Audit
List the account’s API activity
Section titled “List the account’s API activity”GET /v1/audit-logs · scope audit:read
Includes denied attempts (4xx), not just what succeeded: a credential probing endpoints it should not touch is exactly the signal you need to be able to see.
curl https://api.truo.cloud/v1/audit-logs \ -H "Authorization: Bearer $TRUO_TOKEN"truo audit listawait truo.auditLogs.list();operationId: auditLogs.list