Skip to content
Authrim

List audit evidence associated with one Agent Grant.

GET
/api/admin/agent-grants/{id}/audit
Code sample: Shell / cURL 
curl --request GET \
  --url 'https://auth.example.com/api/admin/agent-grants/example/audit?limit=100' \
  --header 'Authorization: Bearer <token>'

Includes retained whole-row archive evidence. Archived history uses cursor pagination without a total count. Required archive data that cannot be read returns log_query_incomplete rather than an empty success.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
id
required
string
/^aag_/

Agent Grant identifier.

Query Parameters

Section titled “Query Parameters ”
limit
integer
default: 100 >= 1 <= 200
cursor
string

Opaque position from pagination.next_cursor for the same tenant, grant, and filters.

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Grant audit events in reverse chronological order.

Media type application/json
object
events
required
Array<object>
object
id
required
string
action
required
string
result
required
string
severity
required
string
actor_type
required
string | null
actor_sub
required
string | null
metadata
required
object
key
additional properties
created_at
required
integer format: int64
pagination

Cursor pagination over retained log rows. Totals and page numbers are not returned. Reuse the cursor with the same tenant, endpoint, and filters.

object
mode
required
string
Allowed value: cursor
limit
required
integer
>= 1 <= 200
has_more
required
boolean
next_cursor
required
string | null
<= 4096 characters
key
additional properties
Example 
{
  "pagination": {
    "mode": "cursor"
  }
}

400

Section titled “400 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Section titled “401 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Section titled “403 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Section titled “404 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

503

Section titled “503 ”

The retained log query is incomplete. No partial entries or statistics are returned as a successful result. Narrow the period or retry.

Media type application/json
object
error
required
string
Allowed value: log_query_incomplete
error_description
required
string
complete
required
boolean
key
additional properties
Example 
{
  "error": "log_query_incomplete",
  "complete": false
}