> ## Documentation Index
> Fetch the complete documentation index at: https://docs.baseten.co/llms.txt
> Use this file to discover all available pages before exploring further.

# baseten org

> Manage organization resources

Workspace audit logs. API keys, secrets, billing, teams, and users each have their own pages under `baseten org`.

## audit-logs

```sh theme={"system"}
baseten org audit-logs [OPTIONS]
```

List audit-log entries for the workspace, newest first.

Returns up to --limit entries (default 20) across the full history by default. Use --start/--end or --since to scope the time window, and the filter flags (--event-type-group, --source, --user-id, --deployment-id, --environment, --search) to narrow results.

For machine-readable streaming, prefer --output jsonl over --output json.

### Options

<ParamField body="--deployment-id" type="TEXT (repeatable)">
  Only return entries referencing one of these model deployment IDs. May be repeated.
</ParamField>

<ParamField body="--direction" type="TEXT" default="desc">
  Sort order by the time the action occurred: 'desc' (newest first) or 'asc' (oldest first).

  One of: `asc`, `desc`
</ParamField>

<ParamField body="--end" type="TEXT">
  End of the time window. Accepts ISO 8601; values without a timezone designator are interpreted in the local timezone. Defaults to now.
</ParamField>

<ParamField body="--environment" type="TEXT (repeatable)">
  Only return entries for one of these environments. May be repeated.
</ParamField>

<ParamField body="--event-type-group" type="TEXT (repeatable)">
  Only return entries whose event type falls in one of these groups. May be repeated. One of: activated-deactivated, api-keys, autoscaling-settings, deleted, deployed, directory-group-management, environment-settings, gateway, instance-type-changed, promoted, replica-terminated, secrets, ssh, user-management, webhook-signing-secrets.
</ParamField>

<ParamField body="-q, --jq" type="TEXT">
  Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)
</ParamField>

<ParamField body="--limit" type="INTEGER" default="20">
  Maximum number of entries to return, paging as needed. Use 0 for no limit (every entry in the window).
</ParamField>

<ParamField body="-o, --output" type="TEXT" default="text">
  Output format

  One of: `text`, `json`, `jsonl`, `none`
</ParamField>

<ParamField body="--profile" type="TEXT">
  Use a specific stored profile for this command, overriding BASETEN\_PROFILE and the current profile
</ParamField>

<ParamField body="--search" type="TEXT">
  Case-insensitive substring matched against resource names and IDs in the entry.
</ParamField>

<ParamField body="--since" type="TEXT">
  Shortcut for a window from a relative time ago until now. Accepts a duration (e.g. '30m', '1h30m') or '`N`d' (e.g. '3d'). Mutually exclusive with --start and --end.
</ParamField>

<ParamField body="--source" type="TEXT (repeatable)">
  Only return entries issued from one of these surfaces. May be repeated. One of: ui, api, mcp, other.
</ParamField>

<ParamField body="--start" type="TEXT">
  Start of the time window. Accepts ISO 8601 (e.g. '2026-05-14', '2026-05-14T12:00:00', '2026-05-14T12:00:00Z'). Values without a timezone designator are interpreted in the local timezone. Defaults to the beginning of the audit-log history.
</ParamField>

<ParamField body="--user-id" type="TEXT (repeatable)">
  Only return entries whose acting user is one of these IDs. May be repeated.
</ParamField>

<ParamField body="-v, --verbose" type="BOOL">
  Enable verbose logging
</ParamField>

### Examples

List the 20 most recent audit-log entries

```sh theme={"system"}
baseten org audit-logs
```

List deploy and promote events from the UI over the last 7 days

```sh theme={"system"}
baseten org audit-logs --since 7d --event-type-group deployed --event-type-group promoted --source ui
```

### Filter output with `--jq`

Stream each entry's event type as a JSONL stream

```sh theme={"system"}
baseten org audit-logs --output jsonl --jq '.event_type'
```

### Output

**Text mode (`--output text`):** Table with columns: TIME, ACTOR, EVENT, SOURCE. When no entries match, prints "No audit-log entries found." to stderr.

**JSON mode (`--output json`):** payload type `managementapi.AuditLogEntry`.