Activities changedapi/compliance/activities
Nearest release: v2.1.314, published 6 hours after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+4,316added
Lines−8removed
From line
17
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits33to this page, all time
The whole hunk
from line 17, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 17
1717
1818### Query parameters
1919
20- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
20- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
2121
2222 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2323
from line 737
737737
738738 SAML IdP configuration updated for a public sector organization.
739739
740 - `"claude_security_finding_deleted"`
741
742 A Claude Security finding was permanently deleted by a user.
743
744 - `"claude_security_finding_updated"`
745
746 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
747
748 - `"claude_security_knowledge_document_created"`
749
750 A knowledge document was created in a Claude Security scan project.
751
752 - `"claude_security_knowledge_document_updated"`
753
754 A Claude Security scan project's knowledge document, such as its threat model, was changed.
755
756 - `"claude_security_knowledge_document_version_restored"`
757
758 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
759
760 - `"claude_security_scan_project_asset_added"`
761
762 A repository was added to a Claude Security scan project.
763
764 - `"claude_security_scan_project_asset_removed"`
765
766 A repository was removed from a Claude Security scan project.
767
768 - `"claude_security_scan_project_asset_updated"`
769
770 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
771
740772 - `"claude_skill_auto_disabled"`
741773
742774 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 2352
23202352
23212353 format: date-time
23222354
2323- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
2355- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
23242356
23252357 Exclude activities of these types. Cannot be combined with `activity_types[]`.
23262358
from line 3072
30403072
30413073 SAML IdP configuration updated for a public sector organization.
30423074
3075 - `"claude_security_finding_deleted"`
3076
3077 A Claude Security finding was permanently deleted by a user.
3078
3079 - `"claude_security_finding_updated"`
3080
3081 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
3082
3083 - `"claude_security_knowledge_document_created"`
3084
3085 A knowledge document was created in a Claude Security scan project.
3086
3087 - `"claude_security_knowledge_document_updated"`
3088
3089 A Claude Security scan project's knowledge document, such as its threat model, was changed.
3090
3091 - `"claude_security_knowledge_document_version_restored"`
3092
3093 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
3094
3095 - `"claude_security_scan_project_asset_added"`
3096
3097 A repository was added to a Claude Security scan project.
3098
3099 - `"claude_security_scan_project_asset_removed"`
3100
3101 A repository was removed from a Claude Security scan project.
3102
3103 - `"claude_security_scan_project_asset_updated"`
3104
3105 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
3106
30433107 - `"claude_skill_auto_disabled"`
30443108
30453109 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 4685
46214685
46224686### Returns
46234687
4624- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 558 more`
4688- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 566 more`
46254689
46264690 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
46274691
from line 9037
89739037
89749038 - `FederatedActorOidcProvider object`
89759039
8976 Asserting party: a customer-registered OIDC federation issuer.
8977
8978 - `type: optional "oidc"`
8979
8980 default: oidc
8981
8982 - `issuer: optional string or null`
8983
8984 The federation issuer's URL. Null when the presented credential failed verification.
8985
8986 - `ip_address: optional string or null`
8987
8988 - `subject: optional string or null`
8989
8990 The provider's verified identifier for the caller; its form depends on the provider.
8991
8992 - `user_agent: optional string or null`
8993
8994 - `AttestedDeviceActor object`
8995
8996 An attested mobile device authenticated via Apple App Attest.
8997
8998 - `type: optional "attested_device_actor"`
8999
9000 default: attested_device_actor
9001
9002 - `external_client_id: string`
9003
9004 - `kid_hash: string`
9005
9006 - `ip_address: optional string or null`
9007
9008 - `user_agent: optional string or null`
9009
9010 - `claude_artifact_id: string`
9011
9012 The artifact's identifier.
9013
9014 - `id: optional string`
9015
9016 Unique identifier for the activity e.g. 'activity_abcd1234'
9017
9018 - `claude_artifact_version_id: optional string or null`
9019
9020 The version of the artifact whose comments were served, when known.
9021
9022 - `created_at: optional string`
9023
9024 When this activity occurred.
9025
9026 format: date-time
9027
9028 - `organization_id: optional string or null`
9029
9030 Organization ID this activity is associated with
9031
9032 - `organization_uuid: optional string or null`
9033
9034 Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
9035
9036 - `ClaudeArtifactCreated object`
9037
9038 An artifact was created.
9039
9040 - `type: optional "claude_artifact_created"`
9041
9042 default: claude_artifact_created
9043
9044 - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
9045
9046 - `APIActor object`
9047
9048 - `type: optional "api_actor"`
9049
9050 default: api_actor
9051
9052 - `api_key_id: string`
9053
9054 - `ip_address: string`
9055
9056 - `user_agent: string`
9057
9058 - `UserActor object`
9059
9060 - `type: optional "user_actor"`
9061
9062 default: user_actor
9063
9064 - `email_address: string`
9065
9066 format: email
9067
9068 - `ip_address: string`
9069
9070 - `user_agent: string`
9071
9072 - `user_id: string`
9073
9074 - `UnauthenticatedUserActor object`
9075
9076 - `type: optional "unauthenticated_user_actor"`
9077
9078 default: unauthenticated_user_actor
9079
9080 - `ip_addr
9040 Asserting party: a customer-registered OIDC federation i
No line in this hunk matches that.