List audit events

curl --request GET \
  --url https://api.igrisecurity.com/api/v1/audit-events \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.igrisecurity.com/api/v1/audit-events', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/audit-events"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

{
  "data": [
    {
      "id": "1a2b3c4d-0000-4000-8000-000000000004",
      "source": "igris",
      "type": "mcp_tool_call",
      "timestamp": "2026-01-01T00:00:00Z",
      "toolName": "create_branch",
      "policyAction": "allow",
      "policyId": "7b1d4c2e-0000-4000-8000-000000000002",
      "policyName": "Block delete tools",
      "connectionSlug": "github-prod",
      "sessionId": "9c3e5f10-0000-4000-8000-000000000003",
      "userId": "alice@company.com",
      "traceId": "ig_trace_abc123",
      "severity": null
    }
  ],
  "meta": {
    "total": 1234,
    "limit": 50,
    "offset": 0,
    "nextCursor": "2026-01-01T00:00:00.000Z"
  }
}

{
  "error": "Unauthorized"
}

{
  "error": "Forbidden",
  "required": "policies:write"
}