Get audit log summary for your tenant
Aggregate counts for the last 30 days, the timestamp of the most recent event, and a pipeline health signal.
Requires audit-log:read in the active entity. Every figure —
including lastEventAt — is clamped by the caller's resolved tier
using the same rules as GET /audit-logs/events, so nothing here can
reflect rows the caller's list would refuse to return.
The counts cover a fixed 30-day window, independent of the caller's
list filters — they describe the tenant, not the current query.
lastEventAt is deliberately NOT windowed: it reports the most recent
visible activity of any age, so a tenant quiet for over a month still
gets a real timestamp rather than null.
This endpoint does not emit an audit row.
Responses
- application/json
- 401
Authentication required
- 403
No active entity context
curl https://api.gpcn.com/v1/audit-logs/summary \
--header 'X-API-Key: YOUR_SECRET_TOKEN'
{
"success": true,
"data": {
"windowDays": 1,
"countsByCategory": {
"additionalProperty": 1
},
"countsByOutcome": {
"additionalProperty": 1
},
"countsByActorType": {
"additionalProperty": 1
},
"distinctActorsByType": {
"additionalProperty": 1
},
"distinctActorCount": 1,
"flagCounts": {
"additionalProperty": 1
},
"lastEventAt": "2026-10-21T16:19:07.197Z",
"lastHeartbeatAt": "2026-10-21T16:19:07.197Z",
"pipelineHealth": "green",
"healthNote": "pipeline_not_yet_active",
"openGaps": [
{
"start": "2026-10-21T16:19:07.197Z",
"end": "2026-10-21T16:19:07.197Z"
}
]
}
}.png)