> This page is for API, version 2026-01-01 (Stable) (default).
> For other versions, use one of these documentation indexes:
> - 2026-01-01 (Stable) (default): https://docs.deel.wtf/api/stable/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.deel.wtf/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.deel.wtf/_mcp/server.

# List request logs

GET https://api.letsdeel.com/rest/logs/requests

Returns the public API requests made by the organization, newest first, including gateway-rejected calls (401/403/404/429): request id, route, status, latency, token, error code; payloads/headers never recorded. Filters: request/token id, route, path, method, status(_class). Window default 24h, max 15d (kept 15d). Cursor-paginated.

 **Token scopes**: `api-logs:read`

 **Beta**: this version requires the `X-Beta: true` request header and its contract may change before it is promoted to stable. It is scheduled to become stable on 2027-01-13.

Reference: https://docs.deel.wtf/api/reference/endpoints/logs/list-request-logs-v-2026-10-13

## Authentication

- `Authorization` header (bearer token, required) — ## Authentication The Deel API uses bearer tokens to authenticate requests. All API calls must be made over HTTPS — calls over plain HTTP or without authentication will fail. ```curl curl -X GET 'https://api.deel.training/rest/v2/contracts' \ -H 'Authorization: Bearer YOUR-TOKEN-HERE' ``` [Learn more about authentication](/api/authentication)
- `Authorization` header (bearer token, required) — Standard OAuth2 security scheme based on https://swagger.io/docs/specification/authentication/

## Servers

- `https://api.letsdeel.com/rest` (Production, default)
- `https://api-staging.letsdeel.com/rest` (Demo)

## Request

### Query parameters

- `search` (string, optional) — Only requests whose request id, token label, token id, route or path contains this text (case-insensitive)
- `request_id` (string, optional) — Only the request with this x-request-id
- `token_id` (string, optional) — Only requests made with this token
- `route` (string, optional) — Only requests that matched this route template
- `path` (string, optional) — Only requests with exactly this path
- `method` (string, optional) — Only requests with this HTTP method
- `status` (integer, optional) — Only requests that returned exactly this status
- `status_class` (enum, optional) — Only requests whose status is in this class
  - Allowed values: `2xx`, `4xx`, `5xx`
- `source` (enum, optional) — Only requests that came in through this surface
  - Allowed values: `rest`, `scim`, `mcp`
- `from` (string, optional) — Start of the window (ISO-8601). Defaults to 24 hours before `to`; a window wider than 15 days is clamped
- `to` (string, optional) — End of the window (ISO-8601). Defaults to now
- `cursor` (string, optional) — Cursor for keyset pagination, taken from a previous response `page.cursor`
- `limit` (integer, optional, default: 50) — Page size

### Headers

- `X-Beta` (enum, required, default: true) — Opts in to the beta version of this endpoint. Must be `true`.
  - Allowed values: `true`

## Response

### 200

A page of request logs, newest first

- `data` (list of LogsRequestsGetResponsesContentApplicationJsonSchemaDataItems, required) — The page of results, newest first
- `page` (LogsRequestsGetResponsesContentApplicationJsonSchemaPage, required) — Keyset pagination envelope for the page just returned

## Errors

### 400 Bad Request Error

Invalid query parameter, cursor or time window

- `errors` (list of LogsRequestsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The errors, at least one
- `request` (LogsRequestsGetResponsesContentApplicationJsonSchemaRequest, required) — The request the error belongs to

### 401 Unauthorized Error

Missing or invalid access token

- `errors` (list of LogsRequestsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The errors, at least one
- `request` (LogsRequestsGetResponsesContentApplicationJsonSchemaRequest, required) — The request the error belongs to

### 403 Forbidden Error

The token lacks the api-logs:read scope or the user lacks the developer_center.manage permission

- `errors` (list of LogsRequestsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The errors, at least one
- `request` (LogsRequestsGetResponsesContentApplicationJsonSchemaRequest, required) — The request the error belongs to

### 404 Not Found Error

Operation failed.

- `request` (ApiErrorRequest, optional)
- `errors` (list of ApiError, optional)

### 429 Too Many Requests Error

Rate limit of 60 requests per minute per organization exceeded

- `errors` (list of LogsRequestsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The errors, at least one
- `request` (LogsRequestsGetResponsesContentApplicationJsonSchemaRequest, required) — The request the error belongs to

### 500 Internal Server Error

Operation failed.

- `request` (ApiErrorRequest, optional)
- `errors` (list of ApiError, optional)

## Types

### LogsRequestsGetResponsesContentApplicationJsonSchemaDataItems

One public API request as recorded by the gateway; payloads and headers are not recorded

- `ip` (string, required) — Client IP address the request came from
- `path` (string, required) — Request path without the query string
- `error` (LogsRequestsGetResponsesContentApplicationJsonSchemaDataItemsError, required, nullable) — Gateway-generated error of a failed request; null when the request succeeded or the error came from the service
- `route` (string, required, nullable) — Public route template the request matched; null when no endpoint matched (404)
- `token` (LogsRequestsGetResponsesContentApplicationJsonSchemaDataItemsToken, required) — The token that made the request, as the gateway saw it at request time
- `method` (string, required) — HTTP method
- `source` (enum, required) — Where the request came in: REST API, SCIM or an MCP tool call
  - Allowed values: `rest`, `scim`, `mcp`
- `status` (integer, required) — HTTP status returned to the caller
- `timestamp` (string, required) — When the response was sent (UTC)
- `request_id` (string, required) — The x-request-id of the request; quote it when contacting support
- `user_agent` (string, required, nullable) — User-Agent header, truncated to 512 characters
- `api_version` (string, required, nullable) — API version the request resolved to
- `duration_ms` (integer, required) — Total time from request start to response end, in milliseconds
- `response_bytes` (integer, required, nullable) — Size of the response body in bytes
- `upstream_duration_ms` (integer, required, nullable) — Time spent in the service behind the gateway, in milliseconds; null when the gateway answered itself

### LogsRequestsGetResponsesContentApplicationJsonSchemaPage

Keyset pagination envelope for the page just returned

- `cursor` (string, required, nullable) — Cursor for the next page, or null on the last page
- `has_next_page` (boolean, required) — Whether a further page is available

### LogsRequestsGetResponsesContentApplicationJsonSchemaErrorsItems

One error

- `code` (string, required) — Machine-readable error code
- `message` (string, required) — Human-readable description

### LogsRequestsGetResponsesContentApplicationJsonSchemaRequest

The request the error belongs to

- `url` (string, required) — URL of the request
- `method` (string, required) — HTTP method of the request
- `status` (integer, required) — HTTP status returned
- `api_req_id` (string, required) — Request id to quote when contacting support
- `docs` (string, optional) — Link to the documentation
- `source` (string, optional) — API surface that produced the error

### ApiErrorRequest

- `method` (string, optional) — The HTTP method of the failed request
- `url` (string, optional) — The relative URL of the failed request
- `status` (double, optional) — The status code of the response
- `api_req_id` (string, optional) — The request ID of the failed request
- `docs` (string, optional) — A link to the official documentation for the requested endpoint resource
- `source` (string, optional) — The source handler which produced the returned error
- `code` (double, optional) — The code of the source handler which produced the returned error

### ApiError

- `message` (string, optional) — A description of the returned error
- `path` (string, optional) — The JSON path where input validation failed

### LogsRequestsGetResponsesContentApplicationJsonSchemaDataItemsError

Gateway-generated error of a failed request; null when the request succeeded or the error came from the service

- `code` (string, required, nullable) — Machine-readable gateway error code
- `message` (string, required, nullable) — Human-readable gateway error message

### LogsRequestsGetResponsesContentApplicationJsonSchemaDataItemsToken

The token that made the request, as the gateway saw it at request time

- `id` (string, required) — Token id shown in the Developer Center
- `type` (enum, required) — Personal access token or OAuth2 access token
  - Allowed values: `pat`, `oauth2`
- `label` (string, required, nullable) — Token label or OAuth2 client name when the request was made
- `oauth2_client_id` (string, required, nullable) — OAuth2 client the token belongs to; null for personal access tokens

## Examples

**Response**

```json
{
  "data": [
    {
      "ip": "203.0.113.42",
      "path": "/rest/v2/contracts/3k9d2m",
      "error": {
        "code": "INSUFFICIENT_SCOPES",
        "message": "Missing required scope: contracts:read"
      },
      "route": "/rest/v2/contracts/{contract_id}",
      "token": {
        "id": "2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d",
        "type": "pat",
        "label": "HRIS sync",
        "oauth2_client_id": null
      },
      "method": "GET",
      "source": "rest",
      "status": 200,
      "timestamp": "2026-09-21T16:04:39.001Z",
      "request_id": "5f1c2a8e9b3d4c7a1e2f3a4b",
      "user_agent": "deel-cli/1.4.0",
      "api_version": "2025-01-01",
      "duration_ms": 184,
      "response_bytes": 2048,
      "upstream_duration_ms": 151
    }
  ],
  "page": {
    "cursor": "eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0",
    "has_next_page": true
  }
}
```

**SDK Code**

```python
import requests

url = "https://api.letsdeel.com/rest/logs/requests"

querystring = {"cursor":"eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0","from":"2026-09-20T16:00:00.000Z","limit":"50","method":"GET","path":"/rest/v2/contracts/3k9d2m","request_id":"5f1c2a8e9b3d4c7a1e2f3a4b","route":"/rest/v2/contracts/{contract_id}","search":"contracts","source":"rest","status":"429","status_class":"4xx","to":"2026-09-21T16:00:00.000Z","token_id":"2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d"}

headers = {
    "X-Beta": "true",
    "Authorization": "Bearer <token>"
}

response = requests.get(url, headers=headers, params=querystring)

print(response.json())
```

```javascript
const url = 'https://api.letsdeel.com/rest/logs/requests?cursor=eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0&from=2026-09-20T16%3A00%3A00.000Z&limit=50&method=GET&path=%2Frest%2Fv2%2Fcontracts%2F3k9d2m&request_id=5f1c2a8e9b3d4c7a1e2f3a4b&route=%2Frest%2Fv2%2Fcontracts%2F%7Bcontract_id%7D&search=contracts&source=rest&status=429&status_class=4xx&to=2026-09-21T16%3A00%3A00.000Z&token_id=2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d';
const options = {method: 'GET', headers: {'X-Beta': 'true', Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.letsdeel.com/rest/logs/requests?cursor=eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0&from=2026-09-20T16%3A00%3A00.000Z&limit=50&method=GET&path=%2Frest%2Fv2%2Fcontracts%2F3k9d2m&request_id=5f1c2a8e9b3d4c7a1e2f3a4b&route=%2Frest%2Fv2%2Fcontracts%2F%7Bcontract_id%7D&search=contracts&source=rest&status=429&status_class=4xx&to=2026-09-21T16%3A00%3A00.000Z&token_id=2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-Beta", "true")
	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://api.letsdeel.com/rest/logs/requests?cursor=eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0&from=2026-09-20T16%3A00%3A00.000Z&limit=50&method=GET&path=%2Frest%2Fv2%2Fcontracts%2F3k9d2m&request_id=5f1c2a8e9b3d4c7a1e2f3a4b&route=%2Frest%2Fv2%2Fcontracts%2F%7Bcontract_id%7D&search=contracts&source=rest&status=429&status_class=4xx&to=2026-09-21T16%3A00%3A00.000Z&token_id=2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-Beta"] = 'true'
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body
```

```java
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.get("https://api.letsdeel.com/rest/logs/requests?cursor=eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0&from=2026-09-20T16%3A00%3A00.000Z&limit=50&method=GET&path=%2Frest%2Fv2%2Fcontracts%2F3k9d2m&request_id=5f1c2a8e9b3d4c7a1e2f3a4b&route=%2Frest%2Fv2%2Fcontracts%2F%7Bcontract_id%7D&search=contracts&source=rest&status=429&status_class=4xx&to=2026-09-21T16%3A00%3A00.000Z&token_id=2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d")
  .header("X-Beta", "true")
  .header("Authorization", "Bearer <token>")
  .asString();
```

```php
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('GET', 'https://api.letsdeel.com/rest/logs/requests?cursor=eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0&from=2026-09-20T16%3A00%3A00.000Z&limit=50&method=GET&path=%2Frest%2Fv2%2Fcontracts%2F3k9d2m&request_id=5f1c2a8e9b3d4c7a1e2f3a4b&route=%2Frest%2Fv2%2Fcontracts%2F%7Bcontract_id%7D&search=contracts&source=rest&status=429&status_class=4xx&to=2026-09-21T16%3A00%3A00.000Z&token_id=2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d', [
  'headers' => [
    'Authorization' => 'Bearer <token>',
    'X-Beta' => 'true',
  ],
]);

echo $response->getBody();
```

```csharp
using RestSharp;

var client = new RestClient("https://api.letsdeel.com/rest/logs/requests?cursor=eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0&from=2026-09-20T16%3A00%3A00.000Z&limit=50&method=GET&path=%2Frest%2Fv2%2Fcontracts%2F3k9d2m&request_id=5f1c2a8e9b3d4c7a1e2f3a4b&route=%2Frest%2Fv2%2Fcontracts%2F%7Bcontract_id%7D&search=contracts&source=rest&status=429&status_class=4xx&to=2026-09-21T16%3A00%3A00.000Z&token_id=2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d");
var request = new RestRequest(Method.GET);
request.AddHeader("X-Beta", "true");
request.AddHeader("Authorization", "Bearer <token>");
IRestResponse response = client.Execute(request);
```

```swift
import Foundation

let headers = [
  "X-Beta": "true",
  "Authorization": "Bearer <token>"
]

let request = NSMutableURLRequest(url: NSURL(string: "https://api.letsdeel.com/rest/logs/requests?cursor=eyJ0cyI6IjIwMjYtMDktMjFUMTY6MDQ6MzkuMDAxWiIsImlkIjoiNWYxYzJhOGU5YjNkNGM3YTFlMmYzYTRiIn0&from=2026-09-20T16%3A00%3A00.000Z&limit=50&method=GET&path=%2Frest%2Fv2%2Fcontracts%2F3k9d2m&request_id=5f1c2a8e9b3d4c7a1e2f3a4b&route=%2Frest%2Fv2%2Fcontracts%2F%7Bcontract_id%7D&search=contracts&source=rest&status=429&status_class=4xx&to=2026-09-21T16%3A00%3A00.000Z&token_id=2f4d6c8a-1b3e-4f5a-9c7d-8e6f0a1b2c3d")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "GET"
request.allHTTPHeaderFields = headers

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```