Activities changedapi/compliance/activities
Recorded here
Lines+2,980added
Lines−4removed
From line
17
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits32to this page, all time
The whole hunk
from line 17, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 17
1717
1818### Query parameters
1919
20- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 516 more`
20- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 522 more`
2121
2222 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2323
from line 269
269269
270270 A new version of an artifact was published — for an artifact created in a chat this is the action that made it publicly viewable; for an artifact created outside a chat it is recorded when the artifact is saved, including saves of private artifacts, except that automatic saves made while a person keeps editing may be recorded periodically for that person rather than once per save; changes to who can access the artifact are recorded separately as claude_artifact_sharing_updated.
271271
272 - `"claude_artifact_sent_to_partner"`
273
274 A member sent an export of an artifact to a partner application ("Send to …" on the artifact; a partner is a third-party application listed in Claude's connector directory): a file exported from the artifact was made available over a temporary link for the chosen partner to fetch. One activity is recorded per send, in the artifact owner's organization with the sending member as actor, whether or not the partner then retrieved the file; the partner's own import of the file is not part of this record. The file's name and contents are not recorded.
275
272276 - `"claude_artifact_sharing_updated"`
273277
274278 An artifact's sharing settings were updated.
from line 689
685689
686690 A security scan of a skill completed and produced a verdict.
687691
692 - `"claude_survey_closed"`
693
694 An organization admin closed an in-app survey before its end date, ending the collection of responses; a survey that reaches its end date records no event.
695
696 - `"claude_survey_created"`
697
698 An organization admin launched an in-app survey to its chosen audience, opening it immediately or at a scheduled start time.
699
700 - `"claude_survey_deleted"`
701
702 An organization admin permanently deleted a closed in-app survey together with every response collected for it.
703
704 - `"claude_survey_response_submitted"`
705
706 A member submitted their response to an in-app survey run by their organization; the record omits the response content, and a retried submission can produce more than one record for the same response.
707
708 - `"claude_survey_responses_exported"`
709
710 An organization admin downloaded a survey's responses as a CSV file, one row per response with the member's email address (blank if it is no longer available, for example because they left the organization), the groups, department and cost center they were invited through, the product they answered in, the submission time, and their answers.
711
688712 - `"claude_user_role_updated"`
689713
690714 A user's role within the organization was changed, or the user was added to or removed from the organization.
from line 2176
21522176
21532177 format: date-time
21542178
2155- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 516 more`
2179- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 522 more`
21562180
21572181 Exclude activities of these types. Cannot be combined with `activity_types[]`.
21582182
from line 2428
24042428
24052429 A new version of an artifact was published — for an artifact created in a chat this is the action that made it publicly viewable; for an artifact created outside a chat it is recorded when the artifact is saved, including saves of private artifacts, except that automatic saves made while a person keeps editing may be recorded periodically for that person rather than once per save; changes to who can access the artifact are recorded separately as claude_artifact_sharing_updated.
24062430
2431 - `"claude_artifact_sent_to_partner"`
2432
2433 A member sent an export of an artifact to a partner application ("Send to …" on the artifact; a partner is a third-party application listed in Claude's connector directory): a file exported from the artifact was made available over a temporary link for the chosen partner to fetch. One activity is recorded per send, in the artifact owner's organization with the sending member as actor, whether or not the partner then retrieved the file; the partner's own import of the file is not part of this record. The file's name and contents are not recorded.
2434
24072435 - `"claude_artifact_sharing_updated"`
24082436
24092437 An artifact's sharing settings were updated.
from line 2848
28202848
28212849 A security scan of a skill completed and produced a verdict.
28222850
2851 - `"claude_survey_closed"`
2852
2853 An organization admin closed an in-app survey before its end date, ending the collection of responses; a survey that reaches its end date records no event.
2854
2855 - `"claude_survey_created"`
2856
2857 An organization admin launched an in-app survey to its chosen audience, opening it immediately or at a scheduled start time.
2858
2859 - `"claude_survey_deleted"`
2860
2861 An organization admin permanently deleted a closed in-app survey together with every response collected for it.
2862
2863 - `"claude_survey_response_submitted"`
2864
2865 A member submitted their response to an in-app survey run by their organization; the record omits the response content, and a retried submission can produce more than one record for the same response.
2866
2867 - `"claude_survey_responses_exported"`
2868
2869 An organization admin downloaded a survey's responses as a CSV file, one row per response with the member's email address (blank if it is no longer available, for example because they left the organization), the groups, department and cost center they were invited through, the product they answered in, the submission time, and their answers.
2870
28232871 - `"claude_user_role_updated"`
28242872
28252873 A user's role within the organization was changed, or the user was added to or removed from the organization.
from line 4333
42854333
42864334### Returns
42874335
4288- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 516 more`
4336- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 522 more`
42894337
42904338 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
42914339
from line 9549
95019549
95029550 - `SystemActor object`
95039551
9504 Automated background processing performed by Anthropic systems, acting
9505 without a user or customer credential.
9506
9507 - `type: optional "system_actor"`
9508
9509 default: system_actor
9510
9511 - `service: optional string or null`
9512
9513 Name of the automated process that performed the action, when known.
9514
9515 - `AdminAPIKeyActor object`
9516
9517 - `type: optional "admin_api_key_actor"`
9518
9519 default: admin_api_key_actor
9520
9521 - `admin_api_key_id: string`
9522
9523 - `ip_address: string`
9524
9525 - `user_agent: string`
9526
9527 - `ServiceAccountActor object`
9528
9529 - `type: optional "service_account_actor"`
9530
9531 default: service_account_actor
9532
9533 - `ip_address: string`
9534
9535 - `service_account_id: string`
9536
9537 - `user_agent: string`
9538
9539 - `ScimDirectorySyncActor object`
9540
9541 - `type: optional "scim_directory_sync_actor"`
9542
9543 default: scim_directory_sync_actor
9544
9545 - `directory_id: string`
9546
9547 - `workos_event_id: string`
9548
9549 - `idp_connection_type: optional string or null`
9550
9551 - `FederatedIdentityActor object`
9552
9553 A federated external workload authenticated via a verified OIDC token.
9554
9555 Carries the verified issuer, subject, and audience claims from the
9556 presented JWT.
9557
9558 - `type: optional "federated_identity_actor"`
9559
9560 default: federated_identity_actor
9561
9562 - `issuer: string`
9563
9564 - `subject: string`
9565
9566 - `audience: optional array of string`
9567
9568 - `ip_address: optional string or null`
9569
9570 - `user_agent: optional string or null`
9571
9572 - `FederatedActor object`
9573
9574 An external identity asserted by a trusted provider — a cloud-provider
9575 gateway or a customer-registered federation issuer — acting without an
9576 Anthropic-provisioned account or service account.
9577
9578 - `type: optional "federated_actor"`
9579
9580 default: federated_actor
9581
9582 - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
9583
9584 - `FederatedActorAwsProvider object`
9585
9586 Asserting party: the AWS account the organization is bound to.
9587
9588 - `type: optional "aws"`
9589
9590 default: aws
9591
9592 - `account_id: string`
9593
9594 - `signed_principal: string`
9595
9596 The AWS-signed ARN of the IAM principal that requested the token.
9597
9598 - `FederatedActorAzureProvider object`
9599
9600 Asserting party: the Azure subscription the organization is bound to.
9601
9602 - `type: optional "azure"`
9603
9604 default: azure
9605
9606 - `subscription_id: string`
9607
9608 - `FederatedActorGcpProvider object`
9609
9610 Asserting party: the GCP project the organization is bound to.
9611
9612 - `type: optional "gcp"`
9613
9614 default: gcp
9615
9616 - `project_number: string`
9617
9618 - `FederatedActorOidcProvider object`
9619
9620 Asserting party: a customer-registered OIDC federation issuer.
9621
9622 - `type: optional "oidc"`
9623
9624 default: oidc
9625
9626 - `issuer: optional string or null`
9627
9628 The federation issuer's URL. Null when the presented credential failed verification.
9629
9630 - `ip_address: optional string or null`
9631
9632 - `subject: optional string or null`
9633
9634 The provider's verified identifier for the caller; its form depends on the provider.
9635
9636 - `user_agent: optional string or null`
9637
9638 - `AttestedDeviceAc
9552 Automa
No line in this hunk matches that.