ApiKeyLogResponse

Fields, types and constraints for the ApiKeyLogResponse public API model.

API key access audit record without secrets or key hashes.

Fields

Field	Type	Constraint	Example	Visibility
`status` Whether the operation completed successfully.	`boolean`	—	`false`	Public contract
`_id` Audit record id.	`string`	—	`"example"`	Public contract
`institutionId` Authenticated tenant institution id.	`string`	—	`"example"`	Public contract
`apiKeyId` API key that made the request or is used as a filter.	`string`	nullable	`"example"`	Public contract
`apiKeySnapshot` Limited API key snapshot without secrets or hashes.	`object`	nullable	`{}`	Public contract
`success` Whether the request completed successfully.	`boolean`	—	`false`	Public contract
`errorType` API key authentication or access error type.	`string`	enum: missing_key \| invalid_key \| inactive_key \| inactive_institution \| unapproved_institution \| domain_restriction \| ip_restriction \| service_unavailable · nullable	`"missing_key"`	Public contract
`errorMessage` Safe failure summary.	`string`	nullable	`"example"`	Public contract
`requestPath` Requested API path.	`string`	—	`"example"`	Audit data
`requestUrl` Safe request URL summary returned only by the detail endpoint.	`string`	nullable	`"example"`	Audit data
`requestMethod` HTTP method.	`string`	—	`"example"`	Audit data
`requestHeaders` Redacted header summary returned only by the detail endpoint.	`object`	—	`{}`	Audit data
`requestQuery` Redacted query summary returned only by the detail endpoint.	`object`	—	`{}`	Audit data
`requestBody` Redacted body summary returned only by the detail endpoint.	`object`	—	`{}`	Audit data
`host` Request host returned only by the detail endpoint.	`string`	nullable	`"example"`	Public contract
`origin` Origin header reported by the request.	`string`	nullable	`"example"`	Audit data
`referer` Referer header reported by the request.	`string`	nullable	`"example"`	Audit data
`userAgent` Safely stored request user-agent.	`string`	nullable	`"example"`	Audit data
`ip` Request IP shown in the tenant report.	`string`	nullable	`"example"`	Personal context
`responseTime` Request duration in milliseconds.	`number`	—	`0`	Public contract
`expiresAt` Time when the audit record expires.	`string`	format: date-time · nullable	`"2026-07-14T12:00:00Z"`	Public contract
`createdAt` Record creation time.	`string`	format: date-time	`"2026-07-14T12:00:00Z"`	Public contract
`updatedAt` Record update time.	`string`	format: date-time	`"2026-07-14T12:00:00Z"`	Public contract

Machine-readable schema

The model is published under the same name in the JSON Schema bundle.

JSON Schema

Decision boundary

An API result is a candidate match. A final sanctions or compliance decision requires official-source verification and human review.