> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mithunai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Read what a support session looked at

> Every request the session made, newest first, refusals included. Read from your own audit log rather than from the session, so it outlives the session itself.

Every request the session made, newest first. Requires the owner or administrator role.

This is read from your organisation's audit log rather than from the session, so it **outlives the session**: a session that ended last week still answers here. Refused requests are included, so a session that tried something its role does not permit shows the attempt and the refusal, not silence.

Support sessions are read-only twice over — the role grants no write permission, and the transport refuses every method but `GET`, `HEAD` and `OPTIONS` before a route is reached — so every entry here is a read.

<ParamField path="session_id" type="string" required>
  The session's id (UUID), as returned in `active[].id` or `history[].id` on [Read support
  access](/api-reference/support-access/get-support-access).
</ParamField>

## Response

<ResponseField name="data" type="object[]" required>
  The requests, newest first.

  <Expandable title="request">
    <ResponseField name="occurred_at" type="string" required>
      When the request was made, ISO 8601 in UTC.
    </ResponseField>

    <ResponseField name="method" type="string" required>
      The HTTP method.
    </ResponseField>

    <ResponseField name="path" type="string" required>
      The path that was requested.
    </ResponseField>

    <ResponseField name="status" type="integer" required>
      The HTTP status that was returned.
    </ResponseField>

    <ResponseField name="allowed" type="boolean" required>
      Whether the request was permitted. `false` for a refusal.
    </ResponseField>
  </Expandable>
</ResponseField>

<RequestExample>
  ```bash cURL theme={"theme":{"light":"github-light","dark":"github-dark"}}
  curl \
    "$MITHUNAI_URL/arukz/api/v1/support-access/sessions/9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d/activity" \
    --header "Authorization: Bearer $MITHUNAI_API_KEY"
  ```

  ```python Python theme={"theme":{"light":"github-light","dark":"github-dark"}}
  import os

  import requests

  session_id = "9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d"
  response = requests.get(
      f"{os.environ['MITHUNAI_URL']}/arukz/api/v1/support-access/sessions/{session_id}/activity",
      headers={"Authorization": f"Bearer {os.environ['MITHUNAI_API_KEY']}"},
      timeout=30,
  )
  response.raise_for_status()
  for entry in response.json()["data"]:
      print(entry["occurred_at"], entry["method"], entry["path"], entry["status"])
  ```

  ```javascript JavaScript theme={"theme":{"light":"github-light","dark":"github-dark"}}
  // From your backend. Never send an API key to a browser.
  const sessionId = '9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d'
  const response = await fetch(
    `${process.env.MITHUNAI_URL}/arukz/api/v1/support-access/sessions/${sessionId}/activity`,
    { headers: { Authorization: `Bearer ${process.env.MITHUNAI_API_KEY}` } },
  )
  for (const entry of (await response.json()).data) {
    console.log(entry.occurred_at, entry.method, entry.path, entry.status)
  }
  ```
</RequestExample>

<ResponseExample>
  ```json 200 theme={"theme":{"light":"github-light","dark":"github-dark"}}
  {
    "data": [
      {
        "occurred_at": "2026-09-26T09:21:47.903112+00:00",
        "method": "GET",
        "path": "/arukz/api/v1/conversations",
        "status": 403,
        "allowed": false
      },
      {
        "occurred_at": "2026-09-26T09:18:12.440907+00:00",
        "method": "GET",
        "path": "/arukz/api/v1/knowledge/documents",
        "status": 200,
        "allowed": true
      },
      {
        "occurred_at": "2026-09-26T09:14:33.201884+00:00",
        "method": "GET",
        "path": "/arukz/api/v1/assistants",
        "status": 200,
        "allowed": true
      }
    ]
  }
  ```

  ```json 403 theme={"theme":{"light":"github-light","dark":"github-dark"}}
  { "code": "authorization_error", "message": "You are not allowed to perform this action." }
  ```
</ResponseExample>