---
title: "Retrieve login activity"
method: GET
path: "/account-info/2026-09/activity/login"
tags: ["Basic"]
---

# Retrieve login activity

`GET /account-info/2026-09/activity/login`

## Request

- Base URL: `https://api.hubapi.com`
- URL: `https://api.hubapi.com/account-info/2026-09/activity/login`
- Auth: OAuth 2
  - Authorization code: `https://app.hubspot.com/oauth/authorize`
  - Token URL: `https://api.hubapi.com/oauth/v1/token` scopes: `account-info.security.read`

Retrieve logs of user actions related to [login activity](https://knowledge.hubspot.com/account-management/view-and-export-account-activity-history#account-login-history).

## Query parameters

- `after` string
- `limit` integer
- `userId` integer

## Response `200`

successful operation

- CollectionResponsePublicLoginAuditForwardPaging
  - `paging` ForwardPaging: Paging information for forward-only pagination. Contains the next page reference when more results are available; omitted or empty on the last page.
    - `next` NextPage: Specifies the paging information needed to retrieve the next set of results in a paginated API response
      - `after` string, required: A string token used as a cursor to fetch the next set of results in a paged response.
      - `link` string: A URL string that provides a direct link to the next page of results.
  - `results` PublicLoginAudit[], required: An array of PublicLoginAudit objects, each representing a single login audit event.
    - `countryCode` string: The approximate country code of the login
    - `email` string: Email address of the user associated with the login.
    - `id` string, required: The login activity's unique ID.
    - `ipAddress` string: IP address where the activity originated.
    - `location` string: The approximate location where the login activity originated.
    - `loginAt` string, date-time, required: The time the login took place.
    - `loginSucceeded` boolean, required: Whether the login was successful or not.
    - `regionCode` string: The approximate region code of the login
    - `userAgent` string: Information about the device used for logging in.
    - `userId` integer: The user's unique ID.

## Other responses

- `default`: An error occurred.

## Changes

- **2026-09-03** (2026-09) `fc8daf99a7ab`: 2 info
  - api operation id `get-/account-info/2026-09/activity/login_/account-info/2026-03/activity/login` removed and replaced with `get-/account-info/2026-09/activity/login`
  - the endpoint scheme security `private_apps` was removed from the API

[Operation history](https://skmtc.dev/hubspot/apis/account-audit-logs/changes/account-info/2026-09/activity/login/get.md)

---

[API](https://skmtc.dev/hubspot/apis/account-audit-logs.md) - [All operations](https://skmtc.dev/hubspot/apis/account-audit-logs/llms.txt) - [OpenAPI document](https://skmtc.dev/hubspot/apis/account-audit-logs/revisions/a72e651dd43b?raw)