List Scaleway Audit Trail authentication events
scaleway_audit_list_authentication_eventsAudit authentication activity across your Scaleway organization, covering logins, API-key/token auth, and MFA outcomes with filters for time range and region to identify suspicious access.
Instructions
List authentication events (logins, API-key/token auth, MFA outcomes - success/failure, origin, country, method) across this Organization. A separate endpoint from scaleway_audit_list_events: those cover API/resource activity, these cover authentication activity only. Requires the AuditTrailReadOnly permission set on THIS server's own credential; if every call fails with permissions_denied, that's very likely why - grant it via scaleway_iam_set_policy_rules (organization scope). Defaults to the last 24 hours. Cursor-based pagination with no total_count, same caveats as scaleway_audit_list_events.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| region | No | Defaults to the server's configured region (fr-par). | |
| order_by | No | Default recorded_at_desc (newest first). | |
| max_pages | No | Safety cap on pagination (100 items/page). Default 20. Said to be truncated in the response if more pages remained. | |
| full_detail | No | false (default): drop user_agent and per-resource detail blobs. true: return every field the API provides. | |
| recorded_after | No | ISO 8601 date-time, inclusive. Defaults to 24 hours ago. | |
| recorded_before | No | ISO 8601 date-time, exclusive. Defaults to now (omitted from the request). |