List audit-log entries for the current workspace.

get

http://localhost:3001/v1/audit-log

Workspace-scoped audit-log list. enriches every row
with server-resolved actorRef + entityRef, drops the default
page size to 10 (was 25), adds free-text search across action /
actor displayName / entity name / entity id, plus filter chips
(actor, action prefix, entity type, date range) and a sort=
token.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Query Params

cursor

string

Opaque pagination cursor returned by the previous page (page.next or
page.prev). Omit to fetch the first page.

limit

integer

enum

Defaults to 10

Page size. One of 10/25/50/100. Unknown values clamp to 10.

Allowed:

actor

uuid

Filter to a single actor user id.

action

string

Legacy exact-match action filter; prefer actionPrefix=.
Kept for back-compat with callers built before 16.7.

actionPrefix

string

length ≤ 64

Server-side LIKE 'prefix%' filter on the action column.
Example: withdrawal. to scope to withdrawal events.

entityType

string

enum

Canonical entity-type discriminator written into
audit_log.entity_type. Mirrors the frozen list in
packages/shared/src/security/audit.ts.

string

length ≤ 200

Free-text search; case-insensitive ILIKE across action,
resolved actor displayName, resolved entity name, and the
raw entity id.

from

date-time

Inclusive lower bound on created_at (ISO-8601 UTC).

date-time

Exclusive upper bound on created_at (ISO-8601 UTC).

sort

string

enum

Defaults to occurredAt:desc

Sort token <field>:<asc|desc>. Defaults to occurredAt:desc.

Headers

X-Network

string

enum

required

Selects the network slice the request targets. Workspace-scoped
responses are filtered to this network; chain-bound writes are
stamped with it. Required on every non-admin workspace-scoped
operation.

Allowed:

Responses

Language

Credentials

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200Audit-log list.

400Validation, malformed input, or missing/invalid X-Network.

401Missing or invalid bearer token / API key.