Skip to content
Authrim

List suspicious activities

GET
/api/admin/security/suspicious-activities
Code sample: Shell / cURL 
curl --request GET \
  --url 'https://auth.example.com/api/admin/security/suspicious-activities?limit=20' \
  --header 'Authorization: Bearer <token>'

Lists suspicious activities with cursor pagination. Supported filters include type, severity, and user_id.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Query Parameters

Section titled “Query Parameters ”
limit
integer
default: 20 >= 1 <= 100

Maximum number of records to return.

cursor
string

Opaque pagination cursor returned by the previous response.

sort
string

Sort field. Prefix with - for descending order.

filter
string

Comma-separated filters in field:value form.

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Suspicious activity list response.

Media type application/json
object
data
required
Array<object>
object
activity_id
required
string
type
required
string
severity
required
string
user_id
required
string | null
client_id
required
string | null
source_ip
required
string | null
user_agent
required
string | null
description
required
string
metadata
required
object | null
created_at
required
string format: date-time
resolved_at
required
string | null format: date-time
key
additional properties
pagination
required
object
has_more
required
boolean
next_cursor
string
key
additional properties
key
additional properties
Example 
{
  "data": [
    {
      "activity_id": "activity_123",
      "type": "credential_stuffing",
      "severity": "high",
      "user_id": "user_123",
      "client_id": "client_123",
      "source_ip": "203.0.113.10",
      "user_agent": "Mozilla/5.0",
      "description": "Repeated failed authentication attempts.",
      "metadata": {
        "attempts": 12
      },
      "created_at": "2026-06-20T00:00:00.000Z",
      "resolved_at": null
    }
  ],
  "pagination": {
    "has_more": false
  }
}

400

Section titled “400 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Section titled “401 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Section titled “403 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

500

Section titled “500 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}