# List activity events

Returns the activity events the calling credential can reach, newest first. Page with `cursor`. Events that name no Space and no principal, such as domain and API key changes, are included here. This feed is not clamped to the plan’s audit retention window; the team and Space feeds below are.

GET `/v1/activity`

## Authorization

`Authorization` Bearer token · header required

`Authorization: Bearer <token>` with an API key (`sfa_` prefix), an OAuth access token, a session token, or a Space machine credential (`sfm_` prefix).

## Query parameters

- `limit` integer required  
  min 1 · max 100 · default: 20
- `cursor` string  
  min length 1 · max length 4096
- `principalType` string  
  Allowed: `team`, `external`
- `principalId` string  
  min length 1
- `spaceId` string  
  min length 1
- `actorType` string  
  Allowed: `user`, `api_key`, `partner_token`, `oauth_client`, `anonymous_claim`, `system`
- `actorId` string  
  min length 1
- `code` string  
  min length 1
- `since` string <date-time>
  matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
- `until` string <date-time>
  matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

## Responses

### 200 Response for status 200

- `$schema` string <uri>  
  Canonical JSON Schema URL for this response body. The server also sends it in the `Link: rel="describedby"` response header.
- `data` object[] required  
  Show properties Hide properties
  Array of `object`
  - `id` string required
  - `sequence` integer required  
    Position in the tenant's event order. Feeds are sorted by it, highest first.
    min 0 · max 9007199254740991
  - `spaceId` string | any required  
    Space the event concerns. Null when it concerns none.
    Show properties Hide properties
    Any of:
    - string
    - any
  - `actor` object required  
    Show properties Hide properties
    - `type` string required  
      Allowed: `user`, `api_key`, `partner_token`, `oauth_client`, `anonymous_claim`, `system`
    - `id` string required  
      Identifier of the actor within its kind: a user ID, a grant ID for an API key or OAuth client, or the system identifier.
      min length 1
    - `code` string required  
      Event code from the platform taxonomy, such as `space.created`.
    - `message` string required  
      One sentence naming what happened, safe to show to a person.
    - `details` object | any required  
      Fields specific to this event code. Null when the code carries none. Never a secret or a variable value.
      Show properties Hide properties
      Any of:
      - object
      - any
  - `createdAt` string <date-time> required  
    ISO 8601 timestamp when the event was recorded.
    matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
  - `pagination` object required  
    Show properties Hide properties
    - `nextCursor` string | any required  
      Cursor for the next page. Null on the last page.
      Show properties Hide properties
      Any of:
      - string
      - any
    - `hasMore` boolean required  
      True when another page exists.

### Error Response

- `$schema` string <uri>  
  Canonical JSON Schema URL for this response body. The server also sends it in the `Link: rel="describedby"` response header.
- `type` string required  
  URL of the documentation page for this error. Derived from `code`.
- `title` string required  
  Human-readable name of the error type. Derived from `code`.
- `status` integer required  
  HTTP status of the response, repeated in the body.
  min -9007199254740991 · max 9007199254740991
- `detail` string required  
  What went wrong in this request.
- `code` string required  
  Stable snake_case error code. Match on this, not on `detail`.
- `pointer` string  
  RFC 6901 JSON Pointer to the request field or batch entry that failed, for example `/files/37/path`. Present on validation failures.
- `details` object  
  Machine-readable context keyed by the error code.
- `suggestions` string[]  
  Recovery steps safe to show to a person.
- `next` string[]  
  Commands or API requests to run next, usable as written.
- `requestId` string required  
  ID of this request, from the `X-Request-Id` header or generated. Quote it when contacting support.