Query compliance activities changedapi/compliance/activities/list
Nearest release: v2.1.314, published 6 hours after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+2,191added
Lines−5removed
From line
15
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits33to this page, all time
The whole hunk
from line 15, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 15
1515
1616## Query parameters
1717
18- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
18- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
1919
2020 Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
2121
from line 735
735735
736736 SAML IdP configuration updated for a public sector organization.
737737
738 - `"claude_security_finding_deleted"`
739
740 A Claude Security finding was permanently deleted by a user.
741
742 - `"claude_security_finding_updated"`
743
744 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
745
746 - `"claude_security_knowledge_document_created"`
747
748 A knowledge document was created in a Claude Security scan project.
749
750 - `"claude_security_knowledge_document_updated"`
751
752 A Claude Security scan project's knowledge document, such as its threat model, was changed.
753
754 - `"claude_security_knowledge_document_version_restored"`
755
756 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
757
758 - `"claude_security_scan_project_asset_added"`
759
760 A repository was added to a Claude Security scan project.
761
762 - `"claude_security_scan_project_asset_removed"`
763
764 A repository was removed from a Claude Security scan project.
765
766 - `"claude_security_scan_project_asset_updated"`
767
768 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
769
738770 - `"claude_skill_auto_disabled"`
739771
740772 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 2350
23182350
23192351 format: date-time
23202352
2321- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 558 more`
2353- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "account_migration_completed" or 566 more`
23222354
23232355 Exclude activities of these types. Cannot be combined with `activity_types[]`.
23242356
from line 3070
30383070
30393071 SAML IdP configuration updated for a public sector organization.
30403072
3073 - `"claude_security_finding_deleted"`
3074
3075 A Claude Security finding was permanently deleted by a user.
3076
3077 - `"claude_security_finding_updated"`
3078
3079 A Claude Security finding was resolved or reopened by a user, or by an automated Claude Security process (a system actor whose service field names the process).
3080
3081 - `"claude_security_knowledge_document_created"`
3082
3083 A knowledge document was created in a Claude Security scan project.
3084
3085 - `"claude_security_knowledge_document_updated"`
3086
3087 A Claude Security scan project's knowledge document, such as its threat model, was changed.
3088
3089 - `"claude_security_knowledge_document_version_restored"`
3090
3091 An earlier version of a Claude Security scan project's knowledge document, such as its threat model, was written back as the document's newest version.
3092
3093 - `"claude_security_scan_project_asset_added"`
3094
3095 A repository was added to a Claude Security scan project.
3096
3097 - `"claude_security_scan_project_asset_removed"`
3098
3099 A repository was removed from a Claude Security scan project.
3100
3101 - `"claude_security_scan_project_asset_updated"`
3102
3103 A repository's scan settings, such as its branch or directories, were changed in a Claude Security scan project.
3104
30413105 - `"claude_skill_auto_disabled"`
30423106
30433107 A skill that had been turned on for a member automatically was turned off for them automatically, not by the member; reason says why. A member turning a skill off themselves is recorded as claude_skill_disabled.
from line 4683
46194683
46204684## Returns
46214685
4622- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 558 more`
4686- `data: optional array of AbuseDecisionReceived or AccountDeleted or AccountMigrationCompleted or 566 more`
46234687
46244688 List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
46254689
from line 9035
89719035
89729036 - `FederatedActorOidcProvider object`
89739037
8974 Asserting party: a customer-registered OIDC federation issuer.
8975
8976 - `type: optional "oidc"`
8977
8978 default: oidc
8979
8980 - `issuer: optional string or null`
8981
8982 The federation issuer's URL. Null when the presented credential failed verification.
8983
8984 - `ip_address: optional string or null`
8985
8986 - `subject: optional string or null`
8987
8988 The provider's verified identifier for the caller; its form depends on the provider.
8989
8990 - `user_agent: optional string or null`
8991
8992 - `AttestedDeviceActor object`
8993
8994 An attested mobile device authenticated via Apple App Attest.
8995
8996 - `type: optional "attested_device_actor"`
8997
8998 default: attested_device_actor
8999
9000 - `external_client_id: string`
9001
9002 - `kid_hash: string`
9003
9004 - `ip_address: optional string or null`
9005
9006 - `user_agent: optional string or null`
9007
9008 - `claude_artifact_id: string`
9009
9010 The artifact's identifier.
9011
9012 - `id: optional string`
9013
9014 Unique identifier for the activity e.g. 'activity_abcd1234'
9015
9016 - `claude_artifact_version_id: optional string or null`
9017
9018 The version of the artifact whose comments were served, when known.
9019
9020 - `created_at: optional string`
9021
9022 When this activity occurred.
9023
9024 format: date-time
9025
9026 - `organization_id: optional string or null`
9027
9028 Organization ID this activity is associated with
9029
9030 - `organization_uuid: optional string or null`
9031
9032 Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
9033
9034 - `ClaudeArtifactCreated object`
9035
9036 An artifact was created.
9037
9038 - `type: optional "claude_artifact_created"`
9039
9040 default: claude_artifact_created
9041
9042 - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
9043
9044 - `APIActor object`
9045
9046 - `type: optional "api_actor"`
9047
9048 default: api_actor
9049
9050 - `api_key_id: string`
9051
9052 - `ip_address: string`
9053
9054 - `user_agent: string`
9055
9056 - `UserActor object`
9057
9058 - `type: optional "user_actor"`
9059
9060 default: user_actor
9061
9062 - `email_address: string`
9063
9064 format: email
9065
9066 - `ip_address: string`
9067
9068 - `user_agent: string`
9069
9070 - `user_id: string`
9071
9072 - `UnauthenticatedUserActor object`
9073
9074 - `type: optional "unauthenticated_user_actor"`
9075
9076 default: unauthenticated_user_actor
9077
9078 - `ip_
9038 Asserting party: a customer-registered OIDC federati
No line in this hunk matches that.