Credential history

GET/apps/{appId}/audit

Authenticate with an operator token or an app API key or a signed-in Foliot Console session.

Who saw or changed a credential, and why. Kept forever: this answers “when did that secret leak”, asked long after run retention has discarded everything else. The app’s own key, an operator token, or a signed-in person who is an owner of the app’s workspace. actor is the stable identity as recorded (an operator token’s name, app:<id>, or user:<clerk id>); actorName is what to show: a person’s name where one is known, otherwise the same text as actor. A person chooses their own name, so it is a label and never an identity: actorKind (user, app or operator) comes from the recorded actor and cannot be changed by a name. Only revealing or rotating a credential is recorded here; updating an app is not.

Path parameters

appId

string

REQUIRED

The app's name.

Query parameters

limit

integer (int64)

OPTIONAL

min 1 · max 500 · default 100

Responses

200 object OK

400 Error Invalid request.

401 Error Missing, malformed or unknown bearer token.

403 Error The token is valid but not permitted on this route.

404 Error No such resource.

503 Error A dependency this route needs is unreachable.