MonetaryAI / Docs
API ReferenceAudit

List audit-event metadata

Returns newest-first immutable audit metadata for the authenticated administrator's tenant. Payloads, request bodies, tokens, errors, and unrelated personal data are never returned. Company permission: `listAuditEvents`. Defaults: ADMIN. Current company role permissions and active membership are checked on every request; signed legacy role claims alone do not authorize this operation.

GET
/api/v1/audit-events

Authorization

bearerAuth
headerAuthorizationBearer <token>

Obtained from POST /api/v1/auth/login, on the tenant's own subdomain. Presenting it on another tenant's subdomain is a 403.

Query Parameters

subjectType?string

Stored audit subject type

action?string

Stored audit action

actorMembershipId?string

Exact actor membership ID

Formatuuid
subjectId?string

Exact audit subject ID

Formatuuid
correlationId?string

Exact operation correlation ID

Formatuuid
from?string

Inclusive occurred-at lower bound

Formatdate-time
to?string

Exclusive occurred-at upper bound

Formatdate-time
page?integer

Zero-based page number

Formatint32
Default0
size?integer

Page size from 1 to 100

Formatint32
Default50
systemActor?boolean

true: system events; false: human events; omitted: both

dateFrom?string

Inclusive calendar start date, yyyy-MM-dd; cannot combine with from/to

Formatdate
dateTo?string

Inclusive calendar end date, yyyy-MM-dd; cannot combine with from/to

Formatdate
timezone?string

IANA timezone for calendar dates, default Asia/Tashkent

Default"Asia/Tashkent"

Response Body

Audit-event page returned

*/*
  1. response
items?array<>
page?integer
Formatint32
size?integer
Formatint32
totalElements?integer
Formatint64
totalPages?integer
Formatint64
curl -X GET 'https://api.monetaryai.uz/api/v1/audit-events'
{  "items": [    {      "action": "string",      "actionLabel": "string",      "actorDisplayName": "string",      "actorMembershipId": "16033ad1-9c3d-49dc-9a68-609e247a4a10",      "category": "string",      "correlationId": "48fb4cd3-2ef6-4479-bea1-7c92721b988c",      "deliveryState": "string",      "details": "string",      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",      "ipAddress": "string",      "occurredAt": "2019-08-24T14:15:22Z",      "subjectId": "68460e63-0717-47f9-8fd8-d28f152cb30b",      "subjectType": "string",      "systemActor": true    }  ],  "page": 0,  "size": 0,  "totalElements": 0,  "totalPages": 0}

Configure a subaccount PUT

Defaults to ADMIN/ACCOUNTANT. Name and enabled status may change using expectedVersion; parent and code cannot change. An enabled child requires an enabled parent. Audit is atomic. Company permission: `configureCompanySubaccount`. Defaults: ADMIN, ACCOUNTANT. Current company role permissions and active membership are checked on every request; signed legacy role claims alone do not authorize this operation.

Audit action filter options and categories GET

Known application actions plus historical tenant actions. CREATE/UPDATE/DELETE count committed creation, mutation and deletion/archive actions; lifecycle/login/delivery actions are OTHER. Company permission: `listAuditActions`. Defaults: ADMIN. Current company role permissions and active membership are checked on every request; signed legacy role claims alone do not authorize this operation.