> ## Documentation Index
> Fetch the complete documentation index at: https://docs.prisme.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List audit events for an organization

> Returns audit events stored as `organizations.audit` events on the
platform topic. Filterable by category, action, and date range.

Requires `observability:read` permission scoped to the path
`orgSlug`. Rate-limited to 100 calls per minute.




## OpenAPI

````yaml /api-reference/ai-governance-v2/swagger.yml get /v1/orgs/{orgSlug}/audit
openapi: 3.0.3
info:
  version: 1.0.0
  title: AI Governance API
  description: |
    Public REST API for the Prisme.ai AI Governance workspace -
    announcements, legal documents, notifications, observability
    dashboards, audit logs, and active-org listing.
  contact:
    name: Prisme.ai
    url: https://prisme.ai
servers:
  - url: https://{host}/v2/workspaces/slug:ai-governance-v2/webhooks
    description: Prisme.ai workspace webhooks
    variables:
      host:
        default: api.studio.prisme.ai
        description: API host (override for self-hosted or sandbox)
security:
  - BearerAuth: []
  - OrgApiKeyAuth: []
tags:
  - name: Announcements
    description: Platform announcements (CRUD + audience targeting).
  - name: Legal
    description: Versioned legal documents (terms, privacy, etc.).
  - name: Notifications
    description: Per-user notifications derived from announcements.
  - name: Observability
    description: >-
      Cross-workspace and per-workspace observability dashboards, traces, and
      feeds.
  - name: Orgs
    description: Organization listing and audit logs.
paths:
  /v1/orgs/{orgSlug}/audit:
    parameters:
      - in: path
        name: orgSlug
        required: true
        schema:
          type: string
          maxLength: 64
          pattern: ^[a-zA-Z0-9_-]+$
        description: Organization slug.
    get:
      tags:
        - Orgs
      summary: List audit events for an organization
      description: |
        Returns audit events stored as `organizations.audit` events on the
        platform topic. Filterable by category, action, and date range.

        Requires `observability:read` permission scoped to the path
        `orgSlug`. Rate-limited to 100 calls per minute.
      operationId: getOrgAuditLog
      parameters:
        - in: query
          name: category
          schema:
            type: string
            maxLength: 32
            enum:
              - member
              - role
              - org
              - sso
              - quota
              - apikey
              - auth
          description: Filter by category.
        - in: query
          name: action
          schema:
            type: string
            maxLength: 32
          description: Filter by action (created, updated, deleted, etc.).
        - in: query
          name: dateStart
          schema:
            type: string
            maxLength: 64
            format: date-time
          description: ISO start (default last 7 days).
        - in: query
          name: dateEnd
          schema:
            type: string
            maxLength: 64
            format: date-time
          description: ISO end (default now).
        - in: query
          name: limit
          schema:
            type: string
          description: Max results (default 50).
        - in: query
          name: page
          schema:
            type: string
          description: Page number (default 1).
      responses:
        '200':
          description: Audit log entries.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuditLogResponse'
        '400':
          description: Validation error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthenticated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden - missing `observability:read` permission for this org.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '405':
          description: Method not allowed (use GET).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limit exceeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  schemas:
    AuditLogResponse:
      type: object
      properties:
        orgSlug:
          type: string
        period:
          type: object
          properties:
            start:
              type: integer
              description: Epoch ms (server-resolved).
            end:
              type: integer
              description: Epoch ms (server-resolved).
        pagination:
          type: object
          properties:
            page:
              type: integer
            limit:
              type: integer
            total:
              type: integer
        count:
          type: integer
        logs:
          type: array
          items:
            $ref: '#/components/schemas/AuditLogEntry'
    Error:
      type: object
      required:
        - error
        - message
      properties:
        error:
          type: string
          description: >-
            Stable PascalCase error code (e.g. AnnouncementNotFound,
            ValidationError).
        message:
          type: string
          description: Human-readable error message.
        details:
          type: object
          description: Optional structured context.
          additionalProperties: true
    AuditLogEntry:
      type: object
      description: |
        Audit log entry built from `organizations.audit` events on the
        platform topic.
      properties:
        timestamp:
          type: string
          format: date-time
        category:
          type: string
        action:
          type: string
        actor:
          type: object
          additionalProperties: true
        target:
          type: object
          additionalProperties: true
        changes:
          type: object
          additionalProperties: true
        reason:
          type: string
        metadata:
          type: object
          additionalProperties: true
        correlationId:
          type: string
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: |
        User-bound credential carrying an identity: either a session JWT
        or a user access token (`at:*`) generated from the user settings UI.
        Send as `Authorization: Bearer <token>`.
        Org API keys (`iak_*`) are **not** accepted here - they carry
        no user identity. Use the `x-prismeai-api-key` header instead
        (see `OrgApiKeyAuth`).
    OrgApiKeyAuth:
      type: apiKey
      in: header
      name: x-prismeai-api-key
      description: |
        Organization API key (`iak_{orgSlug}_{uuid}`), managed from the
        AI Governance UI. Unlike `Authorization: Bearer`, this credential
        is **not** tied to a user identity - it is bound to the org and
        its effective access is defined by the scopes / permission rules
        attached to it (it can be restricted to a single project, or kept
        broader - e.g. usable across AI Governance, Agent Factory and
        LLM Gateway).
        Send as `x-prismeai-api-key: iak_...`.

````