Audit logs
Immutable record of state-changing actions
Super admin only
Every mutation in the API writes an audit entry. The audit log is read-only through this endpoint.
Resource overview
GET
/api/audit-logsAPI key · SessionRole: Super AdminQuery
GET
/api/audit-logsAPI key · SessionRole: Super Admin| Name | Type | Required | Description |
|---|---|---|---|
page | integer | Optional | Page number. Default: 1 |
limit | integer | Optional | Page size (max 200). Default: 50 |
userId | string | Optional | Filter to actions performed by a specific user. |
action | string | Optional | Filter by action key (e.g. `event.update`, `guest.delete`). |
resourceType | string | Optional | `event`, `guest`, `vehicle`, etc. |
resourceId | string | Optional | Specific resource ID. |
from | string (ISO 8601) | Optional | Inclusive lower bound. |
to | string (ISO 8601) | Optional | Inclusive upper bound. |
200
{
"data": [
{
"id": "audit-uuid",
"userId": "user-uuid",
"action": "event.update",
"resourceType": "event",
"resourceId": "event-uuid",
"before": { "status": "pending" },
"after": { "status": "confirmed" },
"createdAt": "2026-05-20T10:14:00Z",
"ip": "203.0.113.42"
}
],
"total": 1247,
"page": 1,
"limit": 50,
"totalPages": 25
}