New Ory Agent Security is now live! Claim your complimentary test drive. Get Started!

Skip to main content

Audit API key activity

info

Ory Talos Secure API Keys on Ory Network is in preview. The HTTP API is versioned v2alpha1, and request and response shapes can change. Pin the version of the Ory SDK that you use.

Review the events that Ory Talos Secure API Keys records when API keys are created, changed, rotated, revoked, used to derive tokens, or fail verification.

To review changes to API keys, go to Activity → Logs & events in the Ory Console. Events appear there after a short delay. The page lists these API key events:

  • Issued API key created and Imported API key created
  • Issued API key updated and Imported API key updated
  • Issued API key rotated
  • Issued API key revoked and Imported API key revoked
  • API key import failed
  • API key derived token
  • API key verification failed

To narrow the list, select an Event type, or filter by the APIKeyID or ActorID event attribute. Successful verifications and deletions of imported keys aren't listed. During bursts of failed verifications, the page lists only some of the failures.