Platform Audit Log | AuthOS Docs | Auth Operating System API and SDK Guides

Platform owner endpoint for viewing administrative action history across the entire platform.

Overview

The endpoint exposes recorded platform-owner actions such as organization approvals, tier changes, and user management. Audit coverage must be verified against the release and actions an operator relies on; the log alone does not establish compliance or complete security monitoring.

Endpoints

Method	Path	Description
`GET`	`/api/platform/audit-log`	Get platform audit logs

GET /api/platform/audit-log

Retrieve a paginated list of platform audit logs.

Authorization: Platform Owner Only

Query Parameters

Parameter	Type	Default	Description
`action`	`string`	-	Filter by action type (e.g., `approve_organization`)
`target_type`	`string`	-	Filter by target type (e.g., `organization`)
`target_id`	`string`	-	Filter by target unique identifier
`limit`	`integer`	50	Items per page (max 100)
`offset`	`integer`	0	Pagination offset

Example Request

curl -X GET "https://sso.example.com/api/platform/audit-log?action=approve_organization&limit=20" \
  -H "Authorization: Bearer {platform_owner_jwt}"

Response (200 OK)

{
  "logs": [
    {
      "id": "audit-uuid",
      "platform_owner_id": "admin-uuid",
      "action": "approve_organization",
      "target_type": "organization",
      "target_id": "org-uuid",
      "metadata": "{\"tier_id\":\"tier_pro\",\"previous_status\":\"pending\",\"new_status\":\"active\"}",
      "created_at": "2025-01-15T10:30:00Z"
    }
  ],
  "total": 156
}

Action Types

Commonly logged platform actions:

Action	Description
`approve_organization`	Organization approved and activated
`reject_organization`	Organization registration rejected
`suspend_organization`	Organization suspended
`activate_organization`	Suspended organization reactivated
`delete_organization`	Organization permanently deleted
`update_organization_tier`	Organization tier changed
`update_organization_features`	Organization feature flags updated
`promote_platform_owner`	User granted platform owner status
`demote_platform_owner`	User removed from platform owners
`force_disable_mfa`	MFA force-disabled for a user
`user.impersonate`	Platform owner initiated user impersonation

Retention

The public API does not expose mutation or deletion operations for these audit records. Operators remain responsible for database access controls, retention, backups, exports, and applicable legal requirements; no permanent-retention or tamper-proof guarantee is made.