The following endpoints provide information about login and security activity in your HubSpot account.

Use this endpoint to export of a centralized audit log of user actions across your account (Enterprise subscriptions only). In order to utilize this endpoint, you must first follow the documentation on making API calls with your app's access token.

For each centralized audit log, the response body will show:

• user action category (e.g. CRM object, login)
• user action subcategory (e.g. playbook, login succeeded)
• user action (e.g. create, update, perform)
• the ID of the affected object
• the time and date the action occurred
• the user's email address

Use this endpoint to retrieve the previous 90 days of user login history. This includes login attempts to app.hubspot.com and the HubSpot mobile app. Login history exports contain the following information about each login attempt:

• login timestamp
• user email address
• IP address
• location
• type of login
• user agent (information about the device used for logging in)

Use this endpoint to export security activity history to see a list of security-related actions that users have taken in the account. For each user action, the response body will show:

• the time of the action
• the type of action
• the user's email address
• the ID of the affected object
• the approximate location
• a link to the URL where the action was taken in the account