Skip to main content
GET
https://api.bland.ai
/
v1
/
audit
/
logs
List Audit Logs
curl --request GET \
  --url https://api.bland.ai/v1/audit/logs \
  --header 'authorization: <authorization>'
{
  "data": {
    "events": [
      {
        "id": "00000000-0000-0000-0000-000000000001",
        "org_id": "00000000-0000-0000-0000-000000000100",
        "actor_id": "00000000-0000-0000-0000-000000000200",
        "event_type": "pathway.published",
        "resource_type": "convo_pathway",
        "resource_id": "00000000-0000-0000-0000-000000000300",
        "metadata": {
          "version_number": 3,
          "environment": "production"
        },
        "created_at": "2025-01-15T14:32:00.000Z"
      },
      {
        "id": "00000000-0000-0000-0000-000000000002",
        "org_id": "00000000-0000-0000-0000-000000000100",
        "actor_id": "00000000-0000-0000-0000-000000000200",
        "event_type": "auth.sso_login",
        "resource_type": null,
        "resource_id": null,
        "metadata": {
          "provider_id": "okta",
          "email": "[email protected]"
        },
        "created_at": "2025-01-15T14:30:00.000Z"
      }
    ],
    "total": 2,
    "total_pages": 1,
    "current_page": 1,
    "page_size": 50
  },
  "errors": null
}
Audit logs are an enterprise feature and not yet available for all accounts. To enable audit logging for your organization, contact your Bland representative or reach out to sales.

Overview

Returns a time-ordered log of auditable actions taken within your organization — logins, logouts, pathway changes, knowledge base edits, and more. Results are scoped to your organization and require an admin or owner role.

Supported event types

Event typeDescription
auth.sso_loginUser logged in via SSO
auth.logoutUser logged out
pathway.createdConversational pathway created
pathway.updatedPathway version updated
pathway.deletedPathway deleted
pathway.publishedPathway version published to an environment
kb.content_updatedKnowledge base text/markdown content edited
kb.file_replacedKnowledge base source file replaced
kb.urls_replacedKnowledge base URLs replaced (web scrape)
kb.version_restoredKnowledge base version restored
New event types are added over time. Filter by prefix (e.g. auth.*, pathway.*, kb.*) in your SIEM to group by category.

Headers

authorization
string
required
Your API key for authentication.

Query Parameters

event_type
string
Filter by exact event type (e.g. pathway.created, auth.sso_login).
actor_id
string
Filter by the user ID that performed the action.
created_after
string
ISO 8601 timestamp. Only return events created after this time.Example: 2025-01-01T00:00:00Z
created_before
string
ISO 8601 timestamp. Only return events created before this time.Example: 2025-02-01T00:00:00Z
page
number
default:"1"
Page number (1-indexed).
page_size
number
default:"50"
Results per page. Min 1, max 100.

Response

data
object
events
array
Array of audit event objects, ordered by created_at descending (newest first).
id
string
Unique identifier for the audit event.
org_id
string
The organization this event belongs to.
actor_id
string
The user ID that performed the action.
event_type
string
The type of event (see supported event types above).
resource_type
string | null
The type of resource affected (e.g. convo_pathway, kb). null for events like login/logout that don’t target a specific resource.
resource_id
string | null
The ID of the affected resource. null when no specific resource is involved.
metadata
object | null
Additional context about the event. Contents vary by event type — may include fields like version_id, name, environment, filename, email, etc.
created_at
string
ISO 8601 timestamp of when the event occurred.
total
number
Total number of events matching the query.
total_pages
number
Total number of pages.
current_page
number
The current page number.
page_size
number
The number of results per page.
errors
null
Always null on success.
{
  "data": {
    "events": [
      {
        "id": "00000000-0000-0000-0000-000000000001",
        "org_id": "00000000-0000-0000-0000-000000000100",
        "actor_id": "00000000-0000-0000-0000-000000000200",
        "event_type": "pathway.published",
        "resource_type": "convo_pathway",
        "resource_id": "00000000-0000-0000-0000-000000000300",
        "metadata": {
          "version_number": 3,
          "environment": "production"
        },
        "created_at": "2025-01-15T14:32:00.000Z"
      },
      {
        "id": "00000000-0000-0000-0000-000000000002",
        "org_id": "00000000-0000-0000-0000-000000000100",
        "actor_id": "00000000-0000-0000-0000-000000000200",
        "event_type": "auth.sso_login",
        "resource_type": null,
        "resource_id": null,
        "metadata": {
          "provider_id": "okta",
          "email": "[email protected]"
        },
        "created_at": "2025-01-15T14:30:00.000Z"
      }
    ],
    "total": 2,
    "total_pages": 1,
    "current_page": 1,
    "page_size": 50
  },
  "errors": null
}