get_api_key_usage
Retrieve API-key-driven activity reports per actor, excluding UI sessions. Filter by actor or date range to analyze action breakdowns, source IPs, and first/last seen timestamps.
Instructions
Report API-key-driven activity per actor (UI/session activity excluded).
Events are classified as API-key driven using the audit event's access/auth-method field, falling back to user-agent shape (scripted client vs browser). Each actor gets an action breakdown, distinct source IPs, and first/last seen timestamps - all pre-aggregated.
Args: actor_id: Optional actor UUID. Omit to cover every actor with API-key activity in the window. date_from: Start of the window, ISO-8601. Defaults to 30 days ago. date_to: End of the window, ISO-8601. Defaults to now.
Returns:
A dict with actors (per-actor API-key usage profiles), an
access_type_totals breakdown for context, and coverage metadata.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| date_to | No | ||
| actor_id | No | ||
| date_from | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||