GET
List workspace security audit logs

Authorizations

better-auth.session_token
string
cookie
required

Better Auth session cookie.

Query Parameters

limit
integer

Page size (default 50, max 100)

Required range: 1 <= x <= 100
cursor
string

Opaque cursor from the previous page

action
enum<string>

Exact audit action

Available options:
member.invited,
member.removed,
member.role_changed,
invitation.revoked,
invitation.accepted,
role.created,
role.updated,
role.deleted,
sso.provider_created,
sso.provider_updated,
sso.provider_deleted,
workspace.created,
workspace.updated,
workspace.deleted,
domain.set,
domain.changed,
domain.verify,
domain.deleted,
domain.email_enabled,
domain.email_verified,
domain.email_disabled,
domain.email_sender_updated,
integration.connected,
integration.disconnected,
auth.login,
auth.login_failed,
api.permission_denied
actor
string

Actor user id or email

from
string

Inclusive range start (ISO timestamp or YYYY-MM-DD UTC)

to
string

Inclusive range end (ISO timestamp or YYYY-MM-DD UTC)

Response

Audit logs, newest first

logs
object[]
required
nextCursor
string | null
required