Ciele

The Organization audit log, newest first: who changed what, from the console, the API, the CLI, the MCP server or a Teammate

GET/api/v1/audit-log

Requires an Organization API key with the manageMembers capability.

Authorization

apiKey
AuthorizationBearer <token>

In: header

Query Parameters

action?string

Comma-separated operation names, for example members.updateRole,apiKeys.create.

actor?string

A Member's user id, or system for entries no person made.

domain?string

One operation domain, for example assistants.

from?string

Inclusive start, as a date (2026-11-04) or an ISO 8601 timestamp.

to?string

Inclusive end, as a date (the whole day) or an ISO 8601 timestamp.

order?string

newest (default) or oldest.

before?string

Newest first: the createdAt of the last entry you hold, to read further back.

beforeId?string

Newest first: the id of that entry, for entries with the same time.

after?string

Oldest first: the createdAt of the last entry you hold.

afterId?string

Oldest first: the id of that entry.

limit?integer

Entries to return; defaults to 100, at most 1000.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/api/v1/audit-log"
{  "data": [    {      "id": "string",      "organizationId": "string",      "createdAt": "string",      "operation": "string",      "effect": "write",      "entities": [        {          "kind": "string",          "id": "string",          "assistantId": "string"        }      ],      "memberId": null,      "memberName": null,      "memberEmail": null,      "apiKeyId": null,      "teammateId": null,      "agentAuthor": null,      "surface": "teammate",      "outcome": "string",      "targetLabel": null,      "targetDetail": null,      "changes": {        "property1": {          "before": null,          "after": null        },        "property2": {          "before": null,          "after": null        }      }    }  ]}
{  "error": {    "code": "string",    "message": "string"  }}
{  "error": {    "code": "string",    "message": "string"  }}
{  "error": {    "code": "string",    "message": "string"  }}
{  "error": {    "code": "string",    "message": "string"  }}
{  "error": {    "code": "string",    "message": "string"  }}
{  "error": {    "code": "string",    "message": "string"  }}