GET /audit-log
List audit log entries for the organization with optional filters and cursor pagination.

Authentication

API Key (header: X-API-Key) API Key (cookie: better-auth.session_token)

Query Parameters

resource_type string optional query
Filter by resource type (e.g. source, destination)
resource_id string optional query
Filter by resource ID
action string optional query
Filter by action (e.g. create, delete)
limit string optional query
Max results (default 50, max 200)
Example: "50"
cursor string optional query
Pagination cursor (created_at|id)

Responses

200 Audit log entries
application/json
audit_log object[] REQUIRED
Array of:
id string REQUIRED
org_id string REQUIRED
user_id string | null REQUIRED
action string REQUIRED
resource_type string REQUIRED
resource_id string | null REQUIRED
details string | null REQUIRED
ip_address string | null REQUIRED
created_at string REQUIRED
has_more boolean REQUIRED
next_cursor string | null REQUIRED
401 Unauthorized
curl -X GET 'https://hookstream.io/v1/audit-log' \
  -H 'Authorization: Bearer YOUR_API_TOKEN'
const response = await fetch('https://hookstream.io/v1/audit-log', {
  method: 'GET',
  headers: {
      "Authorization": "Bearer YOUR_API_TOKEN"
  }
});

const data = await response.json();
console.log(data);
import requests

headers = {
    'Authorization': 'Bearer YOUR_API_TOKEN'
}

response = requests.get('https://hookstream.io/v1/audit-log', headers=headers)
print(response.json())
package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, _ := http.NewRequest("GET", "https://hookstream.io/v1/audit-log", nil)
	req.Header.Set("Authorization", "Bearer YOUR_API_TOKEN")

	resp, _ := http.DefaultClient.Do(req)
	defer resp.Body.Close()
	result, _ := io.ReadAll(resp.Body)
	fmt.Println(string(result))
}
200 Response
{
  "audit_log": [
    {
      "id": "<string>",
      "org_id": "<string>",
      "user_id": "<string>",
      "action": "<string>",
      "resource_type": "<string>",
      "resource_id": "<string>",
      "details": "<string>",
      "ip_address": "<string>",
      "created_at": "<string>"
    }
  ],
  "has_more": true,
  "next_cursor": "<string>"
}
GET /audit-log
Ask a question... ⌘I