List audit events for an organization

Returns audit events stored as organizations.audit events on the platform topic. Filterable by category, action, and date range.

Requires observability:read permission scoped to the path orgSlug. Rate-limited to 100 calls per minute.

GET /v1/orgs/{orgSlug}/audit

List audit events for an organization

cURL

curl --request GET \
  --url https://{host}/v2/workspaces/slug:ai-governance-v2/webhooks/v1/orgs/{orgSlug}/audit \
  --header 'Authorization: Bearer <token>'

200

{
  "orgSlug": "<string>",
  "period": {
    "start": 123,
    "end": 123
  },
  "pagination": {
    "page": 123,
    "limit": 123,
    "total": 123
  },
  "count": 123,
  "logs": [
    {
      "timestamp": "2023-11-07T05:31:56Z",
      "category": "<string>",
      "action": "<string>",
      "actor": {},
      "target": {},
      "changes": {},
      "reason": "<string>",
      "metadata": {},
      "correlationId": "<string>"
    }
  ]
}

Authorizations

BearerAuthOrgApiKeyAuth

Authorization · string · header · required

User-bound credential carrying an identity: either a session JWT or a user access token (at:*) generated from the user settings UI. Send as Authorization: Bearer <token>. Org API keys (iak_*) are not accepted here - they carry no user identity. Use the x-prismeai-api-key header instead (see OrgApiKeyAuth).

Path Parameters

orgSlug · string · required

Organization slug.

Maximum string length: 64

Pattern: ^[a-zA-Z0-9_-]+$

Query Parameters

category · enum<string>

Filter by category.

Available options: member, role, org, sso, quota, apikey, auth

Maximum string length: 32

action · string

Filter by action (created, updated, deleted, etc.).

Maximum string length: 32

dateStart · string<date-time>

ISO start (default last 7 days).

Maximum string length: 64

dateEnd · string<date-time>

ISO end (default now).

Maximum string length: 64

limit · string

Max results (default 50).

page · string

Page number (default 1).

Response

200

application/json

Audit log entries.

orgSlug · string

period · object

Hide child attributes

period. start · integer

Epoch ms (server-resolved).

period. end · integer

Epoch ms (server-resolved).

pagination · object

Hide child attributes

pagination. page · integer

pagination. limit · integer

pagination. total · integer

count · integer

logs · object[]

Hide child attributes

logs. timestamp · string<date-time>

logs. category · string

logs. action · string

logs. actor · object

logs. target · object

logs. changes · object

logs. reason · string

logs. metadata · object

logs. correlationId · string