List activity events

Returns the activity events the calling credential can reach, newest first. Page with cursor. Events that name no Space and no principal, such as domain and API key changes, are included here. This feed is not clamped to the plan’s audit retention window; the team and Space feeds below are.

GET /v1/activity

Authorization

Authorization Bearer token · header required

Authorization: Bearer <token> with an API key (sfa_ prefix), an OAuth access token, a session token, or a Space machine credential (sfm_ prefix).

Query parameters

• limit integer required
  min 1 · max 100 · default: 20
• cursor string
  min length 1 · max length 4096
• principalType string
  Allowed: team, external
• principalId string
  min length 1
• spaceId string
  min length 1
• actorType string
  Allowed: user, api_key, partner_token, oauth_client, anonymous_claim, system
• actorId string
  min length 1
• code string
  min length 1
• since string matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:.\d+)?)?(?:Z))$
• until string matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:.\d+)?)?(?:Z))$

Responses

200 Response for status 200

• $schema string
  Canonical JSON Schema URL for this response body. The server also sends it in the Link: rel="describedby" response header.
• data object[] required
  Show properties Hide properties Array of object
  • id string required
  • sequence integer required
    Position in the tenant's event order. Feeds are sorted by it, highest first. min 0 · max 9007199254740991
  • spaceId string | any required
    Space the event concerns. Null when it concerns none. Show properties Hide properties Any of:
    • string
    • any
  • actor object required
    Show properties Hide properties
    • type string required
      Allowed: user, api_key, partner_token, oauth_client, anonymous_claim, system
    • id string required
      Identifier of the actor within its kind: a user ID, a grant ID for an API key or OAuth client, or the system identifier. min length 1
    • code string required
      Event code from the platform taxonomy, such as space.created.
    • message string required
      One sentence naming what happened, safe to show to a person.
    • details object | any required
      Fields specific to this event code. Null when the code carries none. Never a secret or a variable value. Show properties Hide properties Any of:
      • object
      • any
  • createdAt string required
    ISO 8601 timestamp when the event was recorded. matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:.\d+)?)?(?:Z))$
  • pagination object required
    Show properties Hide properties
    • nextCursor string | any required
      Cursor for the next page. Null on the last page. Show properties Hide properties Any of:
      • string
      • any
    • hasMore boolean required
      True when another page exists.

Error Response

• $schema string
  Canonical JSON Schema URL for this response body. The server also sends it in the Link: rel="describedby" response header.
• type string required
  URL of the documentation page for this error. Derived from code.
• title string required
  Human-readable name of the error type. Derived from code.
• status integer required
  HTTP status of the response, repeated in the body. min -9007199254740991 · max 9007199254740991
• detail string required
  What went wrong in this request.
• code string required
  Stable snake_case error code. Match on this, not on detail.
• pointer string
  RFC 6901 JSON Pointer to the request field or batch entry that failed, for example /files/37/path. Present on validation failures.
• details object
  Machine-readable context keyed by the error code.
• suggestions string[]
  Recovery steps safe to show to a person.
• next string[]
  Commands or API requests to run next, usable as written.
• requestId string required
  ID of this request, from the X-Request-Id header or generated. Quote it when contacting support.