Audit log
GET /v1/governance/audit returns your
tenant’s immutable audit events.
curl -sS "$OP_API_BASE_URL/v1/governance/audit?occurred_from=2026-09-01T00:00:00Z&limit=50" \ -H "Authorization: Bearer $OP_API_KEY"Query parameters
Section titled “Query parameters”All parameters are optional.
| Parameter | Description |
|---|---|
actor_id |
Only events by this actor. |
resource_type |
Only events on this resource type. |
resource_id |
Only events on this resource. |
action |
Only events with this action. |
request_id |
Only events recorded for this API request. |
occurred_from |
Start of the time range. |
occurred_to |
End of the time range. |
limit |
Page size. |
Event fields
Section titled “Event fields”| Field | Description |
|---|---|
event_id |
Unique event identifier. |
occurred_at |
When the event happened. |
actor_type |
Kind of actor, for example a user or an API key. |
actor_id |
The actor, when there is one. |
action |
What happened. |
resource_type |
The kind of resource acted on, when there is one. |
resource_id |
The resource acted on, when there is one. |
request_id |
The API request that caused the event, when there is one. |
data_sha256 |
Digest of the event’s data. The data itself is not returned. |
The audit projection is append-only: entries cannot be edited or deleted through the API. For account exports, deletions, and legal holds, see the governance reference.
