v1

latestOpenAPI 3.1.02026-07-24181585937.4 KB

Audit Log

auditLog.list

Beta

This API is in active development and only available in a closed beta with early design partners.

Lists an organization's audit log entries, newest first. The targetTypes and categories you can filter on are a fixed, code-defined vocabulary; see the Audit Log Vocabulary guide for valid values and filter examples.

Pagination: follow opaque cursor / nextCursor; see Pagination and Incremental Synchronization.

Returns audit events for all objects in the organization, including confidential jobs and projects, with no confidentiality filtering.

Error codes:

Code	Description
invalid_input	A date bound is not a valid ISO 8601 date, endDate is before startDate, the explicit span exceeds 18 months, or a targetTypes / categories value is not in the vocabulary.
audit_logs_not_enabled	Your organization does not have the Audit Logs feature.
cursor_invalid	The provided cursor could not be decoded.
missing_endpoint_permission	The API key lacks the auditLogsRead scope. Returned with HTTP 403.

Requires the auditLogsRead permission.

post/auditLog.list

Request body

cursorstring

Opaque pagination cursor from a previous response's nextCursor. Reuse it only with the same startDate, endDate, and filter parameters as the request that produced it; changing the window or filters while keeping a cursor can return empty or incomplete pages.

limitinteger

Maximum entries per page. Defaults to 100 when omitted. Maximum is 100.

startDatestring

ISO 8601 start of the date window (UTC). When omitted, defaults to 24 hours before endDate. When only startDate is supplied, endDate defaults to startDate plus 24 hours (not until now) — use both bounds for a custom span.

endDatestring

ISO 8601 end of the date window (UTC). When omitted with startDate, defaults to startDate plus 24 hours; when both are omitted, defaults to the current time.

actorIdsstring[]

Restricts results to entries whose actor id is one of these values. An empty array is ignored, same as omitting this field. Max 100 items.

targetIdsstring[]

Restricts results to entries whose target object id is one of these values. Combined with other filters using AND (all conditions must match). An empty array is ignored. Max 100 items.

targetTypesstring[]

Restricts results to entries whose target type is one of these values (e.g. "job", "app_user"). When both targetTypes and categories are supplied, matching uses OR (entries that match either filter). Combined with targetIds and actorIds using AND. An empty array is ignored. Max 100 items.

categoriesstring[]

Restricts results to entries in one of categories (e.g. "JobStatusChanged"). Max 100 items. See the Audit Log Vocabulary guide.

Example request

{
  "cursor": "G8",
  "limit": 25
}

Response

Responses from the auditLog.list endpoint

Example response

{
  "success": true,
  "results": [
    {
      "id": "01JSJ8FE9M2WP3KQ7T6YB5R8AD",
      "timestamp": "2026-06-02T15:06:10.000Z",
      "actor": {
        "type": "User",
        "id": "5f5b8d2e-1f3a-4c9b-8e2a-9d7c6b5a4f3e"
      },
      "target": {
        "type": "job",
        "id": "7a1c3e9d-2b4f-4a8c-9e1d-6f5b4a3c2d1e"
      },
      "category": "JobTeamChanged",
      "description": "Changed the team from Engineering to Customer Success.",
      "request": {
        "id": "req_01JSJ8FE9M2WP3KQ7T6YB5R8AD",
        "ipAddress": "198.51.100.42"
      },
      "parentAction": {
        "id": null,
        "type": null,
        "name": null
      },
      "changedFields": {
        "teamId": [
          {
            "ref": "b2c3d4e5-6f7a-4b8c-9d0e-1f2a3b4c5d6e",
            "type": "team"
          },
          {
            "ref": "c3d4e5f6-7a8b-4c9d-0e1f-2a3b4c5d6e7f",
            "type": "team"
          }
        ]
      }
    },
    {
      "id": "01JSJ8FG3K9XQ2VN5M7C4B6T1E",
      "timestamp": "2026-06-02T15:09:42.500Z",
      "actor": {
        "type": "User",
        "id": "5f5b8d2e-1f3a-4c9b-8e2a-9d7c6b5a4f3e"
      },
      "target": {
        "type": "location",
        "id": "9d0e1f2a-3b4c-4d5e-6f7a-8b9c0d1e2f3a"
      },
      "category": "LocationDetails",
      "description": "Updated location name, set an external name, and made it remote.",
      "request": {
        "id": "req_01JSJ8FG3K9XQ2VN5M7C4B6T1E",
        "ipAddress": "203.0.113.7"
      },
      "parentAction": {
        "id": null,
        "type": null,
        "name": null
      },
      "changedFields": {
        "name": [
          "SF Office",
          "San Francisco HQ"
        ],
        "externalName": [
          null,
          "San Francisco"
        ],
        "isRemote": [
          false,
          true
        ]
      }
    },
    {
      "id": "01JSJ8FH8N4YR3WP6Q9D5C7U2F",
      "timestamp": "2026-06-02T15:12:00.000Z",
      "actor": {
        "type": "User",
        "id": "310b2025-a403-4daf-bb72-477106114dcb"
      },
      "target": {
        "type": "BulkDataImport",
        "id": "cdbe44e2-aadc-4732-9496-7501f225e8f8"
      },
      "category": "BulkDataImportCompleted",
      "description": "Completed bulk import of 10 candidates: 8 succeeded, 0 skipped, 2 failed",
      "request": {
        "id": null,
        "ipAddress": null
      },
      "parentAction": {
        "id": "cdbe44e2-aadc-4732-9496-7501f225e8f8",
        "type": "bulk_data_import",
        "name": "candidate"
      },
      "changedFields": null
    }
  ],
  "nextCursor": "eyJoIjoiMDFKU0o4Rkg4TjRZUjNXUDZROUQ1QzdVMkYifQ",
  "moreDataAvailable": true
}