---
title: "GET /api/activity/reports/shadow-ai/"
method: GET
path: "/api/activity/reports/shadow-ai/"
tags: ["activity"]
---

# GET /api/activity/reports/shadow-ai/

`GET /api/activity/reports/shadow-ai/`

Return shadow-AI usage rolled up per AI tool and per member from the on-device AI-prompt security events, for a member (``user``) or across one or more groups (``groups``), else the whole organization. Each tool reports how many PII-bearing prompts were seen, how many were intervened (block/softBlock/redact), and how many distinct members used it; each member reports the same counts and the tools they used. Tools are attributed at report time from the shipped AI-tool catalog. Restricted to organization admins/managers and gated by the activity-tracking flag.

## Query parameters

- `organization` string, uuid, required
- `user` string, uuid
- `groups` string[]
- `start` string, date-time
- `end` string, date-time

## Response `200`

---

[API](https://skmtc.dev/pixiebrix/apis/pixiebrix-api.md) · [All operations](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/pixiebrix/pixiebrix-api/revisions/941ab9eb01d6/schema)