Deliverd Audit Events API
The Audit Events API from Deliverd — 1 operation(s) for audit events.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/deliverd-dev:deliverd-dev-audit-events-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Deliverd Dev Audit Events API
version: 1.0.0
x-refined-note:
- x-source differs across the merged source definitions and was not carried
description: 'Operations tagged Audit Events across 2 of this provider''s published API definitions: deliverd-dev-openapi.json, deliverd-dev-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://deliverd.dev
description: 'Deliverd REST API (paths carry the /api/v1 prefix; https://deliverd.dev/llms.txt: "REST API: https://deliverd.dev/api/v1")'
tags:
- name: Audit Events
paths:
/api/v1/audit-events:
get:
summary: List audit events
description: 'The organisation''s audit trail, newest first, a page at a time, for a SIEM, a warehouse or an auditor''s script. Each entry carries its position in the organisation''s hash chain (`chainSeq`), the hash before it (`prevHash`) and its own (`rowHash`). Needs `audit:read` and a key bound to an owner, an administrator or a security administrator, read on every call; an agent key is refused (`403 agent_not_permitted`), as is anybody else (`403 not_permitted`). To tail the log, pass `afterSeq` (the last `chainSeq` you have): entries then come oldest first by chain position, which cannot miss an entry written late with an earlier time, as `since` can. For a live feed, subscribe a webhook endpoint to `audit.event` instead.'
security:
- bearerAuth: []
parameters:
- schema:
type: integer
minimum: 1
maximum: 200
description: Rows per page. Above the maximum you get the maximum, not an error.
required: false
description: Rows per page. Above the maximum you get the maximum, not an error.
name: limit
in: query
- schema:
type: string
description: nextCursor from a previous response. One we did not issue is refused.
required: false
description: nextCursor from a previous response. One we did not issue is refused.
name: cursor
in: query
- schema:
type: string
format: date-time
description: Entries at or after this time (ISO 8601).
required: false
description: Entries at or after this time (ISO 8601).
name: since
in: query
- schema:
type: string
format: date-time
description: Entries at or before this time (ISO 8601).
required: false
description: Entries at or before this time (ISO 8601).
name: until
in: query
- schema:
type: string
maxLength: 100
description: An event type (`report.published`), or a family ending in a dot (`legal_hold.`).
required: false
description: An event type (`report.published`), or a family ending in a dot (`legal_hold.`).
name: eventType
in: query
- schema:
type: string
format: uuid
description: The person, agent or key that acted.
required: false
description: The person, agent or key that acted.
name: actorId
in: query
- schema:
type: string
enum:
- user
- agent
- api_key
- link
- guest
- system
description: What kind of actor.
required: false
description: What kind of actor.
name: actorType
in: query
- schema:
type: string
maxLength: 100
description: What the entry is about, e.g. `report`.
required: false
description: What the entry is about, e.g. `report`.
name: resourceType
in: query
- schema:
type: string
maxLength: 200
description: The id of what it is about.
required: false
description: The id of what it is about.
name: resourceId
in: query
- schema:
type: string
format: uuid
description: 'Entries about this flow (project) and everything attached to it: its approvals, reviews, requests and reports.'
required: false
description: 'Entries about this flow (project) and everything attached to it: its approvals, reviews, requests and reports.'
name: flowId
in: query
- schema:
type:
- integer
- 'null'
minimum: 0
description: 'Entries after this chain position, oldest first: the way to tail the log. Pass the last chainSeq you have; 0 starts at the first chained entry. Unlike since, it cannot miss an entry written late with an earlier time.'
required: false
description: 'Entries after this chain position, oldest first: the way to tail the log. Pass the last chainSeq you have; 0 starts at the first chained entry. Unlike since, it cannot miss an entry written late with an earlier time.'
name: afterSeq
in: query
responses:
'200':
description: Entries, newest first
content:
application/json:
schema:
type: object
properties:
auditEvents:
type: array
items:
type: object
properties:
id:
type: string
format: uuid
eventType:
type: string
actorType:
type: string
actorId:
type:
- string
- 'null'
actorLabel:
type:
- string
- 'null'
resourceType:
type:
- string
- 'null'
resourceId:
type:
- string
- 'null'
metadata:
type: object
additionalProperties: {}
ip:
type:
- string
- 'null'
requestId:
type:
- string
- 'null'
createdAt:
type: string
chainSeq:
type:
- integer
- 'null'
description: Position in the organisation's hash chain. Null on entries written before the chain began.
prevHash:
type:
- string
- 'null'
description: The hash of the entry before this one in the chain.
rowHash:
type:
- string
- 'null'
description: sha256 over prevHash and this entry's fields.
required:
- id
- eventType
- actorType
- actorId
- actorLabel
- resourceType
- resourceId
- metadata
- ip
- requestId
- createdAt
- chainSeq
- prevHash
- rowHash
nextCursor:
type:
- string
- 'null'
description: Pass back as ?cursor= for the next page. Null means this is the end.
required:
- auditEvents
- nextCursor
tags:
- Audit Events
operationId: getApiV1AuditEvents
x-operation-id-source: derived
components:
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: 'API key (dlv_…) created in Settings → API tokens, or an OAuth access token (dlvo_…). Every route below can answer `401 auth_error` — the credential was not accepted — or `403 insufficient_scope`, which is a different thing: the credential is fine and was not issued with the scope this route needs. Reissue it with that scope rather than replacing it with another of the same ones. Older clients may still branch on `auth_error` for both.'
x-refined-from:
- deliverd-dev-openapi.json
- deliverd-dev-openapi.yml