Search the workspace audit log

What happened in this workspace, who did it and when. Newest first.

Filters combine with AND. action is a partial, case-insensitive match, so invitation finds every invitation action. since and until are ISO timestamps and bound occurred_at.

Page with limit and offset. limit is 1 to 500 and defaults to 100.

include_diff adds the before and after payloads to each row. They are left out by default because they are large, so a list view stays cheap. Fetch one event by id when you need the full diff.

The log records what the system did, and entries are never edited or removed through this API.

Tenancy: the request is scoped to one workspace, and the credential presented is what selects it. A caller with no membership in that workspace is refused with 404, which is indistinguishable from a workspace that does not exist.

Authorisation: admin or owner. An editor or viewer receives 403 insufficient_role.

Access: Authorization: Bearer carrying either a realm access token or an API key. A key must hold the workspace-admin:write scope, and the workspace role of the person who owns it must meet the floor above.

Query Parameters

Response Body

curl -X GET "https://example.com/v1/workspace/audit-events"

{}