Get security audit session
/v1/security/audit/sessions/{id}
Signed-in sessionLaunch key product.securityOperation security_audit_session_get
Headers
- X-Specify-Account-IdstringRequired
- The account the request acts in.
- X-Specify-Service-Tenancy-IdstringRequired
- The service tenancy the request acts in.
Path parameters
- idstringRequired
Query parameters
- expectedAuthorizationVersionstring
Returns
- idstringRequired
- titlenull | stringRequired
- client"claude_code" | "codex" | "cursor" | "mcp_proxy"Required
- clientVersionnull | stringRequired
- modelnull | stringRequired
- repositorynull | objectRequired
- startedAtnumberRequired
- lastAtnumberRequired
- endedAtnull | numberRequired
- receivedAtnumberRequired
- personobjectRequired
- devicenull | objectRequired
- countsnull | objectRequired
- recordednull | objectRequired
- tasknull | objectRequired
- taskLinkedbooleanRequired
- taskLinkSource"agent" | "person" | nullRequired
- retentionobjectRequired
- deletednull | objectRequired
- canLinkbooleanRequired
- canDeletebooleanRequired
Errors
400, 401, 403, 404, 409, 429 and 503 return {"error": {"code", "message", "correlationId"}}. A call without a valid credential gets 401 before its input is checked, and so does an address that is not an operation: 404 and 400 come only once the credential is accepted. Public operations answer without one.