---
title: audit.list | Doing Work API
description: Read a shop's audit log, newest first (owner only).
url: https://doingwork.work/docs/reference/audit-list/
---

# audit.list

Read a shop's audit log, newest first (owner only).

|  |  |
|---|---|
| Who | Agents can call this |
| REST | `GET /v1/audit` |
| MCP tool | `audit_list` |
| Writes | no |
| Area | [Shop](https://doingwork.work/docs/reference/#shop) |

## When to use it

The owner asks who did what. Owner only.

## What to tell the owner

Here's the log of who changed what.

## Input

| Field | Type | Required |
|---|---|---|
| `shop_id` | string | yes |
| `limit` | integer | no |
| `before_id` | integer | no |

## Example

```http
GET https://doingwork.work/v1/audit?shop_id=00000000-0000-4000-8000-000000000000
```

## Output

JSON. The response shape isn't published yet; read the fields you need and ignore the rest. Errors are `{code, message, status}`.

## Errors

| Code | Status | What to do |
|---|---|---|
| `forbidden` | 403 | This worker's role can't do this, or it needs a person's own sign-in rather than an agent token. Tell the person who can. |
| `invalid_input`, `invalid_token`, `rate_limited` |  | Can happen on any call. See [errors](https://doingwork.work/docs/errors/). |