list_audit_logs
Read-onlyIdempotent
Retrieve paginated audit log events for your Portkey workspace or organization. Filter by actor, action, resource, or time range to review individual events for compliance and incident investigation.
Instructions
List audit log events for a Portkey workspace or organization. Returns paginated action-level records with actor, resource, metadata, and timestamps for compliance or incident review; use this instead of analytics when you need individual events, not aggregates. Enterprise-gated. Returns 403 on non-Enterprise Portkey plans.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| workspace_id | No | Filter audit logs by workspace ID | |
| actor_id | No | Filter by the user ID who performed the action | |
| action | No | Filter by action type (e.g., 'create', 'update', 'delete', 'login') | |
| resource_type | No | Filter by resource type (e.g., 'user', 'workspace', 'config', 'virtual_key') | |
| resource_id | No | Filter by specific resource ID | |
| start_time | No | Start of time range filter (ISO 8601 format, e.g., '2024-01-01T00:00:00Z') | |
| end_time | No | End of time range filter (ISO 8601 format, e.g., '2024-01-31T23:59:59Z') | |
| current_page | No | Page number for pagination (starts at 1) | |
| page_size | No | Number of results per page (max 100) |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | Yes | Whether the tool call succeeded and returned structured data | |
| data | No | Structured success payload when ok is true | |
| error | No | Structured error payload when ok is false |