Audit Logs

The audit_logs functions are currently in BETA. The API may change without notice. A one-time warning is emitted on first use.

Audit log entries record administrative and API activity in your account. The caller must be an account admin and the account must have audit logging enabled.

List Audit Logs

List audit log entries for the account, ordered newest first. Supports time-window filtering, user filtering, operation type filtering, and cursor-based pagination.

import { listAuditLogs } from "@arizeai/ax-client";

const { data: logs, pagination } = await listAuditLogs({
  operationType: "MUTATION",  // "QUERY", "MUTATION", or "SUBSCRIPTION" (optional)
  userId: "your_user_id",     // filter by user (optional)
  startTime: new Date("2026-01-01T00:00:00Z"),  // optional, defaults to 30 days before endTime
  endTime: new Date(),                          // optional, defaults to now
  limit: 50,
});

Parameters

Parameter	Type	Description
`startTime`	`Date \| string`	Optional inclusive lower bound on `created_at`. Accepts an ISO 8601 string or a `Date` object. Defaults to 30 days before `endTime`.
`endTime`	`Date \| string`	Optional inclusive upper bound on `created_at`. Accepts an ISO 8601 string or a `Date` object. Defaults to now.
`userId`	`string`	Optional base64-encoded user ID. When provided, filters results to entries for that user.
`operationType`	`"QUERY" \| "MUTATION" \| "SUBSCRIPTION"`	Optional operation type filter.
`limit`	`number`	Maximum number of results to return (1-100).
`cursor`	`string`	Pagination cursor from a previous response.

Audit Log Fields

Each returned AuditLog object includes:

Field	Type	Description
`id`	`string`	The base64-encoded opaque identifier of the audit log entry.
`userId`	`string`	The global identifier of the user who performed the action.
`ip`	`string`	The IP address from which the request originated.
`operationType`	`"QUERY" \| "MUTATION" \| "SUBSCRIPTION"`	The operation type.
`operationName`	`string \| null`	The name of the GraphQL operation or REST endpoint.
`operationText`	`string \| null`	The full text of the operation (query or mutation body, or REST request body).
`variables`	`string \| null`	JSON-serialized variables passed with the operation.
`createdAt`	`Date`	Timestamp when the action was recorded.

API reference

API clients

List Audit Logs

Parameters

Audit Log Fields

​List Audit Logs

​Parameters

​Audit Log Fields

List Audit Logs

Parameters

Audit Log Fields