List API audit log entries for the calling tenant

GET

/api-audit-logs

• Production

Returns cursor-paginated API audit log rows for the calling tenant. Each row records one v1 API request — method, path, status, duration, request id, and (when authenticated) the API key id, OAuth token id, or user id that made the call. Filterable by API key, HTTP method, status code, and date range. Tenant-scoped — Tenant A can never see Tenant B’s audit log even if scopes are mis-issued.

Authorizations

• bearerAuth
  audit:read

Parameters

Query Parameters

limit

integer

>= 1 <= 100

cursor

string

apiKeyId

integer

>= 1

method

string

status

integer | null

dateFrom

ISO 8601 lower bound for createdAt (inclusive)

string format: date-time

ISO 8601 lower bound for createdAt (inclusive)

dateTo

ISO 8601 upper bound for createdAt (inclusive)

string format: date-time

ISO 8601 upper bound for createdAt (inclusive)

Responses

200

Audit log page

object

data

required

Array<object>

object

id

required

integer

tenantId

required

integer

apiKeyId

required

integer | null

oauthTokenId

required

integer | null

userId

required

integer | null

method

required

string

path

required

string

status

required

integer

durationMs

required

integer

requestId

required

string

ip

required

string | null

userAgent

required

string | null

errorCode

required

string | null

createdAt

required

Any of:

string

string format: date-time

string

string

meta

required

object

request_id

Server-generated request identifier

string

pagination

object

cursor

required

Opaque cursor for the next page; null when no more results

string | null

has_more

required

Whether more pages are available after this one

boolean

count

required

Items in this page

integer

400

Bad request

object

type

required

URL identifying the problem type

string format: uri

title

required

Short human-readable summary

string

status

required

HTTP status code

integer

detail

Human-readable explanation

string

request_id

Server-generated request identifier

string

errors

Validation error array (422 only)

Array<object>

object

field

required

Field path that failed validation

string

code

required

Validation error code

string

message

required

Human-readable validation message

string

403

Scope insufficient

object

type

required

URL identifying the problem type

string format: uri

title

required

Short human-readable summary

string

status

required

HTTP status code

integer

detail

Human-readable explanation

string

request_id

Server-generated request identifier

string

errors

Validation error array (422 only)

Array<object>

object

field

required

Field path that failed validation

string

code

required

Validation error code

string

message

required

Human-readable validation message

string