---
title: "List your recent security activity"
method: GET
path: "/v1/account/security/activity"
tags: ["Account security"]
---

# List your recent security activity

`GET /v1/account/security/activity`

## Request

- Base URL: `https://api.banksync.io`
- URL: `https://api.banksync.io/v1/account/security/activity`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Your recent sign-in security events, newest first: two-step verification turned on or off, a recovery key saved or used, a reset by BankSync support. Kinds and times only. Page with `cursor`.

## Query parameters

- `limit` integer: Events per page (default 20, maximum 50)
- `cursor` string: `nextCursor` from the previous page

## Response `200`

Your recent security activity

- object
  - `success` true, required
  - `data` object, required
    - `items` object[], required
      - `id` string, required
      - `kind` 'factor_added' | 'factor_removed' | 'recovery_key_saved' | 'recovery_key_used' | 'support_mfa_reset', required: factor_added / factor_removed: two-step turned on or off; recovery_key_saved / recovery_key_used; support_mfa_reset: BankSync support removed it.
      - `actor` 'self' | 'support', required
      - `occurredAt` string, date-time, required
    - `nextCursor` string, nullable, required: Pass as `cursor` for the next, older page.

## Other responses

- `400`: Invalid input
- `401`: Unauthorized
- `403`: Forbidden — a missing `account:read` scope, or an installed app
- `503`: The security record could not be read right now; retry

---

[API](https://skmtc.dev/banksync/apis/banksync-api.md) · [All operations](https://skmtc.dev/banksync/apis/banksync-api/llms.txt) · [OpenAPI document](https://skmtc.dev/banksync/apis/banksync-api/revisions/94465f5ee922?raw)