GET
/
audit-trail
/
search
Search the audit trail
curl --request GET \
  --url https://api.next.orenda.finance/audit-trail/search \
  --header 'Authorization: Bearer <token>'
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.next.orenda.finance/audit-trail/search', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));
import requests

url = "https://api.next.orenda.finance/audit-trail/search"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)
{
  "success": true,
  "result": {
    "total": 1,
    "data": [
      {
        "customerId": "c9f8e7d6-1111-4b2c-8d3e-444455556666",
        "accountId": "e4f5a6b7-3333-4d4e-8f5a-bbbbccccdddd",
        "requestMethod": "POST",
        "requestURL": "/v1/customers/c9f8e7d6/accounts/e4f5a6b7/payments",
        "responseStatusCode": 200,
        "providerRequestId": "5723116",
        "identity": "officer@orenda.example",
        "createdDateTime": "2026-06-10T08:45:12.000Z"
      }
    ]
  }
}
{
"success": false,
"error": {
"code": "<string>",
"message": "<string>"
}
}
{
"success": false,
"error": {
"code": "<string>",
"message": "<string>"
}
}
{
"success": false,
"error": {
"code": "<string>",
"message": "<string>"
}
}

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Query Parameters

programId
string
required

The program to scope results to. Required unless allPrograms=true is passed. Multi-program operators are bounded to their entitled programs.

customerId
string

Filter by customer ID. Comma-separated for multi-select.

keyword
string

Free-text search across indexed fields.

page
integer
default:1

1-based page number. Defaults to 1.

Required range: x >= 1
limit
integer

Maximum number of items per page.

Required range: x >= 1
fromDate
string<date-time>

Lower bound (inclusive) on record date, ISO 8601.

toDate
string<date-time>

Upper bound (inclusive) on record date, ISO 8601.

accountId
string

Filter by account ID (provider account IDs are accepted and resolved internally). Comma-separated for multi-select.

transactionId
string

Filter by transaction ID. Comma-separated for multi-select.

paymentId
string

Filter by payment ID. Comma-separated for multi-select.

providerRequestId
string

Filter by provider request ID. Comma-separated for multi-select.

requestMethod
string

Filter by HTTP request method (e.g. GET, POST). Comma-separated for multi-select.

requestURL
string

Filter by request URL. Comma-separated for multi-select.

responseStatusCode
string

Filter by HTTP response status code (e.g. 200, 403). Comma-separated for multi-select.

Response

Matching audit-trail records.

Standard JSON success envelope for inline search results.

success
boolean
Example:

true

result
object