List my diagnostics views

GET /fapi/v1/me/diagnostics-views · called from the environment's sign-in host

Lists the times an organization's administrator opened the authenticated user's member diagnostics in the Admin Portal (Members → Diagnostics). Each opening is recorded in the organization's audit log; this list returns those records from the last 90 days, newest first, at most 20. The account security page shows each one as "<organization> administrator viewed your account status". An item carries only the organization and the time: never the administrator, the portal link, an address or a request ID. The list is always the session user's own; the request cannot name another user. Reading changes nothing and does not require a recently verified session. Requires the authenticated user's __Host-idp_session cookie; if the cookie is missing, expired, or revoked, returns 401 unauthenticated. A first-party app on another origin can instead send its front API access token (Authorization: DPoP <token> with a DPoP proof; see Front API access token).

With @keenauth/js: await keenauth.me.diagnosticsViews.list().

Request

Headers:

No query parameters. No body.

Response

200 OK with {"data": [...]}. The response is not cached (Cache-Control: no-store).

Each item: organization_id (org_…, the organization whose administrator opened the diagnostics), organization_name (display name with control and bidirectional characters removed; render it as plain text; null when the organization is no longer active or cannot be named) and viewed_at (RFC 3339 time).

Errors

Example

curl https://example.keenauth.app/fapi/v1/me/diagnostics-views \
  -H "Idp-Client: my-app/1.0.0 (node/22.0.0)" \
  -b cookies.txt

{
  "data": [
    {
      "organization_id": "org_01j9xxxxxxxxxxxxxxxxxxxxxx",
      "organization_name": "Acme",
      "viewed_at": "2026-11-04T09:30:00Z"
    }
  ]
}

Personal data

This endpoint carries personal data: organization memberships and invitations. Personal data in the KeenAuth APIs describes what is stored, how long it is kept and how it is deleted.