Activity API reference

Who changed what in the account.

List account activity

GET /activity

Auth: API key with scope keys:manage, or access token.

Requires keys:manage. Changes to the account, newest first: API keys created and revoked, credits granted and removed (trial, packs, plans, refunds), webhook changes and console sign-ins, with who made them and the request id. Every environment; entries are kept 400 days.

Credits. Free: no credits.

Parameters

Name	In	Type	Description
`limit`	query	`integer`	1–100, default 20. Default: 20
`cursor`	query	`string`	`nextCursor` of the previous page.
`type`	query	`ActivityFamily`

Responses

200 A page of activity.

Schema ActivityList (application/json).

Headers: X-Request-Id , RateLimit , RateLimit-Policy

Example 200 response

{
  "data": [
    {
      "id": "7d0e1a52-3c4b-4f6e-9a8d-2b1c0f9e8a7d",
      "type": "api_key.revoked",
      "createdAt": "2026-10-21T12:00:00.000Z",
      "actor": {
        "type": "user",
        "apiKeyId": "7d0e1a52-3c4b-4f6e-9a8d-2b1c0f9e8a7d",
        "apiKeyPrefix": "ss_live_AbCd"
      },
      "target": {
        "type": "string",
        "id": "string"
      },
      "details": {
        "name": "ci",
        "prefix": "ss_live_AbCd",
        "environment": "live"
      },
      "requestId": "string"
    }
  ],
  "nextCursor": "string"
}

400 INVALID_INPUT. A credential sent in the query string is refused before authentication, without RateLimit headers.

Schema ErrorEnvelope (application/json).

Headers: X-Request-Id , RateLimit , RateLimit-Policy

401 UNAUTHORIZED: missing, malformed, unknown, revoked or expired credential.

Schema ErrorEnvelope (application/json).

Headers: X-Request-Id

403 FORBIDDEN: see details.reason.

Schema ErrorEnvelope (application/json).

Headers: X-Request-Id , RateLimit , RateLimit-Policy

429 RATE_LIMITED: the request rate of the API key (details.scope key) or of the account (user) is exhausted for this window, or too many failed authentication attempts came from this IP (no details.scope and no RateLimit headers). Retry after Retry-After seconds.

Schema ErrorEnvelope (application/json).

Headers: X-Request-Id , RateLimit , RateLimit-Policy , Retry-After

default Error (see ErrorEnvelope and /v1/docs/errors).

Schema ErrorEnvelope (application/json).

Headers: X-Request-Id , RateLimit , RateLimit-Policy