Read what a support session looked at
Every request a support session made, newest first, refusals included. Read from your own audit log, so it outlives the session itself.
GET
/
support-access
/
sessions
/
{session_id}
/
activity
curl \
"$MITHUNAI_URL/mithunai/api/v1/support-access/sessions/9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d/activity" \
--header "Authorization: Bearer $MITHUNAI_API_KEY"
import os
import requests
session_id = "9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d"
response = requests.get(
f"{os.environ['MITHUNAI_URL']}/mithunai/api/v1/support-access/sessions/{session_id}/activity",
headers={"Authorization": f"Bearer {os.environ['MITHUNAI_API_KEY']}"},
timeout=30,
)
response.raise_for_status()
for entry in response.json()["data"]:
print(entry["occurred_at"], entry["method"], entry["path"], entry["status"])
// From your backend. Never send an API key to a browser.
const sessionId = '9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d'
const response = await fetch(
`${process.env.MITHUNAI_URL}/mithunai/api/v1/support-access/sessions/${sessionId}/activity`,
{ headers: { Authorization: `Bearer ${process.env.MITHUNAI_API_KEY}` } },
)
for (const entry of (await response.json()).data) {
console.log(entry.occurred_at, entry.method, entry.path, entry.status)
}
{
"data": [
{
"occurred_at": "2026-09-26T09:21:47.903112+00:00",
"method": "GET",
"path": "/mithunai/api/v1/conversations",
"status": 403,
"allowed": false
},
{
"occurred_at": "2026-09-26T09:18:12.440907+00:00",
"method": "GET",
"path": "/mithunai/api/v1/knowledge/documents",
"status": 200,
"allowed": true
},
{
"occurred_at": "2026-09-26T09:14:33.201884+00:00",
"method": "GET",
"path": "/mithunai/api/v1/assistants",
"status": 200,
"allowed": true
}
]
}
{ "code": "authorization_error", "message": "You are not allowed to perform this action." }
Every request the session made, newest first. Requires the owner or administrator role.
This is read from your organisation’s audit log rather than from the session, so it outlives the session: a session that ended last week still answers here. Refused requests are included, so a session that tried something its role does not permit shows the attempt and the refusal, not silence.
Support sessions are read-only twice over — the role grants no write permission, and the transport refuses every method but
GET, HEAD and OPTIONS before a route is reached — so every entry here is a read.
string
required
The session’s id (UUID), as returned in
active[].id or history[].id on Read support
access.Response
object[]
required
curl \
"$MITHUNAI_URL/mithunai/api/v1/support-access/sessions/9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d/activity" \
--header "Authorization: Bearer $MITHUNAI_API_KEY"
import os
import requests
session_id = "9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d"
response = requests.get(
f"{os.environ['MITHUNAI_URL']}/mithunai/api/v1/support-access/sessions/{session_id}/activity",
headers={"Authorization": f"Bearer {os.environ['MITHUNAI_API_KEY']}"},
timeout=30,
)
response.raise_for_status()
for entry in response.json()["data"]:
print(entry["occurred_at"], entry["method"], entry["path"], entry["status"])
// From your backend. Never send an API key to a browser.
const sessionId = '9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d'
const response = await fetch(
`${process.env.MITHUNAI_URL}/mithunai/api/v1/support-access/sessions/${sessionId}/activity`,
{ headers: { Authorization: `Bearer ${process.env.MITHUNAI_API_KEY}` } },
)
for (const entry of (await response.json()).data) {
console.log(entry.occurred_at, entry.method, entry.path, entry.status)
}
{
"data": [
{
"occurred_at": "2026-09-26T09:21:47.903112+00:00",
"method": "GET",
"path": "/mithunai/api/v1/conversations",
"status": 403,
"allowed": false
},
{
"occurred_at": "2026-09-26T09:18:12.440907+00:00",
"method": "GET",
"path": "/mithunai/api/v1/knowledge/documents",
"status": 200,
"allowed": true
},
{
"occurred_at": "2026-09-26T09:14:33.201884+00:00",
"method": "GET",
"path": "/mithunai/api/v1/assistants",
"status": 200,
"allowed": true
}
]
}
{ "code": "authorization_error", "message": "You are not allowed to perform this action." }
Last modified on November 7, 2026
curl \
"$MITHUNAI_URL/mithunai/api/v1/support-access/sessions/9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d/activity" \
--header "Authorization: Bearer $MITHUNAI_API_KEY"
import os
import requests
session_id = "9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d"
response = requests.get(
f"{os.environ['MITHUNAI_URL']}/mithunai/api/v1/support-access/sessions/{session_id}/activity",
headers={"Authorization": f"Bearer {os.environ['MITHUNAI_API_KEY']}"},
timeout=30,
)
response.raise_for_status()
for entry in response.json()["data"]:
print(entry["occurred_at"], entry["method"], entry["path"], entry["status"])
// From your backend. Never send an API key to a browser.
const sessionId = '9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d'
const response = await fetch(
`${process.env.MITHUNAI_URL}/mithunai/api/v1/support-access/sessions/${sessionId}/activity`,
{ headers: { Authorization: `Bearer ${process.env.MITHUNAI_API_KEY}` } },
)
for (const entry of (await response.json()).data) {
console.log(entry.occurred_at, entry.method, entry.path, entry.status)
}
{
"data": [
{
"occurred_at": "2026-09-26T09:21:47.903112+00:00",
"method": "GET",
"path": "/mithunai/api/v1/conversations",
"status": 403,
"allowed": false
},
{
"occurred_at": "2026-09-26T09:18:12.440907+00:00",
"method": "GET",
"path": "/mithunai/api/v1/knowledge/documents",
"status": 200,
"allowed": true
},
{
"occurred_at": "2026-09-26T09:14:33.201884+00:00",
"method": "GET",
"path": "/mithunai/api/v1/assistants",
"status": 200,
"allowed": true
}
]
}
{ "code": "authorization_error", "message": "You are not allowed to perform this action." }