> ## Documentation Index > Fetch the complete documentation index at: https://getfloo.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # List Audit Events > List audit events for an organization. Requires admin role. ## OpenAPI ````yaml https://api.getfloo.com/openapi.json get /v1/orgs/{org_id}/audit openapi: 3.1.0 info: title: floo API version: 0.1.0 servers: - url: https://api.getfloo.com security: [] paths: /v1/orgs/{org_id}/audit: get: tags: - audit summary: List Audit Events description: List audit events for an organization. Requires admin role. operationId: audit_list_audit_events parameters: - name: org_id in: path required: true schema: type: string format: uuid title: Org Id - name: page in: query required: false schema: type: integer minimum: 1 default: 1 title: Page - name: per_page in: query required: false schema: type: integer maximum: 100 minimum: 1 default: 50 title: Per Page - name: action in: query required: false schema: anyOf: - $ref: '#/components/schemas/AuditAction' - type: 'null' title: Action - name: actor_user_id in: query required: false schema: anyOf: - type: string format: uuid - type: 'null' title: Actor User Id - name: actor_api_key_id in: query required: false schema: anyOf: - type: string format: uuid - type: 'null' title: Actor Api Key Id - name: since in: query required: false schema: anyOf: - type: string format: date-time - type: 'null' title: Since - name: until in: query required: false schema: anyOf: - type: string format: date-time - type: 'null' title: Until - $ref: '#/components/parameters/X-Floo-Org-Id' responses: '200': description: Successful Response content: application/json: schema: $ref: '#/components/schemas/AuditEventListResponse' default: description: Error content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' security: - bearerAuth: [] components: schemas: AuditAction: type: string enum: - app.created - app.deleted - deploy.created - deploy.cancelled - deploy.promoted - deploy.rolled_back - deploy.restarted - deploy.approved - deploy.rejected - pr_infra.approved - pr_infra.rejected - pr_infra.carry_forward - edge_policy.set - edge_policy.deleted - preview.created - preview.deleted - preview.database_branch_reset - preview.managed_resource_reset - prod_orphan.torn_down - env.set - env.removed - env.legacy_secrets_reencrypted - login.failed - login.rate_limited - logs.read - error_groups.read - request_logs.read - env.read - dev_session.created - db.query - db_schema.read - db.migrated - managed_service_credentials.read - app_password.read - webhook_secret.revealed - access.broadened - storage_object.restored - storage_object.delete_requested - storage_object.deleted - managed_postgres_backup.created - managed_postgres.restored - managed_postgres.neon_migrated - managed_redis.recovered - managed_provisioning.resolved - api_key.created - api_key.revoked - app_api_key.created - app_api_key.revoked - app_api_key.scope_changed - app_consumer.created - app_consumer.deleted - reparo.config_updated - reparo.triggered - platform_admin.granted - platform_admin.revoked - control_plane_access.granted - provider_usage_exception.applied - provider_usage_exception.waived - cloud_run_usage.replayed - billing_plan_migration.scheduled - enterprise_contract_mrr.set - paygo_funding_session.read - paygo_auto_top_up.set - member.invited - member.removed - app_invite.created - app_invite.resent - app_invite.accepted - app_invite.revoked - app_membership.role_changed - app_membership.revoked - app_legacy_access.revoked - access_mode.changed - sso.configured - sso.portal_session_created - sso.state_changed - sso.disabled - sso.removed - sso.step_up_started - sso.step_up_completed - sso.step_up_denied - sso.step_up_failed - sso.recovery_code_generated - sso.recovery_code_confirm_attempted - sso.recovery_code_confirmed - sso.recovery_code_confirm_denied - sso.enforcement_enable_attempted - sso.enforcement_enabled - sso.enforcement_enable_denied - sso.enforcement_disable_attempted - sso.enforcement_disabled - sso.enforcement_disable_denied - sso.recovery_attempted - sso.recovered - sso.recovery_denied - sso.acquisition_cohort_enabled - sso.acquisition_cohort_disabled title: AuditAction description: Actions that are recorded in the audit log. AuditEventListResponse: properties: events: items: $ref: '#/components/schemas/AuditEventResponse' type: array title: Events total: type: integer title: Total page: type: integer title: Page per_page: type: integer title: Per Page type: object required: - events - total - page - per_page title: AuditEventListResponse description: Paginated response for listing audit events. ErrorResponse: properties: detail: $ref: '#/components/schemas/ErrorDetail' type: object required: - detail title: ErrorResponse description: Body of every error response except request validation (422). AuditEventResponse: properties: id: type: string format: uuid title: Id org_id: anyOf: - type: string format: uuid - type: 'null' title: Org Id actor_user_id: anyOf: - type: string format: uuid - type: 'null' title: Actor User Id actor_api_key_id: anyOf: - type: string format: uuid - type: 'null' title: Actor Api Key Id action: type: string title: Action resource_type: type: string title: Resource Type resource_id: anyOf: - type: string format: uuid - type: 'null' title: Resource Id metadata: anyOf: - additionalProperties: true type: object - type: 'null' title: Metadata ip_address: anyOf: - type: string - type: 'null' title: Ip Address created_at: type: string format: date-time title: Created At type: object required: - id - org_id - actor_user_id - action - resource_type - resource_id - metadata - ip_address - created_at title: AuditEventResponse description: Response for a single audit event. ErrorDetail: properties: code: type: string title: Code message: type: string title: Message additionalProperties: true type: object required: - code - message title: ErrorDetail description: Standard error envelope with operation-specific JSON context. parameters: X-Floo-Org-Id: name: X-Floo-Org-Id in: header required: false schema: type: string format: uuid description: Organization to act in; defaults to the one joined most recently. securitySchemes: bearerAuth: type: http scheme: bearer description: A `floo_` API key. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.