Admin audit view of the activities ledger

GET

/admin/activities

• Local development behind nginx (port 8088 by default)

Cursor-paginated list of activity rows with optional filters (type, source, actor, object kind, since). Gated on system.admin capability per ADR 0044 — surfaces full payloads + addressing for the operator to audit federation activity.

Hot-path notes: this endpoint is NOT cached at the writer layer because the filter-combination space is unbounded. The underlying SELECT is covered by per-dimension partial indexes (activities_type_recent_idx, activities_actor_outbox_idx, activities_source_recent_idx) so unfiltered + per-filter access patterns both hit indexed paths.

Authorizations

• cookieAuth
• bearerAuth

Parameters

Query Parameters

activity_type

string

Filter to one activity type — e.g. Like, Follow, Create, aa:Share. See activities.activity_type CHECK for the closed set.

source

string

local for activities emitted by this instance, or a peer instance URL (e.g. https://studio-b.example) to filter to peer-received activities from one peer.

actor_user_ref

integer format: int64

Filter to activities emitted by a single local actor. For peer-sourced activities (actor_user_ref is NULL), use the source filter instead.

object_kind

string

Filter to activities about one object kind — e.g. post, comment, asset, user, collection.

since

string format: date-time

RFC 3339 timestamp; activities at or after this time only.

limit

integer

default: 50 >= 1 <= 200

cursor

string

Opaque pagination cursor from a prior response.

Responses

200

A page of activity rows.

object

items

required

Array<object>

One row from the activities ledger (ADR 0044). Surfaces the full AP envelope payload + the operator-facing metadata the admin audit UI renders. See docs/spec/federation/v1.md §3 for the wire-format contract this projection mirrors.

object

id

required

string format: uuid

activity_uri

required

string

activity_type

required

string

actor_uri

required

string

actor_user_ref

NULL for peer-sourced activities (we don’t have a local ref for the remote actor).

integer format: int64

nullable

object_uri

string

nullable

object_kind

string

nullable

object_local_id

string

nullable

target_uri

string

nullable

to

Array<string>

cc

Array<string>

payload

object

key

additional properties

any

signature_value

string

nullable

signature_pubkey

string

nullable

source

required

local or peer instance URL.

string

published_at

required

string format: date-time

created_at

required

string format: date-time

next_cursor

string

nullable

401

Authentication required, missing, or invalid

object

error

required

Human-readable error summary

string

Example

the request could not be completed

Example

{
  "error": "authentication required: sign in and retry with a valid session or API token"
}

403

Authenticated but missing required capabilities

object

error

required

Human-readable error summary

string

Example

the request could not be completed