EvalGate

EvalGate audit logs API

The audit logs API from EvalGate — 2 operation(s) for audit logs.

GitHub OpenAPI

Operations 2

GET /api/audit-logs/export List audit logs export #
GET /api/audit-logs List audit logs audit logs #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/evalgate-com/openapi/evalgate-com-audit-logs-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/evalgate-com/json-schema/evalgate-com-get-api-audit-logs-export-response200-application-json-schema.json
📊
JSONSchema
https://artifacts.apis.io/evalgate-com/json-schema/evalgate-com-get-api-audit-logs-response200-application-json-schema.json
📊
JSONSchema
https://artifacts.apis.io/evalgate-com/json-schema/evalgate-com-get-api-audit-logs-export-response200-text-csv-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/evalgate-com:evalgate-com-audit-logs-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

evalgate-com-audit-logs-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: EvalGate audit logs API
  version: 18.13.0
  description: EvalGate API. See docs/api-contract.md for stability commitments.
servers:
- url: https://evalgate.com
  description: Production
- url: http://localhost:3000
  description: Local
tags:
- name: Audit Logs
paths:
  /api/audit-logs/export:
    get:
      x-evalgate-source-hash: sha256:74d1b1bb1ef8f3355ac301097ef488bebdf3b9996be45f40d8341ef54d4f40bf
      summary: List audit logs export
      operationId: get_audit_logs_export
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetApiAuditLogsExportResponse200ApplicationJson'
            text/csv:
              schema:
                $ref: '#/components/schemas/GetApiAuditLogsExportResponse200TextCsv'
        '400':
          $ref: '#/components/responses/ValidationError'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '409':
          $ref: '#/components/responses/Conflict'
        '429':
          $ref: '#/components/responses/RateLimited'
        '500':
          $ref: '#/components/responses/InternalError'
        '503':
          $ref: '#/components/responses/ServiceUnavailable'
      security:
      - bearerAuth: []
      tags:
      - Audit Logs
      x-evalgate-required-scopes:
      - admin:workspace
      parameters:
      - name: limit
        in: query
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 1000
          default: 50
      - name: offset
        in: query
        required: false
        schema:
          type: integer
          minimum: 0
          default: 0
      - name: action
        in: query
        required: false
        schema:
          type: string
      - name: format
        in: query
        required: false
        schema:
          type: string
      - name: resourceType
        in: query
        required: false
        schema:
          type: string
      description: 'Requires scopes: admin:workspace'
      x-evalgate-contract-hash: sha256:dafa6044ed07bb61dff2982b580aebb3c67f83d1dee0910b2635491dd64b6500
  /api/audit-logs:
    get:
      x-evalgate-source-hash: sha256:adfa9f3622ed73705c73bafd6e062cec73c449bdfa36ab8d3c26803a0aeb6f76
      summary: List audit logs audit logs
      operationId: get_audit_logs
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetApiAuditLogsResponse200ApplicationJson'
        '400':
          $ref: '#/components/responses/ValidationError'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '409':
          $ref: '#/components/responses/Conflict'
        '429':
          $ref: '#/components/responses/RateLimited'
        '500':
          $ref: '#/components/responses/InternalError'
        '503':
          $ref: '#/components/responses/ServiceUnavailable'
      security:
      - bearerAuth: []
      tags:
      - Audit Logs
      x-evalgate-required-scopes:
      - admin:workspace
      parameters:
      - name: limit
        in: query
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 1000
          default: 50
      - name: offset
        in: query
        required: false
        schema:
          type: integer
          minimum: 0
          default: 0
      - name: action
        in: query
        required: false
        schema:
          type: string
      - name: resourceType
        in: query
        required: false
        schema:
          type: string
      - name: since
        in: query
        required: false
        schema:
          type: string
      - name: until
        in: query
        required: false
        schema:
          type: string
      description: 'Requires scopes: admin:workspace'
      x-evalgate-contract-hash: sha256:904b29dbde494bc5ced7e1ae34a58b3850116c46f974caaa5c84f4ad51372bcf
components:
  schemas:
    OrganizationId:
      type: string
      format: uuid
    GetApiAuditLogsExportResponse200ApplicationJson:
      type: object
      properties:
        data:
          type: array
          items:
            type: object
            properties:
              id:
                type: number
              eventId:
                type: string
              organizationId:
                $ref: '#/components/schemas/OrganizationId'
              userId:
                oneOf:
                - type: 'null'
                - type: string
              action:
                type: string
              resourceType:
                oneOf:
                - type: 'null'
                - type: string
              resourceId:
                oneOf:
                - type: 'null'
                - type: string
              metadata:
                oneOf:
                - type: 'null'
                - type: object
                  properties:
                    previousValue:
                      $ref: '#/components/schemas/JsonValue'
                    newValue:
                      $ref: '#/components/schemas/JsonValue'
                    reason:
                      type: string
                  additionalProperties: false
              ipAddress:
                oneOf:
                - type: 'null'
                - type: string
              userAgent:
                oneOf:
                - type: 'null'
                - type: string
              chainSequence:
                type: number
              previousHash:
                oneOf:
                - type: 'null'
                - type: string
              entryHash:
                type: string
              chainAlgorithm:
                type: string
              createdAt:
                type: string
                format: date-time
            additionalProperties: false
            required:
            - id
            - eventId
            - organizationId
            - userId
            - action
            - resourceType
            - resourceId
            - metadata
            - ipAddress
            - userAgent
            - chainSequence
            - previousHash
            - entryHash
            - chainAlgorithm
            - createdAt
        count:
          type: number
        integrity:
          type: object
          properties:
            valid:
              type: boolean
            count:
              type: number
            headHash:
              oneOf:
              - type: 'null'
              - type: string
            firstInvalidSequence:
              oneOf:
              - type: 'null'
              - type: number
            reason:
              oneOf:
              - type: string
                enum:
                - link
              - type: string
                enum:
                - algorithm
              - type: string
                enum:
                - content
              - type: string
                enum:
                - complete
              - type: string
                enum:
                - sequence
              - type: string
                enum:
                - transition
          additionalProperties: false
          required:
          - valid
          - count
          - headHash
          - firstInvalidSequence
          - reason
      additionalProperties: false
      required:
      - data
      - count
      - integrity
    ApiError:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
              enum:
              - UNAUTHORIZED
              - FORBIDDEN
              - NOT_FOUND
              - INVALID_REFERENCE
              - VALIDATION_ERROR
              - RATE_LIMITED
              - CONFLICT
              - INTERNAL_ERROR
              - SERVICE_UNAVAILABLE
              - QUOTA_EXCEEDED
              - FEATURE_LIMIT_REACHED
              - NO_ORG_MEMBERSHIP
              - SHARE_REVOKED
              - SHARE_EXPIRED
              - SHARE_UNAVAILABLE
              - PROVIDER_KEY_MISSING
              - PROVIDER_KEY_EXPIRED
              - PROVIDER_RATE_LIMITED
              - PROVIDER_UNAUTHORIZED
              - PROVIDER_UNAVAILABLE
              - AGENT_HANDOFF_INVALID
              - AGENT_HANDOFF_EXPIRED
              - AGENT_HANDOFF_DENIED
              - AGENT_HANDOFF_CONSUMED
              - PAYLOAD_TOO_LARGE
              - METHOD_NOT_ALLOWED
            message:
              type: string
            details: {}
            requestId:
              type: string
              format: uuid
            redaction:
              type: object
              properties:
                applied:
                  type: boolean
                  enum:
                  - true
                fieldCount:
                  type: integer
                  minimum: 0
                secretCount:
                  type: integer
                  minimum: 0
              required:
              - applied
              - fieldCount
              - secretCount
          required:
          - code
          - message
      required:
      - error
    JsonValue:
      oneOf:
      - type: 'null'
      - type: boolean
      - type: number
      - type: string
      - type: array
        items:
          $ref: '#/components/schemas/JsonValue'
      - type: object
        additionalProperties:
          $ref: '#/components/schemas/JsonValue'
    GetApiAuditLogsExportResponse200TextCsv:
      type: string
    GetApiAuditLogsResponse200ApplicationJson:
      type: object
      properties:
        data:
          type: array
          items:
            type: object
            properties:
              id:
                type: number
              eventId:
                type: string
              organizationId:
                $ref: '#/components/schemas/OrganizationId'
              userId:
                oneOf:
                - type: 'null'
                - type: string
              action:
                type: string
              resourceType:
                oneOf:
                - type: 'null'
                - type: string
              resourceId:
                oneOf:
                - type: 'null'
                - type: string
              metadata:
                oneOf:
                - type: 'null'
                - type: object
                  properties:
                    previousValue:
                      $ref: '#/components/schemas/JsonValue'
                    newValue:
                      $ref: '#/components/schemas/JsonValue'
                    reason:
                      type: string
                  additionalProperties: false
              ipAddress:
                oneOf:
                - type: 'null'
                - type: string
              userAgent:
                oneOf:
                - type: 'null'
                - type: string
              chainSequence:
                type: number
              previousHash:
                oneOf:
                - type: 'null'
                - type: string
              entryHash:
                type: string
              chainAlgorithm:
                type: string
              createdAt:
                type: string
                format: date-time
            additionalProperties: false
            required:
            - id
            - eventId
            - organizationId
            - userId
            - action
            - resourceType
            - resourceId
            - metadata
            - ipAddress
            - userAgent
            - chainSequence
            - previousHash
            - entryHash
            - chainAlgorithm
            - createdAt
        count:
          type: number
      additionalProperties: false
      required:
      - data
      - count
  responses:
    Unauthorized:
      description: Unauthorized
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
        WWW-Authenticate:
          description: Bearer challenge. Agent-facing routes include the RFC 9728 resource_metadata URL.
          schema:
            type: string
    Conflict:
      description: Conflict
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
    ValidationError:
      description: Validation error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
    RateLimited:
      description: Rate limit exceeded
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
        Retry-After:
          description: Delay in seconds before retrying when present.
          schema:
            type: integer
            minimum: 1
    Forbidden:
      description: Forbidden
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
    ServiceUnavailable:
      description: Service unavailable
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
    InternalError:
      description: Internal server error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
    NotFound:
      description: Resource not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
      headers:
        RateLimit-Limit:
          description: Quota in requests for the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Remaining:
          description: Remaining requests in the active window.
          schema:
            type: integer
            minimum: 0
        RateLimit-Reset:
          description: Reset delay in seconds (not a Unix timestamp).
          schema:
            type: integer
            minimum: 1
        X-RateLimit-Limit:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Remaining:
          schema:
            type: integer
            minimum: 0
        X-RateLimit-Reset:
          description: Legacy reset timestamp in Unix milliseconds.
          schema:
            type: integer
            minimum: 0
        RateLimit-Policy:
          description: IETF HTTPAPI structured quota policy (work in progress).
          schema:
            type: string
        RateLimit:
          description: IETF HTTPAPI structured remaining quota and reset delay (work in progress).
          schema:
            type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: EvalGate API key
      description: Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes.
      x-evalgate-scopes-supported:
      - eval:read
      - eval:write
      - objectives:read
      - objectives:write
      - runs:read
      - runs:write
      - traces:read
      - traces:write
      - exports:download
      - reports:write
      - prompt:publish
      - scorer:publish
      - red_team:read
      - red_team:run
      - red_team:approve
      - docs:read
      - agent:read
      - agent:execute
      - resources:read
      - resources:write
      - contexts:read
      - contexts:write
      - observations:write
      - checks:read
      - checks:run
      - standards:read
      - standards:write
      - standards:approve
      - grants:read
      - grants:write
      - admin:keys
      - admin:workspace
      - admin:org
      x-evalgate-protected-resource-metadata: https://www.evalgate.com/.well-known/oauth-protected-resource
    ProviderHealthSignature:
      type: apiKey
      in: header
      name: x-evalgate-provider-health-signature
      description: HMAC SHA-256 signature over the exact provider request bytes. Provider requests also require the timestamp and key-id headers.
    browserSession:
      type: apiKey
      in: cookie
      name: better-auth.session_token
      description: Interactive EvalGate browser session established through GitHub or Google sign-in. This scheme represents the human approval step and is not an agent API key or an EvalGate OAuth authorization-server token.
x-service-info:
  categories:
  - ai
  - developer-tools
  docs:
    homepage: https://evalgate.com
    apiReference: https://docs.evalgate.com/api-reference
    llms: https://evalgate.com/llms.txt