# Audit investigation

2 management API operations.

- [GET /v1/audit/search](/docs/api/operations/search_v1_audit_search_get): Search
- [GET /v1/audit/export](/docs/api/operations/export_v1_audit_export_get): Export

## GET /v1/audit/search

Search

Search

Authentication: bearer access token with audience `taifa-management`. Endpoint roles and eligibility are reviewed separately from the OpenAPI bearer scheme.

No operation-specific scopes are declared in the OpenAPI document. Bearer authentication and endpoint authorization requirements still apply.

### Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `institution_id` | query | string \| null | No |  |
| `actor` | query | string \| null | No |  |
| `operation` | query | string \| null | No |  |
| `outcome` | query | string \| null | No |  |
| `target` | query | string \| null | No |  |
| `since` | query | string \| null | No |  |
| `until` | query | string \| null | No |  |
| `cursor` | query | string \| null | No |  |
| `limit` | query | integer | No | Validation: minimum 1; maximum 1000 |

### Request body

This operation has no request body.

### Responses

#### 200

Successful Response

| Field | Variant | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `items` |  | AuditRead[] | Yes |  |
| `next_cursor` |  | string \| null | Yes |  |
| `limit` |  | integer | Yes |  |

#### 422

Validation Error

| Field | Variant | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `detail` |  | ValidationError[] | No |  |

### Request examples

Illustrative only. Replace placeholders and keep management tokens on the server.

#### cURL

```sh
curl -X GET 'https://YOUR_IDENTITY_HOST/v1/audit/search' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
```

#### TypeScript (Node.js/server-side)

```typescript
const response = await fetch('https://YOUR_IDENTITY_HOST/v1/audit/search', {
  method: 'GET',
  headers: {
    Authorization: `Bearer ${process.env.TAIFA_MANAGEMENT_TOKEN}`
  }
});

const result = await response.json();
```

#### Python

```python
import os
import requests

response = requests.request(
    'GET',
    'https://YOUR_IDENTITY_HOST/v1/audit/search',
    headers={'Authorization': 'Bearer ' + os.environ['TAIFA_MANAGEMENT_TOKEN']}
)
response.raise_for_status()
```

### Response example

No response example in the current specification.


[Request and response examples](/docs/api/operations/search_v1_audit_search_get)

## GET /v1/audit/export

Export

Export

Authentication: bearer access token with audience `taifa-management`. Endpoint roles and eligibility are reviewed separately from the OpenAPI bearer scheme.

No operation-specific scopes are declared in the OpenAPI document. Bearer authentication and endpoint authorization requirements still apply.

### Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `institution_id` | query | string \| null | No |  |
| `actor` | query | string \| null | No |  |
| `operation` | query | string \| null | No |  |
| `outcome` | query | string \| null | No |  |
| `target` | query | string \| null | No |  |
| `since` | query | string \| null | No |  |
| `until` | query | string \| null | No |  |
| `cursor` | query | string \| null | No |  |
| `limit` | query | integer | No | Validation: minimum 1; maximum 1000 |

### Request body

This operation has no request body.

### Responses

#### 200

Successful Response

No fields declared in the current specification.

#### 422

Validation Error

| Field | Variant | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `detail` |  | ValidationError[] | No |  |

### Request examples

Illustrative only. Replace placeholders and keep management tokens on the server.

#### cURL

```sh
curl -X GET 'https://YOUR_IDENTITY_HOST/v1/audit/export' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
```

#### TypeScript (Node.js/server-side)

```typescript
const response = await fetch('https://YOUR_IDENTITY_HOST/v1/audit/export', {
  method: 'GET',
  headers: {
    Authorization: `Bearer ${process.env.TAIFA_MANAGEMENT_TOKEN}`
  }
});

const result = await response.json();
```

#### Python

```python
import os
import requests

response = requests.request(
    'GET',
    'https://YOUR_IDENTITY_HOST/v1/audit/export',
    headers={'Authorization': 'Bearer ' + os.environ['TAIFA_MANAGEMENT_TOKEN']}
)
response.raise_for_status()
```

### Response example

No response example in the current specification.


[Request and response examples](/docs/api/operations/export_v1_audit_export_get)