Sign in
access-reviews

Detect stale access across the system

Identifies users and API keys that haven't been active for a configurable number of days. This helps identify:

  • Users who haven't logged in or performed any actions
  • API keys that haven't been used
  • Users with access but no recorded activity

This endpoint supports compliance requirements for periodic access reviews (SOC 2, ISO 27001) by identifying potentially orphaned or unused access.

Use format=csv for CSV export suitable for auditors and spreadsheets.

get/admin/v1/access-reviews/stale

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /admin/v1/access-reviews/stale
  • Auth: HTTP bearer

Query parameters

inactive_daysinteger

Number of days of inactivity to consider access stale (default: 90)

org_idstring uuid nullable

Filter by organization ID

limitinteger

Maximum number of results to return (default: 100, max: 1000)

format'json' | 'csv'

Export format for access review reports

Export format (json or csv)

Response

Stale access report (JSON or CSV based on format parameter)

cutoff_datestring date-time required

Cutoff date (activity before this date is considered stale)

generated_atstring date-time required

When this report was generated

inactive_days_thresholdinteger required

Number of days used as the inactivity threshold

Changes

No recorded changes to this operation across all 1 revision of this API.