Skip to main content
GET
Browse audit

Authorizations

Authorization
string
header
required

Clerk session JWT (deployments with Clerk auth) — validated per request (issuer + signature + lifetime + authorized-party). The internal Boardy tenant/member are resolved from the token's ACTIVE Clerk organization (org_id) → the Boardy tenant it maps to → this user's member in that tenant (#356). A token with no active organization is rejected; production never trusts spoofable X-Tenant-Id/X-Member-Id headers. The same normalized context backs the SPA, this OpenAPI surface, and MCP.

Query Parameters

memberId
string<uuid>
boardId
string<uuid>
actionType
string
authMethod
string
from
string<date-time>
to
string<date-time>
workspaceId
string<uuid>
cursor
string
limit

Response

200

OK