---
title: "List activity logs of a honeytoken"
method: GET
path: "/v1/honeytokens/{honeytoken_id}/activity-logs"
tags: ["Honeytoken Activity Logs"]
---

# List activity logs of a honeytoken

`GET /v1/honeytokens/{honeytoken_id}/activity-logs`

## Request

- Base URL: `https://api.gitguardian.com`
- URL: `https://api.gitguardian.com/v1/honeytokens/{honeytoken_id}/activity-logs`
- Auth: HTTP bearer

List every activity log entry of a honeytoken in chronological order.
Entries include both user-written notes and system-generated actions.

To list only user notes, use the `/notes` endpoint instead.

## Path parameters

- `honeytoken_id` string, uuid, required

## Query parameters

- `cursor` string
- `per_page` integer
- `ordering` 'created_at' | '-created_at' | 'updated_at' | '-updated_at'
- `member_id` integer
- `api_token_id` string, uuid
- `content_key` string
- `search` string: Search entries based on the note comment content.

## Response `200`

Honeytoken Activity Log List

- object[]
  - `id` string, uuid
  - `honeytoken_id` string, uuid: Id of the related Honeytoken
  - `honey_token_deployment_id` string, uuid, nullable: Id of the related Honeytoken deployment. Null when the entry is not tied to a specific deployment.
  - `member` object, nullable: Member at the origin of the entry. Null for system actions or when the user is no longer a member of the workspace.
    - `id` integer
    - `name` string
    - `email` string
    - `access_level` string
  - `api_token_id` string, uuid, nullable: ID of the API key at the origin of this entry. Can be null if the entry was not produced via the API.
  - `created_at` string, date-time: Creation date of the entry
  - `updated_at` string, date-time, nullable: Last time the entry was updated. Null if it was never modified.
  - `content` union
    - object: Content of an entry that is a user-written note.
      - `type` 'note': Discriminator identifying the entry as a user note.
      - `comment` string: Content of the user note.
    - object: Content of an entry that is a system-generated action.
      - `type` 'action': Discriminator identifying the entry as a system action.
      - `content_key` string: Machine-readable key identifying the system action.
      - `data` object, nullable: Contextual data describing the action; its shape depends on `content_key`.

## Other responses

- `400`: Invalid data
- `401`: Invalid API key
- `404`: Honeytoken not found
- `503`: API under maintenance

---

[API](https://skmtc.dev/gitguardian/apis/gitguardian-api.md) - [All operations](https://skmtc.dev/gitguardian/apis/gitguardian-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gitguardian/apis/gitguardian-api/revisions/5829df7b9045?raw)