List audit logs

The UUID of the organization to retrieve audit logs for. Must match the authenticated Organization API Key.

Start of the time range in ISO 8601 format (e.g. 2026-02-01T00:00:00Z). Required unless cursor is provided. Must be within the last 90 days and no earlier than 2026-02-18T00:00:00Z.

End of the time range in ISO 8601 format. Defaults to the current time. Must be after start_time.

Pagination cursor returned in a previous response as next_cursor. When provided, start_time and end_time are ignored.

Maximum number of events to return per page. Minimum 1, maximum 100. Values outside this range are clamped automatically.

Filter events by app UUID. Accepts up to 10 values. Org-level events are always included. Repeat the parameter for multiple values: app_ids=uuid1&app_ids=uuid2.

Filter by action type (e.g. notification.sent, segment.created). Accepts up to 20 values. Repeat the parameter for multiple values: actions=notification.sent&actions=segment.created.

Filter by actor UUID (the user or service that performed the action). Accepts up to 10 values. Repeat the parameter for multiple values: actor_ids=uuid1&actor_ids=uuid2.

Filter by actor email address. Accepts up to 10 values. Repeat the parameter for multiple values: actor_emails=a@example.com&actor_emails=b@example.com.

Filter by the type of resource the action was performed on (e.g. notification, segment, journey). Accepts up to 10 values. Repeat the parameter for multiple values: target_types=notification&target_types=segment.

Filter by the UUID of the resource the action was performed on. Accepts up to 10 values. Repeat the parameter for multiple values: target_ids=uuid1&target_ids=uuid2.

Filter by the IP address the action originated from. Accepts up to 10 values. Repeat the parameter for multiple values: ip_addresses=203.0.113.1&ip_addresses=203.0.113.2.

Your Organization API key with prefix Key . See Keys & IDs.