Mode Audit Logs API
The Audit Logs API from Mode — 1 operation(s) for audit logs.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/mode-audit-logs-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
version: 0.0.1
title: Mode Account Audit Logs API
description: 'Mode provides a REST API for many common operations, such as:
* Listing spaces and reports
* Running reports
* Downloading query results
## Authentication
For most Mode API calls, the client must supply an API token and secret for
HTTP basic authentication.
If authentication is required for a given resource, unauthenticated requests
will result in a `401 Unauthorized` response.
[Create and Manage API Tokens](https://modeanalytics.com/settings/access_tokens)
'
termsOfService: https://mode.com/tos/
contact:
name: Mode API Team
email: support@modeanalytics.com
license:
name: MIT
servers:
- url: https://modeanalytics.com/api
security:
- accessTokenAuth: []
tags:
- name: Audit Logs
paths:
/{workspace}/audit_logs:
x-summary: Audit Log
get:
operationId: getAuditLogs
summary: Retrieve audit logs
description: Returns a paginated list of audit log events for the given workspace.
parameters:
- name: workspace
in: path
required: true
description: '`Workspace` username'
schema:
type: string
- name: start_timestamp
in: query
required: true
description: The start of the time range for audit logs (ISO 8601 format).
schema:
type: string
- name: end_timestamp
in: query
required: true
description: The end of the time range for audit logs (ISO 8601 format).
schema:
type: string
- name: action
in: query
required: false
description: The type of action performed.
schema:
type: string
- name: entity_id
in: query
required: false
description: The ID of the entity to filter logs.
schema:
type: string
- name: entity_type
in: query
required: false
description: The type/category of the entity to filter logs.
schema:
type: string
- name: entity_name
in: query
required: false
description: The name of the entity affected by the action.
schema:
type: string
- name: username
in: query
required: false
description: The username of the user performing the action.
schema:
type: string
- name: ip
in: query
required: false
description: The IP address of the client device that initiated the action.
schema:
type: string
- name: event_source
in: query
required: false
description: The source of the event to filter logs.
schema:
type: string
- name: next_token
in: query
required: false
description: Token for fetching logs of the next page.
schema:
type: string
responses:
'200':
description: A list of audit logs matching the given filters.
content:
application/hal+json:
schema:
$ref: '#/components/schemas/AuditLog'
'400':
description: Bad request
content:
application/hal+json:
schema:
$ref: '#/components/schemas/BadRequest'
'401':
description: Unauthorized
content:
application/hal+json:
schema:
$ref: '#/components/schemas/Unauthorized'
'403':
description: Forbidden
content:
application/hal+json:
schema:
$ref: '#/components/schemas/Forbidden'
tags:
- Audit Logs
components:
schemas:
Forbidden:
required:
- id
- message
properties:
id:
type: string
enum:
- forbidden
message:
type: string
Unauthorized:
required:
- id
- message
properties:
id:
type: string
enum:
- unauthorized
message:
type: string
AuditLog:
type: object
description: Represents a single audit log event.
properties:
id:
type: string
description: Unique ID for the audit event
example: ae026c8c-3c13-45a3-9b36-5a16d42937db
action:
type: string
description: Action being audited
example: connection_group_added_with_role
description:
type: string
description: One-liner describing the audit event
example: group added to connection
context:
type: object
description: Additional metadata associated with the audit event
properties:
correlation_id:
type: string
example: 1f521917-5e07-4094-ae08-1b6254a2a6c8
actor:
type: object
description: Information about the user or system that triggered the event
properties:
ip:
type: string
example: 157.52.123.41
user_agent:
type: string
example: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
user_id:
type: string
example: b903c024ac72
username:
type: string
example: sample_user_name
entity:
type: object
description: The primary entity affected in the action performed
properties:
entity_name:
type: string
example: Sample workspace name
entity_type:
type: string
example: workspace_connection
entity_id:
type: string
example: a45aaf31658b
timestamp:
type: string
format: date-time
description: Event timestamp
example: '2025-02-18T10:47:37.000000Z'
workspace_username:
type: string
example: sampleworkspaceusername
BadRequest:
required:
- id
- message
properties:
id:
type: string
enum:
- bad_request
message:
type: string
securitySchemes:
accessTokenAuth:
type: http
scheme: basic