GRgraypass
canonical

List authorization activity

Find recent authorization traces by action, decision or subject for operational diagnosis.

get/api/v1/activity

Request

  • Base URL
    https://app.graypass.org (the document declares no server; this is the origin it was published from)
  • Auth
    HTTP bearer

Query parameters

limitinteger

Maximum records requested; default 100. The service bounds it to 1-500. No cursor pagination is exposed.

action_keystring nullable

Optional exact dotted action-key filter.

decisionstring nullable

Optional exact decision filter, normally allow, challenge, hold or deny.

subject_idstring nullable

Subject identifier resolved from your authenticated account mapping.

Response

Recent authorization traces matching the supplied exact filters, newest decision first.

actionstring required

Registered action key, such as payout.destination.change.

action_hashstring required

SHA-256 digest binding the canonical authorization material. Compare it with the hash computed from the original server-held request.

actorstring required

Bound human actor identifier.

actor_type'human' required

Bound actor category; only human is supported.

audiencestring required

Expected relying-party audience. It must be permitted by the action and independently known to the verifier.

context_digeststring required

Digest of the context binding. Render your independently retained business details for user confirmation.

decided_atstring required

Decision time as an ISO 8601 timestamp.

decision'allow' | 'challenge' | 'hold' | 'deny' required

Policy result: allow, challenge, hold or deny. Inspect mode and proof requirements before performing any business mutation.

idstring required

Identifier of this record. Treat it as opaque and retain it for subsequent operations.

latency_msinteger required

Server-recorded decision latency in milliseconds.

mode'test' | 'shadow' | 'enforce' required

Action evaluation mode. Test and shadow return decisions without enforceable proofs. An eligible enforce-mode allow can carry a proof.

outcomestring nullable

Business outcome reported by the customer application, with supporting evidence maintained by the customer.

outcome_reported_atstring nullable

Recorded business-outcome time as an ISO 8601 timestamp, or null.

parentstring nullable

Parent authorization identifier for a challenge or review child; null for an original request.

policy_versioninteger nullable

Immutable policy version number evaluated for this decision.

proof_idstring nullable

Proof identifier (jti), or null when no proof was issued.

reason_codesstring[] required

Stable reason identifiers explaining acceptance, limitations or a decision; resolve them in the reason-code catalog.

requested_atstring required

Recorded request time as an ISO 8601 timestamp in the trace, distinct from the caller’s Unix-seconds input.

resource_digeststring required

One-way digest of the resource binding.

resource_typestring required

Customer-defined category of the protected resource, such as merchant.

review_authorization_idstring nullable

Child authorization produced by an approved review, or null.

review_statusstring nullable

Recorded manual-review state, or null when no review occurred.

reviewed_atstring nullable

Manual-review time as an ISO 8601 timestamp, or null.

reviewed_bystring nullable

Identifier of the credential attributed to the manual review, or null.

subjectstring required

Pseudonymous subject identifier in the authenticated tenant and environment.

Changes

No recorded changes to this operation across all 1 revision of this API.