Your AWS SES. Your dedicated Mailat. See how it works
Documentation

List Audit Logs

Request, response and authentication details for your Mailat instance.

← All API operations
GET/api/v1/security/audit-logs

ListAuditLogs returns audit logs for the organization GET /api/v1/security/audit-logs

Authentication & compatibility

This operation requires an active human session. API keys cannot call it. Additional role or MFA checks may apply.

Mailat application, account or shared resource API. Individual operations can require configured external services; this label is not a runtime-readiness guarantee.

Contract 2026-10-04. Your running instance's /api/v1/openapi.json is authoritative for its deployed release.

Request

Set MAILAT_BASE_URL to your instance origin (without /api/v1) and MAILAT_TOKEN to an appropriate credential. Replace path placeholders and example data before running. These examples do not execute in this page.

cURL request
curl --request GET "$MAILAT_BASE_URL/api/v1/security/audit-logs" \
  --header "Authorization: Bearer $MAILAT_TOKEN"

Parameters

query
actionstring
query
endDatestring
query
limitinteger
query
offsetinteger
query
resourcestring
query
resourceIdstring
query
startDatestring
query
statusstring
query
userIdinteger

Responses

HTTP statuses and body shapes below come from the pinned contract. Not every shared error applies to every request. Retain the original idempotency key when retrying a send.

200 · Success

application/json

responseobject
Fields
codeintegerrequired
dataobject
Fields
logsarray
Each itemall of · nullable
Variant 1object
Fields · service.AuditLog
actionstring
createdAtstring (date-time)
descriptionstring
idinteger (int64)
ipAddressstring
newValuesobject
Additional valuesany value
oldValuesobject
Additional valuesany value
orgIdinteger (int64)
requestIdstring
resourcestring
resourceIdstring
statusstring
userAgentstring
userIdall of · nullable
Variant 1integer (int64)
totalinteger (int64)
messagestringrequired
400 · Invalid input

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
401 · Missing, expired or revoked authentication

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
403 · Insufficient permission

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
404 · Resource not found

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
409 · Conflict or changed idempotency payload

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
410 · Recovery cursor expired; resynchronize

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
429 · Rate limit exceeded; respect Retry-After
Header: Retry-Afterinteger

Seconds until the next fixed-minute request window.

minimum: 1

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
500 · Internal failure; retain the idempotency key

application/json

responseobject
Fields
codeintegerrequired
messagestringrequired
Download the full OpenAPI contract