List audit events

Security-relevant events for the organization: sign-ins, member and billing changes, keys and connectors created or revoked. Agency keys only. Never carries a raw IP address.

GEThttps://app.trygtm.com/api/v1/audit-events

Scope: read
MCP tool: list_audit_events

Query parameters

actionstringoptional: Only this action, e.g. api_key.created.
limitintegeroptionaldefault: 25: Rows per page, 1 to 100.
cursorstringoptional: Opaque cursor from the previous page's next_cursor. Omit for the first page. Keep every other argument the same while paging.

Request

curl -G https://app.trygtm.com/api/v1/audit-events \
  -H "Authorization: Bearer $TRYGTM_API_KEY" \
  --data-urlencode "action=send_email" \
  --data-urlencode "limit=25"

Response

{
  "data": [
    {
      "id": "d5e6f7a8-b9c0-4d1e-8f2a-3b4c5d6e7f80",
      "at": "2026-09-18T09:12:00.000Z",
      "action": "api_key.created",
      "actor_email": "ops@acme.example",
      "actor_kind": "user",
      "target_type": "api_key",
      "target_id": "e6f7a8b9-c0d1-4e2f-8a3b-4c5d6e7f8091"
    }
  ],
  "next_cursor": "WyIyMDI2LTA5LTAyVDA5OjQxOjAyLjAwMFoiLCI4ZjJhOTFjNC02ZDFlLTRjMGEtOWE1Ny0yZjNiMWM3ZTlkMTAiXQ"
}