GET

List user audit logs

Lists audit logs for the authenticated user within an enterprise. Returns audit logs based on the user's role (auditor, admin, or member) with appropriate filtering. Results are paginated and sorted by timestamp in descending order.

Requires access token scopes: auditlogs_view_all or user_manage

Query Params

filter[enterpriseId] string required

Enterprise ID to scope the query

matches ^[0-9a-f]{32}$
filter[targetId] string

Filter by target ID. Common values include walletId, userId, enterpriseId and organizationId.

matches ^[0-9a-f]{32}$
filter[targetType] string enum

Filter by target type. Common values include wallet, enterprise, user, and organization.

userwalletenterpriseorganization
filter[type] array of string enums

Filter by audit log type. Accepts a single value or a comma-separated list for multiple values.

address.createaddress.makeEmptyTransactionaddressBook.addaddressBook.removeaddressBook.updateadmin.actionApproveadmin.actionRejectadmin.actionRequestadmin.addVideoIdadmin.addVideoIdUseradmin.removeVideoIdadmin.rotateAccessTokenadmin.withdrawCollateralapproval.approveapproval.freezeapproval.rejectapproval.skipapproval.unfreezeapproval.verifyLivenessCheckenterprise.acceptServicesAgreemententerprise.acknowledgePolicyenterprise.activateNetworkCliententerprise.addBankAccountenterprise.addUserenterprise.addUserRequestenterprise.addVideoIdUserenterprise.addWebhookenterprise.addWebhookSecretenterprise.adminUpdateBankAccountenterprise.archiveenterprise.autoWhitelistenterprise.createenterprise.createCredentialenterprise.createPlaidBankAccountenterprise.deleteBankAccountenterprise.deleteCredentialenterprise.deletePricingTypeenterprise.freezeenterprise.internalUpdateBankAccountenterprise.kycExemptionenterprise.removeUserenterprise.removeUserRequestenterprise.removeVideoIdUserenterprise.renameenterprise.trustToSingaporeUpgradeenterprise.unfreezeenterprise.updateenterprise.updateAllowedCoinsenterprise.updateApprovalsRequiredenterprise.updateBankAccountenterprise.updateBitgoOrgenterprise.updateCredentialenterprise.updateKycStatusenterprise.updatePlaidBankAccountenterprise.updateUserenterprise.updateUserPermissionenterprise.updateUserRequestenterprise.updateVideoIdUserenterprise.updateWhitelistenterprise.updateWhitelistRequestfixSession.logonfixSession.logoutgoAccount.activationSkippedgoAccount.creategoAccount.rebalanceRequestgoAccount.requestPasswordResetgoAccount.settlegoAccount.settlementRequestgoAccount.updatePasswordResetkey.createCustodiallinkAccount.initiateTransferlinkAccount.retryTransfermarginCollateral.cancelWithdrawalmarginCollateral.depositmarginCollateral.requestWithdrawalmarginPosition.closeRequestmarginPosition.covermarginPosition.transfermarginWithdrawal.completemobilePairing.approvemobilePairing.approveReauthFailedmobilePairing.claimmobilePairing.consumemobilePairing.createmobilePairing.rejectmobilePairing.revokeViaEmailoauthaccesstoken.updateorder.cancelorder.placeorder.updateorder.updateNotesorganization.addRoleorganization.addRoleRequestorganization.addWebhookorganization.addWebhookSecretorganization.approveAddRoleorganization.approveUpdateRoleorganization.approveUpdateRoleUsersorganization.approveUserInvitationorganization.deleteorganization.inviteUserorganization.inviteUserRequestorganization.regenerateInvitationorganization.rejectAddRoleorganization.rejectRemoveRoleorganization.rejectUpdateRoleorganization.rejectUpdateRoleUsersorganization.rejectUpdateUserRolesorganization.rejectUserInvitationorganization.rejectUserRemovalorganization.removeRoleorganization.removeRoleRequestorganization.removeUserorganization.removeUserRequestorganization.updateorganization.updateAdminUsersorganization.updateRoleorganization.updateRoleRequestorganization.updateRoleUsersorganization.updateRoleUsersRequestorganization.updateUserRequestorganization.updateUserRolesorganization.updateUserRolesRequestpolicy.addpolicy.addRequestpolicy.duplicatepolicy.duplicateRequestpolicy.lockpolicy.optInpolicy.optInRequestpolicy.optOutpolicy.optOutRequestpolicy.removepolicy.removeRequestpolicy.unlockpolicy.unlockRequestpolicy.updatepolicy.updateMutabilitypolicy.updateRequestpolicy.updateTagpolicyConfig.dataValidationExemptionDisabledpolicyConfig.dataValidationExemptionEnabledsafe.addMembersafe.addWebhooksafe.archivesafe.childKeyCreatesafe.finalizesafe.freezesafe.initializesafe.keycardDownloadsafe.passkeyRegistersafe.passkeyRemovesafe.passwordChangesafe.removeMembersafe.removeWebhooksafe.renamesafe.rootKeyCreatedsafe.rootKeyCreationDeniedsafe.shareAcceptsafe.shareCreatesafe.unfreezesafe.walletMintsecurityControl.approvalBlockedsecurityControl.changeAppliedsecurityControl.changeRejectedsecurityControl.changeRequestedtransaction.bitgoSignedtransaction.changeGasPricetransaction.createtransaction.createRequesttransaction.failedCreationtransaction.updateCommenttransaction.updateSendQtransaction.updateSendQItemtransaction.updateSendQTxtransaction.updateWalletSendQtransactionRequest.addUserSignatureSharetransactionRequest.createtransactionRequest.removeUserSignatureSharetransactionRequest.updateuser.acknowledgeDappConsentuser.activateuser.add2FAuser.addTrustedDeviceuser.addTrustedMachineuser.addWebhookuser.allowCoinsuser.completeReset2FAuser.createuser.createAccessTokenuser.deactivateuser.defiCreateAcknowledgementuser.deleteAccessTokenuser.deleteTrustedDeviceuser.deleteTrustedMachineuser.deleteWebhookuser.detectRefreshTokenReuseuser.failedLoginuser.freezeuser.getInternalAccessTokenuser.loginuser.oauthAuthorizeuser.oauthClientRequestAuthorizeduser.oauthClientRequestDenieduser.refreshTokenFingerprintMismatchuser.remove2FAuser.removeFromBitgouser.removeSourceIpuser.reset2FAuser.resetPassworduser.setPassworduser.startReset2FAuser.unblockEmailuser.unfreezeuser.updateuser.updateAccessTokenuser.updateKycStatususer.updatePassworduser.upsertRecoveryCodesuser.verifyReset2FAuser.verifySourceuser.viewRecoveryCodesverifyPairing.approveverifyPairing.approveReauthFailedverifyPairing.claimverifyPairing.consumeverifyPairing.createverifyPairing.rejectverifyPairing.revokeViaEmailvideoCall.createvideoId.joinQueuevideoId.leaveQueuewallet.acceptInvitewallet.activateSafeModewallet.addAddressLabelwallet.addFlagwallet.addLockAssetwallet.addNodewallet.addUserwallet.addUserRequestwallet.addWebhookwallet.attachPasskeywallet.autoWhitelistwallet.batchUpdateTransferStatewallet.bulkLockAssetwallet.cancelInvitewallet.cosignRecoveryTransactionwallet.confirmTransferwallet.createwallet.declineInvitewallet.deletewallet.deleteLockAssetwallet.deletePasswordResetwallet.deleteWebhookwallet.externalWithdrawalwallet.forwardTokenwallet.freezewallet.initializewallet.invitewallet.redeployAddresswallet.rejectUserRequestwallet.removeAddressLabelwallet.removeFlagwallet.removeUnspentswallet.removeUserwallet.removeUserRequestwallet.renamewallet.resetPasswordwallet.resetWebhookNotificationwallet.restorewallet.setNoncewallet.shareKeyswallet.stakewallet.unfreezewallet.updatewallet.updateApprovalsRequiredwallet.updateApprovalsRequiredRequestwallet.updateCircuitBreakerwallet.updateCustomTagswallet.updateEnterprisewallet.updateFlagwallet.updateLockAssetwallet.updatePasswordwallet.updatePasswordResetwallet.updateToMPCv2wallet.updateTransferStatewallet.updateUserPermissionwallet.updateWhitelistwallet.updateWhitelistRequestwallet.whitelistAddress
filter[actorId] string

Filter by actor ID

matches ^[0-9a-f]{32}$
filter[actorType] string enum

Filter by actor type.

adminuserbitgo
filter[bucket] string enum

Filter by audit log category

enterpriseloginorganizationpolicysafetransactionunknownuserwallet
filter[correlationId] string

Filter by correlation ID to correlate related audit events.
filter[createdAt][gte] string date-time

Filter for audit logs on or after this date (ISO 8601 format)
filter[createdAt][lt] string date-time

Filter for audit logs before this date (ISO 8601 format)
page[after] string

Opaque pagination cursor returned in the previous page's links.next
page[size] integer

Maximum number of results to return per page

>= 1 · <= 500

Defaults to 25

Responses

200

Successfully retrieved audit logs

Response Body

object

JSON:API response containing audit logs with pagination

data array of objects required

List of audit log resource objects
data object
- type string enum required
  
  audit-logs
- id string required
  
  matches ^[0-9a-f]{32}$
- attributes object required
  
  Audit log entry for user-facing API
  attributes object
  - actor object required
    
    Actor information for audit logs
    
    actor object
    
    id string required
    
    matches ^[0-9a-f]{32}$
    
    username string required
    
    Username of the actor
    
    at least 5 characters
    
    type string enum required
    
    Type of actor
    
    adminuserbitgo
  - ip string
    
    IP address of the actor
    
    2 to 39 characters
  - userAgent string
    
    User agent of the actor
  - sessionId string
    
    Session ID
  - requestId string required
    
    Request ID
    
    5 to 100 characters
  - targetId string required
    
    matches ^[0-9a-f]{32}$
  - targetType string enum required
    
    Type of entity that was the target of the action
    
    userwalletenterpriseorganization
  - timestamp string date-time required
    
    Timestamp of the action
  - auditLogType string enum required
    
    Audit log event type identifier in resource.action format
    
    address.createaddress.makeEmptyTransactionaddressBook.addaddressBook.removeaddressBook.updateadmin.actionApproveadmin.actionRejectadmin.actionRequestadmin.addVideoIdadmin.addVideoIdUseradmin.removeVideoIdadmin.rotateAccessTokenadmin.withdrawCollateralapproval.approveapproval.freezeapproval.rejectapproval.skipapproval.unfreezeapproval.verifyLivenessCheckenterprise.acceptServicesAgreemententerprise.acknowledgePolicyenterprise.activateNetworkCliententerprise.addBankAccountenterprise.addUserenterprise.addUserRequestenterprise.addVideoIdUserenterprise.addWebhookenterprise.addWebhookSecretenterprise.adminUpdateBankAccountenterprise.archiveenterprise.autoWhitelistenterprise.createenterprise.createCredentialenterprise.createPlaidBankAccountenterprise.deleteBankAccountenterprise.deleteCredentialenterprise.deletePricingTypeenterprise.freezeenterprise.internalUpdateBankAccountenterprise.kycExemptionenterprise.removeUserenterprise.removeUserRequestenterprise.removeVideoIdUserenterprise.renameenterprise.trustToSingaporeUpgradeenterprise.unfreezeenterprise.updateenterprise.updateAllowedCoinsenterprise.updateApprovalsRequiredenterprise.updateBankAccountenterprise.updateBitgoOrgenterprise.updateCredentialenterprise.updateKycStatusenterprise.updatePlaidBankAccountenterprise.updateUserenterprise.updateUserPermissionenterprise.updateUserRequestenterprise.updateVideoIdUserenterprise.updateWhitelistenterprise.updateWhitelistRequestfixSession.logonfixSession.logoutgoAccount.activationSkippedgoAccount.creategoAccount.rebalanceRequestgoAccount.requestPasswordResetgoAccount.settlegoAccount.settlementRequestgoAccount.updatePasswordResetkey.createCustodiallinkAccount.initiateTransferlinkAccount.retryTransfermarginCollateral.cancelWithdrawalmarginCollateral.depositmarginCollateral.requestWithdrawalmarginPosition.closeRequestmarginPosition.covermarginPosition.transfermarginWithdrawal.completemobilePairing.approvemobilePairing.approveReauthFailedmobilePairing.claimmobilePairing.consumemobilePairing.createmobilePairing.rejectmobilePairing.revokeViaEmailoauthaccesstoken.updateorder.cancelorder.placeorder.updateorder.updateNotesorganization.addRoleorganization.addRoleRequestorganization.addWebhookorganization.addWebhookSecretorganization.approveAddRoleorganization.approveUpdateRoleorganization.approveUpdateRoleUsersorganization.approveUserInvitationorganization.deleteorganization.inviteUserorganization.inviteUserRequestorganization.regenerateInvitationorganization.rejectAddRoleorganization.rejectRemoveRoleorganization.rejectUpdateRoleorganization.rejectUpdateRoleUsersorganization.rejectUpdateUserRolesorganization.rejectUserInvitationorganization.rejectUserRemovalorganization.removeRoleorganization.removeRoleRequestorganization.removeUserorganization.removeUserRequestorganization.updateorganization.updateAdminUsersorganization.updateRoleorganization.updateRoleRequestorganization.updateRoleUsersorganization.updateRoleUsersRequestorganization.updateUserRequestorganization.updateUserRolesorganization.updateUserRolesRequestpolicy.addpolicy.addRequestpolicy.duplicatepolicy.duplicateRequestpolicy.lockpolicy.optInpolicy.optInRequestpolicy.optOutpolicy.optOutRequestpolicy.removepolicy.removeRequestpolicy.unlockpolicy.unlockRequestpolicy.updatepolicy.updateMutabilitypolicy.updateRequestpolicy.updateTagpolicyConfig.dataValidationExemptionDisabledpolicyConfig.dataValidationExemptionEnabledsafe.addMembersafe.addWebhooksafe.archivesafe.childKeyCreatesafe.finalizesafe.freezesafe.initializesafe.keycardDownloadsafe.passkeyRegistersafe.passkeyRemovesafe.passwordChangesafe.removeMembersafe.removeWebhooksafe.renamesafe.rootKeyCreatedsafe.rootKeyCreationDeniedsafe.shareAcceptsafe.shareCreatesafe.unfreezesafe.walletMintsecurityControl.approvalBlockedsecurityControl.changeAppliedsecurityControl.changeRejectedsecurityControl.changeRequestedtransaction.bitgoSignedtransaction.changeGasPricetransaction.createtransaction.createRequesttransaction.failedCreationtransaction.updateCommenttransaction.updateSendQtransaction.updateSendQItemtransaction.updateSendQTxtransaction.updateWalletSendQtransactionRequest.addUserSignatureSharetransactionRequest.createtransactionRequest.removeUserSignatureSharetransactionRequest.updateuser.acknowledgeDappConsentuser.activateuser.add2FAuser.addTrustedDeviceuser.addTrustedMachineuser.addWebhookuser.allowCoinsuser.completeReset2FAuser.createuser.createAccessTokenuser.deactivateuser.defiCreateAcknowledgementuser.deleteAccessTokenuser.deleteTrustedDeviceuser.deleteTrustedMachineuser.deleteWebhookuser.detectRefreshTokenReuseuser.failedLoginuser.freezeuser.getInternalAccessTokenuser.loginuser.oauthAuthorizeuser.oauthClientRequestAuthorizeduser.oauthClientRequestDenieduser.refreshTokenFingerprintMismatchuser.remove2FAuser.removeFromBitgouser.removeSourceIpuser.reset2FAuser.resetPassworduser.setPassworduser.startReset2FAuser.unblockEmailuser.unfreezeuser.updateuser.updateAccessTokenuser.updateKycStatususer.updatePassworduser.upsertRecoveryCodesuser.verifyReset2FAuser.verifySourceuser.viewRecoveryCodesverifyPairing.approveverifyPairing.approveReauthFailedverifyPairing.claimverifyPairing.consumeverifyPairing.createverifyPairing.rejectverifyPairing.revokeViaEmailvideoCall.createvideoId.joinQueuevideoId.leaveQueuewallet.acceptInvitewallet.activateSafeModewallet.addAddressLabelwallet.addFlagwallet.addLockAssetwallet.addNodewallet.addUserwallet.addUserRequestwallet.addWebhookwallet.attachPasskeywallet.autoWhitelistwallet.batchUpdateTransferStatewallet.bulkLockAssetwallet.cancelInvitewallet.cosignRecoveryTransactionwallet.confirmTransferwallet.createwallet.declineInvitewallet.deletewallet.deleteLockAssetwallet.deletePasswordResetwallet.deleteWebhookwallet.externalWithdrawalwallet.forwardTokenwallet.freezewallet.initializewallet.invitewallet.redeployAddresswallet.rejectUserRequestwallet.removeAddressLabelwallet.removeFlagwallet.removeUnspentswallet.removeUserwallet.removeUserRequestwallet.renamewallet.resetPasswordwallet.resetWebhookNotificationwallet.restorewallet.setNoncewallet.shareKeyswallet.stakewallet.unfreezewallet.updatewallet.updateApprovalsRequiredwallet.updateApprovalsRequiredRequestwallet.updateCircuitBreakerwallet.updateCustomTagswallet.updateEnterprisewallet.updateFlagwallet.updateLockAssetwallet.updatePasswordwallet.updatePasswordResetwallet.updateToMPCv2wallet.updateTransferStatewallet.updateUserPermissionwallet.updateWhitelistwallet.updateWhitelistRequestwallet.whitelistAddress
  - correlationId string
    
    Correlation ID linking related audit events
  - detail map
    
    Additional data associated with the audit log event
  - category string enum
    
    Category of the audit log entry
    
    policytransactionuserwalletsafeenterpriseloginorganizationunknown
  - coin string
    
    Cryptocurrency coin identifier
  - title string
    
    Human-readable title for this audit log event
  - description string
    
    Human-readable description providing additional context for the event
links object required

JSON:API pagination links
links object
- self string required
  
  Link to the current page
- next string
  
  Link to the next page (absent when no more pages)

400

Invalid request parameters

Response Body

object

JSON:API error Response

errors array of objects required

at least 1 items
errors object
- code string enum required
  
  Machine-readable error code from the BitGo error catalog
  
  BAD_REQUESTVALIDATION_ERRORUNAUTHORIZEDFORBIDDENNOT_FOUNDCONFLICTRATE_LIMIT_EXCEEDEDINTERNAL_ERRORUPSTREAM_ERRORSERVICE_UNAVAILABLE
- status string required
  
  HTTP status code as a string
- title string required
  
  Stable human-readable summary for this error code
- detail string
  
  Occurrence-specific explanation of the error
- source object
  
  Location of the problem in the request
  source object
  - parameter string
    
    Query parameter name
  - pointer string
    
    JSON Pointer into the request body
  - header string
    
    Request header name
- meta object
  meta object
  - requestId string required
    
    Request Identifier

401

Unauthorized

Response Body

object

JSON:API error Response

errors array of objects required

at least 1 items
errors object
- code string enum required
  
  Machine-readable error code from the BitGo error catalog
  
  BAD_REQUESTVALIDATION_ERRORUNAUTHORIZEDFORBIDDENNOT_FOUNDCONFLICTRATE_LIMIT_EXCEEDEDINTERNAL_ERRORUPSTREAM_ERRORSERVICE_UNAVAILABLE
- status string required
  
  HTTP status code as a string
- title string required
  
  Stable human-readable summary for this error code
- detail string
  
  Occurrence-specific explanation of the error
- source object
  
  Location of the problem in the request
  source object
  - parameter string
    
    Query parameter name
  - pointer string
    
    JSON Pointer into the request body
  - header string
    
    Request header name
- meta object
  meta object
  - requestId string required
    
    Request Identifier

403

Forbidden

Response Body

object

JSON:API error Response

errors array of objects required

at least 1 items
errors object
- code string enum required
  
  Machine-readable error code from the BitGo error catalog
  
  BAD_REQUESTVALIDATION_ERRORUNAUTHORIZEDFORBIDDENNOT_FOUNDCONFLICTRATE_LIMIT_EXCEEDEDINTERNAL_ERRORUPSTREAM_ERRORSERVICE_UNAVAILABLE
- status string required
  
  HTTP status code as a string
- title string required
  
  Stable human-readable summary for this error code
- detail string
  
  Occurrence-specific explanation of the error
- source object
  
  Location of the problem in the request
  source object
  - parameter string
    
    Query parameter name
  - pointer string
    
    JSON Pointer into the request body
  - header string
    
    Request header name
- meta object
  meta object
  - requestId string required
    
    Request Identifier

404

Not found

Response Body

object

JSON:API error Response

errors array of objects required

at least 1 items
errors object
- code string enum required
  
  Machine-readable error code from the BitGo error catalog
  
  BAD_REQUESTVALIDATION_ERRORUNAUTHORIZEDFORBIDDENNOT_FOUNDCONFLICTRATE_LIMIT_EXCEEDEDINTERNAL_ERRORUPSTREAM_ERRORSERVICE_UNAVAILABLE
- status string required
  
  HTTP status code as a string
- title string required
  
  Stable human-readable summary for this error code
- detail string
  
  Occurrence-specific explanation of the error
- source object
  
  Location of the problem in the request
  source object
  - parameter string
    
    Query parameter name
  - pointer string
    
    JSON Pointer into the request body
  - header string
    
    Request header name
- meta object
  meta object
  - requestId string required
    
    Request Identifier

500

Internal server error

Response Body

object

JSON:API error Response

errors array of objects required

at least 1 items
errors object
- code string enum required
  
  Machine-readable error code from the BitGo error catalog
  
  BAD_REQUESTVALIDATION_ERRORUNAUTHORIZEDFORBIDDENNOT_FOUNDCONFLICTRATE_LIMIT_EXCEEDEDINTERNAL_ERRORUPSTREAM_ERRORSERVICE_UNAVAILABLE
- status string required
  
  HTTP status code as a string
- title string required
  
  Stable human-readable summary for this error code
- detail string
  
  Occurrence-specific explanation of the error
- source object
  
  Location of the problem in the request
  source object
  - parameter string
    
    Query parameter name
  - pointer string
    
    JSON Pointer into the request body
  - header string
    
    Request header name
- meta object
  meta object
  - requestId string required
    
    Request Identifier

curl -X GET \ --url 'https://app.bitgo-test.com/api/audit-log-service/v3/audit-logs?filter[enterpriseId]=59cd72485007a239fb00282ed480da1f&filter[targetId]=59cd72485007a239fb00282ed480da1f&filter[targetType]=user&filter[type]=&filter[actorId]=59cd72485007a239fb00282ed480da1f&filter[actorType]=admin&filter[bucket]=enterprise&filter[correlationId]=string&filter[createdAt][gte]=string&filter[createdAt][lt]=string&page[after]=string&page[size]=25' \ --header 'accept: application/vnd.api+json' \ --header 'Authorization: Bearer YOUR_ACCESS_TOKEN'

const url = 'https://app.bitgo-test.com/api/audit-log-service/v3/audit-logs?filter[enterpriseId]=59cd72485007a239fb00282ed480da1f&filter[targetId]=59cd72485007a239fb00282ed480da1f&filter[targetType]=user&filter[type]=&filter[actorId]=59cd72485007a239fb00282ed480da1f&filter[actorType]=admin&filter[bucket]=enterprise&filter[correlationId]=string&filter[createdAt][gte]=string&filter[createdAt][lt]=string&page[after]=string&page[size]=25'; const options = {method: 'GET', headers: {accept: 'application/vnd.api+json', 'Authorization': 'Bearer YOUR_ACCESS_TOKEN'}}; fetch(url, options) .then(res => res.json()) .then(json => console.log(json)) .catch(err => console.error(err));

require 'uri' require 'net/http' url = URI("https://app.bitgo-test.com/api/audit-log-service/v3/audit-logs?filter[enterpriseId]=59cd72485007a239fb00282ed480da1f&filter[targetId]=59cd72485007a239fb00282ed480da1f&filter[targetType]=user&filter[type]=&filter[actorId]=59cd72485007a239fb00282ed480da1f&filter[actorType]=admin&filter[bucket]=enterprise&filter[correlationId]=string&filter[createdAt][gte]=string&filter[createdAt][lt]=string&page[after]=string&page[size]=25") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["accept"] = 'application/vnd.api+json' request["Authorization"] = 'Bearer YOUR_ACCESS_TOKEN' response = http.request(request) puts response.read_body

<?php require_once('vendor/autoload.php'); $client = new \GuzzleHttp\Client(); $response = $client->request('GET', 'https://app.bitgo-test.com/api/audit-log-service/v3/audit-logs?filter[enterpriseId]=59cd72485007a239fb00282ed480da1f&filter[targetId]=59cd72485007a239fb00282ed480da1f&filter[targetType]=user&filter[type]=&filter[actorId]=59cd72485007a239fb00282ed480da1f&filter[actorType]=admin&filter[bucket]=enterprise&filter[correlationId]=string&filter[createdAt][gte]=string&filter[createdAt][lt]=string&page[after]=string&page[size]=25', [ 'headers' => [ 'accept' => 'application/vnd.api+json', 'Authorization' => 'Bearer YOUR_ACCESS_TOKEN', ], ]); echo $response->getBody();

import requests url = "https://app.bitgo-test.com/api/audit-log-service/v3/audit-logs?filter[enterpriseId]=59cd72485007a239fb00282ed480da1f&filter[targetId]=59cd72485007a239fb00282ed480da1f&filter[targetType]=user&filter[type]=&filter[actorId]=59cd72485007a239fb00282ed480da1f&filter[actorType]=admin&filter[bucket]=enterprise&filter[correlationId]=string&filter[createdAt][gte]=string&filter[createdAt][lt]=string&page[after]=string&page[size]=25" headers = { "accept": "application/vnd.api+json", "Authorization": "Bearer YOUR_ACCESS_TOKEN" } response = requests.get(url, headers=headers) print(response.text)

{ "data": [ { "attributes": { "actor": { "id": "5f9a1c2b3d4e5f6a7b8c9d0e00000001", "type": "user", "username": "alice@example.com" }, "auditLogType": "wallet.update", "category": "wallet", "description": "alice@example.com updated My Bitcoin Wallet 2", "detail": { "label": { "new": "My Bitcoin Wallet 2", "old": "My Bitcoin Wallet" } }, "ip": "203.0.113.42", "requestId": "req-7a8b9c0d1e2f3a4b", "sessionId": "5f9a1c2b3d4e5f6a7b8c9d0e00000002", "targetId": "5e3ae8d4b31f6a001e17f23a00000002", "targetType": "wallet", "timestamp": "2026-07-15T14:32:10.000Z", "title": "Wallet Update", "userAgent": "Mozilla/5.0" }, "id": "5e3ae8d4b31f6a001e17f23a00000001", "type": "audit-logs" } ], "links": { "next": "/api/audit-log-service/v3/audit-logs?filter[enterpriseId]=5e3ae8d4b31f6a001e17f23a00000001\u0026page[size]=25\u0026page[after]=eyJpZCI6IjVlM2FlOGQ0YjMxZjZhMDAxZTE3ZjIzYTAwMDAwMDk5IiwidHMiOiIxNzUxMzQ3MjAwMDAwIn0=", "self": "/api/audit-log-service/v3/audit-logs?filter[enterpriseId]=5e3ae8d4b31f6a001e17f23a00000001\u0026page[size]=25" } }

{ "errors": [ { "code": "VALIDATION_ERROR", "detail": "Expected string", "meta": { "requestId": "req-7a8b9c0d1e2f3a4b" }, "source": { "parameter": "dateGte" }, "status": "400", "title": "Input validation failed" } ] }

{ "errors": [ { "code": "UNAUTHORIZED", "detail": "Unauthorized", "meta": { "requestId": "req-7a8b9c0d1e2f3a4b" }, "status": "401", "title": "Missing or invalid authentication" } ] }

{ "errors": [ { "code": "FORBIDDEN", "detail": "Forbidden", "meta": { "requestId": "req-7a8b9c0d1e2f3a4b" }, "status": "403", "title": "Insufficient permissions" } ] }

{ "errors": [ { "code": "NOT_FOUND", "detail": "Not found", "meta": { "requestId": "req-7a8b9c0d1e2f3a4b" }, "status": "404", "title": "Resource does not exist" } ] }

{ "errors": [ { "code": "INTERNAL_ERROR", "detail": "Internal server error", "meta": { "requestId": "req-7a8b9c0d1e2f3a4b" }, "status": "500", "title": "Unexpected server error" } ] }