List operation records
/api/v1/audit
Read submitted server, snapshot, firewall and private-network operations in the authenticated fixed team, including retired resources. Requires audit permission. Newest first; ten records per page.
Before you call
A business read only: never retries an operation or calls the supplier. Credentials, signatures, raw supplier output and execution status are excluded. This is not a complete audit export.
Request example
curl "https://tovahub.com/api/v1/audit?type=all&action=shutdown&page=1" \
-H "Authorization: Bearer $TOVAHUB_TOKEN"Examples only. No requests are sent from this page.
Illustrative response
{
"page": 1,
"limit": 10,
"total": 1,
"events": [
{
"id": "server:507f1f77bcf86cd799439014",
"type": "server",
"action": "shutdown",
"actor": {
"id": "507f1f77bcf86cd799439012",
"name": "Alex"
},
"resource": {
"id": "507f1f77bcf86cd799439013",
"name": "api-node"
},
"createdAt": "2026-11-12T04:00:00.000Z"
}
]
}Parameters
typeQuery · Optionalstring
all, server, firewall or network. Defaults to all.
actionQuery · Optionalstring
One exact action from the schema, or all. Defaults to all; incompatible type/action filters return an empty page.
pageQuery · Optionalinteger
Page number, 1–10000. Ten records per page.
Response
HTTP status 200
Safe submitted operations in the authenticated fixed team; no task status, credentials or supplier payload.
pageintegerRequested page, starting at 1.
limit10Fixed page size.
totalintegerTotal matching records in this fixed team.
eventsarrayNewest matching operations, at most ten.
events[].idstringStable record ID prefixed with server, firewall or network.
events[].typestringserver, firewall or network.
events[].actionstringExact safe action from the request schema.
events[].actorobjectid and name; unavailable identities use null. No cross-team identity lookup.
events[].resourceobjectPlatform id and display name, or null when unavailable. May refer to a retired resource.
events[].createdAtstringISO 8601 time the operation was accepted.