Skip to main content
GET
Get agent audit log

Authorizations

Authorization
string
header
required

JWT authentication token

Path Parameters

id
string<uuid>
required

Task ID

Query Parameters

limit
integer
default:500

Maximum number of events to return

Required range: 1 <= x <= 2000
starting_after
integer<int64>

Cursor for pagination - return events after this audit sequence

Required range: x >= 0
stream_id
string<uuid>

Scope the audit log to a single stream of the task. By default the log aggregates every stream (turn/resume) of the task in chronological order; pass a stream id to return only that stream's events. Unknown / non-matching ids yield an empty log.

event_type
string

Filter by exact event type

status
enum<string>

Filter by exact event status. Canonical values only: completed (success), failed, timeout, aborted, blocked (awaiting approval / suspended), started (still running).

Available options:
started,
completed,
failed,
timeout,
aborted,
blocked
agent_id
string

Filter by exact agent ID

tool_name
string

Filter by exact tool name

Case-insensitive substring search across every data point on an event (action, target, input/output summaries, error, tool name, agent id/type, tool_call_id, event_type, status, scope, metadata).

export
boolean
default:false

When true, return the FULL audit log as a downloadable file (Content-Disposition: attachment) instead of a paginated JSON response. Honors the filter/search params but ignores limit / starting_after. The response is the type-selected format.

type
enum<string>
default:json

Export file format, used only when export=true. json (default) or csv. Ignored for the normal paginated response.

Available options:
json,
csv

Response

Agent audit log events. A paginated JSON body normally; when export=true a downloadable json/csv file attachment.

events
object[]
required
has_more
boolean
required
task_id
string<uuid>
required