---
title: "Gets the audit log for the workspace"
method: GET
path: "/v1/audit_logs"
---

# Gets the audit log for the workspace

`GET /v1/audit_logs`

Returns audit-log entries across the workspace, newest first, covering models, chains, and workspace-level actions. Use the filters to narrow by event type, actor, resource, environment, source, or time window, and the cursor to page. In workspaces with multiple teams, only organization admins can read the workspace audit log.

## Query parameters

- `cursor` string, nullable
- `limit` integer
- `direction` 'DESC' | 'ASC' — Sort order of returned entries, by creation time.
- `search` string, nullable
- `event_type_groups` AuditLogEventTypeGroupV1[]
- `user_ids` string[]
- `deployment_ids` string[]
- `chain_deployment_ids` string[]
- `environment_names` string[]
- `sources` AuditLogSourceV1[]
- `start_epoch_millis` integer, nullable
- `end_epoch_millis` integer, nullable

## Response `200`

- ListAuditLogsResponseV1 — A page of audit-log entries, newest first by default.
  - `items` AuditLogEntryV1[], required — Items in this page.
    - `id` string, required — Unique identifier of the audit-log entry.
    - `created` string, date-time, required — Time the action occurred, in ISO 8601 format.
    - `event_type` 'MODEL_DEPLOYED' | 'MODEL_DEPLOYMENT_ACTIVATED' | 'MODEL_DEPLOYMENT_DEACTIVATED' | 'MODEL_DEPLOYMENT_RETRIED' | 'MODEL_DEPLOYMENT_PROMOTED' | 'MODEL_DEPLOYMENT_AUTOSCALING_SETTINGS_CHANGED' | 'MODEL_DEPLOYMENT_INSTANCE_TYPE_CHANGED' | 'MODEL_DEPLOYMENT_DELETED' | 'MODEL_DELETED' | 'CHAIN_DEPLOYED' | 'CHAIN_DEPLOYMENT_ACTIVATED' | 'CHAIN_DEPLOYMENT_DEACTIVATED' | 'CHAIN_DEPLOYMENT_PROMOTED' | 'CHAINLET_AUTOSCALING_SETTINGS_CHANGED' | 'CHAINLET_INSTANCE_TYPE_CHANGED' | 'CHAIN_DEPLOYMENT_DELETED' | 'CHAIN_DELETED' | 'CHAIN_ENVIRONMENT_CREATED' | 'CHAIN_ENVIRONMENT_UPDATED' | 'SECRET_UPDATED' | 'SECRET_DELETED' | 'API_KEY_CREATED' | 'API_KEY_DELETED' | 'GATEWAY_ENDPOINT_CREATED' | 'GATEWAY_ENDPOINT_UPDATED' | 'GATEWAY_ENDPOINT_DELETED' | 'USER_INVITED' | 'USER_JOINED_ORGANIZATION' | 'WEBHOOK_SIGNING_SECRET_CREATED' | 'WEBHOOK_SIGNING_SECRET_ROTATED' | 'WEBHOOK_SIGNING_SECRET_DELETED' | 'USER_ROLE_UPDATED' | 'USER_TEAM_ROLE_UPDATED' | 'USER_REMOVED' | 'DIRECTORY_GROUP_ROLE_UPDATED' | 'REQUIRE_GROUP_BASED_ADMINS_ENABLED' | 'ENVIRONMENT_CREATED' | 'ENVIRONMENT_UPDATED' | 'ENVIRONMENT_DELETED' | 'REPLICA_TERMINATED' | 'MODEL_PROMOTION_CONTROL_ACTION' | 'SSH_CERTIFICATE_SIGNED', required — Type of action recorded by an audit-log entry.
    - `event_data` union, required — Structured details of the action, discriminated by `event_type`.
      - AuditLogEventModelDeployedV1 — A model deployment was created.
        - `event_type` 'MODEL_DEPLOYED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
        - `scale_previous_to_zero` boolean, required
        - `trusted` boolean, required
        - `publish` boolean, required
        - `environment_name` string, nullable, required
      - AuditLogEventModelDeploymentActivatedV1 — A model deployment was activated.
        - `event_type` 'MODEL_DEPLOYMENT_ACTIVATED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
      - AuditLogEventModelDeploymentDeactivatedV1 — A model deployment was deactivated.
        - `event_type` 'MODEL_DEPLOYMENT_DEACTIVATED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
      - AuditLogEventModelDeploymentRetriedV1 — A model deployment build was retried.
        - `event_type` 'MODEL_DEPLOYMENT_RETRIED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
        - `retried` boolean, required
      - AuditLogEventModelDeploymentPromotedV1 — A model deployment was promoted to an environment.
        - `event_type` 'MODEL_DEPLOYMENT_PROMOTED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
        - `environment_name` string, nullable, required
        - `environment_id` string, nullable, required
      - AuditLogEventModelDeploymentAutoscalingSettingsChangedV1 — A model deployment's autoscaling settings were changed.
        - `min_replica` integer, required
        - `max_replica` integer, required
        - `concurrency_target` integer, required
        - `autoscaling_window` integer, nullable, required
        - `scale_down_delay` integer, nullable, required
        - `target_utilization_percentage` integer, nullable, required
        - `target_in_flight_tokens` integer, nullable, required
        - `max_scale_down_rate` number, nullable, required
        - `event_type` 'MODEL_DEPLOYMENT_AUTOSCALING_SETTINGS_CHANGED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
        - `deployment_type` string, nullable, required
        - `previous_settings` AuditLogEventAutoscalingSettingsV1, required — Autoscaling settings for a deployment or environment.
          - `min_replica` integer, required
          - `max_replica` integer, required
          - `concurrency_target` integer, required
          - `autoscaling_window` integer, nullable, required
          - `scale_down_delay` integer, nullable, required
          - `target_utilization_percentage` integer, nullable, required
          - `target_in_flight_tokens` integer, nullable, required
          - `max_scale_down_rate` number, nullable, required
      - AuditLogEventModelDeploymentInstanceTypeChangedV1 — A model deployment's instance type was changed.
        - `event_type` 'MODEL_DEPLOYMENT_INSTANCE_TYPE_CHANGED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
        - `instance_type_name` string, required
      - AuditLogEventModelDeploymentDeletedV1 — A model deployment was deleted.
        - `event_type` 'MODEL_DEPLOYMENT_DELETED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
      - AuditLogEventModelDeletedV1 — A model was deleted.
        - `event_type` 'MODEL_DELETED', required
        - `model_id` string, required
        - `model_name` string, required
      - AuditLogEventChainDeployedV1 — A chain deployment was created.
        - `event_type` 'CHAIN_DEPLOYED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_id` string, required
        - `chain_deployment_name` string, nullable, required
        - `is_primary` boolean, required
        - `publish` boolean, required
      - AuditLogEventChainDeploymentActivatedV1 — A chain deployment was activated.
        - `event_type` 'CHAIN_DEPLOYMENT_ACTIVATED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_id` string, required
        - `chain_deployment_name` string, nullable, required
      - AuditLogEventChainDeploymentDeactivatedV1 — A chain deployment was deactivated.
        - `event_type` 'CHAIN_DEPLOYMENT_DEACTIVATED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_id` string, required
        - `chain_deployment_name` string, nullable, required
      - AuditLogEventChainDeploymentPromotedV1 — A chain deployment was promoted to an environment.
        - `event_type` 'CHAIN_DEPLOYMENT_PROMOTED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_id` string, required
        - `chain_deployment_name` string, nullable, required
        - `environment_name` string, nullable, required
        - `environment_id` string, nullable, required
      - AuditLogEventChainletAutoscalingSettingsChangedV1 — A chainlet's autoscaling settings were changed.
        - `min_replica` integer, required
        - `max_replica` integer, required
        - `concurrency_target` integer, required
        - `autoscaling_window` integer, nullable, required
        - `scale_down_delay` integer, nullable, required
        - `target_utilization_percentage` integer, nullable, required
        - `target_in_flight_tokens` integer, nullable, required
        - `max_scale_down_rate` number, nullable, required
        - `event_type` 'CHAINLET_AUTOSCALING_SETTINGS_CHANGED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_id` string, required
        - `chain_deployment_name` string, nullable, required
        - `chainlet_name` string, required
        - `chainlet_id` string, required
        - `previous_settings` AuditLogEventAutoscalingSettingsV1, required — Autoscaling settings for a deployment or environment.
          - `min_replica` integer, required
          - `max_replica` integer, required
          - `concurrency_target` integer, required
          - `autoscaling_window` integer, nullable, required
          - `scale_down_delay` integer, nullable, required
          - `target_utilization_percentage` integer, nullable, required
          - `target_in_flight_tokens` integer, nullable, required
          - `max_scale_down_rate` number, nullable, required
      - AuditLogEventChainletInstanceTypeChangedV1 — A chainlet's instance type was changed.
        - `event_type` 'CHAINLET_INSTANCE_TYPE_CHANGED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_id` string, required
        - `chain_deployment_name` string, nullable, required
        - `chainlet_name` string, required
        - `chainlet_id` string, required
        - `instance_type_name` string, required
      - AuditLogEventChainDeploymentDeletedV1 — A chain deployment was deleted.
        - `event_type` 'CHAIN_DEPLOYMENT_DELETED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_id` string, required
        - `deployment_name` string, nullable, required
      - AuditLogEventChainDeletedV1 — A chain was deleted.
        - `event_type` 'CHAIN_DELETED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `chain_deployment_name` string, nullable, required
      - AuditLogEventChainEnvironmentCreatedV1 — A chain environment was created.
        - `event_type` 'CHAIN_ENVIRONMENT_CREATED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `environment_name` string, required
        - `redeploy_on_promotion` boolean, nullable, required
        - `ramp_up_while_promoting` boolean, nullable, required
        - `ramp_up_duration_seconds` integer, nullable, required
      - AuditLogEventChainEnvironmentUpdatedV1 — A chain environment was updated.
        - `event_type` 'CHAIN_ENVIRONMENT_UPDATED', required
        - `chain_id` string, required
        - `chain_name` string, required
        - `environment_name` string, required
        - `redeploy_on_promotion` boolean, nullable, required
        - `ramp_up_while_promoting` boolean, nullable, required
        - `ramp_up_duration_seconds` integer, nullable, required
      - AuditLogEventSecretUpdatedV1 — A secret was created or updated.
        - `event_type` 'SECRET_UPDATED', required
        - `secret_id` string, required
        - `secret_name` string, required
      - AuditLogEventSecretDeletedV1 — A secret was deleted.
        - `event_type` 'SECRET_DELETED', required
        - `secret_id` string, required
        - `secret_name` string, required
      - AuditLogEventApiKeyCreatedV1 — An API key was created.
        - `event_type` 'API_KEY_CREATED', required
        - `api_key_id` string, required
        - `api_key_type` 'PERSONAL' | 'CREATOR_SERVICE_ACCOUNT' | 'MANAGE_API_KEYS_SERVICE_ACCOUNT' | 'INVOKE_ALL_MODELS_SERVICE_ACCOUNT' | 'INVOKE_ALLOWED_MODELS_SERVICE_ACCOUNT' | 'INVOKE_SCOPED_ENVS_AND_MODELS_SERVICE_ACCOUNT' | 'EXPORT_METRICS_ALL_MODELS_SERVICE_ACCOUNT' | 'EXPORT_METRICS_ALLOWED_MODELS_SERVICE_ACCOUNT' | 'INVOKE_ALL_SHARED_ENDPOINTS_SERVICE_ACCOUNT' | 'INVOKE_ALLOWED_SHARED_ENDPOINTS_SERVICE_ACCOUNT', required — Type of API key recorded on an API-key event.
        - `prefix` string, required
      - AuditLogEventApiKeyDeletedV1 — An API key was revoked.
        - `event_type` 'API_KEY_DELETED', required
        - `api_key_id` string, required
        - `api_key_type` 'PERSONAL' | 'CREATOR_SERVICE_ACCOUNT' | 'MANAGE_API_KEYS_SERVICE_ACCOUNT' | 'INVOKE_ALL_MODELS_SERVICE_ACCOUNT' | 'INVOKE_ALLOWED_MODELS_SERVICE_ACCOUNT' | 'INVOKE_SCOPED_ENVS_AND_MODELS_SERVICE_ACCOUNT' | 'EXPORT_METRICS_ALL_MODELS_SERVICE_ACCOUNT' | 'EXPORT_METRICS_ALLOWED_MODELS_SERVICE_ACCOUNT' | 'INVOKE_ALL_SHARED_ENDPOINTS_SERVICE_ACCOUNT' | 'INVOKE_ALLOWED_SHARED_ENDPOINTS_SERVICE_ACCOUNT', required — Type of API key recorded on an API-key event.
        - `prefix` string, required
      - AuditLogEventGatewayEndpointCreatedV1 — A Frontier Gateway endpoint was created.
        - `event_type` 'GATEWAY_ENDPOINT_CREATED', required
        - `gateway_endpoint_id` string, required
        - `slug` string, required
      - AuditLogEventGatewayEndpointUpdatedV1 — A Frontier Gateway endpoint was updated.
        - `event_type` 'GATEWAY_ENDPOINT_UPDATED', required
        - `gateway_endpoint_id` string, required
        - `slug` string, required
        - `previous_slug` string, nullable, required
      - AuditLogEventGatewayEndpointDeletedV1 — A Frontier Gateway endpoint was deleted.
        - `event_type` 'GATEWAY_ENDPOINT_DELETED', required
        - `gateway_endpoint_id` string, required
        - `slug` string, required
      - AuditLogEventUserInvitedV1 — A user was invited to the organization.
        - `event_type` 'USER_INVITED', required
        - `invited_user_email` string, required
        - `role_name` string, required
      - AuditLogEventUserJoinedOrganizationV1 — A user joined the organization.
        - `event_type` 'USER_JOINED_ORGANIZATION', required
        - `new_user_email` string, required
        - `user_id` string, required
      - AuditLogEventWebhookSigningSecretCreatedV1 — A webhook signing secret was created.
        - `event_type` 'WEBHOOK_SIGNING_SECRET_CREATED', required
        - `webhook_signing_secret_id` string, required
      - AuditLogEventWebhookSigningSecretRotatedV1 — A webhook signing secret was rotated.
        - `event_type` 'WEBHOOK_SIGNING_SECRET_ROTATED', required
        - `webhook_signing_secret_id` string, required
      - AuditLogEventWebhookSigningSecretDeletedV1 — A webhook signing secret was deleted.
        - `event_type` 'WEBHOOK_SIGNING_SECRET_DELETED', required
        - `webhook_signing_secret_id` string, required
      - AuditLogEventUserRoleUpdatedV1 — A user's organization role was updated.
        - `event_type` 'USER_ROLE_UPDATED', required
        - `user_id` string, required
        - `user_email` string, required
        - `new_role_name` string, required
      - AuditLogEventUserTeamRoleUpdatedV1 — A user's team role was updated.
        - `event_type` 'USER_TEAM_ROLE_UPDATED', required
        - `user_id` string, required
        - `user_email` string, required
        - `team_id` string, required
        - `team_name` string, required
        - `new_role_name` string, required
      - AuditLogEventUserRemovedV1 — A user was removed from the organization.
        - `event_type` 'USER_REMOVED', required
        - `removed_user_email` string, required
      - AuditLogEventDirectoryGroupRoleUpdatedV1 — A directory group's role was updated.
        - `event_type` 'DIRECTORY_GROUP_ROLE_UPDATED', required
        - `directory_group_id` string, required
        - `directory_group_name` string, required
        - `new_role_name` string, required
        - `team_id` string, nullable, required
        - `team_name` string, nullable, required
      - AuditLogEventRequireGroupBasedAdminsEnabledV1 — Group-based admin enforcement was enabled for the organization.
        - `event_type` 'REQUIRE_GROUP_BASED_ADMINS_ENABLED', required
        - `organization_id` string, required
      - AuditLogEventEnvironmentCreatedV1 — A model environment was created.
        - `min_replica` integer, required
        - `max_replica` integer, required
        - `concurrency_target` integer, required
        - `autoscaling_window` integer, nullable, required
        - `scale_down_delay` integer, nullable, required
        - `target_utilization_percentage` integer, nullable, required
        - `target_in_flight_tokens` integer, nullable, required
        - `max_scale_down_rate` number, nullable, required
        - `redeploy_on_promotion` boolean, nullable, required
        - `rolling_deploy` boolean, nullable, required
        - `rolling_deploy_strategy` string, nullable, required
        - `max_unavailable_percent` integer, nullable, required
        - `max_surge_percent` integer, nullable, required
        - `stabilization_time_seconds` integer, nullable, required
        - `replica_overhead_percent` integer, nullable, required
        - `promotion_cleanup_strategy` string, nullable, required
        - `ramp_up_while_promoting` boolean, nullable, required
        - `ramp_up_duration_seconds` integer, nullable, required
        - `ramp_up_step_size` integer, nullable, required
        - `model_id` string, required
        - `model_name` string, required
        - `environment_name` string, required
        - `deployment_type` string, nullable, required
        - `event_type` 'ENVIRONMENT_CREATED', required
      - AuditLogEventEnvironmentUpdatedV1 — A model environment's settings were updated.
        - `min_replica` integer, required
        - `max_replica` integer, required
        - `concurrency_target` integer, required
        - `autoscaling_window` integer, nullable, required
        - `scale_down_delay` integer, nullable, required
        - `target_utilization_percentage` integer, nullable, required
        - `target_in_flight_tokens` integer, nullable, required
        - `max_scale_down_rate` number, nullable, required
        - `redeploy_on_promotion` boolean, nullable, required
        - `rolling_deploy` boolean, nullable, required
        - `rolling_deploy_strategy` string, nullable, required
        - `max_unavailable_percent` integer, nullable, required
        - `max_surge_percent` integer, nullable, required
        - `stabilization_time_seconds` integer, nullable, required
        - `replica_overhead_percent` integer, nullable, required
        - `promotion_cleanup_strategy` string, nullable, required
        - `ramp_up_while_promoting` boolean, nullable, required
        - `ramp_up_duration_seconds` integer, nullable, required
        - `ramp_up_step_size` integer, nullable, required
        - `model_id` string, required
        - `model_name` string, required
        - `environment_name` string, required
        - `deployment_type` string, nullable, required
        - `event_type` 'ENVIRONMENT_UPDATED', required
        - `previous_settings` AuditLogEventEnvironmentSettingsV1, required — Full environment settings (autoscaling + rolling promotion + deprecated canary); shared base for the environment events and the type of their previous_settings snapshots. Not itself a payload in the discriminated union.
          - `min_replica` integer, required
          - `max_replica` integer, required
          - `concurrency_target` integer, required
          - `autoscaling_window` integer, nullable, required
          - `scale_down_delay` integer, nullable, required
          - `target_utilization_percentage` integer, nullable, required
          - `target_in_flight_tokens` integer, nullable, required
          - `max_scale_down_rate` number, nullable, required
          - `redeploy_on_promotion` boolean, nullable, required
          - `rolling_deploy` boolean, nullable, required
          - `rolling_deploy_strategy` string, nullable, required
          - `max_unavailable_percent` integer, nullable, required
          - `max_surge_percent` integer, nullable, required
          - `stabilization_time_seconds` integer, nullable, required
          - `replica_overhead_percent` integer, nullable, required
          - `promotion_cleanup_strategy` string, nullable, required
          - `ramp_up_while_promoting` boolean, nullable, required
          - `ramp_up_duration_seconds` integer, nullable, required
          - `ramp_up_step_size` integer, nullable, required
      - AuditLogEventEnvironmentDeletedV1 — A model environment was deleted.
        - `event_type` 'ENVIRONMENT_DELETED', required
        - `model_id` string, required
        - `model_name` string, required
        - `environment_name` string, required
      - AuditLogEventReplicaTerminatedV1 — A replica of a model deployment was terminated.
        - `event_type` 'REPLICA_TERMINATED', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
        - `replica_id` string, required
      - AuditLogEventModelPromotionControlActionV1 — A user-initiated promotion control signal was sent to a rolling promotion.
        - `event_type` 'MODEL_PROMOTION_CONTROL_ACTION', required
        - `model_id` string, required
        - `model_name` string, required
        - `deployment_id` string, required
        - `deployment_name` string, required
        - `environment_name` string, required
        - `environment_id` string, nullable, required
        - `action` 'PAUSE' | 'RESUME' | 'FORCE_CANCEL' | 'FORCE_ROLL_FORWARD' | 'GRACEFUL_CANCEL', required — User-initiated promotion control signal recorded on a promotion-control event.
      - AuditLogEventSshCertificateSignedV1 — An SSH certificate was signed for a workload.
        - `event_type` 'SSH_CERTIFICATE_SIGNED', required
        - `workload_type` string, required
        - `workload_id` string, required
        - `project_id` string, required
        - `replica_id` string, required
        - `proxy_address` string, required
        - `expires_at` string, required
    - `source` 'UI' | 'API' | 'MCP' | 'OTHER' — Surface that issued the audited action.
    - `actor` AuditLogActorV1, required — The actor that performed an audited action.
      - `type` 'USER' | 'API_KEY' | 'BASETEN_USER' | 'BASETEN_SYSTEM' | 'TOMBSTONE_USER', required — Kind of actor that performed an audited action.
      - `email` string, nullable — Email of the acting user, when the actor is a user.
      - `api_key_prefix` string, nullable — Prefix of the acting API key, when the actor is an API key.
    - `client_name` string, nullable — Name of the client that issued the action, if known.
    - `client_version` string, nullable — Version of the client that issued the action, if known.
    - `client_session_id` string, nullable — Opaque identifier grouping actions from the same client session, if known.
  - `pagination` PaginationResponseV1, required
    - `has_more` boolean, required — Whether more items exist after this page.
    - `cursor` string, nullable — Opaque cursor to pass into the next request. Null when there is no next page.

---

[API](https://skmtc.net/baseten/apis/baseten-inference-api.md) · [All operations](https://skmtc.net/baseten/apis/baseten-inference-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/baseten/baseten-inference-api/versions/a55a2f64c3c5/schema)