---
title: "Fetch audit log events."
method: GET
path: "/admin/audit"
tags: ["admin"]
---

# Fetch audit log events.

`GET /admin/audit`

## Query parameters

- `page` integer
- `per_page` integer

## Response `200`

List of audit logs.

- object[]
  - `id` string, uuid
  - `payload` object
    - `actor_id` string
    - `actor_via_sso` boolean — Whether the actor used a SSO protocol (like SAML 2.0 or OIDC) to authenticate.
    - `actor_username` string
    - `actor_name` string
    - `traits` object
    - `action` string — Usually one of these values: - login - logout - invite_accepted - user_signedup - user_invited - user_deleted - user_modified - user_recovery_requested - user_reauthenticate_requested - user_confirmation_requested - user_repeated_signup - user_updated_password - token_revoked - token_refreshed - factor_in_progress - factor_unenrolled - challenge_created - verification_attempted - factor_deleted - factor_updated - identity_unlinked - passkey_created - passkey_updated - passkey_deleted
    - `log_type` string — Usually one of these values: - account - team - token - user - factor
  - `created_at` string, date-time
  - `ip_address` string

## Other responses

- `401` — HTTP Unauthorized response.
- `403` — HTTP Forbidden response.

---

[API](https://skmtc.net/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.net/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/versions/2664b89bee49/schema)