Audit

1 operation in the Tolvi API, version 1. Paths are relative to https://api.tolvi.co.uk. Every amount is integer pence.

List the firm’s audit trail, newest first

GET/api/v1/audit-log

Parameters for GET /api/v1/audit-log
Name	In	Type	Description
`limit`	query	`integer`
`cursor`	query	`string`
`via`	query	`string (AuditVia)`	One of: `web`, `api`, `mcp`

Body: object (AuditPage).

200 OK response for GET /api/v1/audit-log
Field	Type	Description
`rows`required	`array of AuditEntry`
`rows[].id`required	`string (uuid)`
`rows[].occurredAt`required	`string (date-time)`
`rows[].actorUserId`required	`string (uuid)`nullable
`rows[].principalKind`required	`string (PrincipalKind)`	One of: `session`, `oauth`, `personal_token`, `client`
`rows[].credentialId`required	`string (uuid)`nullable
`rows[].clientId`required	`string`nullable
`rows[].via`required	`string (AuditVia)`	One of: `web`, `api`, `mcp`
`rows[].viaLabel`required	`string`	example "via MCP (Claude)"
`rows[].method`required	`string`	example "GET"
`rows[].path`required	`string`	example "/api/v1/work"
`rows[].status`required	`integer`
`rows[].tool`required	`string`nullable	example "list_my_work"
`rows[].action`	`string`nullable	A sensitive action recorded in the same transaction as the action itself. example "evidence.download"
`rows[].target`	`string`nullable	Whose work it was: the client’s name, where the entry can say.
`rows[].summary`	`string`	What happened, in words. example "Started accounts, Harrow & Finch Ltd"
`nextCursor`required	`string`nullable	Opaque cursor for the next page (pass as `cursor`); null on the last page.
`pageSize`required	`integer`	The page size that was used. 1 to 100

Errors: 400 Bad request, 401 Unauthorised, 403 Forbidden, 429 Too many requests, as problem details (application/problem+json).