---
title: "The org's audit trail"
method: GET
path: "/api/v1/audit-log"
tags: ["audit"]
---

# The org's audit trail

`GET /api/v1/audit-log`

## Request

- Base URL: `https://worthune.com`
- URL: `https://worthune.com/api/v1/audit-log`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Api-Key`

Newest first, keyset-paginated. An administrative view: owner keys only.

## Query parameters

- `limit` integer
- `beforeId` integer

## Response `200`

A page of entries.

- object
  - `ok` unknown, required
  - `entries` AuditEntry[], required
    - `id` integer, required
    - `ts` string, date-time, required
    - `actorType` 'key' | 'mcp' | 'admin' | 'cron' | 'system', required
    - `actorId` string, nullable, required: Key prefix, admin, or a cron/system name — never a credential.
    - `action` string, required: e.g. "household.create", "webhook.rotate-secret", "legal.accept".
    - `resource` string, nullable, required: e.g. "household:123", "webhook:7".
    - `outcome` 'ok' | 'denied' | 'invalid' | 'conflict' | 'not_found' | 'error', required
    - `detail` object, nullable, required
  - `nextBeforeId` integer, nullable, required

## Other responses

- `400`: limit or beforeId is not a positive integer (path names the parameter).
- `401`: No key presented (Authorization: Bearer wk_… or X-Api-Key).
- `402`: Unrecognized or revoked API key.
- `403`: The key's role is below the operation's floor (viewer < developer < owner), the key predates organization support, or the plan lacks the feature. On a sandbox key, also: the cap of 5 active households on create and import, the cap of 1 active Lodestar mandate, and the white-label surfaces (tenant config, embed tokens) and narration or mapping drafts on Worthune's model (they run on your own: a model assigned at /api/v1/model-policy, or x-model-key), which the sandbox does not carry.
- `429`: Hourly per-org stateful quota, a per-route durable limit, or the 120 requests/minute per-IP burst backstop.
- `503`: Billing is not configured on this deployment; household resources are disabled rather than served without tenancy (production fail-closed).

---

[API](https://skmtc.dev/worthune/apis/worthune-api.md) · [All operations](https://skmtc.dev/worthune/apis/worthune-api/llms.txt) · [OpenAPI document](https://skmtc.dev/worthune/apis/worthune-api/revisions/9f2241072555?raw)