# The Activity Log object ### The Activity Log object ```json { "id": "accact_1SdeybAiQNL8swvtMHyVtfCU", "object": "v2.iam.activity_log", "created": "2026-04-01T00:00:00.000Z", "type": "api_key_created", "livemode": true, "context": "acct_1SdeybAiQNL8swvt", "actor": { "type": "user", "user": { "email": "user@example.com" } }, "details": { "type": "api_key", "api_key": { "id": "mk_1SdeybAiQNL8swvtMHyVtfCU", "created": "2026-04-01T00:00:00.000Z", "type": "secret_key", "name": "My API Key", "note": "", "expires_at": null, "ip_allowlist": [], "new_key": null, "managed_by": null } } } ``` ## Attributes - `id` (string) Unique identifier of the activity log entry. - `object` (string, value is "v2.iam.activity_log") String representing the object’s type. Objects of the same type share the same value of the object field. - [`actor`](https://docs.stripe.com/api/v2/iam/activity-logs/object.md?query=actor&api-version=2026-09-30.preview) (object) The actor that performed the action. - `context` (string) The account on which the action was performed. - `created` (timestamp) Timestamp when the activity log entry was created. - [`details`](https://docs.stripe.com/api/v2/iam/activity-logs/object.md?query=details&api-version=2026-09-30.preview) (object) Action-specific details of the activity log entry. - `livemode` (boolean) Whether the action was performed in live mode. - [`related_object`](https://docs.stripe.com/api/v2/iam/activity-logs/object.md?query=related_object&api-version=2026-09-30.preview) (object, nullable) The object related to the activity log entry. - [`request`](https://docs.stripe.com/api/v2/iam/activity-logs/object.md?query=request&api-version=2026-09-30.preview) (object, nullable) The API request that instigated the action. - `type` (enum) The type of action that was performed. Possible enum values: - `anomaly_detection_settings_updated` Anomaly detection settings were updated. - `api_key_created` An API key was created. - `api_key_deleted` An API key was deleted. - `api_key_updated` An API key was updated. - `api_key_viewed` An API key’s secret was viewed. - `issuing_activated` Issuing was activated for the account. - `issuing_balance_transfer_created` An Issuing balance transfer was created to move funds between balances. - `issuing_card_created` An Issuing card was created. - `issuing_card_sensitive_details_viewed` An Issuing card’s sensitive details (card number, CVC, or PIN) were viewed. - `issuing_card_updated` An Issuing card was updated. - `issuing_cardholder_created` An Issuing cardholder was created. - `issuing_cardholder_updated` An Issuing cardholder was updated. - `issuing_dispute_created` An Issuing dispute was created. - `issuing_dispute_submitted` An Issuing dispute was submitted for review. - `issuing_dispute_updated` An Issuing dispute was updated. - `manual_payouts_disabled` The Connect platform disabled the connected account’s ability to create manual payouts. - `manual_payouts_enabled` The Connect platform enabled the connected account’s ability to create manual payouts. - `payout_destination_added` A payout destination was added. - `payout_destination_removed` A payout destination was removed. - `payout_destination_updated` A payout destination was updated. - `payout_schedule_edits_disabled` The Connect platform disabled the connected account’s ability to edit its payout schedule. - `payout_schedule_edits_enabled` The Connect platform enabled the connected account’s ability to edit its payout schedule. - `scim_group_deleted` A SCIM group was deleted. - `scim_group_member_added` A member was added to a SCIM group. - `scim_group_member_removed` A member was removed from a SCIM group. - `scim_group_roles_updated` Roles for a SCIM group were changed. - `scim_group_updated` A SCIM group’s details were updated. - `sso_domain_verified` A domain was verified for SSO. - `sso_settings_created` SSO (SAML) was configured for the account. - `sso_settings_deleted` SSO (SAML) configuration was removed. - `sso_settings_updated` SSO (SAML) settings were updated. - `two_step_authentication_mandate_disabled` A two-step authentication requirement was disabled. - `two_step_authentication_mandate_enabled` A two-step authentication requirement was enabled. - `user_auth_challenge_failed` An identity verification challenge failed. - `user_email_changed` A user changed their email address. - `user_email_verified` A user verified their email address. - `user_express_phone_number_changed` A user changed the phone number on their Express account. - `user_google_account_connected` A user connected a Google account for sign-in. - `user_google_account_disconnected` A user disconnected their Google account. - `user_invite_accepted` A user invite was accepted. - `user_invite_created` A user invite was created. - `user_invite_deleted` A user invite was deleted. - `user_passkey_added` The user registered a passkey. - `user_passkey_removed` The user removed a passkey. - `user_passkey_updated` The user renamed a passkey. - `user_passkey_upgraded` The user upgraded a device to a passkey. - `user_password_changed` The user changed their account password. - `user_password_initialized` The user set a password on their account. - `user_password_reset_failed` A password reset attempt failed due to an invalid one-time code. - `user_password_reset_requested` A password reset was requested for the user. - `user_password_reset_succeeded` The user successfully reset their password. - `user_roles_deleted` A user’s roles were deleted. - `user_roles_updated` A user’s roles were updated. - `user_two_step_authentication_backup_code_used` The user used an emergency backup code to disable two-step authentication. - `user_two_step_authentication_method_added` The user added a two-step authentication method. - `user_two_step_authentication_method_removed` A two-step authentication method was removed from the account. - `user_two_step_authentication_method_reset` A two-step authentication method was reset. - `user_two_step_authentication_method_updated` The user updated an existing two-step authentication method. - `user_two_step_authentication_reset_requested` An account admin requested a two-step authentication reset for another user.