Authentication
Accepts either:- An API key (
X-API-Key: sk_...) with theread:audit-logsscope. - A Supabase Bearer session (
Authorization: Bearer <token>) with theX-Organization-Id: <org-id>header — the user must be an owner or admin of that organization.
Example Request
Common Errors
400 Bad Request
Theid is not a UUID.
403 Forbidden
Not an owner or admin, or the API key lacks theread:audit-logs scope.