---
title: "List site login history."
method: GET
path: "/history/login"
tags: ["history", "Actions"]
---

# List site login history.

`GET /history/login`

List site login history.

## Query parameters

- `start_at` string, date-time
- `end_at` string, date-time
- `display` string
- `cursor` string
- `per_page` integer

## Response `200`

A list of History objects.

- ActionEntity[]
  - `id` integer — Action ID
  - `path` string — Path
  - `when` string, date-time — Action occurrence date/time
  - `destination` string — The destination path for this action, if applicable
  - `display` string — Friendly displayed output
  - `ip` string — IP Address that performed this action
  - `source` string — The source path for this action, if applicable
  - `targets` object — Targets
  - `user_id` integer — User ID
  - `username` string — Username
  - `user_is_from_parent_site` boolean — true if this change was performed by a user on a parent site.
  - `action` 'create' | 'read' | 'update' | 'destroy' | 'move' | 'login' | 'failedlogin' | 'copy' | 'user_create' | 'user_update' | 'user_destroy' | 'group_create' | 'group_update' | 'group_destroy' | 'permission_create' | 'permission_destroy' | 'api_key_create' | 'api_key_update' | 'api_key_destroy' | 'archived_delete' — Type of action
  - `failure_type` 'expired_trial' | 'account_overdue' | 'locked_out' | 'ip_mismatch' | 'password_mismatch' | 'site_mismatch' | 'username_not_found' | 'none' | 'no_ftp_permission' | 'no_web_permission' | 'no_directory' | 'errno_enoent' | 'no_sftp_permission' | 'no_dav_permission' | 'no_restapi_permission' | 'key_mismatch' | 'region_mismatch' | 'expired_access' | 'desktop_ip_mismatch' | 'desktop_api_key_not_used_quickly_enough' | 'disabled' | 'country_mismatch' | 'insecure_ftp' | 'insecure_cipher' | 'rate_limited' — Failure type. If action was a user login or session failure, why did it fail?
  - `interface` 'web' | 'ftp' | 'robot' | 'jsapi' | 'webdesktopapi' | 'sftp' | 'dav' | 'desktop' | 'restapi' | 'scim' | 'office' | 'mobile' | 'as2' | 'inbound_email' | 'remote' | 'inbound_s3' — Interface on which this action occurred.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `405` — Method Not Allowed
- `409` — Conflict
- `412` — Precondition Failed
- `422` — Unprocessable Entity
- `423` — Locked
- `429` — Too Many Requests

---

[API](https://skmtc.net/files/apis/files-com-api.md) · [All operations](https://skmtc.net/files/apis/files-com-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/files/files-com-api/revisions/c6d6f57e6da8/schema)