Query compliance activities changedapi/compliance/activities/list
Recorded here
Lines+1,515added
Lines−3removed
From line
15
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits32to this page, all time
The whole hunk
from line 15, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 15
1515
1616## Query parameters
1717
18- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 516 more`
18- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 522 more`
1919
2020 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2121
from line 267
267267
268268 A new version of an artifact was published — for an artifact created in a chat this is the action that made it publicly viewable; for an artifact created outside a chat it is recorded when the artifact is saved, including saves of private artifacts, except that automatic saves made while a person keeps editing may be recorded periodically for that person rather than once per save; changes to who can access the artifact are recorded separately as claude_artifact_sharing_updated.
269269
270 - `"claude_artifact_sent_to_partner"`
271
272 A member sent an export of an artifact to a partner application ("Send to …" on the artifact; a partner is a third-party application listed in Claude's connector directory): a file exported from the artifact was made available over a temporary link for the chosen partner to fetch. One activity is recorded per send, in the artifact owner's organization with the sending member as actor, whether or not the partner then retrieved the file; the partner's own import of the file is not part of this record. The file's name and contents are not recorded.
273
270274 - `"claude_artifact_sharing_updated"`
271275
272276 An artifact's sharing settings were updated.
from line 687
683687
684688 A security scan of a skill completed and produced a verdict.
685689
690 - `"claude_survey_closed"`
691
692 An organization admin closed an in-app survey before its end date, ending the collection of responses; a survey that reaches its end date records no event.
693
694 - `"claude_survey_created"`
695
696 An organization admin launched an in-app survey to its chosen audience, opening it immediately or at a scheduled start time.
697
698 - `"claude_survey_deleted"`
699
700 An organization admin permanently deleted a closed in-app survey together with every response collected for it.
701
702 - `"claude_survey_response_submitted"`
703
704 A member submitted their response to an in-app survey run by their organization; the record omits the response content, and a retried submission can produce more than one record for the same response.
705
706 - `"claude_survey_responses_exported"`
707
708 An organization admin downloaded a survey's responses as a CSV file, one row per response with the member's email address (blank if it is no longer available, for example because they left the organization), the groups, department and cost center they were invited through, the product they answered in, the submission time, and their answers.
709
686710 - `"claude_user_role_updated"`
687711
688712 A user's role within the organization was changed, or the user was added to or removed from the organization.
from line 2174
21502174
21512175 format: date-time
21522176
2153- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 516 more`
2177- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 522 more`
21542178
21552179 Exclude activities of these types. Cannot be combined with `activity_types[]`.
21562180
from line 2426
24022426
24032427 A new version of an artifact was published — for an artifact created in a chat this is the action that made it publicly viewable; for an artifact created outside a chat it is recorded when the artifact is saved, including saves of private artifacts, except that automatic saves made while a person keeps editing may be recorded periodically for that person rather than once per save; changes to who can access the artifact are recorded separately as claude_artifact_sharing_updated.
24042428
2429 - `"claude_artifact_sent_to_partner"`
2430
2431 A member sent an export of an artifact to a partner application ("Send to …" on the artifact; a partner is a third-party application listed in Claude's connector directory): a file exported from the artifact was made available over a temporary link for the chosen partner to fetch. One activity is recorded per send, in the artifact owner's organization with the sending member as actor, whether or not the partner then retrieved the file; the partner's own import of the file is not part of this record. The file's name and contents are not recorded.
2432
24052433 - `"claude_artifact_sharing_updated"`
24062434
24072435 An artifact's sharing settings were updated.
from line 2846
28182846
28192847 A security scan of a skill completed and produced a verdict.
28202848
2849 - `"claude_survey_closed"`
2850
2851 An organization admin closed an in-app survey before its end date, ending the collection of responses; a survey that reaches its end date records no event.
2852
2853 - `"claude_survey_created"`
2854
2855 An organization admin launched an in-app survey to its chosen audience, opening it immediately or at a scheduled start time.
2856
2857 - `"claude_survey_deleted"`
2858
2859 An organization admin permanently deleted a closed in-app survey together with every response collected for it.
2860
2861 - `"claude_survey_response_submitted"`
2862
2863 A member submitted their response to an in-app survey run by their organization; the record omits the response content, and a retried submission can produce more than one record for the same response.
2864
2865 - `"claude_survey_responses_exported"`
2866
2867 An organization admin downloaded a survey's responses as a CSV file, one row per response with the member's email address (blank if it is no longer available, for example because they left the organization), the groups, department and cost center they were invited through, the product they answered in, the submission time, and their answers.
2868
28212869 - `"claude_user_role_updated"`
28222870
28232871 A user's role within the organization was changed, or the user was added to or removed from the organization.
from line 4331
42834331
42844332## Returns
42854333
4286- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 516 more`
4334- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 522 more`
42874335
42884336 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
42894337
from line 9547
94999547
95009548 - `SystemActor object`
95019549
9502 Automated background processing performed by Anthropic systems, acting
9503 without a user or customer credential.
9504
9505 - `type: optional "system_actor"`
9506
9507 default: system_actor
9508
9509 - `service: optional string or null`
9510
9511 Name of the automated process that performed the action, when known.
9512
9513 - `AdminAPIKeyActor object`
9514
9515 - `type: optional "admin_api_key_actor"`
9516
9517 default: admin_api_key_actor
9518
9519 - `admin_api_key_id: string`
9520
9521 - `ip_address: string`
9522
9523 - `user_agent: string`
9524
9525 - `ServiceAccountActor object`
9526
9527 - `type: optional "service_account_actor"`
9528
9529 default: service_account_actor
9530
9531 - `ip_address: string`
9532
9533 - `service_account_id: string`
9534
9535 - `user_agent: string`
9536
9537 - `ScimDirectorySyncActor object`
9538
9539 - `type: optional "scim_directory_sync_actor"`
9540
9541 default: scim_directory_sync_actor
9542
9543 - `directory_id: string`
9544
9545 - `workos_event_id: string`
9546
9547 - `idp_connection_type: optional string or null`
9548
9549 - `FederatedIdentityActor object`
9550
9551 A federated external workload authenticated via a verified OIDC token.
9552
9553 Carries the verified issuer, subject, and audience claims from the
9554 presented JWT.
9555
9556 - `type: optional "federated_identity_actor"`
9557
9558 default: federated_identity_actor
9559
9560 - `issuer: string`
9561
9562 - `subject: string`
9563
9564 - `audience: optional array of string`
9565
9566 - `ip_address: optional string or null`
9567
9568 - `user_agent: optional string or null`
9569
9570 - `FederatedActor object`
9571
9572 An external identity asserted by a trusted provider — a cloud-provider
9573 gateway or a customer-registered federation issuer — acting without an
9574 Anthropic-provisioned account or service account.
9575
9576 - `type: optional "federated_actor"`
9577
9578 default: federated_actor
9579
9580 - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
9581
9582 - `FederatedActorAwsProvider object`
9583
9584 Asserting party: the AWS account the organization is bound to.
9585
9586 - `type: optional "aws"`
9587
9588 default: aws
9589
9590 - `account_id: string`
9591
9592 - `signed_principal: string`
9593
9594 The AWS-signed ARN of the IAM principal that requested the token.
9595
9596 - `FederatedActorAzureProvider object`
9597
9598 Asserting party: the Azure subscription the organization is bound to.
9599
9600 - `type: optional "azure"`
9601
9602 default: azure
9603
9604 - `subscription_id: string`
9605
9606 - `FederatedActorGcpProvider object`
9607
9608 Asserting party: the GCP project the organization is bound to.
9609
9610 - `type: optional "gcp"`
9611
9612 default: gcp
9613
9614 - `project_number: string`
9615
9616 - `FederatedActorOidcProvider object`
9617
9618 Asserting party: a customer-registered OIDC federation issuer.
9619
9620 - `type: optional "oidc"`
9621
9622 default: oidc
9623
9624 - `issuer: optional string or null`
9625
9626 The federation issuer's URL. Null when the presented credential failed verification.
9627
9628 - `ip_address: optional string or null`
9629
9630 - `subject: optional string or null`
9631
9632 The provider's verified identifier for the caller; its form depends on the provider.
9633
9634 - `user_agent: optional string or null`
9635
9636 - `AttestedDevi
9550 Au
No line in this hunk matches that.