Audit

sfp server API reference for Audit: 9 endpoints.

GET/sfp/api/audit

Retrieve audit trail entries across registered audit sources. Requires Owner role. Use the approval compliance API for SOX approval exports.

Authorization

access-token
AuthorizationBearer <token>

In: header

Query Parameters

source?string

Audit source to query

Value in

  • "integration"
  • "approval"
  • "variable"
  • "environment"
  • "slack"
action?string

Filter by action. Prefix match without dot (integration) or exact action (integration.created).

actor?string

Filter by actor email

repositoryIdentifier?string

Filter by repository identifier where the audit source exposes one

entityId?string

Filter by audited entity identifier

from?string

ISO 8601 start timestamp, inclusive

to?string

ISO 8601 end timestamp, exclusive

limit?number

Maximum entries to return

Rangevalue <= 1000
Default50
offset?number

Offset into the result set

Default0

Response Body

curl -X GET "https://example.com/sfp/api/audit"
Empty
POST/sfp/api/audit/exports

Creates an owner-only audit CSV export job. Approval compliance exports remain under the approval compliance API.

Authorization

access-token
AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/sfp/api/audit/exports" \  -H "Content-Type: application/json" \  -d '{}'
Empty
GET/sfp/api/audit/exports/{id}

Authorization

access-token
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Audit export id

Response Body

curl -X GET "https://example.com/sfp/api/audit/exports/string"
Empty
GET/sfp/api/audit/exports/{id}/download

Authorization

access-token
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Audit export id

Response Body

curl -X GET "https://example.com/sfp/api/audit/exports/string/download"
Empty
GET/sfp/api/audit/exports/{id}/download-url

Authorization

access-token
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Audit export id

Response Body

curl -X GET "https://example.com/sfp/api/audit/exports/string/download-url"
Empty
GET/sfp/api/audit/internal/exports/{id}/rows

Authorization

access-token
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Query Parameters

cursorCreatedAt?string

Cursor created_at value from the previous page

cursorId?string

Cursor row id from the previous page

limit?number

Maximum rows to return

Rangevalue <= 1000
Default1000

Response Body

curl -X GET "https://example.com/sfp/api/audit/internal/exports/string/rows"
Empty
POST/sfp/api/audit/internal/exports/{id}/complete

Authorization

access-token
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/sfp/api/audit/internal/exports/string/complete" \  -H "Content-Type: application/json" \  -d '{    "objectKey": "string",    "fileName": "string",    "rowCount": 0,    "fileSizeBytes": 0  }'
Empty
POST/sfp/api/audit/internal/exports/{id}/fail

Authorization

access-token
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/sfp/api/audit/internal/exports/string/fail" \  -H "Content-Type: application/json" \  -d '{    "error": "string"  }'
Empty
POST/sfp/api/audit/internal/exports/cleanup

Authorization

access-token
AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/sfp/api/audit/internal/exports/cleanup" \  -H "Content-Type: application/json" \  -d '{}'
Empty