API Reference · Security & ownership

Audit Events

Read-only, append-only security and activity log entries (ACCESS_RULES §1).

The audit_event object

Represents a audit_event entity in the rafiqPay system.

Field	Type & Flags	Description
id	string	Audit event ID (aud_...).
category	string	Security \| Team \| Payouts \| Keys \| Ownership.
actor	object	Person + role at the time, API key prefix, system, or rafiqPay staff + ticket.

Example audit_event JSON

audit_event example payload

{
  "id": "aud_01",
  "at": "2026-10-20T16:10:00+01:00",
  "category": "Security",
  "action": "security_policy.change_scheduled",
  "actor": {
    "name": "Kelechi Nwachukwu",
    "role": "Owner"
  }
}

Endpoints & Operations

GET/v1/audit-eventsProposed

List audit events

Requires a key created by the Owner or an Admin with audit_events:read.

Request Example

GET /v1/audit-events

cURL · v1

curl -X GET "https://api.rafiqpay.net/v1/audit-events" \
  -H "Authorization: Bearer rp_test_sk_kanzu_9f8a7b6c5d4e3f2a"

Response (200 OK)

Response payload

{
  "object": "list",
  "data": [],
  "hasMore": false,
  "nextCursor": null
}