Audit Logs

API Exportable Audit Logs

Export Audit Log Events in CSV Format

GET /auth/action/logs?startTime={ISO_TIMESTAMP}&endTime={ISO_TIMESTAMP}

Gets all signature events which have occurred in the over the timeframe. The max range the API supports is 7 days. StartTime and EndTime are URL encoded UTC ISO timestamps: startTime=2025-08-29T02%3A46%3A40Z endTime=2025-09-01T02%3A46%3A40Z

An additional optional query parameter, userId can be specified to filter down events to a particular user. API will return results found in CSV format.

Required Permissions

Name	Conditions
Auth:Logs:Read	Always Required

Get Audit Log Details in JSON Format

GET /auth/action/logs/:id

Gets detailed information for a particular audit log. Specifically, the API returns:

Name	Value
publicKey	Public Key which can be used to verify signature
signature	Signature of the clientData and authenticatorData
clientData	Information, including challenge, which you can use to verify the signature
authenticatorData	Used to verify the signature

Dfns maintains a script in this repository which can be used for audit log signature validation. https://github.com/dfns/example-scripts

Required Permissions

Name	Conditions
Auth:Logs:Read	Always Required