Every activity in the caller's own tenant, newest first

GET

/operator/inspect/activities

const url = 'http://localhost:3000/operator/inspect/activities?limit=25';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'http://localhost:3000/operator/inspect/activities?limit=25' \
  --header 'Authorization: Bearer <token>'

Takes no tenant id — the tenant comes from the operator session, the same structural-IDOR-impossible property GET /operator/tenant relies on. Keyset pagination on (time DESC, id DESC) via next. Includes soft-deleted activities: deleted_at is non-null for a tombstone, so “the post vanished” has an answer. Both owner and member may read; platform staff have no tenant and get 403. cursor is still accepted as a deprecated alias for next, for consistency with the rest of the API — new callers should use next.

Authorizations

operatorToken

Parameters

Query Parameters

limit

integer

default: 25 >= 1 <= 100

Page size, 1-100.

next

string

Opaque paging token. Pass the next value from the previous page.

Responses

200

A page of activities, newest first.

application/json

object

results

required

Array<object>

An activity as the tenant console’s inspector shows it. Unlike a feed read, this includes soft-deleted activities: deleted_at is non-null for a tombstone. The inspector is a debug tool, and “the post vanished” is a question only the tombstone can answer.

object

string format: uuid

actor

string

verb

string

object

string

target

string | null

foreign_id

string | null

time

string format: date-time

origin_feed

string

reaction_counts

object

key

additional properties

integer

deleted_at

string | null format: date-time

next

required

Opaque cursor. Null when no further page.

string | null

Example

{
  "results": [
    {
      "actor": "user:alice",
      "verb": "post",
      "object": "match:7",
      "origin_feed": "user:alice"
    }
  ]
}

400

Validation failed — malformed next or an out-of-range limit.

application/json

object

error

required

object

code

required

string

Allowed values: VALIDATION_FAILED UNAUTHENTICATED FORBIDDEN NOT_FOUND CONFLICT RATE_LIMITED INTERNAL

message

required

string

requestId

required

string

fields

Present only for VALIDATION_FAILED.

Array<object>

object

path

string

message

string

Example

{
  "error": {
    "code": "VALIDATION_FAILED"
  }
}

401

Invalid, expired, revoked, or absent token.

application/json

object

error

required

object

code

required

string

Allowed values: VALIDATION_FAILED UNAUTHENTICATED FORBIDDEN NOT_FOUND CONFLICT RATE_LIMITED INTERNAL

message

required

string

requestId

required

string

fields

Present only for VALIDATION_FAILED.

Array<object>

object

path

string

message

string

Example

{
  "error": {
    "code": "VALIDATION_FAILED"
  }
}

403

Caller is platform staff, who have no tenant to inspect.

application/json

object

error

required

object

code

required

string

Allowed values: VALIDATION_FAILED UNAUTHENTICATED FORBIDDEN NOT_FOUND CONFLICT RATE_LIMITED INTERNAL

message

required

string

requestId

required

string

fields

Present only for VALIDATION_FAILED.

Array<object>

object

path

string

message

string

Example

{
  "error": {
    "code": "VALIDATION_FAILED"
  }
}