togglddocs
Dashboard
GuidesAPI reference
Audit log

List audit events

GET
/api/v1/audit-log

Returns up to 100 of the most recent configuration changes in the workspace, newest first. Use the query parameters to filter the events. When you combine filters, an event must match all of them.

Requires a management key.

Authorization

bearer
headerAuthorizationBearer <token>

Send a credential in the Authorization header: Authorization: Bearer <token>. Each credential belongs to one environment of one workspace, so the API never takes a workspace or environment in the URL.

  • Management key (ffk_…, secret): manages flags, segments, environments, and API keys, and reads the audit log and analytics. It can also do everything an evaluation key can.
  • Evaluation key (ffk_…, secret): for server SDKs. It evaluates flags, reads flag definitions for local evaluation, and sends telemetry.
  • Public token (ffp_…, not secret): for browser and mobile apps. It evaluates flags through OFREP and sends telemetry. It cannot read flag definitions.

Keep secret keys on your server. A 401 response means the credential is missing or not valid. A 403 response means the credential is valid but its role cannot perform the operation.

Query Parameters

resourceType?string

Return only events for this kind of resource.

Value in"flag""segment""environment""apiKey""tenant"
resourceId?string

Return only events for this resource: a flag key, segment key, environment ID, or API key ID.

environmentId?string

Return only events for this environment ID.

action?string

Return only events with this action, such as flag.update.

Value in"flag.create""flag.update""flag.delete""segment.create""segment.update""segment.delete""environment.update""environment.create""environment.delete""apiKey.create""apiKey.revoke""tenant.create""tenant.update""tenant.delete"

Response Body

OK

application/json
  1. response
[index: integer]?

One recorded change to the workspace configuration.

Example Request
curl -X GET 'https://api.toggld.io/api/v1/audit-log'
Example Response
[  {    "id": "aud_1e4b7d0a-3c6f-4a9e-8b2d-5f8a1c4e7b0d",    "tenantId": "t_5b9e2c4a-8f1d-4a7c-b3e6-9d0c2f5a8b1e",    "environmentId": "env_3f6b2a9c-1d4e-4f7a-8b2c-5e9d0a1f3c7b",    "actor": {      "type": "apiKey",      "id": "key_8a1d4c7e-2b5f-4e9a-9c3d-6f0b1a2e4d8c"    },    "action": "flag.update",    "resourceType": "flag",    "resourceId": "new-checkout",    "before": {      "key": "new-checkout",      "enabled": false    },    "after": {      "key": "new-checkout",      "enabled": true    },    "metadata": {},    "occurredAt": "2026-05-02T09:30:00.000Z"  }]

List public tokens GET

Returns the public token of every environment, including the full token. If an environment has no token yet, this request creates one. Requires a management key.

Retrieve flag analytics GET

Returns evaluation counts for one flag in the credential's environment, over the last hour, 24 hours, or 7 days. The counts come from telemetry, so new evaluations can take a short time to appear. Requires a management key. Evaluation keys and public tokens get `403`. Returns `404` if no flag has this key.