Docs
OverviewGuidesZero & MCPAPI referenceChangelog
Platform

Platform: Audit Log

Every platform action, newest first (platform staff).

API key access

Not available to API keys or connected apps: only a signed-in person can call this route.
GET/api/v1/platform/audit-log

Authorization

AuthorizationBearer <token>

Access token from /api/v1/auth/login, or an API key (ro_pat_..., RO-176) from /api/v1/workspaces/current/api-keys: the key implies its workspace and needs the route's scope. MCP connectors (/api/v1/mcp only) may use an OAuth access token (ro_oat_..., RO-284).

In: header

Query Parameters

action?string
limit?integer
Formatint64
Range1 <= value <= 100
cursor?string

Response Body

curl -X GET "http://localhost:8000/api/v1/platform/audit-log?action=string&limit=1&cursor=string"
{
  "items": [
    {
      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
      "action": "workspace.viewed",
      "actor_user_id": "d6ed4497-4325-4995-9f49-e288b7192e46",
      "actor_email": "string",
      "target_workspace_id": "8cd36c18-2073-4c8b-90c2-fa650464eca3",
      "target_workspace_name": "string",
      "target_user_id": "07f82fdf-2ecc-4f53-ad26-5718042a39ae",
      "target_user_email": "string",
      "detail": {},
      "ip": "string",
      "created_at": "2019-08-24T14:15:22Z"
    }
  ],
  "next_cursor": "string"
}
Empty
{
  "detail": [
    {
      "loc": [
        "string"
      ],
      "msg": "string",
      "type": "string",
      "input": null,
      "ctx": {}
    }
  ]
}

Token

`authorization_code` (with the PKCE verifier; a code works once, a second use revokes what the first issued) and `refresh_token` (rotation: the old refresh token stops; presenting it again revokes the whole family). Access tokens last `OAUTH_ACCESS_TOKEN_TTL_SECONDS` (default 1 hour), refresh tokens `OAUTH_REFRESH_TOKEN_TTL_DAYS` (default 30).

Platform: Lift Suspension

Lift a workspace's suspension (superadmin), with an optional reason. 409 if it isn't suspended. Audited.