> ## Documentation Index > Fetch the complete documentation index at: https://docs.timbrix.mx/llms.txt > Use this file to discover all available pages before exploring further. # List audit log entries > Who did what and when in the organization, newest first, paginated by cursor. API key needs `read:audit-logs`; a session must be owner or admin. ## OpenAPI ````yaml https://api.timbrix.mx/api/openapi.json get /audit-logs openapi: 3.0.0 info: title: Timbrix API description: >- API de facturación electrónica CFDI 4.0 para México, con servidor OAuth2 para gestionar organizaciones, miembros y webhooks. Compatible con agentes de IA — ver la extensión `x-ai-agent-friendly` en la raíz de esta spec. REST API with OAuth2 server for managing organizations, members, and webhooks. version: '1.0' contact: {} servers: [] security: [] tags: - name: organizations description: Organization management endpoints - name: oauth description: OAuth2 authentication and authorization - name: webhooks description: Webhook configuration and delivery - name: users description: User information endpoints - name: api-keys description: API Keys management and validation - name: request-logs description: API request log paths: /audit-logs: get: tags: - audit-logs summary: List audit log entries description: >- Who did what and when in the organization, newest first, paginated by cursor. API key needs `read:audit-logs`; a session must be owner or admin. operationId: AuditLogsController_list parameters: - name: from required: false in: query description: >- Inicio (ISO 8601). Una fecha sola (YYYY-MM-DD) cuenta desde las 00:00 hora de México. schema: example: '2026-10-01' type: string - name: to required: false in: query description: >- Fin (ISO 8601), inclusivo. Una fecha sola (YYYY-MM-DD) incluye todo ese día en hora de México. schema: example: '2026-10-31' type: string - name: action required: false in: query description: Lista de acciones del catálogo separadas por comas. schema: example: cfdi.stamped,cancellation.requested type: string - name: actorUserId required: false in: query description: Persona que hizo la acción schema: type: string - name: actorApiKeyId required: false in: query description: API key con la que se hizo la acción schema: type: string - name: resourceType required: false in: query schema: type: string enum: - cfdi - customer - product - certificate - member - api_key - webhook - oauth_app - organization - report - audit_log - name: resourceId required: false in: query description: UUID fiscal, id interno o RFC, según el recurso schema: type: string - name: cursor required: false in: query description: nextCursor de la página anterior schema: type: string - name: limit required: false in: query schema: minimum: 1 maximum: 100 default: 50 type: number - name: X-Organization-Id in: header description: >- Required for Supabase session auth (owner or admin). Ignored with an API key. required: false schema: type: string responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ListAuditLogsResponseDto' '400': description: Filtro o cursor inválido security: - apiKey: [] - bearer: [] components: schemas: ListAuditLogsResponseDto: type: object properties: data: type: array items: $ref: '#/components/schemas/AuditLogItemDto' nextCursor: type: object nullable: true required: - data AuditLogItemDto: type: object properties: id: type: string organizationId: type: string seq: type: number description: Consecutivo de la entrada en la organización occurredAt: type: string example: '2026-10-26T05:30:00.000Z' action: type: string enum: - cfdi.stamped - cfdi.stamp_failed - cfdi.xml_downloaded - cfdi.pdf_downloaded - cfdi.emailed - cancellation.requested - cancellation.accepted - cancellation.rejected - cancellation.pending - certificate.uploaded - certificate.rotated - certificate.deleted - customer.created - customer.updated - customer.deleted - product.created - product.updated - product.deleted - product.imported - organization.updated - organization.legal_data_updated - organization.branding_updated - organization.closed - organization.reopened - organization.deleted - organization.plan_changed - member.invited - member.invite_cancelled - member.joined - member.invite_declined - member.role_changed - member.removed - api_key.created - api_key.activated - api_key.deactivated - api_key.deleted - webhook.created - webhook.updated - webhook.deleted - oauth_app.created - oauth_app.updated - oauth_app.deleted - report.exported - audit_log.exported result: type: string enum: - success - failure actorType: type: string enum: - user - api_key - system actorUserId: type: object nullable: true actorApiKeyId: type: object nullable: true actorLabel: type: object nullable: true description: Email de la persona, o nombre y preview de la llave resourceType: type: string enum: - cfdi - customer - product - certificate - member - api_key - webhook - oauth_app - organization - report - audit_log resourceId: type: object nullable: true channel: type: object nullable: true example: api environment: type: string nullable: true enum: - production - sandbox ip: type: object nullable: true description: IP observada por la API clientIp: type: object nullable: true description: IP reportada por el navegador (informativa, no verificada) userAgent: type: object nullable: true requestId: type: object nullable: true changedFields: nullable: true type: array items: type: string metadata: type: object additionalProperties: true required: - id - organizationId - seq - occurredAt - action - result - actorType - resourceType - metadata securitySchemes: apiKey: type: apiKey in: header name: X-API-Key description: 'API Key for authentication (format: sk_...)' bearer: scheme: bearer bearerFormat: JWT type: http ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.