---
title: "GET /v1/orgs/{orgId}/audit-events"
method: GET
path: "/v1/orgs/{orgId}/audit-events"
tags: ["Orgs"]
---

# GET /v1/orgs/{orgId}/audit-events

`GET /v1/orgs/{orgId}/audit-events`

Lists audit events for an organization. Supports filtering by date range, action, and actor. Returns JSON or CSV.

## Path parameters

- `orgId` string, uuid, required

## Query parameters

- `from` string, date-time
- `to` string, date-time
- `action` string
- `actorId` string
- `targetId` string
- `cursor` string
- `limit` integer
- `format` union
  - 'json'
  - 'csv'

## Headers

- `Authorization` string

## Response `200`

Default Response

- object
  - `links` object, required
    - `self` string, uri, required
    - `next` string, uri, nullable, required
    - `prev` string, uri, nullable, required
  - `meta` object, required
    - `count` number, required
  - `data` object[], required
    - `id` string, uuid, required
    - `type` 'audit-event', required
    - `attributes` object, required
      - `occurredAt` string, date-time, required
      - `action` string, required
      - `outcome` union, required
        - 'succeeded'
        - 'failed'
      - `actorType` union, required
        - 'user'
        - 'api_key_user'
        - 'org_api_key_user'
        - 'system'
        - 'anonymous'
      - `actorId` string, nullable, required
      - `actorEmail` string, nullable, required
      - `actorLabel` string, nullable, required
      - `impersonated` boolean, required
      - `impersonatorId` string, nullable, required
      - `impersonationReason` string, nullable, required
      - `targetType` string, nullable, required
      - `targetId` string, nullable, required
      - `targetLabel` string, nullable, required
      - `requestId` string, nullable, required
      - `parentEventId` string, uuid, nullable, required
      - `workspaceId` string, uuid, nullable, required
      - `metadata` object, required

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `500` — Internal Server Error

---

[API](https://skmtc.net/tessl/apis/tessl-api.md) · [All operations](https://skmtc.net/tessl/apis/tessl-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tessl/tessl-api/versions/fbb186825642/schema)