List recorded administration operations

GET

/katara/v1/orgs/{org_id}/environments/{environment_id}/audit

const url = 'https://api.katara.com/katara/v1/orgs/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/environments/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/audit?limit=25';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://api.katara.com/katara/v1/orgs/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/environments/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/audit?limit=25' \
  --header 'Authorization: Bearer <token>'

Requires current locus:audit:read authority and an owner, admin, operator or reviewer role. Scoped keys see only exact allowed resource IDs. Lists completed supported environment administration operations, including history before Test resets. This directory does not cover every execution, denied request or organization operation, and it is not an access review. A sealed copy for handing over is a separate export operation. Pages contain metadata only, ordered newest first by creation time and ID. Cursors expire after 15 minutes and bind the account, credential, environment and current authority; refresh after authority or reset changes. The envelope generation is current; each entry records its original generation. Duplicate, unknown and malformed query parameters are rejected.

Authorizations

Parameters

Path Parameters

org_id

required

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

environment_id

required

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

Query Parameters

limit

integer

default: 25 >= 1 <= 25

after

string

/^[A-Za-z0-9_-]{1,1024}$/

Header Parameters

X-Katara-Account-ID

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Optional for reads after sign-in. Use the UUID of the account that loaded the application. A different current cookie account returns account_changed before the handler runs. Session bearer and API key clients do not require this header.

Responses

200

Successful request

application/json

object

org_id

required

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

environment_id

required

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

mode

required

Allowed values: test live

reset_generation

required

integer

>= 1 <= 9007199254740991

data

required

Array<object>

<= 25 items

object

required

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

actor_id

required

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

operation

required

The recorded operation. repositories.versions.approve is Katara approving a document version it read from an attached repository; actor_id is then the person whose attaching or renewing gave the approval it acted under. The github.installations operations are the organization’s and github.login operations a member’s own; they appear in every environment of the organization with its current reset generation.

string

Allowed values: agent_subjects.create agent_subjects.change agents.publish agents.revoke approvals.decide budgets.fund budgets.close collections.create collections.rename collections.delete content.connections.prepare content.connections.verify content.connections.revoke content.stores.create content.stores.revoke content.uploads.begin content.uploads.complete content.access.change content.objects.delete content.versions.approve evaluations.create evaluations.dataset.publish evaluations.dataset.revoke evaluations.rubric.publish evaluations.rubric.revoke evaluations.rubric.review grants.issue grants.delegate grants.revoke keys.create payer_consents.create payer_consents.revoke policies.publish policies.review policies.activate policies.revoke runs.create runs.cancel tools.publish tools.revoke tools.set_enabled traces.export environments.reset agents.rollback.review agents.rollback.activate credentials.connect credentials.reconnect credentials.revoke credentials.oauth.begin credentials.oauth.activate event_sources.publish event_sources.activate event_sources.retire federation.self.begin federation.provision.approve schedules.publish schedules.activate schedules.retire evaluations.thresholds.record evaluations.online.set audit.export runs.reconcile holds.place holds.release actions.reconcile repositories.attach repositories.detach repositories.renew repositories.sync repositories.versions.approve github.installations.link github.installations.unlink github.login.link github.login.unlink

resource_id

required

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

reset_generation

required

integer

>= 1 <= 9007199254740991

created_at

required

string format: date-time

next_cursor

string

/^[A-Za-z0-9_-]{1,1024}$/

Example

{
  "mode": "test",
  "data": [
    {
      "operation": "agent_subjects.create"
    }
  ]
}

409

Account_changed: reload and review with the signed-in account.

default

Request error

application/json

object

error

required

object

message

required

string

>= 1 characters <= 500 characters

type

required

string

>= 1 characters <= 100 characters

code

required

Stable; branch on it. Any operation can answer invalid_request, with param naming the refused field when there is one; human_session_required, when an API key, service account or workload calls an operation only a signed-in person may perform; reauthentication_required, when a person’s sign-in is too old for the operation; permission_denied; route_not_found and method_not_allowed, when no operation matches the path or method; and feature_unavailable, when the operation’s service is not enabled on this deployment.

string

>= 1 characters <= 100 characters

param

required

The request field a refusal is about, such as the agent_id or run_id query parameter; null when the refusal is not about one field.

string | null

request_id

required

string

>= 1 characters <= 100 characters

upstream_status

required

integer | null

action

Allowed values: sign_in reauthenticate request_access review fund retry reconcile refresh support

operation_id

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

snapshot_ref

string format: uuid

/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/

Allowed value: 00000000-0000-0000-0000-000000000000

Example

{
  "error": {
    "action": "sign_in"
  }
}