Audit Entries

List audit entries

GET/audit-entries
transactions:readlist_audit_entriesRead-only

Lists audit entries of changes to a deal's transactions, newest first. Send filter[deal_id], filter[record_id], filter[investor_id] or filter[external_investor_id], or the call returns 422. Entries about a journey event are listed only when its investor is visible to you, including after the event was deleted. Deal-level entries, including workflow_event_move_back, are listed unless they name an investor you can't see. Entries are never changed or deleted.

Query parameters

  • limitinteger#

    Page size (1–100). Defaults to 25; values are clamped to the range.

    Default: 25
  • cursorstring#

    Opaque pagination cursor taken from a prior response's meta.next_cursor.

  • fieldsstring#

    Comma-separated top-level fields to return. id is always returned.

  • sortstring#

    Comma-separated fields to sort by, from the operation's allowed list. Prefix a field with - for descending. The record id is always the final tiebreak.

  • filter[deal_id]string (uuid)#

    Entries on this deal. Send this or filter[record_id], filter[investor_id] or filter[external_investor_id]. Takes [in] and [not_in] with a comma-separated list.

  • filter[record_id]string (uuid)#

    Entries about this record: a journey event, or the deal. Send this or filter[deal_id], filter[investor_id] or filter[external_investor_id]. Takes [in] and [not_in] with a comma-separated list.

  • filter[investor_id]string (uuid)#

    Entries about this platform investor. Send this or filter[deal_id], filter[record_id] or filter[external_investor_id]. Takes [in] and [not_in] with a comma-separated list.

  • filter[external_investor_id]string (uuid)#

    Entries about this external investor. Send this or filter[deal_id], filter[record_id] or filter[investor_id]. Takes [in] and [not_in] with a comma-separated list.

  • filter[type]string#

    Entries of this type: workflow_event_change, workflow_change or settings_change. Takes [in], [not_in] and [contains].

  • filter[sub_type]string#

    Entries of this kind of change, such as workflow_event_create. Takes [in], [not_in] and [contains].

  • filter[created_at]string#

    Only entries created in a range, written filter[created_at][gte]=2026-10-01. Takes gt, gte, lt and lte.

Responses

200

The audit entries.

AuditEntry[]
{
  "data": [
    {
      "id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "type": "string",
      "sub_type": "string",
      "record_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "changed_by_user_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "investor_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "external_investor_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "old_data": {},
      "new_data": {},
      "created_at": "2026-06-12T10:00:00+00:00",
      "updated_at": "2026-06-12T10:00:00+00:00"
    }
  ],
  "meta": {
    "limit": 1,
    "next_cursor": "string",
    "prev_cursor": "string"
  }
}
401

Authentication failed. error.code is one of invalid_token, expired, revoked.

Error
403

Authorization failed. error.code is one of org_disabled, ip_blocked, missing_scope, scope_disabled, user_disabled.

Error
422

The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per problem, or a code documented on the operation.

Error
429

Rate limit exceeded (error.code = rate_limited).

Error

Examples

curl https://your-org-domain/kong/core/api/v2/audit-entries\
  -H "Authorization: Bearer $HELM_API_KEY"\
  -H "Content-Type: application/json"