list_audit_events
List project audit-log entries, newest first. Captures who changed what — lines, endpoints, targets, API keys. Outbound-target auth.token / auth.password are redacted in the diff per the same policy used for endpoint reads. Retention is the auditRetentionDays advertised on get_project (default 365 days); rows older than that are purged by the cleanup job. Returns {total, limit, offset, retentionDays, rows[]} where each row has id, createdAt, actor (email or null), action, entityType, entityId, entityLabel, diff.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Page size. Default 50. | |
| since | No | Lower bound on createdAt (unix ms). Inclusive. | |
| until | No | Upper bound on createdAt (unix ms). Inclusive. | |
| action | No | Exact action match, e.g. "endpoint.updated", "target.created", "key.revoked". | |
| offset | No | Page offset. Default 0. | |
| entityId | No | Exact entity id (UUID or stream id depending on entityType). | |
| entityType | No | Exact entity type, e.g. "endpoint", "target", "line", "key". |