# List activity log

Return workspace activity events in reverse-chronological order.

Endpoint: GET /workspaces/{workspace_id}/logs
Version: 0.23.8
Security: Auth

## Path parameters:

  - `workspace_id` (string, required)
    Unique identifier (UUID) of the workspace.
    Example: "550e8400-e29b-41d4-a716-446655440000"

## Query parameters:

  - `page` (integer)
    1-based page index. Defaults to 1 when omitted.
    Example: 1

  - `limit` (integer)
    Page size. Defaults to 30, capped at 100.
    Example: 20

  - `sort_by` (string)
    Sort field. Prefix with - for descending order (e.g. -created_at).
    Enum: "created_at", "-created_at"

  - `type` (array)
    Filter log events by type.
    Enum: "workspace.created", "workspace.renamed", "workspace_member.joined", "workspace_member.role_changed", "workspace_member.removed", "project.created", "project.renamed", "project.deleted", "project_member.added", "project_member.role_changed", "project_member.removed", "invitation.created", "invitation.accepted", "invitation.declined", "invitation.revoked", "invitation.expired", "api_key.created", "api_key.revoked", "rpc_key.created", "rpc_key.revoked", "mgt_key.created", "mgt_key.revoked"

  - `actor_id` (string)
    Filter log events by actor user UUID.
    Example: "550e8400-e29b-41d4-a716-446655440000"

  - `from` (string)
    Return only events emitted at or after this timestamp.
    Example: "2024-01-01T00:00:00Z"

  - `to` (string)
    Return only events emitted before this timestamp.
    Example: "2024-02-01T00:00:00Z"

## Response 200 fields (application/json):

  - `items` (array, required)

  - `items.workspace_id` (string, required)
    Workspace the event belongs to.

  - `items.actor_id` (string)
    User UUID that produced the event. Absent for system-emitted events.

  - `items.type` (string, required)
    Discriminator for activity log event types.
    Enum: "workspace.created", "workspace.renamed", "workspace_member.joined", "workspace_member.role_changed", "workspace_member.removed", "project.created", "project.renamed", "project.deleted", "project_member.added", "project_member.role_changed", "project_member.removed", "invitation.created", "invitation.accepted", "invitation.declined", "invitation.revoked", "invitation.expired", "api_key.created", "api_key.revoked", "rpc_key.created", "rpc_key.revoked", "mgt_key.created", "mgt_key.revoked"

  - `items.data` (any, required)
    Event-specific payload. The type field inside the payload echoes the top-level type and acts as the discriminator; switch on it to get a typed data shape (e.g. project.renamed yields { old_name, new_name, ... }). Payload shapes are documented per event type in this schema.

  - `items.created_at` (string, required)
    Timestamp when the event was emitted.
    Example: "2024-01-15T10:30:00Z"

  - `references` (object, required)
    Entities referenced by events in this page, keyed by ID.

  - `references.users` (object, required)
    Users referenced by events in this page, keyed by user ID.

  - `meta` (object, required)
    Pagination metadata returned on every list response. page and limit echo the values used to build this page (defaults are applied when the request omits them). total and total_pages reflect the full result set after any filters are applied.

  - `meta.limit` (integer, required)
    Page size used to build this response.

  - `meta.page` (integer, required)
    Index of the page returned, starting at 1.

  - `meta.total` (integer, required)
    Total number of items matching the request across all pages.

  - `meta.total_pages` (integer, required)
    Total number of pages available at the current limit.

## Response 400 fields (application/problem+json):

  - `type` (string, required)
    A URI that identifies the error type.
Open it in a browser to read about this category of error.
    Example: "https://docs.vilna.io/apis/problems/invalid-request"

  - `title` (string, required)
    A short summary of the error type.
Use detail for information specific to this occurrence.
    Example: "Invalid Request"

  - `status` (integer, required)
    The HTTP status code for this error.
Matches the status code of the HTTP response.
    Example: 400

  - `detail` (string)
    A human-readable explanation of what went wrong in this specific case.
May be localized.
    Example: "Validation error"

  - `instance` (string)
    A URI that identifies this specific error occurrence.
Include this value when contacting support.

  - `code` (string, required)
    Stable machine-readable error code ({domain}.{reason}) for programmatic error handling. Unlike the HTTP status or free-form detail, this code is guaranteed not to change between versions for a given error condition, so it is safe to branch on in client code. Defaults to unspecified when the server has not assigned a specific code.
    Example: "blockchain.name_too_long"

  - `fields` (array)
    List of invalid fields in the request

  - `fields.name` (string, required)
    The name of the invalid field
    Example: "meta"

  - `fields.reason` (string, required)
    Why this field is invalid
    Example: "Exceeded maximum data size — must not exceed 1000 characters"

## Response 401 fields (application/problem+json):

  - `type` (string, required)
    A URI that identifies the error type.
Open it in a browser to read about this category of error.
    Example: "https://docs.vilna.io/apis/problems/unauthorized"

  - `title` (string, required)
    A short summary of the error type.
Use detail for information specific to this occurrence.
    Example: "Unauthorized"

  - `status` (integer, required)
    The HTTP status code for this error.
Matches the status code of the HTTP response.
    Example: 401

  - `detail` (string)
    A human-readable explanation of what went wrong in this specific case.
May be localized.
    Example: "Missing or invalid authentication credentials"

  - `instance` (string)
    A URI that identifies this specific error occurrence.
Include this value when contacting support.

  - `code` (string, required)
    Stable machine-readable error code ({domain}.{reason}) for programmatic error handling. Unlike the HTTP status or free-form detail, this code is guaranteed not to change between versions for a given error condition, so it is safe to branch on in client code. Defaults to unspecified when the server has not assigned a specific code.
    Example: "auth.unauthorized"

## Response 403 fields (application/problem+json):

  - `type` (string, required)
    A URI that identifies the error type.
Open it in a browser to read about this category of error.
    Example: "https://docs.vilna.io/apis/problems/forbidden"

  - `title` (string, required)
    A short summary of the error type.
Use detail for information specific to this occurrence.
    Example: "Forbidden"

  - `status` (integer, required)
    The HTTP status code for this error.
Matches the status code of the HTTP response.
    Example: 403

  - `detail` (string)
    A human-readable explanation of what went wrong in this specific case.
May be localized.
    Example: "You do not have permission to perform this action"

  - `instance` (string)
    A URI that identifies this specific error occurrence.
Include this value when contacting support.

  - `code` (string, required)
    Stable machine-readable error code ({domain}.{reason}) for programmatic error handling. Unlike the HTTP status or free-form detail, this code is guaranteed not to change between versions for a given error condition, so it is safe to branch on in client code. Defaults to unspecified when the server has not assigned a specific code.
    Example: "chain.not_allowed"

## Response 404 fields (application/problem+json):

  - `type` (string, required)
    A URI that identifies the error type.
Open it in a browser to read about this category of error.
    Example: "https://docs.vilna.io/apis/problems/not-found"

  - `title` (string, required)
    A short summary of the error type.
Use detail for information specific to this occurrence.
    Example: "Not Found"

  - `status` (integer, required)
    The HTTP status code for this error.
Matches the status code of the HTTP response.
    Example: 404

  - `detail` (string)
    A human-readable explanation of what went wrong in this specific case.
May be localized.
    Example: "The requested resource was not found"

  - `instance` (string)
    A URI that identifies this specific error occurrence.
Include this value when contacting support.

  - `code` (string, required)
    Stable machine-readable error code ({domain}.{reason}) for programmatic error handling. Unlike the HTTP status or free-form detail, this code is guaranteed not to change between versions for a given error condition, so it is safe to branch on in client code. Defaults to unspecified when the server has not assigned a specific code.
    Example: "blockchain.not_found"

## Response default fields (application/problem+json):

  - `type` (string, required)
    A URI that identifies the error type.
Open it in a browser to read about this category of error.

  - `title` (string, required)
    A short summary of the error type.
Use detail for information specific to this occurrence.

  - `status` (integer, required)
    The HTTP status code for this error.
Matches the status code of the HTTP response.

  - `detail` (string)
    A human-readable explanation of what went wrong in this specific case.
May be localized.

  - `instance` (string)
    A URI that identifies this specific error occurrence.
Include this value when contacting support.

  - `code` (string, required)
    Stable machine-readable error code ({domain}.{reason}) for programmatic error handling. Unlike the HTTP status or free-form detail, this code is guaranteed not to change between versions for a given error condition, so it is safe to branch on in client code. Defaults to unspecified when the server has not assigned a specific code.