---
title: "What credentials on this account have actually done"
method: GET
path: "/credentials/activity"
tags: ["Account"]
---

# What credentials on this account have actually done

`GET /credentials/activity`

## Request

- Base URL: `https://api.imprezahost.com/v1`
- URL: `https://api.imprezahost.com/v1/credentials/activity`
- Auth: API key in header `X-API-Key` and API key in header `X-API-Secret`

The agent activity ledger (PLAN §8.2): every MCP tool call, newest
first, with the credential that made it, the arguments as recorded,
and whether it succeeded.

This is the audit log surfaced, not a second log. "Which credential
did this" was always recorded; until now nobody could read it back
without database access, which made it an audit trail only we could
audit.

Arguments are stored scrubbed: identifiers are kept so a row says
WHICH thing was touched, and secrets were never written.

`format=csv` returns the exportable
audit extract: the same scrubbed rows, one per line, with each
credential's label resolved in a `credential_label` column — the
file that answers "which agent did this" for an auditor without a
second lookup.

## Query parameters

- `credential_id` integer
- `limit` integer
- `format` 'json' | 'csv'

## Response `200`

The ledger (JSON) or the CSV extract

## Other responses

- `400`: Unknown format

---

[API](https://skmtc.dev/imprezahost/apis/impreza-host-public-api.md) · [All operations](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/revisions/db86511f604f?raw)