API reference/Ops: audit

List audit events, newest first

GET/ops/audit

Who did what to which resource, and whether it worked. Filters combine; paginate with `cursor`.

bearer auth

Query parameters

actor_kindstring

user, service, system or anonymous

max length 32

actor_idstring

max length 200

actionstring

Exact action

max length 200

action_prefixstring

Actions starting with this

max length 200

resource_typestring

max length 100

resource_idstring

max length 200

org_idstring

max length 200

outcomestring

success, failure or denied

max length 16

request_idstring

max length 128

fromstring (date-time)

Only events that occurred at or after this time (RFC 3339)

tostring (date-time)

Only events that occurred before this time (RFC 3339)

limitinteger (int64)

≥ 1 · ≤ 100 · default 50

cursorstring

next_cursor from the previous page

max length 30

Responses

200OKapplication/json

eventsarray of objectrequired

next_cursorstring

400Bad Requestapplication/problem+json

codestringrequired

Stable machine-readable error code

detailstring

Human-readable explanation

errorsarray of object

Field-level validation errors

request_idstring

Correlates with server logs and traces

statusinteger (int64)required

HTTP status code

titlestringrequired

Short summary of the problem type

typestring

URI identifying the problem type

401Unauthorizedapplication/problem+json

codestringrequired

Stable machine-readable error code

detailstring

Human-readable explanation

errorsarray of object

Field-level validation errors

request_idstring

Correlates with server logs and traces

statusinteger (int64)required

HTTP status code

titlestringrequired

Short summary of the problem type

typestring

URI identifying the problem type

403Forbiddenapplication/problem+json

codestringrequired

Stable machine-readable error code

detailstring

Human-readable explanation

errorsarray of object

Field-level validation errors

request_idstring

Correlates with server logs and traces

statusinteger (int64)required

HTTP status code

titlestringrequired

Short summary of the problem type

typestring

URI identifying the problem type

422Unprocessable Entityapplication/problem+json

codestringrequired

Stable machine-readable error code

detailstring

Human-readable explanation

errorsarray of object

Field-level validation errors

request_idstring

Correlates with server logs and traces

statusinteger (int64)required

HTTP status code

titlestringrequired

Short summary of the problem type

typestring

URI identifying the problem type

500Internal Server Errorapplication/problem+json

codestringrequired

Stable machine-readable error code

detailstring

Human-readable explanation

errorsarray of object

Field-level validation errors

request_idstring

Correlates with server logs and traces

statusinteger (int64)required

HTTP status code

titlestringrequired

Short summary of the problem type

typestring

URI identifying the problem type

Was this page useful?

v0.5

Request

curl -X GET "https://api.example.com/ops/audit" \
  -H "Authorization: Bearer $TOKEN"

req, _ := http.NewRequest("GET", "https://api.example.com/ops/audit", nil)
req.Header.Set("Authorization", "Bearer "+token)
resp, err := http.DefaultClient.Do(req)
if err != nil {
	return err
}
defer resp.Body.Close()

const res = await fetch("https://api.example.com/ops/audit", {
  method: "GET",
  headers: { Authorization: `Bearer ${token}` },
});
const data = await res.json();

Response

{
  "events": [
    {
      "action": "settings.value.changed",
      "actor_id": "usr_mfrggzdfmztwq2lk",
      "actor_kind": "user",
      "actor_label": "string",
      "id": 1,
      "ip": "string",
      "metadata": {},
      "occurred_at": "2026-09-15T12:00:00Z",
      "org_id": "string",
      "outcome": "success",
      "recorded_at": "2026-09-15T12:00:00Z",
      "request_id": "string",
      "resource_id": "example.ping_message",
      "resource_type": "setting",
      "trace_id": "string",
      "user_agent": "string"
    }
  ],
  "next_cursor": "string"
}

{
  "code": "project_name_taken",
  "detail": "project name is already taken",
  "errors": [
    {
      "location": "body.name",
      "message": "expected length >= 1"
    }
  ],
  "request_id": "req_9f86d081884c7d65",
  "status": 409,
  "title": "Conflict",
  "type": "string"
}

{
  "code": "project_name_taken",
  "detail": "project name is already taken",
  "errors": [
    {
      "location": "body.name",
      "message": "expected length >= 1"
    }
  ],
  "request_id": "req_9f86d081884c7d65",
  "status": 409,
  "title": "Conflict",
  "type": "string"
}

{
  "code": "project_name_taken",
  "detail": "project name is already taken",
  "errors": [
    {
      "location": "body.name",
      "message": "expected length >= 1"
    }
  ],
  "request_id": "req_9f86d081884c7d65",
  "status": 409,
  "title": "Conflict",
  "type": "string"
}

{
  "code": "project_name_taken",
  "detail": "project name is already taken",
  "errors": [
    {
      "location": "body.name",
      "message": "expected length >= 1"
    }
  ],
  "request_id": "req_9f86d081884c7d65",
  "status": 409,
  "title": "Conflict",
  "type": "string"
}

{
  "code": "project_name_taken",
  "detail": "project name is already taken",
  "errors": [
    {
      "location": "body.name",
      "message": "expected length >= 1"
    }
  ],
  "request_id": "req_9f86d081884c7d65",
  "status": 409,
  "title": "Conflict",
  "type": "string"
}

Base URL: https://api.example.com
Auth: bearer