List audit logs

Returns paginated audit log events for a workspace.

You can filter by:

• Event type
• App
• User email
• Status
• Date range

Results use cursor-based pagination.

POST /{workspace_id}/list

List audit logs

cURL

curl --request POST \
  --url https://app.base44.com/api/v1/audit-logs/{workspace_id}/list \
  --header 'Content-Type: application/json' \
  --header 'api_key: <api-key>' \
  --data '
{
  "event_types": [
    "auth.login",
    "app.entity.created"
  ],
  "user_email": "[e-mail]",
  "status": "success",
  "start_date": "2026-01-01T00:00:00Z",
  "end_date": "2026-02-01T00:00:00Z",
  "app_id": "6820f3a4e7b91d003c45a1f2",
  "limit": 100,
  "cursor": "gAAAAABn7vJ...",
  "order": "DESC"
}
'

import requests

url = "https://app.base44.com/api/v1/audit-logs/{workspace_id}/list"

payload = {
    "event_types": ["auth.login", "app.entity.created"],
    "user_email": "[e-mail]",
    "status": "success",
    "start_date": "2026-01-01T00:00:00Z",
    "end_date": "2026-02-01T00:00:00Z",
    "app_id": "6820f3a4e7b91d003c45a1f2",
    "limit": 100,
    "cursor": "gAAAAABn7vJ...",
    "order": "DESC"
}
headers = {
    "api_key": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {api_key: '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    event_types: ['auth.login', 'app.entity.created'],
    user_email: '[e-mail]',
    status: 'success',
    start_date: '2026-01-01T00:00:00Z',
    end_date: '2026-02-01T00:00:00Z',
    app_id: '6820f3a4e7b91d003c45a1f2',
    limit: 100,
    cursor: 'gAAAAABn7vJ...',
    order: 'DESC'
  })
};

fetch('https://app.base44.com/api/v1/audit-logs/{workspace_id}/list', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.base44.com/api/v1/audit-logs/{workspace_id}/list",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'event_types' => [
        'auth.login',
        'app.entity.created'
    ],
    'user_email' => '[e-mail]',
    'status' => 'success',
    'start_date' => '2026-01-01T00:00:00Z',
    'end_date' => '2026-02-01T00:00:00Z',
    'app_id' => '6820f3a4e7b91d003c45a1f2',
    'limit' => 100,
    'cursor' => 'gAAAAABn7vJ...',
    'order' => 'DESC'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "api_key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.base44.com/api/v1/audit-logs/{workspace_id}/list"

	payload := strings.NewReader("{\n  \"event_types\": [\n    \"auth.login\",\n    \"app.entity.created\"\n  ],\n  \"user_email\": \"[e-mail]\",\n  \"status\": \"success\",\n  \"start_date\": \"2026-01-01T00:00:00Z\",\n  \"end_date\": \"2026-02-01T00:00:00Z\",\n  \"app_id\": \"6820f3a4e7b91d003c45a1f2\",\n  \"limit\": 100,\n  \"cursor\": \"gAAAAABn7vJ...\",\n  \"order\": \"DESC\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("api_key", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.base44.com/api/v1/audit-logs/{workspace_id}/list")
  .header("api_key", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"event_types\": [\n    \"auth.login\",\n    \"app.entity.created\"\n  ],\n  \"user_email\": \"[e-mail]\",\n  \"status\": \"success\",\n  \"start_date\": \"2026-01-01T00:00:00Z\",\n  \"end_date\": \"2026-02-01T00:00:00Z\",\n  \"app_id\": \"6820f3a4e7b91d003c45a1f2\",\n  \"limit\": 100,\n  \"cursor\": \"gAAAAABn7vJ...\",\n  \"order\": \"DESC\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.base44.com/api/v1/audit-logs/{workspace_id}/list")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["api_key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"event_types\": [\n    \"auth.login\",\n    \"app.entity.created\"\n  ],\n  \"user_email\": \"[e-mail]\",\n  \"status\": \"success\",\n  \"start_date\": \"2026-01-01T00:00:00Z\",\n  \"end_date\": \"2026-02-01T00:00:00Z\",\n  \"app_id\": \"6820f3a4e7b91d003c45a1f2\",\n  \"limit\": 100,\n  \"cursor\": \"gAAAAABn7vJ...\",\n  \"order\": \"DESC\"\n}"

response = http.request(request)
puts response.read_body

200

{
  "events": [
    {
      "timestamp": "2026-01-15T09:23:41Z",
      "user_email": "[e-mail]",
      "workspace_id": "67f2c8e01a3b5d004e92d7a1",
      "app_id": "6820f3a4e7b91d003c45a1f2",
      "ip": "203.0.113.42",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
      "event_type": "auth.login",
      "status": "success",
      "error_code": "",
      "metadata": {
        "auth_method": "email_password"
      }
    }
  ],
  "pagination": {
    "total": 347,
    "next_cursor": "gAAAAABn7vJ..."
  }
}

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>"
    }
  ]
}

Authorizations

api_key · string · header · required

API key for authentication. See the Authentication page for your API for details on how to get your key.

Path Parameters

workspace_id · string · required

Workspace ID. See Overview for how to find it.

Body

application/json

Request body for listing audit log events.

event_types · string[] | null

Filter by one or more event types.

Example:

["auth.login", "app.entity.created"]

user_email · string | null

Filter by user email.

Example:

"[e-mail]"

status · string | null

Filter by status. Either "success" or "failure".

Example:

"success"

start_date · string<date-time> | null

Filter events from this date (inclusive) in YYYY-MM-DDTHH:MM:SSZ format.

Example:

"2026-01-01T00:00:00Z"

end_date · string<date-time> | null

Filter events until this date (exclusive) in YYYY-MM-DDTHH:MM:SSZ format.

Example:

"2026-02-01T00:00:00Z"

app_id · string | null

App ID to narrow results to a specific app.

Example:

"6820f3a4e7b91d003c45a1f2"

limit · integer · default: 50

Number of events per page.

Required range: 1 <= x <= 1000

Example:

100

cursor · string | null

Pagination cursor from a previous response.

Example:

"gAAAAABn7vJ..."

order · enum<string> · default: DESC

Sort order by timestamp.

Available options: ASC, DESC

Example:

"DESC"

Response

200

application/json

Successful Response

Response containing a page of audit log events.

events · PublicAuditLogResponse · object[] · required

List of audit log events.

Show child attributes

pagination · PublicPaginationInfo · object · required

Pagination metadata.

Show child attributes