Get user activity grouped by endpoint

Returns user activity data grouped by endpoint for the last 30 (completed) UTC days. Management key required.

Authentication

AuthorizationBearer
API key as bearer token in Authorization header

Query parameters

datestringOptional

Filter by a single UTC date in the last 30 days (YYYY-MM-DD format).

api_key_hashstringOptional

Filter by API key hash (SHA-256 hex string, as returned by the keys API).

user_idstringOptional
Filter by org member user ID. Only applicable for organization accounts.

Response

Returns user activity data grouped by endpoint
datalist of objects
List of activity items

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
500
Internal Server Error