> ## Documentation Index > Fetch the complete documentation index at: https://docs.akua.dev/llms.txt > Use this file to discover all available pages before exploring further. # List vault audit events > Every access and change, allowed or denied, newest first. Never contains a value. ## OpenAPI ````yaml /openapi-public.json get /vaults/{vault}/audit_events openapi: 3.1.0 info: title: Akua API version: 1.0.0 description: >- Manage installs and their asynchronous operations. Authenticate with a session bearer token and select a Workspace using Akua-Context. contact: name: Akua API support email: support@akua.dev url: https://docs.akua.dev/ servers: - url: https://api.akua.dev/v1 security: [] tags: - name: operations - name: installs - name: Organizations - name: Billing accounts - name: workspaces - name: regions - name: Dashboard Overview - name: products - name: offers - name: Order Drafts - name: packages - name: Auth - name: API Tokens - name: Quota adjustments - name: Workspace services - name: Vault connections - name: clusters - name: Node pools - name: Nodes - name: machines - name: Sandboxes - name: OpenCode Servers - name: vaults - name: vaultSecrets paths: /vaults/{vault}/audit_events: get: tags: - vaults summary: List vault audit events description: >- Every access and change, allowed or denied, newest first. Never contains a value. operationId: vaults.listAuditEvents parameters: - name: vault in: path schema: $ref: '#/components/schemas/VaultId' required: true - name: akua-context in: header schema: type: string minLength: 1 maxLength: 53 description: >- Optional workspace/scope context for the request. Carries a single workspace wire id (`ws_…`) today. Only needed for broad tokens - a workspace-owned token implies its workspace. examples: - ws_j572abc123def4 required: false - name: cursor in: query schema: type: string maxLength: 512 required: false - name: limit in: query schema: type: integer minimum: 1 maximum: 100 required: false responses: '200': description: VaultAuditEventList content: application/json: schema: $ref: '#/components/schemas/VaultAuditEventList' '400': description: The request is malformed. content: application/json: schema: $ref: '#/components/schemas/ApiBadRequest' '401': description: Missing, invalid or expired credential. content: application/json: schema: $ref: '#/components/schemas/ApiUnauthorized' '403': description: The credential may not act in this workspace. content: application/json: schema: $ref: '#/components/schemas/ApiForbidden' '404': description: The resource was not found in this workspace. content: application/json: schema: $ref: '#/components/schemas/ApiNotFound' '503': description: The service is temporarily unavailable. content: application/json: schema: $ref: '#/components/schemas/ApiServiceUnavailable' security: - BearerAuth: [] components: schemas: VaultId: type: string pattern: ^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$ title: VaultId description: >- A vault id chosen by its creator, unique in the Workspace. `default` is the Workspace vault. examples: - default VaultAuditEventList: type: object properties: data: type: array items: $ref: '#/components/schemas/VaultAuditEvent' maxItems: 100 has_more: type: boolean next_cursor: anyOf: - type: string maxLength: 512 - type: 'null' required: - data - has_more - next_cursor additionalProperties: false ApiBadRequest: type: object properties: _tag: type: string enum: - Validation success: type: boolean enum: - false errors: type: array prefixItems: - $ref: '#/components/schemas/ApiErrorEntry' minItems: 1 items: $ref: '#/components/schemas/ApiErrorEntry' result: type: object additionalProperties: false required: - _tag - success - errors - result additionalProperties: false ApiUnauthorized: type: object properties: _tag: type: string enum: - Unauthorized success: type: boolean enum: - false errors: type: array prefixItems: - $ref: '#/components/schemas/ApiErrorEntry' minItems: 1 items: $ref: '#/components/schemas/ApiErrorEntry' result: type: object additionalProperties: false required: - _tag - success - errors - result additionalProperties: false ApiForbidden: type: object properties: _tag: type: string enum: - Forbidden success: type: boolean enum: - false errors: type: array prefixItems: - $ref: '#/components/schemas/ApiErrorEntry' minItems: 1 items: $ref: '#/components/schemas/ApiErrorEntry' result: type: object additionalProperties: false required: - _tag - success - errors - result additionalProperties: false ApiNotFound: type: object properties: _tag: type: string enum: - NotFound success: type: boolean enum: - false errors: type: array prefixItems: - $ref: '#/components/schemas/ApiErrorEntry' minItems: 1 items: $ref: '#/components/schemas/ApiErrorEntry' result: type: object additionalProperties: false required: - _tag - success - errors - result additionalProperties: false ApiServiceUnavailable: type: object properties: _tag: type: string enum: - ServiceUnavailable success: type: boolean enum: - false errors: type: array prefixItems: - $ref: '#/components/schemas/ApiErrorEntry' minItems: 1 items: $ref: '#/components/schemas/ApiErrorEntry' result: type: object additionalProperties: false required: - _tag - success - errors - result additionalProperties: false VaultAuditEvent: type: object properties: sequence: type: integer time: type: integer minimum: 0 description: Unix timestamp (seconds) method: type: string maxLength: 64 examples: - AccessSecretVersion resource: type: string maxLength: 256 principal: $ref: '#/components/schemas/Member' act: type: object properties: sub: anyOf: - $ref: '#/components/schemas/Principal' - type: string minLength: 1 maxLength: 256 act: type: object properties: sub: anyOf: - $ref: '#/components/schemas/Principal' - type: string minLength: 1 maxLength: 256 act: type: object properties: sub: anyOf: - $ref: '#/components/schemas/Principal' - type: string minLength: 1 maxLength: 256 act: type: object properties: sub: anyOf: - $ref: '#/components/schemas/Principal' - type: string minLength: 1 maxLength: 256 required: - sub additionalProperties: false required: - sub additionalProperties: false required: - sub additionalProperties: false required: - sub additionalProperties: false execution: $ref: '#/components/schemas/ExecutionContext' via: type: string maxLength: 200 description: The service or workload that presented the call. decision: type: string enum: - ALLOWED - DENIED reason: anyOf: - type: string maxLength: 128 - type: 'null' required: - sequence - time - method - resource - principal - via - decision - reason additionalProperties: false ApiErrorEntry: type: object properties: code: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: Machine-readable error code examples: - 7002 message: type: string description: Human-readable error message examples: - Resource not found path: type: array items: type: string description: Field path that caused the error, when applicable examples: - - body - name metadata: type: object additionalProperties: type: string required: - code - message additionalProperties: false Member: type: string pattern: >- ^(user:[^\s]{1,64}|service:[a-z][a-z0-9-]{0,62}|(?:workload|workforce):[a-z][a-z0-9-]{0,62}\/[A-Za-z0-9_-]{1,128})$ title: Member description: >- A person (`user:`), service agent (`service:`), workload (`workload:/`) or workforce identity (`workforce:/`) examples: - user:usr_j572abc - service:placement Principal: anyOf: - type: string pattern: ^service:[\s\S]*?$ - type: string pattern: ^workload:[\s\S]*?\/[\s\S]*?$ - type: string pattern: ^workforce:[\s\S]*?\/[\s\S]*?$ ExecutionContext: type: object properties: session_id: type: string minLength: 1 maxLength: 256 agent: type: string minLength: 1 maxLength: 256 required: - session_id additionalProperties: false securitySchemes: BearerAuth: description: Bearer token for the authenticated caller. type: http scheme: bearer ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.