{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/ada/main/json-schema/ada-audit-log-event-list-schema.json", "title": "AuditLogEventList", "description": "A cursor-paginated page of Audit log events", "x-generated": "2026-10-12", "x-method": "derived", "x-generator": "derive-json-schema.py", "x-source": "openapi/ada-audit-log-api-openapi.yml#/components/schemas/AuditLogEventList", "type": "object", "properties": { "data": { "type": "array", "items": { "$ref": "#/$defs/AuditLogEvent" }, "description": "The page of Audit log events (at most `limit` items)" }, "meta": { "$ref": "#/$defs/AuditLogEventListMeta", "description": "Pagination metadata" } }, "required": [ "data", "meta" ], "$defs": { "AuditLogEvent": { "type": "object", "properties": { "id": { "type": "string", "description": "Globally unique event id (uuid4)" }, "timestamp": { "type": "string", "format": "date-time", "description": "When the change occurred (ISO 8601, UTC, millisecond precision)" }, "actor_email": { "type": "string", "description": "Email of the user who made the change, or the owner of a dashboard-created Platform API key. Empty for system and service-token actors." }, "actor_name": { "type": "string", "description": "Display name of the actor; empty when unavailable" }, "actor_user_id": { "type": "string", "description": "User id of the actor. For an API key, the id of the user who created the key. Empty for system and service-token actors." }, "entity_type": { "type": "string", "description": "The type of entity that was changed" }, "entity_id": { "type": "string", "description": "The id of the entity that was changed" }, "entity_name": { "type": "string", "description": "A human-readable name for the changed entity" }, "activity": { "type": "string", "description": "What happened to the entity. One of `created`, `updated`, `deleted`, `executed`, `invited`, `activated`, or `deactivated`." }, "interface": { "type": "string", "description": "Where the change originated, such as `dashboard`, `api`, `mcp`, `cli`, `import`, `export`, or `system` (background jobs and Ada's internal processing)." }, "context_ip": { "type": "string", "description": "Source IP address of the request that made the change" }, "context_user_agent": { "type": "string", "description": "User agent string of the request that made the change" }, "api_key_name": { "type": "string", "description": "Name of the API key used, when the change was made by a dashboard-created Platform API key; empty otherwise." } }, "required": [ "id", "timestamp", "entity_type", "entity_id", "activity" ], "description": "A single Audit log event: one configuration change recorded for the account. Empty-string fields mean the value was unavailable for that event (for example, a system actor has no email).", "title": "AuditLogEvent" }, "AuditLogEventListMeta": { "type": "object", "properties": { "next_page_url": { "type": [ "string", "null" ], "description": "URL for the next page of results, or `null` on the last or empty page. Replay it unchanged to keep the time window and the cursor constant across pages." } }, "description": "Pagination metadata", "title": "AuditLogEventListMeta" } } }