Audit Log Vocabulary

The auditLog.list endpoint returns audit entries and accepts filters documented here. This page is the source of truth for targetTypes, categories, channels, actor.type, channel, and via.type values.

Forward compatibility: New category, target.type, channel, or via.type values may appear in responses as we add auditing — treat unknown values as valid. Request filters (targetTypes, categories, channels) must use values from this page; unrecognized filter values return 400.

Each category belongs to exactly one target type. The tables below are grouped by target type so you can see which categories apply to each.

Actor types

Returned on each entry as actor.type. Filter by actor using actorIds in the request (the actor's id when present, not the type string).

`actor.type`	Description
`User`	An action performed by a person signed in to Ashby. `actor.id` is their user id.
`ApiUser`	An action performed with an API key. `actor.id` is the service account backing the key.
`Automation`	An action performed by an automation or integration. `actor.id` may be null or a non-user identifier.
`Support`	An action performed by Ashby Support acting on your organization. `actor.id` is the support user's id.
`Candidate`	An action performed by a candidate through the candidate portal. `actor.id` is the candidate's id; the candidate's name is never shown.
`Operations`	An action performed by Ashby staff using internal Operations tooling.
`System`	An action performed by an internal system process, such as a migration or scheduled job, rather than a person.
`Other`	An actor that could not be classified. Almost all entries with this value were recorded before API key and Ashby Support actions were distinguished.

Channels

Returned on each entry as channel: the surface the action came through. Null when the entry has no channel recorded. Filter by channel using channels in the request.

`channel`	Description
`ashbyApp`	An action taken in Ashby: the web app, a public job board, or the candidate portal.
`publicApi`	An action taken through the API, including inbound webhooks from integration partners.
`automation`	An action performed in the background with no originating request, such as an automation, sync, scheduled job, workflow, or AI agent run.
`slack`	An action taken from Ashby's Slack app.
`email`	An action taken from a link in an email Ashby sent, such as an approval request.
`ashbySupport`	An action taken by Ashby Support or other Ashby staff using Ashby's internal tooling.
`mcp`	An action taken through Ashby's MCP server by an AI client acting as the user; `via` identifies the client.

Via types

Returned on each entry as via when something other than the actor drove the action under the actor's identity, such as an API key or an MCP client. via.id points at the record behind that arrangement, and via.label is a name captured when the entry was written, for the via types that record one. via is null when the actor acted directly.

`via.type`	Description
`aiAgentRun`	An action performed by an AI agent run on behalf of its owner. `via.id` is the agent run's id.
`aiRequest`	An action performed by the AI assistant while handling a request from the actor. `via.id` is the AI request's id.
`apiKey`	An action performed by an API key acting on behalf of the actor. `via.id` is the API key's id and `via.label` its title.
`integrationPartner`	An action performed by an integration partner through its API key. `via.id` is the integration partner's id.
`mcpClient`	An action performed by an MCP client acting as the actor. `via.id` is the client's OAuth registration id and `via.label` the name it registered with.
`workflowStep`	An action performed by a workflow step. `via.id` is the workflow step's id.

How filters combine

Parameters	Combination
`actorIds`, `targetIds`, `channels`	AND with each other and with activity filters — an entry must match every supplied dimension.
`targetTypes`, `categories`	OR with each other — an entry matching either list is included. To narrow to one job's status changes, use `targetIds` plus `categories`, not `targetTypes` + `categories` alone.
Empty arrays (`[]`)	Ignored — same as omitting the parameter.
`actorIds`, `targetIds`, `targetTypes`, `categories`	Each array may contain at most 100 ids or values; longer arrays are rejected with a `400`.
`channels`	May contain at most 10 values; longer arrays are rejected with a `400`.

Pagination: Pass nextCursor only together with the same startDate, endDate, and filters as the request that produced it.

Date range examples

All dates are ISO 8601 interpreted as UTC.

Request	Window
`{}` (no dates)	Last 24 hours ending now
`endDate` only	24 hours ending at `endDate`
`startDate` only	24 hours starting at `startDate` (ends at `startDate` + 24h, not until now)
Both `startDate` and `endDate`	Explicit span (max 18 months)

Example — entries from 1 June 00:00 UTC through 7 June 00:00 UTC:

{
  "startDate": "2026-06-01T00:00:00.000Z",
  "endDate": "2026-06-07T00:00:00.000Z",
  "limit": 100
}

Filter vocabulary

actorIds, targetIds, targetTypes, categories — each array accepts at most 100 items.
targetTypes — snake_case object type (see table below). Unrecognized values → 400.
categories — PascalCase action category (see tables below). Unrecognized values → 400.

Target types

`targetType`	Description
`agency`	An external recruiting agency that can access jobs and teams.
`ai_interviewer`	An AI Interviewer configuration used to conduct screening interviews.
`ai_screening_interview`	An AI interview for a candidate's application.
`api_key`	An organization API key for the Ashby public API.
`app_user`	A person with a login to your Ashby organization.
`application`	A candidate's record on a specific job.
`application_form_definition`	The reusable application form template a job posting collects responses against, distinct from the submissions it receives.
`bulk_data_import`	A bulk data import operation.
`candidate`	Candidates in Ashby.
`dashboard`	A saved collection of reports and charts assembled into a single view.
`email_template`	A reusable email template used to message candidates, either shared org-wide or personal to one user.
`internal_job_board`	A private job board associated with an organization brand.
`job`	A job set up within your ATS.
`job_posting`	The job posting created for a job within your ATS.
`location`	A location used to organize jobs, candidates, and interview scheduling.
`offer`	An offer extended to a candidate for a job.
`opening`	Headcount for a job using the Openings feature in Ashby.
`organization_brand`	A branded public job board.
`organization_setting`	Organization-wide configuration and integration settings.
`scheduled_dashboard`	A configured schedule that emails dashboard reports to recipients on a recurring cadence.
`security_role`	An access role that defines a set of permissions assignable to users.
`survey_form_definition`	A consent survey form definition.
`team`	A team or department used to organize jobs, permissions, and reporting.
`webhook`	An organization webhook configured to receive event notifications.

Categories

Agency (`agency`)

`category`	Description
`AgencyArchived`	An agency was archived.
`AgencyCreated`	An agency was created.
`AgencyJobAccessGranted`	An agency was granted access to a job.
`AgencyJobAccessRevoked`	An agency's access to a job was revoked.
`AgencyNameChanged`	An agency's name was changed.
`AgencyRestored`	An agency was restored.
`AgencySourceChanged`	An agency's source was changed.
`AgencyTeamAccessGranted`	An agency was granted access to a team.
`AgencyTeamAccessRevoked`	An agency's access to a team was revoked.
`AgencyUserAdded`	A user was added to an agency.
`AgencyUserRemoved`	A user was removed from an agency.

AI Interviewer (`ai_interviewer`)

`category`	Description
`AiInterviewerArchived`	An AI Interviewer was archived.
`AiInterviewerPaused`	An AI Interviewer was paused.
`AiInterviewerUnarchived`	An AI Interviewer was restored from the archive.
`AiInterviewerUnpaused`	An AI Interviewer was unpaused.
`AiInterviewerVersionPublished`	A version of an AI Interviewer was published.
`AiInterviewerVersionUnpublished`	A version of an AI Interviewer was unpublished.

AI Interview (`ai_screening_interview`)

`category`	Description
`AiScreeningInterviewActivityAdded`	An AI interview was added to an application.
`AiScreeningInterviewActivityRemoved`	An AI interview was removed from an application.
`AiScreeningInterviewReset`	An AI interview was reset.

API Key (`api_key`)

`category`	Description
`ApiKeyCreated`	An API key was created.
`ApiKeyDeactivated`	An API key was deactivated.
`ApiKeyDefaultSourceUpdated`	An API key's default source was updated.
`ApiKeyPermissionsUpdated`	An API key's permissions were updated.
`ApiKeyTitleUpdated`	An API key's title was updated.

User (`app_user`)

`category`	Description
`UserAccess`	A user's job/team access (or its access role) was granted, updated, or revoked.
`UserActivated`	A user account was activated.
`UserAdminPermissions`	A user's admin permissions were changed.
`UserAiSettingsChanged`	A user's access to AI features was changed.
`UserCandidateLinked`	A candidate (and optionally an application) was linked to a user's employee record.
`UserCandidateUnlinked`	A candidate was unlinked from a user's employee record.
`UserDeactivated`	A user account was deactivated.
`UserGlobalRole`	A user's global role was changed.
`UserLoggedIn`	A user logged into their Ashby account.
`UserLoggedOut`	A user logged out of their Ashby account.

Job Consideration (`application`)

`category`	Description
`ApplicationArchived`	An application was archived.
`ApplicationCreated`	An application was created.
`ApplicationCreditedToUpdated`	An application's credited-to recruiter was changed.
`ApplicationDeleted`	An application was permanently deleted.
`ApplicationHired`	An application was hired.
`ApplicationSourceUpdated`	An application's source was changed.
`ApplicationStageChanged`	An application's interview stage was changed.
`ApplicationTransferred`	An application was transferred to another job.
`ApplicationUnarchived`	An application was unarchived.

Application Form (`application_form_definition`)

`category`	Description
`ApplicationFormArchived`	An application form was archived.
`ApplicationFormCopied`	An application form was copied from another form.
`ApplicationFormCreated`	An application form was created.
`ApplicationFormDeleted`	An application form was permanently deleted.
`ApplicationFormPromotedToShared`	An application form local to a job was promoted to a shared, reusable form.
`ApplicationFormRenamed`	An application form's title was changed.
`ApplicationFormUnarchived`	An application form was unarchived.

Bulk Data Import (`bulk_data_import`)

`category`	Description
`BulkDataImportCompleted`	A bulk data import completed.
`BulkDataImportStarted`	A bulk data import was started.

Candidate (`candidate`)

`category`	Description
`CandidateAnonymized`	A candidate was anonymized.
`CandidateCreated`	A candidate was created.
`CandidateDataExported`	A candidate's data was exported.
`CandidateDeleted`	A candidate's data was permanently deleted.
`CandidateDeletionRequestCancelled`	A pending candidate deletion was cancelled.
`CandidateDeletionRequested`	A candidate's deletion was requested.
`CandidateDoNotContactUpdated`	A candidate's do-not-contact setting was updated.
`CandidateMerged`	A candidate was merged into another candidate.
`CandidateSourceUpdated`	A candidate's source was updated.
`CandidateTagAdded`	A tag was added to a candidate.
`CandidateTagRemoved`	A tag was removed from a candidate.

Dashboard (`dashboard`)

`category`	Description
`DashboardAccessGranted`	A user was granted access to a dashboard.
`DashboardAccessRestrictionsRemoved`	A dashboard's access restrictions were removed, so everyone in the organization can view it.
`DashboardAccessRevoked`	A user's access to a dashboard was revoked.
`DashboardAccessRoleChanged`	A user's access role on a dashboard was changed.
`DashboardArchived`	A dashboard was archived.
`DashboardContentUpdated`	A dashboard's contents (the reports it contains and their layout) were changed.
`DashboardCopied`	A dashboard was copied, recorded against the dashboard that was copied rather than the copy.
`DashboardCopyingAllowed`	Copying was allowed on a dashboard, so everyone who can view it can copy it.
`DashboardCopyRestricted`	Copying was restricted on a dashboard, limiting it to the dashboard's locker and its editors.
`DashboardCreated`	A dashboard was created.
`DashboardCreatedFromCopy`	A dashboard was created as a copy of another one, carrying over its tiles, its filter, and its access list.
`DashboardDataExported`	A dashboard's data was exported.
`DashboardDeleted`	A dashboard was permanently deleted, removing all of its saved views and disabling its scheduled deliveries.
`DashboardLocked`	A dashboard was locked, limiting edits to the user holding the lock and the dashboard's editors.
`DashboardMadePrivate`	A dashboard was made private, so only the users with access to it can view it.
`DashboardRenamed`	A dashboard was renamed.
`DashboardReporterAssigned`	A user was assigned as a dashboard's reporter.
`DashboardReporterRemoved`	A dashboard's reporter was cleared.
`DashboardRestored`	A dashboard was restored from the archive.
`DashboardScheduleRestricted`	Scheduled deliveries were restricted on a dashboard, limiting them to the dashboard's locker and its editors.
`DashboardSchedulingAllowed`	Scheduled deliveries were allowed on a dashboard, so everyone who can view it can schedule one.
`DashboardUnlocked`	A dashboard was unlocked, lifting the restriction on who can edit it.
`DashboardViewArchived`	A saved view on a dashboard was archived.
`DashboardViewCreated`	A saved view was created on a dashboard.
`DashboardViewUpdated`	A saved view on a dashboard was updated.

Email Template (`email_template`)

`category`	Description
`EmailTemplateArchived`	An email template was archived.
`EmailTemplateAttachmentAdded`	A file was attached to an email template.
`EmailTemplateAttachmentRemoved`	A file attachment was removed from an email template.
`EmailTemplateContentUpdated`	An email template's subject, body, or default recipients were updated.
`EmailTemplateCreated`	An email template was created.
`EmailTemplateRestored`	An email template was restored from the archive.
`EmailTemplateTitleUpdated`	An email template was renamed.

Internal Job Board (`internal_job_board`)

`category`	Description
`InternalJobBoardAvailabilityChanged`	An internal job board's availability was changed.
`InternalJobBoardMessagingUpdated`	An internal job board's employee-facing messaging was updated.

Job (`job`)

`category`	Description
`JobApplicationConfirmationEmailTemplateChanged`	A job's application confirmation email template was changed.
`JobBrandChanged`	A job's brand was changed.
`JobConfidentialChanged`	A job's confidential setting was changed.
`JobCreated`	A job was created.
`JobCustomRequisitionIdChanged`	A job's custom requisition ID was changed.
`JobEmploymentTypeChanged`	A job's employment type was changed.
`JobFraudDetectionSettingChanged`	A job's fraud detection setting was changed.
`JobHiringTeamChanged`	A job's hiring team was changed.
`JobLocationUpdated`	A job's location was updated.
`JobOpeningAdded`	A job was added to an opening.
`JobOpeningRemoved`	A job was removed from an opening.
`JobStatusChanged`	A job's status was changed.
`JobTeamChanged`	A job's team was changed.
`JobTeamRemoved`	A job's team was removed.
`JobTitleChanged`	A job's title was changed.

Job Posting (`job_posting`)

`category`	Description
`JobPostingCompensationTierCreated`	A compensation tier was added to a job posting.
`JobPostingCompensationTierUpdated`	A job posting's compensation tier was updated.
`JobPostingCreated`	A job posting was created.
`JobPostingDeleted`	A job posting was deleted.
`JobPostingDescriptionUpdated`	A job posting's description was edited.
`JobPostingPublished`	A job posting was published.
`JobPostingTitleUpdated`	A job posting's title was updated.
`JobPostingUnpublished`	A job posting was unpublished.

Location (`location`)

`category`	Description
`LocationArchived`	A location was archived.
`LocationCreated`	A location was created.
`LocationDetails`	A location's details were changed.
`LocationReparent`	A location's parent in the hierarchy was changed.
`LocationUnarchived`	A location was restored from the archive.

Offer (`offer`)

`category`	Description
`OfferAccepted`	An offer was accepted.
`OfferApprovalProcessCancelled`	An offer's approval process was cancelled, typically because a new offer version or approval process superseded it.
`OfferApprovalProcessCompleted`	An offer's approval process was fully approved and completed.
`OfferApprovalProcessOverridden`	An admin overrode an offer's approval process, force-approving it without the remaining approvals.
`OfferApprovalProcessStarted`	An offer's approval process was started.
`OfferApprovalSingleApproverOverridden`	An admin approved a step of an offer's approval process on another approver's behalf.
`OfferApprovalStepApproved`	An approver approved a step of an offer's approval process.
`OfferApprovalStepRejected`	An approver rejected a step of an offer's approval process.
`OfferCancelled`	An offer was cancelled — directly by a user, because an approver rejected its approval, or because the candidate's application was moved to the Hired stage.
`OfferCreated`	An offer was created.
`OfferDecisionDateUpdated`	The date a candidate's offer response was recorded on was corrected.
`OfferDeclined`	An offer was declined.
`OfferExtended`	An offer was sent to the candidate.
`OfferResponseUpdated`	A candidate's offer response was corrected after the offer process completed.
`OfferUpdated`	An offer was updated.

Opening (`opening`)

`category`	Description
`OpeningCreated`	An opening was created.
`OpeningStatusChanged`	An opening's status was changed.

Job Board (`organization_brand`)

`category`	Description
`BrandCreated`	A job board brand was created.
`JobBoardAppearanceUpdated`	A job board's logos or social preview settings were updated.
`JobBoardAvailabilityChanged`	A public job board's availability was changed.
`JobBoardCookieConsentChanged`	A job board's cookie consent setting was changed.
`JobBoardCustomCssChanged`	A job board's custom CSS or CSS allowlist was changed.
`JobBoardDisplayUpdated`	A job board's display settings were updated.
`JobBoardEmbeddingChanged`	A job board's embedding settings were changed.
`JobBoardIdentityUpdated`	A job board's brand name or public website was updated.
`JobBoardMessagingUpdated`	A job board's candidate-facing messaging was updated.
`JobBoardPostingBackUrlChanged`	A job board's posting back URL was changed.
`JobBoardSpamProtectionChanged`	A job board's application spam protection was changed.
`JobBoardUrlChanged`	A job board's public URL was changed.
`NoReplyEmailChanged`	A job board's no-reply email settings were changed.

Organization Setting (`organization_setting`)

`category`	Description
`AiInterviewerTermsUpdated`	An AI Interviewer's candidate-facing terms & conditions were updated.
`InternalJobBoardDisplayUpdated`	An internal job board's display settings were updated.
`OptInFeatureDisabled`	An opt-in feature was disabled for the organization.
`OptInFeatureEnabled`	An opt-in feature was enabled for the organization.
`ReferralJobFilterDisabled`	The filter limiting which jobs can receive referrals was turned off.
`ReferralJobFilterEnabled`	The filter limiting which jobs can receive referrals was turned on.
`ReferralJobFilterUpdated`	The filter limiting which jobs can receive referrals was changed.

Scheduled Dashboard (`scheduled_dashboard`)

`category`	Description
`ScheduledDashboardArchived`	A scheduled dashboard was archived.
`ScheduledDashboardCreated`	A scheduled dashboard was created.
`ScheduledDashboardDisabled`	A scheduled dashboard was disabled and will no longer send on its schedule.
`ScheduledDashboardEnabled`	A scheduled dashboard was enabled and will send on its next scheduled run.
`ScheduledDashboardFileFormatChanged`	A scheduled dashboard's attached file formats (CSV, PDF) were changed.
`ScheduledDashboardFiltersChanged`	A scheduled dashboard's dashboard filters were changed.
`ScheduledDashboardForceTriggered`	A scheduled dashboard was manually triggered to send outside of its schedule.
`ScheduledDashboardRecipientsChanged`	A scheduled dashboard's delivery recipients were changed.
`ScheduledDashboardScheduleChanged`	A scheduled dashboard's send cadence was changed.
`ScheduledDashboardSendAsChanged`	A scheduled dashboard's delivery mode (individual emails or a single group email) was changed.
`ScheduledDashboardSendFromChanged`	A scheduled dashboard's sender (the generating user or Ashby) was changed.
`ScheduledDashboardSubjectChanged`	A scheduled dashboard's email subject was changed.

Access Role (`security_role`)

`category`	Description
`SecurityRoleArchived`	An access role was archived.
`SecurityRoleCreated`	An access role was created.
`SecurityRoleDeleted`	An access role was deleted.
`SecurityRoleRestored`	An access role was restored from the archive.
`SecurityRoleUpdated`	An access role's display properties or permissions were updated.

Survey Form (`survey_form_definition`)

`category`	Description
`ConsentSurveyFormArchived`	A consent survey form was archived.
`ConsentSurveyFormAutomationDisabled`	Automation was disabled for a consent survey form.
`ConsentSurveyFormAutomationEnabled`	Automation was enabled for a consent survey form.
`ConsentSurveyFormCreated`	A consent survey form was created.
`ConsentSurveyFormDisplayPropertiesUpdated`	A consent survey form's display properties were updated.
`ConsentSurveyFormDraftAutomationActivated`	A draft automation configuration was activated for a consent survey form.
`ConsentSurveyFormJobsPagesSettingsUpdated`	A consent survey form's jobs-pages settings were updated.
`ConsentSurveyFormUnarchived`	A consent survey form was unarchived.

Team (`team`)

`category`	Description
`TeamArchived`	A team or department was archived.
`TeamCandidateFacingNameChanged`	A team or department's candidate-facing name was changed.
`TeamCreated`	A team or department was created.
`TeamNameChanged`	A team or department's name was changed.
`TeamParentChanged`	A team or department's parent in the hierarchy was changed.
`TeamUnarchived`	A team or department was restored from the archive.

Webhook (`webhook`)

`category`	Description
`WebhookSettingCreated`	A webhook was created.
`WebhookSettingCustomHeaderAdded`	A custom header was added to a webhook.
`WebhookSettingCustomHeaderRemoved`	A custom header was removed from a webhook.
`WebhookSettingCustomHeaderUpdated`	A custom header's value was updated on a webhook.
`WebhookSettingDeleted`	A webhook was deleted.
`WebhookSettingDisabled`	A webhook was disabled.
`WebhookSettingEnabled`	A webhook was enabled.
`WebhookSettingSigningSecretRotated`	A webhook's signing secret was rotated.
`WebhookSettingUpdated`	A webhook's title, request URL, or auth provider was updated.

Actor types

Channels

Via types

How filters combine

Date range examples

Filter vocabulary

Target types

Categories

Agency (agency)

AI Interviewer (ai_interviewer)

AI Interview (ai_screening_interview)

API Key (api_key)

User (app_user)

Job Consideration (application)

Application Form (application_form_definition)

Bulk Data Import (bulk_data_import)

Candidate (candidate)

Dashboard (dashboard)

Email Template (email_template)

Internal Job Board (internal_job_board)

Job (job)

Job Posting (job_posting)

Location (location)

Offer (offer)

Opening (opening)

Job Board (organization_brand)

Organization Setting (organization_setting)

Scheduled Dashboard (scheduled_dashboard)

Access Role (security_role)

Survey Form (survey_form_definition)

Team (team)

Webhook (webhook)