Admin & Audit

Access append-only audit logs, monitor system health, and manage users. Audit logs are immutable — no updates, no deletes. Requires admin:audit scope.

/api/v1/admin

Endpoints

GET

/api/v1/admin/audit-logs

Query audit logs with filters

GET

/api/v1/admin/health

System health check and service status

GET

/api/v1/admin/users

List users with pagination and filters

PATCH

/api/v1/admin/users/{user_id}

Update user role or status

Parameters

Parameter	Type	Required	Description
actor	string	Optional	Filter by actor user ID
action	string	Optional	Filter by action type (vault.store, auth.login, etc.)
resource	string	Optional	Filter by resource identifier
from	string	Optional	ISO 8601 start date for log range
to	string	Optional	ISO 8601 end date for log range
limit	integer	Optional	Results per page (default: 50, max: 200)

Example

Request

http

GET /api/v1/admin/audit-logs?actor=usr_admin_001&action=vault.retrieve&limit=10 HTTP/1.1
Host: api.tpay365.com
Authorization: Bearer sk_live_admin_key

Response

json

{
  "logs": [
    {
      "id": "aud_001",
      "actor": "usr_admin_001",
      "action": "vault.retrieve",
      "resource": "vault:employee_bank:uuid-here",
      "ip": "192.168.*.***",
      "authorization": "granted",
      "timestamp": "2026-02-10T14:30:00Z"
    }
  ],
  "total": 1847,
  "page": 1,
  "per_page": 10
}