List Audit Logs

Retrieve audit logs for your organization with cursor-based pagination. Requires an Enterprise subscription and organization admin or owner role. Only an unscoped personal API key can call this endpoint. Workspace keys, organization keys, and keys with scope grants receive 403.

GET/api/v1/audit-logs

Authorization

apiKey
X-API-Key<token>

Your SteelEngine API key (personal or workspace). Generate one from the SteelEngine dashboard under Settings > API Keys.

In: header

Query Parameters

action?string

Filter by action type (e.g., workflow.created, workflow.deployed, member.invited).

resourceType?string

Filter by resource type (e.g., workflow, workspace, member).

resourceId?string

Filter by a specific resource ID.

workspaceId*string

The unique identifier of the workspace.

actorId?string

Filter by the user who performed the action. Must be a member of your organization.

startDate?string

Only return logs after this ISO 8601 timestamp (inclusive).

Formatdate-time
endDate?string

Only return logs before this ISO 8601 timestamp (inclusive).

Formatdate-time
includeDeparted?boolean

When true, includes audit logs from users who have left the organization.

limit?integer

Maximum number of audit log entries to return per page. Must be between 1 and 100.

Range1 <= value <= 100
cursor?string

Pagination cursor returned from a previous request's nextCursor field.

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/api/v1/audit-logs?workspaceId=string"
{  "data": [    {      "id": "audit_abc123",      "action": "workflow.execute",      "actorId": "user_abc123",      "actorName": "Jane Doe",      "actorEmail": "jane@example.com",      "resourceType": "workflow",      "createdAt": "2026-01-15T10:30:00Z"    }  ],  "nextCursor": null}