The app's API requests

GET 
/app_installs/:id/api_requests

The requests this install's tokens made (30 days), newest first, keyset-paged on (occurred_at, id): method, the path without credentials, status ("200 replay" for an Idempotency-Key repeat, "429 ×3" for one sampled row standing for three refusals), the scope that allowed it or was missing, the Retry-After actually sent, latency. Never headers or bodies. meta.last_headers is the newest rate-limit snapshot, on every page. integrations.view_logs. Throttle: app_installs/read/minute, 300 a minute.

A signed-in session or the person's own personal access token; an app's OAuth token is refused (403 resource_not_grantable).

Request

Responses

200

A page of requests.

401

No session or token, or one that is no longer valid. A request that presented a token gets WWW-Authenticate: Bearer realm="KudosCRM", error="invalid_token" (refresh it); one with no credentials and no session cookie gets the bare challenge.

Response Headers

WWW-Authenticate
Example: Bearer realm="KudosCRM", error="invalid_token"

403

Not allowed: the permission this route needs is missing, the Integrations module is off (code: module_disabled, meta.module_key, meta.blocked_at_layer), or the caller is an app's own OAuth token (code: resource_not_grantable).

404

Not found in this workspace — or not something the caller may know exists.