grepticon/
API Reference

Audit

Export the append-only audit log recording every read an agent made against a workspace.

Export the audit log

GET
/v1/workspaces/{ws}/audit

Keyset-paginated export of read events (tool, actor, params summary, result count, latency) for the workspace.

Authorization

bearerAuth
AuthorizationBearer <token>

HTTP bearer credential in the Authorization header. Two planes share the scheme, distinguished by prefix:

  • grp_sk_… — a management key: full control of the account (workspaces, files, token minting, audit export) plus the read tools.
  • grp_at_… — a scoped read-only token: minted per workspace, it may call only the read tools (ls/find/cat/grep) and is rejected by every management route.

In: header

Path Parameters

ws*string

Workspace name. Workspace name must be 1-64 lowercase letters, digits, hyphens, or underscores, starting and ending with a letter or digit.

Match^[a-z0-9](?:[a-z0-9_-]{0,62}[a-z0-9])?$

Query Parameters

after?string

ISO 8601 timestamp; return only events strictly after it.

Formatdate-time
cursor?integer

Pagination cursor; pass the previous response’s nextCursor.

limit?integer

Max events to return.

Range1 <= value <= 1000
Default100

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/workspaces/string/audit"
{  "events": [    {      "id": 0,      "actorType": "string",      "actorId": "string",      "tool": "string",      "params": null,      "resultCount": 0,      "latencyMs": 0,      "ts": "string"    }  ],  "nextCursor": "string"}

Tokens

Mint and revoke the scoped, read-only tokens an agent reads with. Each token is bound to one workspace and carries its own claims.

Integration guides

Step by step guides for connecting Grepticon to your documentation site or agent framework, so your readers can ask a question instead of hunting for the right page.