Lists the team’s audit events, newest first: management changes (category management) and events the platform recorded on its own (category system). Changes made through this API with an API key name the key (actor.type api_key). With log:read_all the list covers the team; a caller holding only log:read_self sees the events they performed, and filtering by another member’s actor_id is refused. The window defaults to the last 7 days and may span at most 92 days. Unlike other lists this one returns no total — page with continuation_token until it is absent. Rate limit: 20 requests per minute per key by default, counted separately from all other operations. When paging through many records, use the largest page_size (100).
Permission required:log:read_all (whole team) or log:read_self (your own only)
When you filter by another member’s actor_id: log:read_all
management: changes people and keys made to the team (members, roles, keys, billing settings). system: events the platform recorded on its own (subscription ended, low-balance alerts, …). Omit for both.
Only events performed by these members (principal_id). Repeat the parameter for several. A caller limited to their own events may only pass their own id.
user: a member acting in the console. api_key: a request made with an API key through this API — the key acts as its owner, named by principal_id. system: the platform itself, including actions taken by platform staff.
Human-readable label of the target. For a member (type principal) it is the member’s current display name. For a low-balance alert email it is the recipient address, shown to owners and admins only. For an invitation (type tenant_invite) it is the invitee’s email address, shown to owners, admins and callers who may invite members (member:invite) — the same people who see it in List Invitations. Omitted for everyone else. For other targets, the label as it was at the time.
