---
title: "List failed login attempts"
method: GET
path: "/app/{app_id}/enterprise-portal/failed-login-attempts"
tags: ["enterprisePortal"]
---

# List failed login attempts

`GET /app/{app_id}/enterprise-portal/failed-login-attempts`

## Request

- Base URL: `https://api.replicated.com/vendor/v3`
- URL: `https://api.replicated.com/vendor/v3/app/{app_id}/enterprise-portal/failed-login-attempts`
- Auth: API key in header `Authorization`

List failed login attempts for the enterprise portal users.


Required RBAC Policy: kots/app/[:appid]/enterprise-portal/failed-login-attempts/read

## Path parameters

- `app_id` string, required

## Query parameters

- `limit` integer
- `offset` integer
- `filterEmail` string
- `sort` string
- `order` string

## Response `200`

- object
  - `attempts` FailedLoginAttempt[]
    - `app_id` string
    - `created_at` string, date-time
    - `email_address` string
    - `id` string
    - `ip_address` string
    - `login_url` string
    - `team_id` string
  - `total` integer

## Other responses

- `400`: Returned on bad input
- `401`: Return if the caller is not authorized
- `403`: Returned if the caller does not have the needed permission
- `404`: Returned on resource not found

## Changes

- **2026-11-03** `a36c6aead22f`: 5 warning, 5 info
  - deleted the `query` request parameter `FilterEmail`
  - deleted the `query` request parameter `Limit`
  - deleted the `query` request parameter `Offset`
  - deleted the `query` request parameter `Order`
  - …6 more

[Operation history](https://skmtc.dev/replicated/apis/vendor-api-v3-2/changes/app/:app_id/enterprise-portal/failed-login-attempts/get.md)

---

[API](https://skmtc.dev/replicated/apis/vendor-api-v3-2.md) - [All operations](https://skmtc.dev/replicated/apis/vendor-api-v3-2/llms.txt) - [OpenAPI document](https://skmtc.dev/replicated/apis/vendor-api-v3-2/revisions/a36c6aead22f?raw)