---
title: "List product activity timeline"
method: GET
path: "/companies/{company}/products/{product}/activities"
tags: ["Products"]
---

# List product activity timeline

`GET /companies/{company}/products/{product}/activities`

## Request

- Base URL: `https://api.factuarea.com/v1`
- URL: `https://api.factuarea.com/v1/companies/{company}/products/{product}/activities`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

Return the audit timeline for a product combining its own domain events plus document events whose lines reference it. Paginated with page and per_page query params (default 50).

## Path parameters

- `company` string, uuid, required
- `product` string, uuid, required

## Query parameters

- `per_page` integer
- `page` integer

## Headers

- `Factuarea-Version` string, date

## Response `200`

`ProductActivityV1Collection`

- object
  - `data` ProductActivity[], required
    - `event_type` string, required: Domain event type (e.g. `product.updated`, `invoice.created`).
    - `description` string, required: Human-readable description of the event in Spanish.
    - `metadata` object, required: Event metadata. Internal identifiers (PKs) are stripped; `*_uuid` values are preserved.
    - `performed_by` object, nullable, required: Actor that originated the event. `{type:"user",...}` for an internal user, `{type:"api_key",...}` when performed via the public v1 API, or `null` when the event is system-generated (scheduler, periodic sweep) with no attributable actor.
      - `type` 'user' | 'api_key', required: Type of actor that originated the event: `user` for a human in the internal app, `api_key` for an action performed through the public v1 API.
      - `id` string, required: UUID v7 of the actor: the user when `type=user`, or the API key when `type=api_key`.
      - `name` string, nullable, required: Actor name at the time of the event: the user name or the API key name. `null` if it could not be resolved.
    - `created_at` string, date-time, required: When the event occurred (ISO 8601).
  - `total` integer, required: Total number of available activities.
  - `current_page` integer, required: Current page (1-based).
  - `per_page` integer, required: Number of activities per page.
  - `from` integer, nullable, required: Index of the first activity on the page, or `null` if empty.
  - `to` integer, nullable, required: Index of the last activity on the page, or `null` if empty.
  - `last_page` integer, required: Number of the last available page.

## Other responses

- `400`: `parameter_unknown` with `subcode` `retired_active_profile_header`: the retired `X-Active-Profile` header was sent; the company goes in the path. `parameter_invalid_format` on `Factuarea-Version`: the header is not a `YYYY-MM-DD` date. `unsupported_api_version`: the `Factuarea-Version` date is not a supported version.
- `401`: Missing or invalid API key.
- `403`: The request is authenticated but not allowed: the API key lacks the required scope (`insufficient_scope`), the plan does not include the public API or this feature (`addon_not_active`, `feature_not_available_in_plan`), or the module is not available with a test key (`module_not_available_in_sandbox`).
- `404`: The requested resource does not exist or belongs to another company.
- `429`: Rate limit exceeded. Retry after the duration in `Retry-After`.
- `500`: Unexpected server error.

---

[API](https://skmtc.dev/factuarea/apis/factuarea-public-api.md) · [All operations](https://skmtc.dev/factuarea/apis/factuarea-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/factuarea/apis/factuarea-public-api/revisions/718e77934422?raw)
