← Back to docsAPI Reference

Audit Log

Retrieve a time-ordered record of every security-relevant event across your Meridian organization.

GET /v1/audit-log

Returns a paginated list of audit entries. Each entry captures the actor, action, target resource, timestamp, and IP address.

curl https://api.getnimbus.net/v1/audit-log \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json"

Query Parameters

ParamTypeDescription
limitintegerMax entries (1–100, default 20)
cursorstringPagination cursor from previous response
actionstringFilter by event type (e.g. license.create)
actor_idstringFilter by the user who performed the action

Response

{
  "data": [
    {
      "id": "evt_9a7b3c",
      "action": "license.revoke",
      "actor": { "id": "usr_1", "email": "admin@org.com" },
      "target": "lic_8f2d1e",
      "ip": "203.0.113.42",
      "timestamp": "2026-05-26T14:31:02Z"
    }
  ],
  "has_more": true,
  "next_cursor": "evt_9a7b3c"
}

Retention

Audit log entries are retained for 90 days on Standard plans and 365 days on Enterprise plans. Export endpoints are available for long-term archival.