---
title: "List Audit Log Records"
method: GET
path: "/api/v1/audit-log"
tags: ["Audit Log"]
---

# List Audit Log Records

`GET /api/v1/audit-log`

Get a list of audit log records.

## Query parameters

- `page` integer — The page number to fetch.
- `size` integer — The number of items per page.
- `skip_count` boolean — Whether to skip counting the total number of items.
- `created_by` string[]
- `created_before` string, date-time
- `created_after` string, date-time
- `category` AuditLogCategory[]

## Response `200`

Successful Response

- ListAuditLogRecordsResponse
  - `total` integer, required
  - `page` integer, required
  - `size` integer, required
  - `audit_log_records` AuditLogRecord[], required
    - `id` string, uuid, required — The unique identifier of the object in the Fordefi platform.
    - `timestamp` string, date-time, required — The timestamp of the audit log record.
    - `request_id` string, required — The request ID of the audit log record.
    - `category` 'policy' | 'quorum_threshold' | 'user_management' | 'vaults' | 'address_book' | 'address_group' | 'backup' | 'webhook' | 'vault_group' | 'user_group' | 'aml_policy' | 'chains' | 'device_backup' | 'import_keys' | 'authentication' | 'dapp_group' | 'organization_lockdown' | 'rewards', required
    - `action` string, required — The action of the audit log record.
    - `created_by` union, required — Represents a reference to a user in the Fordefi platform
      - PersonRef
        - `id` string, uuid, required — The unique identifier of the user in the Fordefi platform.
        - `user_type` 'person', required — The type of user. Can be a person, or (in programmatic scenarios) an API user or API Signer.
        - `name` string — The name of the user.
        - `email` string, required — The email of the user.
        - `state` 'active' | 'onboarding_pending_code_generation' | 'onboarding_pending_activation' | 'reset_device_pending_code_generation' | 'reset_device_pending_activation' | 'pending_approval' | 'deleted', required
        - `role` 'admin' | 'trader' | 'viewer', required
      - ApiUserRef
        - `id` string, uuid, required — The unique identifier of the user in the Fordefi platform.
        - `user_type` 'api_user', required — The type of the user.
        - `name` string, required — The name of the user.
        - `state` 'active' | 'deleted', required — The state of the user.
        - `role` 'admin' | 'trader' | 'viewer', required
      - ApiSignerRef
        - `id` string, uuid, required — The unique identifier of the user in the Fordefi platform.
        - `user_type` 'api_signer', required — The type of the user.
        - `name` string, required — The name of the user.
        - `state` 'active' | 'onboarding_pending_code_generation' | 'onboarding_pending_activation' | 'deleted', required — The state of the user.
      - EndUserRef
        - `id` string, uuid, required — The unique identifier of the user in the Fordefi platform.
        - `user_type` 'end_user', required — The type of the user.
        - `external_id` string, required — External id of the user.
        - `state` 'active' | 'deleted', required — The state of the user.
      - SystemUserRef
        - `id` string, uuid, required — The unique identifier of the user in the Fordefi platform.
        - `user_type` 'system', required — The type of the user.
        - `name` string, required — The name is Fordefi CARE
    - `description` string, required — The description of the audit log record.
    - `client_ip` string, required — The client IP of the audit log record.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized User
- `403` — Forbidden User
- `408` — Request Timeout
- `422` — Validation Error
- `429` — Rate Limit Exceeded
- `500` — Unexpected Error

---

[API](https://skmtc.net/fordefi/apis/fordefi-api.md) · [All operations](https://skmtc.net/fordefi/apis/fordefi-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/fordefi/fordefi-api/versions/8014fd69ea17/schema)