API reference
Audit
The audit log is append-only and tenant-scoped. The API exposes search, real-time streaming, and exports.
GET /v1/audit/events
List events with filters.
| Param | Type | Note |
|---|---|---|
| from | string | ISO 8601 lower bound, inclusive. |
| to | string | ISO 8601 upper bound, exclusive. |
| type | string[] | Repeatable. Event types to include. |
| actor_id | string | Filter to a specific user or service. |
| target_type | string | Filter by resource kind (sop, member, etc.). |
| cursor | string | Pagination cursor. |
| limit | number | 1–200, default 100. |
curl
curl 'https://api.mnemos.ai/v1/audit/events?type=sop.approved&from=2026-05-01T00:00:00Z' \
-H "Authorization: Bearer $MNEMOS_API_KEY"GET /v1/audit/stream
Server-sent events feed of newly recorded events.Last-Event-ID is honored for resume-from-cursor semantics.
curl
curl -N https://api.mnemos.ai/v1/audit/stream \
-H "Authorization: Bearer $MNEMOS_API_KEY" \
-H "Accept: text/event-stream"POST /v1/audit/exports
Initiate an async export to S3, GCS, or an HTTPS endpoint. Returns an export id and signed status URL.
curl
curl -X POST https://api.mnemos.ai/v1/audit/exports \
-H "Authorization: Bearer $MNEMOS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"from": "2026-04-01T00:00:00Z",
"to": "2026-05-01T00:00:00Z",
"format": "ndjson",
"destination": { "type": "s3", "bucket": "acme-audit", "prefix": "mnemos/" }
}'GET /v1/audit/exports/{id}
Poll export status. Terminal states: completed, failed, cancelled.