List audit logs
Retrieve a paginated list of authenticated user audit log entries for the account. Results are ordered newest first.
Access requirements:
- The caller must be an account admin.
- The account must have audit logging enabled.
Returns 403 if either condition is not met.
<Note>This endpoint is in beta, read more here.</Note>
Query parameters
Inclusive lower bound on created_at (ISO 8601 datetime). Defaults to 30 days before end_time when omitted.
Inclusive upper bound on created_at (ISO 8601 datetime). Defaults to the current time when omitted.
A universally unique identifier (base64-encoded opaque string).
Filter results by user (base64 global user ID). When provided, only records associated with this user are returned. Access requirements vary by endpoint — some endpoints restrict this filter to account admins.
The type of operation that was audited.
Filter results to a specific operation type.
Maximum items to return
Opaque pagination cursor returned from a previous response (pagination.next_cursor). Treat it as an unreadable token; do not attempt to parse or construct it.
Response
A paginated list of audit log entries.
Example response
{
"logs": [
{
"id": "RW50aXR5OjEyMzQ1",
"user_id": "RW50aXR5OjEyMzQ1",
"ip": "1.2.3.4",
"operation_name": "createAiIntegration",
"operation_text": "mutation createAiIntegration { ... }",
"variables": "{}",
"created_at": "2026-05-18T12:00:00.000Z"
}
]
}