审计日志 - Devin Docs

获取当前用户所在组织的审计日志。

查询参数

before

string

返回此日期之前的日志（格式为：YYYY-MM-DD）

after

string

返回此日期之后的日志（格式为：YYYY-MM-DD）

limit

integer

default:"100"

返回的审计日志条目数量上限

响应

响应结构

API 返回的审计日志数据具有以下结构：

{
  "audit_logs": [
    {
      "audit_log_id": "string",     // 审计日志条目的唯一标识符
      "action": "string",           // 已执行的操作
      "org_id": "string|null",      // 组织标识符
      "user_id": "string|null",     // 用户标识符
      "user_email": "string|null",  // 用户邮箱地址
      "created_at": "number",       // 创建时间戳(Unix 时间戳,以毫秒为单位)
      // 特定于操作类型的其他字段
    }
  ]
}

操作类型和数据结构

审计日志会记录以下操作。每种操作类型都会返回该操作特有的字段：

成员管理

`add_enterprise_member`

记录将用户添加到企业的操作。

{
  "audit_log_id": "audit_log-1234567890abcdef1234567890abcdef",
  "action": "add_enterprise_member",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "target_user_id": "string",
  "roles": ["string"]
}

`add_member`

记录向组织添加用户的操作。

{
  "audit_log_id": "audit_log-2345678901bcdef12345678901bcdef1",
  "action": "add_member",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "target_user_id": "string",
  "roles": ["string"]
}

`delete_member`

记录用户被从组织或企业移除的事件。

{
  "audit_log_id": "audit_log-3456789012cdef123456789012cdef12",
  "action": "delete_member",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "target_user_id": "string",
  "enterprise_id": "string"
}

`assign_roles`

记录用户角色更新操作。

{
  "audit_log_id": "audit_log-456789013def123456789013def1234",
  "action": "assign_roles",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "target_user_id": "string",
  "roles": ["string"]
}

群组管理

`add_group_membership`

记录将群组添加到组织成员中时的操作。

{
  "audit_log_id": "audit_log-56789014ef123456789014ef123456",
  "action": "add_group_membership",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "target_group_name": "string",
  "roles": ["string"]
}

`update_group_membership`

记录群组成员角色更新的操作。

{
  "audit_log_id": "audit_log-6789015f123456789015f1234567890",
  "action": "update_group_membership",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "target_group_name": "string",
  "role": "string"
}

`delete_group_membership`

记录将群组从组织成员中移除的操作。

{
  "audit_log_id": "audit_log-789016123456789016123456789016",
  "action": "delete_group_membership",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "target_group_name": "string"
}

会话管理

`create_session`

在创建新的 Devin 会话时记录日志。

{
  "audit_log_id": "audit_log-89017123456789017123456789017123",
  "action": "create_session",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "session_id": "string"
}

`send_message`

记录向 Devin 会话发送消息的事件。

{
  "audit_log_id": "audit_log-9018123456789018123456789018123",
  "action": "send_message",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "session_id": "string",
  "privacy_mode": "boolean"
}

`sleep_session`

记录 Devin 会话被置为休眠状态的情况。

{
  "audit_log_id": "audit_log-019123456789019123456789019123",
  "action": "sleep_session",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "session_id": "string",
  "privacy_mode": "boolean"
}

`terminate_session`

记录 Devin 会话被终止的事件。

{
  "audit_log_id": "audit_log-20123456789020123456789020123456",
  "action": "terminate_session",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "session_id": "string",
  "privacy_mode": "boolean"
}

`create_mcp_validation_session`

记录 MCP 验证会话的创建。

{
  "audit_log_id": "audit_log-21123456789021123456789021123456",
  "action": "create_mcp_validation_session",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "session_id": "string"
}

组织管理

`create_org`

记录新组织创建事件。

{
  "audit_log_id": "audit_log-22123456789022123456789022123456",
  "action": "create_org",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`delete_org`

记录组织删除事件。

{
  "audit_log_id": "audit_log-23123456789023123456789023123456",
  "action": "delete_org",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "org_name": "string"
}

API 密钥管理

`create_org_api_key`

在创建组织 API 密钥时记录日志。

{
  "audit_log_id": "audit_log-24123456789024123456789024123456",
  "action": "create_org_api_key",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`create_user_api_key`

在创建用户专用 API 密钥时记录日志。

{
  "audit_log_id": "audit_log-25123456789025123456789025123456",
  "action": "create_user_api_key",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`view_org_api_key`

记录查看或获取组织 API 密钥的操作。

{
  "audit_log_id": "audit_log-26123456789026123456789026123456",
  "action": "view_org_api_key",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`view_user_api_key`

记录查看或获取用户 API 密钥的行为。

{
  "audit_log_id": "audit_log-27123456789027123456789027123456",
  "action": "view_user_api_key",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`create_service_api_key`

记录企业环境中创建服务 API 密钥的操作。

{
  "audit_log_id": "audit_log-28123456789028123456789028123456",
  "action": "create_service_api_key",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`revoke_enterprise_api_key`

在企业 API 密钥被撤销时记录日志。

{
  "audit_log_id": "audit_log-29123456789029123456789029123456",
  "action": "revoke_enterprise_api_key",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`revoke_all_enterprise_api_keys`

当撤销所有企业 API 密钥时记录日志。

{
  "audit_log_id": "audit_log-30123456789030123456789030123456",
  "action": "revoke_all_enterprise_api_keys",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

机密信息管理

`create_secret`

在创建机密信息时记录日志。

{
  "audit_log_id": "audit_log-31123456789031123456789031123456",
  "action": "create_secret",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "secret_id": "string",
  "secret_key": "string"
}

`update_secret`

当机密被更新时进行日志记录。

{
  "audit_log_id": "audit_log-32123456789032123456789032123456",
  "action": "update_secret",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "secret_id": "string",
  "secret_key": "string"
}

`delete_secret`

在删除机密（secrets）时记录日志。

{
  "audit_log_id": "audit_log-33123456789033123456789033123456",
  "action": "delete_secret",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "secret_id": "string",
  "secret_key": "string"
}

知识管理

`create_knowledge`

当创建知识项（笔记）时记录日志。

{
  "audit_log_id": "audit_log-34123456789034123456789034123456",
  "action": "create_knowledge",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "knowledge_id": "string"
}

`edit_knowledge`

在知识条目被编辑时记录日志。

{
  "audit_log_id": "audit_log-35123456789035123456789035123456",
  "action": "edit_knowledge",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "knowledge_id": "string"
}

`delete_knowledge`

在知识项被删除时记录日志。

{
  "audit_log_id": "audit_log-36123456789036123456789036123456",
  "action": "delete_knowledge",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "knowledge_id": "string"
}

`create_folder`

用于记录创建知识文件夹时的日志。

{
  "audit_log_id": "audit_log-37123456789037123456789037123456",
  "action": "create_folder",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "folder_id": "string"
}

`update_folder`

记录知识文件夹更新操作。

{
  "audit_log_id": "audit_log-38123456789038123456789038123456",
  "action": "update_folder",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "folder_id": "string"
}

`delete_folder`

记录删除知识文件夹的操作。

{
  "audit_log_id": "audit_log-39123456789039123456789039123456",
  "action": "delete_folder",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "folder_id": "string"
}

代码库管理

`start_repo_setup`

在开始仓库设置时记录日志。

{
  "audit_log_id": "audit_log-40123456789040123456789040123456",
  "action": "start_repo_setup",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "repo_name": "string"
}

`finish_repo_setup`

在仓库设置完成时记录日志。

{
  "audit_log_id": "audit_log-41123456789041123456789041123456",
  "action": "finish_repo_setup",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "repo_name": "string"
}

`delete_repo_setup`

用于记录仓库设置被删除时的日志。

{
  "audit_log_id": "audit_log-42123456789042123456789042123456",
  "action": "delete_repo_setup",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "repo_name": "string"
}

`remove_repo_from_devin`

记录从 Devin 中移除代码库的情况。

{
  "audit_log_id": "audit_log-43123456789043123456789043123456",
  "action": "remove_repo_from_devin",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "repo_name": "string"
}

Playbook 管理

`create_playbook`

在创建 playbook 时写入日志。

{
  "audit_log_id": "audit_log-44123456789044123456789044123456",
  "action": "create_playbook",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "playbook_id": "string"
}

`update_playbook`

在更新 playbook 时记录日志。

{
  "audit_log_id": "audit_log-45123456789045123456789045123456",
  "action": "update_playbook",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "playbook_id": "string"
}

`delete_playbook`

在删除 playbook 时记录日志。

{
  "audit_log_id": "audit_log-46123456789046123456789046123456",
  "action": "delete_playbook",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "playbook_id": "string"
}

集成管理

`create_github_integration`

在创建 GitHub 集成时记录日志。

{
  "audit_log_id": "audit_log-47123456789047123456789047123456",
  "action": "create_github_integration",
  "org_id": "string|null",
  "user_id": "string",
  "user_email": "string",
  "created_at": "number",
  "github_org_name": "string"
}

`delete_github_integration`

记录删除 GitHub 集成的事件。

{
  "audit_log_id": "audit_log-48123456789048123456789048123456",
  "action": "delete_github_integration",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`github_integration_deleted`

用于记录 GitHub 集成被自动删除的情况。

{
  "audit_log_id": "audit_log-49123456789049123456789049123456",
  "action": "github_integration_deleted",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "github_org_name": "string",
  "installation_id": "number"
}

`create_gitlab_integration`

在创建 GitLab 集成时记录日志。

{
  "audit_log_id": "audit_log-50123456789050123456789050123456",
  "action": "create_gitlab_integration",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "gitlab_user_name": "string",
  "gitlab_host": "string"
}

`delete_gitlab_integration`

当 GitLab 集成被删除时记录日志。

{
  "audit_log_id": "audit_log-51123456789051123456789051123456",
  "action": "delete_gitlab_integration",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "gitlab_user_name": "string",
  "gitlab_host": "string"
}

`create_azure_devops_integration`

记录创建 Azure DevOps 集成的事件。

{
  "audit_log_id": "audit_log-52123456789052123456789052123456",
  "action": "create_azure_devops_integration",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "azure_devops_user_name": "string",
  "azure_devops_host": "string"
}

`delete_azure_devops_integration`

记录 Azure DevOps 集成被删除的操作。

{
  "audit_log_id": "audit_log-53123456789053123456789053123456",
  "action": "delete_azure_devops_integration",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "azure_devops_user_name": "string",
  "azure_devops_host": "string"
}

企业管理

`update_enterprise_settings`

在企业设置更新时记录日志。

{
  "audit_log_id": "audit_log-54123456789054123456789054123456",
  "action": "update_enterprise_settings",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

`update_enterprise_hypervisor_settings`

记录企业级 Hypervisor 设置的更新事件。

{
  "audit_log_id": "audit_log-55123456789055123456789055123456",
  "action": "update_enterprise_hypervisor_settings",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "settings": {
    "debugging_enabled": "boolean|null",
    "automatic_updates": "boolean|null"
  }
}

搜索和查询

`search_query`

当执行搜索查询时记录日志。

{
  "audit_log_id": "audit_log-56123456789056123456789056123456",
  "action": "search_query",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number"
}

安全性

`ai_guardrail_violation`

记录检测到的 AI 防护规则违规事件。

{
  "audit_log_id": "audit_log-57123456789057123456789057123456",
  "action": "ai_guardrail_violation",
  "org_id": "string|null",
  "user_id": "string|null",
  "user_email": "string|null",
  "created_at": "number",
  "session_id": "string",
  "offending_event_id": "string",
  "confidence_score": "number",
  "rule_name": "string"
}

可能的 rule_name 取值：

规则名称	描述
`"profanity"`	检测包含脏话、粗俗或其他不当语言的消息
`"secrets"`	检测尝试查询机密信息、敏感数据或系统提示词的行为
`"pii"`	检测尝试访问 PII（可识别个人身份信息）或其他敏感用户信息的行为
`"ddos"`	检测请求对下游系统发起 DDoS 攻击的行为
`"evasion"`	检测尝试规避或忽略防护规则本身的行为

curl -X GET "https://api.devin.ai/v2/audit-logs" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -G \
  -d "limit=50"

{
  "audit_logs": [
    {
      "audit_log_id": "audit_log-1234567890abcdef1234567890abcdef",
      "action": "create_session",
      "org_id": "org_123",
      "user_id": "user_456",
      "user_email": "[email protected]",
      "created_at": 1704067200000,
      "session_id": "session_789"
    },
    {
      "audit_log_id": "audit_log-abcdef1234567890abcdef1234567890",
      "action": "add_member",
      "org_id": "org_123",
      "user_id": "user_456",
      "user_email": "[email protected]",
      "created_at": 1704153600000,
      "target_user_id": "user_789",
      "roles": ["org_member"]
    }
  ]
}

企业级 API

​查询参数

​响应

​响应结构

​操作类型和数据结构

​成员管理

​add_enterprise_member

​add_member

​delete_member

​assign_roles

​群组管理

​add_group_membership

​update_group_membership

​delete_group_membership

​会话管理

​create_session

​send_message

​sleep_session

​terminate_session

​create_mcp_validation_session

​组织管理

​create_org

​delete_org

​API 密钥管理

​create_org_api_key

​create_user_api_key

​view_org_api_key

​view_user_api_key

​create_service_api_key

​revoke_enterprise_api_key

​revoke_all_enterprise_api_keys

​机密信息管理

​create_secret

​update_secret

​delete_secret

​知识管理

​create_knowledge

​edit_knowledge

​delete_knowledge

​create_folder

​update_folder

​delete_folder

​代码库管理

​start_repo_setup

​finish_repo_setup

​delete_repo_setup

​remove_repo_from_devin

​Playbook 管理

​create_playbook

​update_playbook

​delete_playbook

​集成管理

​create_github_integration

​delete_github_integration

​github_integration_deleted

​create_gitlab_integration

​delete_gitlab_integration

​create_azure_devops_integration

​delete_azure_devops_integration

​企业管理

​update_enterprise_settings

​update_enterprise_hypervisor_settings

​搜索和查询

​search_query

​安全性

​ai_guardrail_violation