Skip to documentation
DocumentationAPI referenceList operation records
GETBearer token

List operation records

/api/v1/audit

Read submitted server, snapshot, firewall and private-network operations in the authenticated fixed team, including retired resources. Requires audit permission. Newest first; ten records per page.

Before you call

A business read only: never retries an operation or calls the supplier. Credentials, signatures, raw supplier output and execution status are excluded. This is not a complete audit export.

Request example

cURL
curl "https://tovahub.com/api/v1/audit?type=all&action=shutdown&page=1" \
  -H "Authorization: Bearer $TOVAHUB_TOKEN"

Examples only. No requests are sent from this page.

Illustrative response
JSON
{
  "page": 1,
  "limit": 10,
  "total": 1,
  "events": [
    {
      "id": "server:507f1f77bcf86cd799439014",
      "type": "server",
      "action": "shutdown",
      "actor": {
        "id": "507f1f77bcf86cd799439012",
        "name": "Alex"
      },
      "resource": {
        "id": "507f1f77bcf86cd799439013",
        "name": "api-node"
      },
      "createdAt": "2026-11-12T04:00:00.000Z"
    }
  ]
}

Parameters

typeQuery · Optional

string

all, server, firewall or network. Defaults to all.

actionQuery · Optional

string

One exact action from the schema, or all. Defaults to all; incompatible type/action filters return an empty page.

pageQuery · Optional

integer

Page number, 1–10000. Ten records per page.

Response

HTTP status 200

Safe submitted operations in the authenticated fixed team; no task status, credentials or supplier payload.

pageinteger

Requested page, starting at 1.

limit10

Fixed page size.

totalinteger

Total matching records in this fixed team.

eventsarray

Newest matching operations, at most ten.

events[].idstring

Stable record ID prefixed with server, firewall or network.

events[].typestring

server, firewall or network.

events[].actionstring

Exact safe action from the request schema.

events[].actorobject

id and name; unavailable identities use null. No cross-team identity lookup.

events[].resourceobject

Platform id and display name, or null when unavailable. May refer to a retired resource.

events[].createdAtstring

ISO 8601 time the operation was accepted.