> ## Documentation Index > Fetch the complete documentation index at: https://cobo.com/products/agentic-wallet/manual/llms.txt > Use this file to discover all available pages before exploring further. # List audit logs > This operation retrieves audit logs for the authenticated principal. You can filter by wallet, principal, action, result, or time range. Use cursor-based pagination with `after` and `before`. The `cursor` query parameter is deprecated (alias for `after`; use `after` instead). Prefer `meta.after` / `meta.before` / `meta.has_more` for pagination; `result.next_cursor` is deprecated. ## OpenAPI ````yaml get /api/v1/audit-logs openapi: 3.1.0 info: title: Cobo Agentic Wallet Service description: Unified wallet engine for human and agent principals version: 1.3.0 servers: [] security: [] paths: /api/v1/audit-logs: get: tags: - Audit summary: List audit logs description: >- This operation retrieves audit logs for the authenticated principal. You can filter by wallet, principal, action, result, or time range. Use cursor-based pagination with `after` and `before`. The `cursor` query parameter is deprecated (alias for `after`; use `after` instead). Prefer `meta.after` / `meta.before` / `meta.has_more` for pagination; `result.next_cursor` is deprecated. operationId: list_audit_logs parameters: - name: wallet_id in: query required: false schema: description: >- Filter audit logs by wallet ID. The wallet ID can be retrieved by calling the List all wallets operation. title: Wallet Id type: string format: uuid nullable: true description: >- Filter audit logs by wallet ID. The wallet ID can be retrieved by calling the List all wallets operation. - name: principal_id in: query required: false schema: description: >- Filter audit logs by the principal that performed the action. The principal ID can be retrieved by calling the List all principals operation. title: Principal Id type: string format: uuid nullable: true description: >- Filter audit logs by the principal that performed the action. The principal ID can be retrieved by calling the List all principals operation. - name: action in: query required: false schema: description: >- Filter audit logs by action name (for example, `transfer.initiate`, `delegation.create`). title: Action type: string minLength: 1 maxLength: 128 nullable: true description: >- Filter audit logs by action name (for example, `transfer.initiate`, `delegation.create`). - name: result in: query required: false schema: $ref: '#/components/schemas/AuditResult' description: >- Filter audit logs by result. Possible values: `allowed`, `denied`, `pending`, `error`. If omitted, all results are returned. title: Result nullable: true description: >- Filter audit logs by result. Possible values: `allowed`, `denied`, `pending`, `error`. If omitted, all results are returned. - name: start_time in: query required: false schema: description: >- Filter audit logs created at or after this timestamp (ISO 8601 format). title: Start Time type: string format: date-time nullable: true description: >- Filter audit logs created at or after this timestamp (ISO 8601 format). - name: end_time in: query required: false schema: description: Filter audit logs created before this timestamp (ISO 8601 format). title: End Time type: string format: date-time nullable: true description: Filter audit logs created before this timestamp (ISO 8601 format). - name: after in: query required: false schema: description: >- A cursor for forward pagination. Pass the `after` value from `meta` in a previous response to retrieve the next page. title: After type: string nullable: true description: >- A cursor for forward pagination. Pass the `after` value from `meta` in a previous response to retrieve the next page. - name: before in: query required: false schema: description: >- A cursor for backward pagination. Pass the `before` value from `meta` in a previous response to retrieve the preceding page. title: Before type: string nullable: true description: >- A cursor for backward pagination. Pass the `before` value from `meta` in a previous response to retrieve the preceding page. - name: cursor in: query required: false schema: description: Deprecated. Use `after` instead (same semantics). deprecated: true title: Cursor type: string nullable: true description: Deprecated. Use `after` instead (same semantics). deprecated: true - name: limit in: query required: false schema: type: integer maximum: 200 minimum: 1 description: 'The maximum number of items to return. Range: [1, 200].' default: 50 title: Limit description: 'The maximum number of items to return. Range: [1, 200].' - name: X-API-Key in: header required: false schema: title: X-Api-Key type: string nullable: true responses: '200': description: Successful Response content: application/json: schema: $ref: '#/components/schemas/StandardResponse_AuditLogPage_' '422': description: Validation Error content: application/json: schema: $ref: '#/components/schemas/WrappedValidationError' components: schemas: AuditResult: type: string enum: - allowed - denied - pending - error title: AuditResult description: Supported audit decision outcomes. StandardResponse_AuditLogPage_: properties: success: type: boolean title: Success default: true result: $ref: '#/components/schemas/AuditLogPage' suggestion: type: string title: Suggestion default: '' message: type: string title: Message default: '' meta: $ref: '#/components/schemas/PaginationMeta' nullable: true type: object required: - result title: StandardResponse[AuditLogPage] WrappedValidationError: title: WrappedValidationError type: object required: - success - error properties: success: type: boolean const: false default: false title: Success error: type: object title: Error required: - detail properties: detail: type: array title: Detail items: $ref: '#/components/schemas/ValidationError' AuditLogPage: properties: items: items: $ref: '#/components/schemas/AuditLogRead' type: array title: Items description: The list of audit log entries. next_cursor: title: Next Cursor description: >- Deprecated. Use `meta.after` for the next-page cursor. Same value as `meta.after` when more results exist; null when there is no next page. deprecated: true type: string nullable: true type: object required: - items title: AuditLogPage description: >- Cursor-paginated audit result set (legacy shape; also see response ``meta``). PaginationMeta: properties: total: title: Total type: integer nullable: true offset: title: Offset type: integer nullable: true limit: title: Limit type: integer nullable: true has_more: title: Has More type: boolean nullable: true after: title: After type: string nullable: true before: title: Before type: string nullable: true type: object title: PaginationMeta description: |- Pagination metadata for list responses. Supports both legacy offset-based and cursor-based pagination. Cursor fields (``has_more``, ``after``, ``before``) are populated for cursor-paginated endpoints. Legacy fields (``offset``, ``limit``) are populated when the caller uses the deprecated ``offset`` parameter. ValidationError: properties: loc: items: anyOf: - type: string - type: integer type: array title: Location msg: type: string title: Message type: type: string title: Error Type input: title: Input ctx: type: object title: Context type: object required: - loc - msg - type title: ValidationError AuditLogRead: properties: id: type: integer title: Id description: The audit log entry ID. principal_id: title: Principal Id description: >- The ID of the principal that performed the action. Null for system-initiated actions. type: string format: uuid nullable: true principal_type: type: string title: Principal Type description: >- The principal type that performed the action (for example, `agent`, `human`). wallet_id: title: Wallet Id description: >- The wallet ID associated with this audit entry. Null for non-wallet actions. type: string format: uuid nullable: true resource_type: title: Resource Type description: >- The type of resource involved (for example, `wallet`, `delegation`, `policy`). type: string nullable: true resource_id: title: Resource Id description: The ID of the resource involved. type: string nullable: true action: $ref: '#/components/schemas/AuditAction' description: >- The action that was performed (for example, `transfer.initiate`, `delegation.create`). result: $ref: '#/components/schemas/AuditResult' description: >- The outcome of the action. Possible values: `allowed`, `denied`, `pending`, `error`. authz_details: additionalProperties: true type: object title: Authz Details description: Authorization decision details for this action. request: additionalProperties: true type: object title: Request description: The request data associated with this action. error: title: Error description: The error message, if the action resulted in an error. type: string nullable: true created_at: type: string format: date-time title: Created At description: The timestamp when this audit entry was created, in ISO 8601 format. type: object required: - id - principal_id - principal_type - wallet_id - resource_type - resource_id - action - result - authz_details - request - error - created_at title: AuditLogRead description: Audit entry response payload. AuditAction: type: string enum: - unknown - authz.check - authz.owner_check - delegation.freeze - delegation.unfreeze - approval.approved - approval.rejected - sign_approval.created - sign_approval.approved - sign_approval.rejected - wallet.read - wallet.update - wallet.archive - wallet.address.create - wallet.address.list - wallet.balances - wallet.node_status - transfer.initiate - transfer.estimate_fee - transfer.allowed - transfer.denied - transfer.approval_required - transfer.approval.approved - transfer.approval.rejected - transfer.approval.expired - transfer.approval.executed - transfer.approval.execution_failed - contract_call.initiate - contract_call.estimate_fee - contract_call.allowed - contract_call.denied - contract_call.approval_required - contract_call.approval.approved - contract_call.approval.rejected - contract_call.approval.expired - contract_call.approval.executed - contract_call.approval.execution_failed - message_sign.initiate - message_sign.allowed - message_sign.denied - message_sign.approval_required - message_sign.approval.approved - message_sign.approval.rejected - message_sign.approval.expired - message_sign.approval.executed - message_sign.approval.execution_failed - transaction.list - transaction.list_recent_addresses - transaction.read - transaction.drop - transaction.speedup - user_transaction.list - user_transaction.read - policy.create - policy.list - policy.get - policy.update - policy.deactivate - policy.dry_run - faucet.deposit title: AuditAction description: Audit action. ````