AuditLogEventList

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/ada/main/json-schema/ada-audit-log-event-list-schema.json",
  "title": "AuditLogEventList",
  "description": "A cursor-paginated page of Audit log events",
  "x-generated": "2026-10-12",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/ada-audit-log-api-openapi.yml#/components/schemas/AuditLogEventList",
  "type": "object",
  "properties": {
    "data": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/AuditLogEvent"
      },
      "description": "The page of Audit log events (at most `limit` items)"
    },
    "meta": {
      "$ref": "#/$defs/AuditLogEventListMeta",
      "description": "Pagination metadata"
    }
  },
  "required": [
    "data",
    "meta"
  ],
  "$defs": {
    "AuditLogEvent": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "Globally unique event id (uuid4)"
        },
        "timestamp": {
          "type": "string",
          "format": "date-time",
          "description": "When the change occurred (ISO 8601, UTC, millisecond precision)"
        },
        "actor_email": {
          "type": "string",
          "description": "Email of the user who made the change, or the owner of a dashboard-created Platform API key. Empty for system and service-token actors."
        },
        "actor_name": {
          "type": "string",
          "description": "Display name of the actor; empty when unavailable"
        },
        "actor_user_id": {
          "type": "string",
          "description": "User id of the actor. For an API key, the id of the user who created the key. Empty for system and service-token actors."
        },
        "entity_type": {
          "type": "string",
          "description": "The type of entity that was changed"
        },
        "entity_id": {
          "type": "string",
          "description": "The id of the entity that was changed"
        },
        "entity_name": {
          "type": "string",
          "description": "A human-readable name for the changed entity"
        },
        "activity": {
          "type": "string",
          "description": "What happened to the entity. One of `created`, `updated`, `deleted`, `executed`, `invited`, `activated`, or `deactivated`."
        },
        "interface": {
          "type": "string",
          "description": "Where the change originated, such as `dashboard`, `api`, `mcp`, `cli`, `import`, `export`, or `system` (background jobs and Ada's internal processing)."
        },
        "context_ip": {
          "type": "string",
          "description": "Source IP address of the request that made the change"
        },
        "context_user_agent": {
          "type": "string",
          "description": "User agent string of the request that made the change"
        },
        "api_key_name": {
          "type": "string",
          "description": "Name of the API key used, when the change was made by a dashboard-created Platform API key; empty otherwise."
        }
      },
      "required": [
        "id",
        "timestamp",
        "entity_type",
        "entity_id",
        "activity"
      ],
      "description": "A single Audit log event: one configuration change recorded for the account. Empty-string fields mean the value was unavailable for that event (for example, a system actor has no email).",
      "title": "AuditLogEvent"
    },
    "AuditLogEventListMeta": {
      "type": "object",
      "properties": {
        "next_page_url": {
          "type": [
            "string",
            "null"
          ],
          "description": "URL for the next page of results, or `null` on the last or empty page. Replay it unchanged to keep the time window and the cursor constant across pages."
        }
      },
      "description": "Pagination metadata",
      "title": "AuditLogEventListMeta"
    }
  }
}