Account audit log
One entry for each request that changed something on your account: a pod created or deleted, an API key created or revoked, a login, a top-up, a setting. Each entry shows the action, the key or session that made it, the client, the IP and the request id.
- Refused requests and failed logins are recorded too.
- Entries are kept for 90 days.
- It is different from
GET /users/me/events(lium audit), which is the pod event log.
In the CLI: lium audit --account. In the SDK: Lium.audit_log(...). In the portal: Activity in the account menu, with filters for time, API key and pod, and a Pod events tab.
Read it
An API key needs the read scope:
curl -H "X-API-Key: $LIUM_API_KEY" "https://lium.io/api/account/audit?action=pod.&limit=50"
{
"items": [
{
"id": "ee2a0782-dbf1-4bf6-82d9-ca1227b3632e",
"created_at": "2026-09-08T23:59:22.069873",
"action": "pod.delete",
"source": "cli",
"actor": {
"auth": "api_key",
"user_id": "c7ad12ec-8fc5-407a-876d-c759e5b5260a",
"api_key_id": "323d3f8e-0150-44cb-ae1f-ba11071b2539",
"api_key_name": "ci-runner"
},
"workspace_id": null,
"ip": "203.0.113.9",
"user_agent": "lium-cli/0.0.37",
"request_id": "86943ca082d14405bacf58bc895e3a67",
"method": "DELETE",
"route": "/pods/{id}",
"status_code": 200,
"resource_type": "pod",
"resource_id": "dc4919ac-b6aa-4890-b480-4633cdbf8114",
"summary": { "path": { "id": "dc4919ac-b6aa-4890-b480-4633cdbf8114" } }
}
],
"next_cursor": null
}
Entries are newest first. created_at is UTC.
Filters
| Parameter | What it selects |
|---|---|
action | A prefix: pod. is every pod action, pod.delete one. Others: key., volume., login, balance. … |
source | portal, cli, sdk, mcp, admin or api |
since, until | ISO timestamps (UTC) |
api_key_id | One key's requests |
resource_id | A pod, volume or key id |
limit | 1–500, default 100 |
cursor | The previous page's next_cursor |
Export as CSV
curl -H "X-API-Key: $LIUM_API_KEY" "https://lium.io/api/account/audit/export?action=pod." -o account-audit.csv
Takes the same filters, up to 10,000 rows.