> ## Documentation Index > Fetch the complete documentation index at: https://tbd-6fc993ce-hypeship-changelog-august-13.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # List audit logs > API for searching audit logs. Limited to at most 30 day search, returns up to 100 records per page. Not recommended for bulk export. ## OpenAPI ````yaml https://api.onkernel.com/spec.json get /audit-logs openapi: 3.1.0 info: description: Developer tools and cloud infrastructure for AI agents to use web browsers title: Kernel API version: 0.1.0 servers: - description: API Server url: https://api.onkernel.com security: - bearerAuth: [] tags: - description: Create and manage browser sessions. name: Browsers - description: Control mouse, keyboard, and screen on the browser instance. name: Browser Computer Controls - description: Execute Playwright code against the browser instance. name: Browser Playwright - description: Read, write, and manage files on the browser instance. name: Browser Filesystem - description: Execute and manage processes on the browser instance. name: Browser Processes - description: Record and manage browser session video replays. name: Browser Replays - description: Stream logs from the browser instance. name: Browser Logs - description: Stream live telemetry events from a browser session. name: Browser Telemetry - description: Create, list, retrieve, and delete browser profiles. name: Profiles - description: Create and manage proxy configurations for routing browser traffic. name: Proxies - description: Create, list, retrieve, and delete browser extensions. name: Extensions - description: Create and manage browser pools for acquiring and releasing browsers. name: Browser Pools - description: Inspect the identity and authorization context for the current request. name: Authentication - description: >- Create and manage auth connections for automated credential capture and login. name: Managed Auth - description: Create and manage credentials for authentication. name: Credentials - description: Configure external credential providers like 1Password. name: Credential Providers - description: List applications and versions. name: Apps - description: Create and manage app deployments and stream deployment events. name: Deployments - description: Invoke actions and stream or query invocation status and events. name: Invocations - description: Read and manage organization-level limits. name: Organization - description: | Create and manage projects for resource isolation within an organization. When projects are disabled for the organization, project operations return `404` with code `projects_disabled`. name: Projects - description: Create and manage API keys for organization and project-scoped access. name: API Keys - description: Read audit log records for the authenticated organization. name: Audit Logs - description: Resolve browser and proxy recommendations for bot-protected sites. name: Site Configs paths: /audit-logs: get: tags: - Audit Logs summary: List audit logs description: >- API for searching audit logs. Limited to at most 30 day search, returns up to 100 records per page. Not recommended for bulk export. operationId: getAuditLogs parameters: - description: Lower bound (inclusive) for the audit record timestamp. in: query name: start required: true schema: example: '2026-01-01T00:00:00Z' format: date-time type: string - description: Upper bound (exclusive) for the audit record timestamp. in: query name: end required: true schema: example: '2026-01-02T00:00:00Z' format: date-time type: string - description: Filter by authentication strategy. in: query name: auth_strategy required: false schema: type: string - description: Filter by service name. in: query name: service required: false schema: type: string - description: Filter by HTTP method. in: query name: method required: false schema: type: string - description: Filter out results by HTTP method. explode: false in: query name: exclude_method required: false schema: items: type: string maxItems: 10 type: array style: form - description: Free-text search over path, user ID, email, client IP, and status. in: query name: search required: false schema: type: string - description: Additional user IDs to OR into free-text search. explode: false in: query name: search_user_id required: false schema: items: type: string maxItems: 100 type: array style: form - description: Maximum number of results to return. in: query name: limit required: false schema: default: 100 maximum: 100 minimum: 1 type: integer - description: >- Opaque page token from X-Next-Page-Token for the next page of older records. in: query name: page_token required: false schema: type: string responses: '200': content: application/json: schema: items: $ref: '#/components/schemas/AuditLogEntry' type: array description: A list of audit log records. headers: X-Has-More: description: Whether there are more records available beyond this page. schema: default: false type: boolean X-Limit: description: The limit applied to the returned records. schema: maximum: 100 minimum: 1 type: integer X-Next-Page-Token: description: >- Page token for the next page of older records, omitted when no more results. schema: type: string '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '500': $ref: '#/components/responses/InternalError' security: - bearerAuth: [] components: schemas: AuditLogEntry: properties: auth_strategy: description: Authentication strategy used for the request. type: string client_ip: description: Client IP address. type: string domain: description: Request host. type: string duration_ms: description: Request duration in milliseconds. type: integer email: description: Email of the authenticated user at request time, if any. type: string method: description: HTTP method. type: string path: description: Request path. type: string route: description: Matched API route pattern, if available. type: string status: description: HTTP response status code. type: integer timestamp: description: UTC time when the request was received. format: date-time type: string user_agent: description: User agent header. type: string user_id: description: ID of the authenticated user, if any. type: string required: - timestamp - auth_strategy - user_id - email - status - method - path - route - domain - duration_ms - client_ip - user_agent type: object Error: properties: code: description: Application-specific error code (machine-readable) example: bad_request type: string details: description: Additional error details (for multiple errors) items: $ref: '#/components/schemas/ErrorDetail' type: array inner_error: $ref: '#/components/schemas/ErrorDetail' message: description: Human-readable error description for debugging example: 'Missing required field: app_name' type: string required: - code - message type: object ErrorDetail: properties: code: description: Lower-level error code providing more specific detail example: invalid_input type: string message: description: Further detail about the error example: Provided version string is not semver compliant type: string type: object responses: BadRequest: content: application/json: schema: $ref: '#/components/schemas/Error' description: Bad Request – invalid input Unauthorized: content: application/json: schema: $ref: '#/components/schemas/Error' description: Unauthorized – missing or invalid authorization token Forbidden: content: application/json: schema: $ref: '#/components/schemas/Error' description: Forbidden – insufficient permissions or plan InternalError: content: application/json: schema: $ref: '#/components/schemas/Error' description: Internal Server Error securitySchemes: bearerAuth: scheme: bearer type: http ````