What the activity view shows
- Request time and HTTP method.
- Route, including operation endpoints.
- Response status.
- Source IPv4 address.
- Request identifier when available.
- Charts grouped by time, route, status, and source IPv4.
Respond to suspicious activity
- Revoke the key immediately.
- Preserve request IDs, timestamps, routes, statuses, and source IPv4 values.
- Check the affected resource in the Customer Dash or its dedicated management application.
- Create a replacement with fewer scopes, a shorter expiration, and the required IPv4 allowlist.
- Contact support with sanitized evidence if an owned resource changed unexpectedly.
An IPv4 allowlist restricts where the key can be used. It does not replace expiration, least-privilege scopes, secret storage, request confirmation, or activity review.
ConvertSuite API activity
ConvertSuite gateway requests are included in the same per-key activity feed. Look for theconvertsuite.* operation name and /v1/convertsuite/* route. The successful prepare request is the billable ConvertSuite operation; tool discovery, job polling, starting, and cancelling are recorded for audit but do not reserve another ConvertSuite operation.
