Audit
Organization audit trail (read-only), scoped to the workspace of the calling key.
Returns the audit trail of the calling workspace, newest first: creations, updates and deletions
of identities, wallets, alerts, channels, API keys and more, with who did it. Actions
performed with an API key have actor api_key and actor_name API Key #<ak_id>.
Filters are exact matches, except q which is a case-insensitive substring search over
entity_title, detail, action and actor_name.
Note: total only takes entity_type and q into account. When you also filter on action or
severity, total over-counts; page until a page returns fewer than limit events.
Authorization
ApiKeyAuth Send your API key as a bearer token: Authorization: Bearer sq_YOUR_API_KEY.
In: header
Query Parameters
Exact entity type, for example IDENTITY, WALLET, ALERT, CHANNEL, TAG, API_KEY, MABU, OBMABU.
Exact action, for example CREATE, UPDATE, DELETE, RESTORE, RESOLVE.
Exact severity, for example INFO or WARN.
Case-insensitive substring search.
Page number, 1-based. Clamped to 1..10000.
1 <= value <= 100001Events per page. Clamped to 1..200.
1 <= value <= 20050Response Body
application/json
application/json
curl -X GET "https://example.com/v1/settings/audit-logs"{ "events": [ { "uuid": "5d1f7a2e-3b4c-4d5e-8f60-7a8b9c0d1e2f", "entity_type": "API_KEY", "entity_uuid": "", "entity_title": "Staging backend", "action": "CREATE", "detail": "Created dev API key 'Staging backend'", "severity": "INFO", "actor": "17", "actor_name": "Alice Martin", "created_at": "2026-09-01T09:12:44+00:00" } ], "total": 1, "page": 1, "limit": 50}