List audit events

curl --request GET \
  --url https://api.perplexity.ai/v1/admin/audit-events \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.perplexity.ai/v1/admin/audit-events', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.perplexity.ai/v1/admin/audit-events",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.perplexity.ai/v1/admin/audit-events"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.perplexity.ai/v1/admin/audit-events")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "data": [
    {
      "id": "6a0d9a2c-3c6f-4e0e-9e2b-1a2b3c4d5e6f",
      "created_at": "2026-10-27T18:42:11.512000Z",
      "type": "member_role_changed",
      "actor_email": "admin@example.com",
      "actor_external_user_id": "",
      "ip_address": "203.0.113.42",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6) AppleWebKit/605.1.15 Safari/605.1.15",
      "session_id": "7c1e0e2a-9f3d-4a2e-8c1e-4b9d6e2f1a3c",
      "metadata": {
        "target_user_email": "jordan@example.com",
        "target_external_user_id": "",
        "org_user_uuid": "0d2f0b1e-7a4c-4b6e-9f3a-2c1d5e6f7a8b",
        "old_role": "member",
        "new_role": "admin"
      }
    }
  ],
  "has_more": true,
  "first_id": "eyJ2ZXJzaW9uIjoxLCJ0aW1lc3RhbXAiOiIyMDI2LTEwLTI3VDE4OjQyOjExLjUxMjAwMCswMDowMCIsInV1aWQiOiI2YTBkOWEyYy0zYzZmLTRlMGUtOWUyYi0xYTJiM2M0ZDVlNmYifQ",
  "last_id": "eyJ2ZXJzaW9uIjoxLCJ0aW1lc3RhbXAiOiIyMDI2LTEwLTI3VDA5OjAzOjU0LjAwMTAwMCswMDowMCIsInV1aWQiOiIzZjJhMWIwYy1kNGU1LTRmNmEtOGI3Yy05ZDBlMWYyYTNiNGMifQ"
}

{
  "error": {
    "message": "The requested time range cannot exceed 30 days.",
    "type": "invalid_request",
    "code": 400
  }
}

{
  "error": {
    "message": "Authentication required.",
    "type": "unauthorized",
    "code": 401
  }
}

{
  "error": {
    "message": "This API key is not authorized to read audit events.",
    "type": "permission_denied",
    "code": 403
  }
}

{
  "error": {
    "message": "Enterprise Admin API audit events are not available for this organization.",
    "type": "not_found",
    "code": 404
  }
}

{
  "error": {
    "message": "Request rate limit exceeded, please try again later.",
    "type": "request_rate_limit_exceeded",
    "code": 429
  }
}

{
  "error": {
    "message": "Enterprise Admin API audit events are temporarily unavailable.",
    "type": "service_unavailable",
    "code": 503
  }
}

GET

admin

audit-events

List audit events

curl --request GET \
  --url https://api.perplexity.ai/v1/admin/audit-events \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.perplexity.ai/v1/admin/audit-events', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.perplexity.ai/v1/admin/audit-events",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.perplexity.ai/v1/admin/audit-events"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.perplexity.ai/v1/admin/audit-events")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "data": [
    {
      "id": "6a0d9a2c-3c6f-4e0e-9e2b-1a2b3c4d5e6f",
      "created_at": "2026-10-27T18:42:11.512000Z",
      "type": "member_role_changed",
      "actor_email": "admin@example.com",
      "actor_external_user_id": "",
      "ip_address": "203.0.113.42",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6) AppleWebKit/605.1.15 Safari/605.1.15",
      "session_id": "7c1e0e2a-9f3d-4a2e-8c1e-4b9d6e2f1a3c",
      "metadata": {
        "target_user_email": "jordan@example.com",
        "target_external_user_id": "",
        "org_user_uuid": "0d2f0b1e-7a4c-4b6e-9f3a-2c1d5e6f7a8b",
        "old_role": "member",
        "new_role": "admin"
      }
    }
  ],
  "has_more": true,
  "first_id": "eyJ2ZXJzaW9uIjoxLCJ0aW1lc3RhbXAiOiIyMDI2LTEwLTI3VDE4OjQyOjExLjUxMjAwMCswMDowMCIsInV1aWQiOiI2YTBkOWEyYy0zYzZmLTRlMGUtOWUyYi0xYTJiM2M0ZDVlNmYifQ",
  "last_id": "eyJ2ZXJzaW9uIjoxLCJ0aW1lc3RhbXAiOiIyMDI2LTEwLTI3VDA5OjAzOjU0LjAwMTAwMCswMDowMCIsInV1aWQiOiIzZjJhMWIwYy1kNGU1LTRmNmEtOGI3Yy05ZDBlMWYyYTNiNGMifQ"
}

{
  "error": {
    "message": "The requested time range cannot exceed 30 days.",
    "type": "invalid_request",
    "code": 400
  }
}

{
  "error": {
    "message": "Authentication required.",
    "type": "unauthorized",
    "code": 401
  }
}

{
  "error": {
    "message": "This API key is not authorized to read audit events.",
    "type": "permission_denied",
    "code": 403
  }
}

{
  "error": {
    "message": "Enterprise Admin API audit events are not available for this organization.",
    "type": "not_found",
    "code": 404
  }
}

{
  "error": {
    "message": "Request rate limit exceeded, please try again later.",
    "type": "request_rate_limit_exceeded",
    "code": 429
  }
}

{
  "error": {
    "message": "Enterprise Admin API audit events are temporarily unavailable.",
    "type": "service_unavailable",
    "code": 503
  }
}

This endpoint requires an audit log API key with the audit_logs:read scope, created by an org admin from the Perplexity web app under Enterprise APIs → Audit API. Sonar API keys are not accepted. See the Audit API guide for setup, pagination patterns, and event fields.

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Query Parameters

limit

integer

default:100

Maximum number of events to return in one page.

Required range: 1 <= x <= 500

start_time

string<date-time>

Inclusive lower bound on created_at, as an RFC 3339 timestamp with a timezone offset (for example 2026-10-01T00:00:00Z). Defaults to 30 days before end_time.

end_time

string<date-time>

Inclusive upper bound on created_at, as an RFC 3339 timestamp with a timezone offset. Defaults to the current time. The window between start_time and end_time cannot exceed 30 days.

event_type

string

Return only events of this type, for example member_role_changed. Required to see audit_events_accessed events, which the default feed omits.

after_id

string

Opaque cursor. Return events older than this cursor; pass the previous page's last_id to fetch the next older page. Cannot be combined with before_id.

before_id

string

Opaque cursor. Return events newer than this cursor; pass a saved first_id to fetch only events that arrived since. Cannot be combined with after_id.

Response

One page of audit events, newest first.

data

object[]

required

Events in this page, newest first.

Show child attributes

has_more

boolean

required

Whether more events exist beyond this page in the direction you are paging. Stop when false; do not wait for an empty page.

first_id

string | null

required

Opaque cursor for the newest event in the page, or null when data is empty. Save it and pass it as before_id on a later poll.

last_id

string | null

required

Opaque cursor for the oldest event in the page, or null when data is empty. Pass it as after_id to fetch the next older page.

⌘I

Orchestrator API

Agent API

Search API

Embeddings API

Decisions API

Authentication

Analytics API

Audit API

List audit events

Authorizations

Query Parameters

Response