Skip to main content
Workspace audit logs. API keys, secrets, billing, teams, and users each have their own pages under baseten org.

​
audit-logs

List audit-log entries for the workspace, newest first. Returns up to —limit entries (default 20) across the full history by default. Use —start/—end or —since to scope the time window, and the filter flags (—event-type-group, —source, —user-id, —deployment-id, —environment, —search) to narrow results. For machine-readable streaming, prefer —output jsonl over —output json.

​
Options

​
TEXT (repeatable)
Only return entries referencing one of these model deployment IDs. May be repeated.
​
TEXT
default:"desc"
Sort order by the time the action occurred: ‘desc’ (newest first) or ‘asc’ (oldest first).One of: asc, desc
​
TEXT
End of the time window. Accepts ISO 8601; values without a timezone designator are interpreted in the local timezone. Defaults to now.
​
TEXT (repeatable)
Only return entries for one of these environments. May be repeated.
​
TEXT (repeatable)
Only return entries whose event type falls in one of these groups. May be repeated. One of: activated-deactivated, api-keys, autoscaling-settings, deleted, deployed, directory-group-management, environment-settings, gateway, instance-type-changed, promoted, replica-terminated, secrets, ssh, user-management, webhook-signing-secrets.
​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
INTEGER
default:"20"
Maximum number of entries to return, paging as needed. Use 0 for no limit (every entry in the window).
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
TEXT
Case-insensitive substring matched against resource names and IDs in the entry.
​
TEXT
Shortcut for a window from a relative time ago until now. Accepts a duration (e.g. ‘30m’, ‘1h30m’) or ‘Nd’ (e.g. ‘3d’). Mutually exclusive with —start and —end.
​
TEXT (repeatable)
Only return entries issued from one of these surfaces. May be repeated. One of: ui, api, mcp, other.
​
TEXT
Start of the time window. Accepts ISO 8601 (e.g. ‘2026-05-14’, ‘2026-05-14T12:00:00’, ‘2026-05-14T12:00:00Z’). Values without a timezone designator are interpreted in the local timezone. Defaults to the beginning of the audit-log history.
​
TEXT (repeatable)
Only return entries whose acting user is one of these IDs. May be repeated.
​
BOOL
Enable verbose logging

​
Examples

List the 20 most recent audit-log entries
List deploy and promote events from the UI over the last 7 days

​
Filter output with --jq

Stream each entry’s event type as a JSONL stream

​
Output

Text mode (--output text): Table with columns: TIME, ACTOR, EVENT, SOURCE. When no entries match, prints “No audit-log entries found.” to stderr. JSON mode (--output json): payload type managementapi.AuditLogEntry.