> ## Documentation Index > Fetch the complete documentation index at: https://www.posted.cc/llms.txt > Use this file to discover all available pages before exploring further. # List audit logs > Read workspace audit history. Administrator access is required; entries exclude post bodies and secrets. Administrator access with explicit administrator permission on API keys or MCP credentials, or a signed-in administrator. Read workspace audit history. Administrator access is required; entries exclude post bodies and secrets. Only administrators with access to the workspace can read these events. Logs begin after the audit feature is installed and exclude secrets and post bodies. MCP clients can use [`list_audit_logs`](https://www.posted.cc/mcp-reference/list_audit_logs) for this operation. [Request conventions](https://www.posted.cc/api-reference/overview.md) · [API keys](https://www.posted.cc/api-keys.md) · [MCP connections](https://www.posted.cc/mcp-connections.md) ## OpenAPI ````yaml api-reference/openapi.json GET /api/audit-logs openapi: 3.1.0 info: title: Posted HTTP API version: 0.2.6 description: >- All registered application, account, OAuth, MCP transport and health endpoints. Publishing and draft request schemas come from the shared runtime validators. Replace the example server with your installation. Documentation uses simple request examples and does not execute live publishing requests. servers: - url: https://posted-api.example.com security: [] paths: /api/audit-logs: get: tags: - Audit Logs summary: List audit logs description: >- Read workspace audit history. Administrator access is required; entries exclude post bodies and secrets. Only administrators with access to the workspace can read these events. Logs begin after the audit feature is installed and exclude secrets and post bodies. Administrator access with explicit administrator permission on API keys or MCP credentials, or a signed-in administrator. operationId: get_api_audit_logs parameters: - name: workspaceId in: query required: true schema: type: string format: uuid description: >- Workspace UUID returned by list_workspaces. Required for Default too. - name: page in: query required: false schema: type: integer minimum: 1 maximum: 9007199254740991 description: integer - name: pageSize in: query required: false schema: type: integer minimum: 1 maximum: 100 description: integer - name: action in: query required: false schema: type: string maxLength: 80 pattern: ^[a-z_]+\.[a-z_]+$ description: string - name: actorId in: query required: false schema: anyOf: - type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ - type: string const: system description: JSON value - name: resourceType in: query required: false schema: type: string enum: - workspace - member - connection - post - draft - media - delivery - api_key description: workspace, member, connection, post, draft, media, delivery, api_key - name: from in: query required: false schema: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ description: date-time responses: '200': description: >- Successful response. Examples are illustrative; field values vary by record. content: application/json: schema: type: object properties: items: type: array items: type: object properties: id: type: string workspaceId: type: string actorId: type: string actorName: type: string actorEmail: type: string actorKind: type: string credentialId: type: - string - 'null' action: type: string resourceType: type: string resourceId: type: string details: type: object properties: version: type: integer additionalProperties: true requestId: type: string createdAt: type: string additionalProperties: true total: type: integer page: type: integer pageSize: type: integer additionalProperties: true example: items: - id: 22222222-2222-4222-8222-222222222222 workspaceId: 55555555-5555-4555-8555-555555555555 actorId: 66666666-6666-4666-8666-666666666666 actorName: Alex Morgan actorEmail: alex@example.test actorKind: session credentialId: null action: draft.created resourceType: draft resourceId: 33333333-3333-4333-8333-333333333333 details: version: 1 requestId: example-request createdAt: '2027-01-18T09:30:00.000Z' total: 1 page: 1 pageSize: 20 default: description: >- Request failure. Inspect code, message and requestId; respect Retry-After on HTTP 429. content: application/json: schema: $ref: '#/components/schemas/Error' security: - bearerAuth: [] - sessionCookie: [] components: schemas: Error: type: object required: - error properties: error: type: object required: - code - message - requestId properties: code: type: string message: type: string requestId: type: string securitySchemes: bearerAuth: type: http scheme: bearer description: Personal or workspace Posted REST API key sessionCookie: type: apiKey in: cookie name: posted_session description: >- Signed-in human browser session; mutation requests also need the exact UI Origin ```` ## Related topics - [list_audit_logs](https://www.posted.cc/mcp-reference/list_audit_logs.md) - [List audit actors](https://www.posted.cc/api-reference/get_api_audit_logs_actors.md) - [Workspaces](https://www.posted.cc/workspaces.md) - [Docker Compose](https://www.posted.cc/installation/docker-compose.md) - [Troubleshooting](https://www.posted.cc/troubleshooting.md) This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.