API reference · 3 endpoints

Audit logs

Query the audit trail of search and MCP activity in a namespace.

GET/v1/default/namespaces/{namespace_id}/audit-logs

List audit logs

List audit log entries for a namespace, ordered by most recent first. Request and response bodies are omitted unless include_payloads is set.

Parameters

namespace_idstringpathrequired
actionstring | nullquery

Filter by action type

transportstring | nullquery

Filter by transport (http, mcp, system)

statusstring | nullquery

Filter by outcome: ok or error

actor_idstring | nullquery

Filter by the id of the API key or user that made the request

start_datestring | nullquery

Filter from this ISO datetime (inclusive)

end_datestring | nullquery

Filter until this ISO datetime (exclusive)

limitintegerquery

Max items to return

offsetintegerquery

Offset for pagination

include_payloadsbooleanquery

Include the full request and response bodies on every item. Off by default: audit payloads can be large, so the list ships summaries and GET .../audit-logs/{audit_id} returns one entry in full.

curl -X GET "https://api.illumina.sh/v1/default/namespaces/demo/audit-logs" \
  -H "Authorization: Bearer $ILLUMINA_API_KEY"
Response · 200
{
  "namespace_id": "demo",
  "total": 1,
  "limit": 1,
  "offset": 1,
  "items": [
    {
      "id": "ite_123",
      "action": "action",
      "transport": "transport",
      "namespace_id": "demo",
      "started_at": "started at",
      "ended_at": "ended at",
      "duration_ms": 1,
      "status": "status",
      "summary": "summary",
      "actor_kind": "actor kind",
      "actor_id": "act_123",
      "actor_label": "actor label",
      "request": {},
      "response": {},
      "metadata": {}
    }
  ]
}

400 · 401 · 402 · 403 · 404 · 405 · 409 · 410 · 422see error reference

GET/v1/default/namespaces/{namespace_id}/audit-logs/stats

Audit log statistics

Get audit log counts grouped by time bucket for charting.

Parameters

namespace_idstringpathrequired
actionstring | nullquery

Filter by action type

periodstringquery

Time period: 1d, 7d, 30d, or 90d. Anything else is read as 7d.

curl -X GET "https://api.illumina.sh/v1/default/namespaces/demo/audit-logs/stats" \
  -H "Authorization: Bearer $ILLUMINA_API_KEY"
Response · 200
{
  "namespace_id": "demo",
  "period": "period",
  "trunc": "trunc",
  "start": "start",
  "buckets": [
    {
      "time": "time",
      "actions": {
        "key": 1
      },
      "total": 1,
      "errors": 1
    }
  ],
  "total": 1,
  "errors": 1,
  "p50_ms": 1,
  "p95_ms": 1
}

400 · 401 · 402 · 403 · 404 · 405 · 409 · 410 · 422see error reference

GET/v1/default/namespaces/{namespace_id}/audit-logs/{audit_id}

Get an audit log entry

Return one audit log entry with its full request and response bodies.

Parameters

namespace_idstringpathrequired
audit_idstringpathrequired
curl -X GET "https://api.illumina.sh/v1/default/namespaces/demo/audit-logs/aud_123" \
  -H "Authorization: Bearer $ILLUMINA_API_KEY"
Response · 200
{
  "id": "ite_123",
  "action": "action",
  "transport": "transport",
  "namespace_id": "demo",
  "started_at": "started at",
  "ended_at": "ended at",
  "duration_ms": 1,
  "status": "status",
  "summary": "summary",
  "actor_kind": "actor kind",
  "actor_id": "act_123",
  "actor_label": "actor label",
  "request": {},
  "response": {},
  "metadata": {}
}

400 · 401 · 402 · 403 · 404 · 405 · 409 · 410 · 422see error reference

Search docs

Search the documentation