logs

List the workspace activity

Who changed what in the workspace, latest first: resources added, edited, re-indexed or deleted, site rules and syncs, assistants and widgets created, edited, paused or deleted, tags renamed or deleted, members' access changed. Each line says who (a member, an API key, or Lookio itself for a scheduled sync), through which door (app, api, cli, mcp, agent for Lookio AI, system), and which fields changed (names only, never content). Filter by actor_id, origin, target_type, target_id, action and from/to, and paginate with cursor. Kept a year. Admins only, through a personal connection (the CLI's lookio auth login, an MCP client) with the admin scope: an API key never has it. Costs nothing.

GET/v1/logs/activity

Request

curl --request GET \
  --url 'https://api.lookio.app/v1/logs/activity' \
  --header 'Authorization: <api-key>'

import json
import requests

url = "https://api.lookio.app/v1/logs/activity"
headers = {
  "Authorization": "<api-key>"
}

response = requests.request("GET", url, headers=headers)
print(response.json())

const response = await fetch("https://api.lookio.app/v1/logs/activity", {
  method: "GET",
  headers: {
    "Authorization": "<api-key>"
  },
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://api.lookio.app/v1/logs/activity");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "GET");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: <api-key>",
]);
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("GET", "https://api.lookio.app/v1/logs/activity", nil)
  req.Header.Set("Authorization", "<api-key>")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://api.lookio.app/v1/logs/activity"))
    .header("Authorization", "<api-key>")
    .method("GET", HttpRequest.BodyPublishers.noBody())
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://api.lookio.app/v1/logs/activity")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "<api-key>"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": [
    {
      "id": "<string>",
      "action": "<string>",
      "summary": "<string>",
      "actor": {
        "type": "member",
        "id": null,
        "name": null,
        "email": null
      },
      "origin": "<string>",
      "target": {
        "type": "<string>",
        "id": null,
        "name": null
      },
      "details": {},
      "created_at": "<string>"
    }
  ],
  "has_more": true,
  "next_cursor": null,
  "limit": 123,
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

Requires admin.

Who changed what, latest first: resources added, edited, re-indexed or deleted, site rules and syncs, assistants and widgets created, edited, paused or deleted, tags renamed or deleted, and members’ access changed. You page with cursor, an opaque string: pass next_cursor back unchanged. See Pagination.

Each line has the actor (a member, an API key, or Lookio itself for a scheduled sync), the origin (the door used: app, api, cli, mcp, agent for Lookio AI, or system), the target with its name at the time of the change, and details: the names of the fields that changed, counts or a sync’s figures. It never holds content.

Narrow the list with actor_id, origin (comma-separated), target_type (resource, assistant, widget, tag or member), target_id, action (an exact action such as assistant.updated, or a kind such as assistant for every action on it), q (words in the name of what changed) and from and to. Use target_id to answer “who changed this assistant?” and actor_id to answer “what did this key do?”.

Admins only. The caller must be an admin connected as a person (OAuth: the CLI login or an MCP client) with the admin scope; an API key never has it, and the call fails with permission_denied. Entries are kept a year. See Logs.

Authorizations

Authorizationbearerin headerrequired

Query parameters

actor_idstringlength: 1–64 chars

Only what this member (user id) or API key (key id) did.

originstringlength: ≥ 1 chars

Only changes made through these doors, comma-separated: app, api, cli, mcp, agent (Lookio AI), system (Lookio itself, such as a scheduled sync).

target_typeenum<string>one of: resource, assistant, widget, tag, member

Only changes to this kind of thing.

target_idstringlength: 1–64 chars

Only changes to this resource, assistant, widget or member.

actionstringpattern: ^[a-z_]+(\.[a-z_]+)?$

An exact action (assistant.updated) or every action on a kind (assistant).

qstringlength: 1–200 chars

Words in the name of what changed.

fromstring

Only changes since this ISO 8601 date or timestamp.

tostring

Only changes until this ISO 8601 date or timestamp.

cursorstringlength: 1–200 chars

Pass next_cursor from the previous page, unchanged.

limitintegerrange: 1–100

Number of items to return. Values outside 1-100 are clamped, and the response reports the limit actually applied.

Response

application/json

List the workspace activity

dataobject[]required

Show child attributes

data.idstringrequired

data.actionstringrequired

<kind>.<verb>, such as resource.created, assistant.updated, widget.paused, site.synced, member.access_updated.

data.summarystringrequired

The change in a few words, such as "Edited Support".

data.actorobjectrequired

Show child attributes

data.actor.typeenum<string>requiredone of: member, api_key, system

data.actor.idstringnullrequired

data.actor.namestringnullrequired

data.actor.emailstringnull

Members only.

data.originstringrequired

app, api, cli, mcp, agent (Lookio AI) or system.

data.targetobjectrequired

Show child attributes

data.target.typestringrequired

data.target.idstringnullrequired

data.target.namestringnullrequired

Its name at the time of the change.

data.detailsRecord<string, object>required

What changed, briefly: the fields edited (names only), counts, a sync's figures. Never content.

data.created_atstringrequired

has_morebooleanrequired

True when another page follows: pass next_cursor back as cursor.

next_cursorstringnullrequired

Pass it back unchanged as cursor. Null on the last page.

limitintegerrequired

The page size actually applied.

request_idstringrequired

List the workspace activity

Authorizations

Query parameters

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown