access' required

Log type to list. One of activity, access.

emailstring

Example:jane

Case-insensitive substring to match against the user email of each entry.

dateFromstring

Example:2026-01-01T00:00:00Z

Only include entries at or after this ISO 8601 timestamp.

dateTostring

Example:2026-02-01T00:00:00Z

Only include entries at or before this ISO 8601 timestamp.

pageSizenumber

Example:20

Number of items per page (1-100). Defaults to 20.

cursorstring

Opaque cursor from a previous response (pagination.nextCursor). Omit to fetch the first page. Filters must stay the same across pages of one listing.

actionTypestring[]

Exact action types to filter by, e.g. Login succeeded, Created workspace. Repeat the parameter to filter by multiple types. Only valid with type=activity.

[
  "Login succeeded"
]

Response

A page of audit log entries, newest first.

Example response

{
  "results": [
    {
      "id": "12345",
      "type": "activity",
      "eventDate": "2026-01-15T12:34:56.123456Z",
      "userEmail": "jane@example.com",
      "actionType": "Created workspace",
      "targetType": "Team",
      "targetId": "a1b2c3d4-0000-0000-0000-000000000000"
    }
  ],
  "pagination": {
    "pageSize": 20
  }
}

Changes

No recorded changes to this endpoint across all 1 revision of this API.