---
title: "List recent WAF events."
method: GET
path: "/v1/waf/events"
tags: ["WAF"]
---

# List recent WAF events.

`GET /v1/waf/events`

## Request

- Base URL: `https://api.scalix.world`
- URL: `https://api.scalix.world/v1/waf/events`
- Auth: HTTP bearer

Returns the most recent web application firewall events (up to 100).

## Response `200`

Recent WAF events (up to 100)

- WafEvent[]
  - `id` string, uuid, required
  - `tenant_id` string
  - `rule_id` string, uuid, required
  - `rule_name` string, required
  - `action` 'block' | 'log' | 'challenge' | 'rate_limit', required
  - `source_ip` string, required
  - `path` string, required
  - `reason` string, required
  - `timestamp` string, date-time, required

## Other responses

- `401`: Missing or invalid credentials
- `403`: Token lacks the waf:read scope
- `500`: Internal error

---

[API](https://skmtc.dev/scalix/apis/scalix-cloud-api.md) · [All operations](https://skmtc.dev/scalix/apis/scalix-cloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scalix/apis/scalix-cloud-api/revisions/2c04ca0a90bb?raw)