Sign in

v5

latestOpenAPI 3.1.1Apache 2.02026-08-06108281579.9 KB
Authentication Logs

List authentication requests

Returns a paginated list of authentication request logs for the current environment, ordered most-recent first. Use this endpoint to audit login activity, investigate failed authentications. Filter by email, status (INITIATED, PENDING, SUCCESS, FAILED), time window, resource ID, or client ID. Status filters are case-insensitive. The response includes cursor tokens for forward and backward pagination and the total matching count. Pass next_page_token or prev_page_token as page_token on the next call to page through results.

get/api/v1/logs/authentication/requests

Query parameters

page_sizeinteger

Maximum number of authentication requests to return in a single page. If omitted, the server applies a default page size.

page_tokenstring

Opaque cursor from a previous response's next_page_token or prev_page_token. Omit on the first request.

emailstring

Filter authentication requests by the end-user email associated with the login attempt.

statusstring[]

Filter by authentication request status. Accepted values: INITIATED, PENDING, SUCCESS, FAILED. Matching is case-insensitive.

start_timestring date-time

Inclusive lower bound for the authentication request timestamp (UTC). Only events at or after this time are returned.

end_timestring date-time

Inclusive upper bound for the authentication request timestamp (UTC). Only events at or before this time are returned.

resource_idstring

Filter authentication requests by resource identifier (for example an MCP resource ID).

client_idstring

Filter authentication logs by client ID

Response

Authentication requests page returned successfully; includes authRequests, pagination tokens, and total_size

next_page_tokenstring

Opaque cursor for the next page. Empty when the current page is the last. Pass back as page_token to fetch the next page.

prev_page_tokenstring

Opaque cursor for the previous page. Empty when the current page is the first. Pass back as page_token to fetch the previous page.

total_sizeinteger

Total number of authentication requests matching the filter across all pages.

Example response

{
  "authRequests": [
    {
      "auth_request_id": "ar_1234567890123456",
      "client_id": "skc_1234567890",
      "client_name": "Default",
      "client_type": "ENV",
      "connection_details": [
        {
          "connection_id": "conn_1234567890123456",
          "connection_provider": "OKTA",
          "connection_type": "OIDC",
          "organization_id": "org_1234567890123456"
        }
      ],
      "connection_id": "conn_1234567890123456",
      "connection_provider": "OKTA",
      "connection_type": "OIDC",
      "email": "user@example.com",
      "environment_id": "env_1234567890123456",
      "organization_id": "org_1234567890123456",
      "resource_id": "res_1234567890",
      "resource_name": "Production MCP Server",
      "resource_type": "mcp",
      "status": "SUCCESS",
      "timestamp": "2024-06-15T14:30:00Z",
      "workflow": "sso"
    }
  ],
  "next_page_token": "3",
  "prev_page_token": "1",
  "total_size": 128
}