Get logs
https://api.shadw.cloud/v1/logsRequest + control-plane events for the active team, across the selected time window. Every filter is applied server-side; a malformed value is a 400, never a silently-ignored no-op.
Authentication
AuthorizationbearerTokenA platform API key (hive_…, created under Settings → API Keys) or a JWT of at most 1 hour from POST /v1/token, which is server-only once HIVE_JWT_SECRET is set. An API key scopes the request to the team it was created under.
Query parameters
limitnumberOptionalMax events per page (default 100, clamped to 1000).
rangestringOptionalNamed window: 30m | 1h | 24h | 7d | 30d. 30d requires the Pro or Enterprise plan (402 PLAN_UPGRADE_REQUIRED otherwise).
since_msnumberOptionalAbsolute inclusive lower bound (epoch ms). Alternative to range=.
until_msnumberOptionalAbsolute inclusive upper bound (epoch ms).
projectstringOptionalRestrict to one project.
deploymentstringOptionalRestrict to one deployment id.
qstringOptionalFree-text search over path, host, detail and action.
statusstringOptionalComma-separated codes and/or classes, e.g. 404,5xx.
methodstringOptionalComma-separated request methods, e.g. get,post.
hoststringOptionalComma-separated host substrings.
routestringOptionalComma-separated path substrings.
levelstringOptionalDerived severity: info | warning | error | fatal.
cachestringOptionalDerived cache outcome: hit | miss | stale | store | revalidate.
envstringOptionalDerived from the deployment target: production | preview.
resourcestringOptionalDerived from the deployment kind: static | function | fullstack.
offsetnumberOptionalRows to skip after the fleet-wide merge (paging).
cursornumberOptionalReturn only events strictly older than this ts_ms.

