Skip to content
GitmoapAPIBeta
Organizeactivity
GET/repositories/{repo_id}/activity

List a repository's activity timeline

list_repo_activity
  • repo:read
    A token needs the repo:read scope: View repositories and metadataGranted by mcp_agent, mcp_agent_write, read_api, read_repository, write_api, write_repository.Every operation this scope unlocks
  • Single-resource

    x-gitmoap-isolation: {"kind":"single_or_self_scoped"}

  • Paginated
    Pass the next_token a page returns to get the next one.

Everything that happened in the repository, newest first, optionally narrowed to one actor and to some kinds of activity. Anyone who can see the repository may read it, including anonymous callers on a public one. The window defaults to the last 30 days and may span at most 366.

Parameters

Path
  • repo_idRepositoryId (string · uuid)The repository's id
Query
  • actorstringoptionalNarrow to one principal
  • domainstringoptionalComma-separated activity domains
  • fromstringoptionalRFC-3339 start of the window
  • tostringoptionalRFC-3339 end of the window
  • limitinteger · int32optionalPage size (1-50, default 20)
  • next_tokenstringoptionalPagination cursor

Responses

200The repository's activity, newest firstapplication/json
  • itemsarray of object
    • domainActivityDomain (string)
    • event_idActivityEventId (string · uuid)
    • kindActivityKind (string)
    • metadataobjectBounded free-form detail; the shape varies by kind and is documented per event.
    • occurred_atstringWhen it happened. A feed is ordered by this.
    • scopeActivityScope
    • actorActorSummary or nulloptionalWho did it. Absent when the platform did — a pipeline nobody triggered, a scheduled action.
    • subjectActivitySubject or nulloptional
      • The ActivitySubject schema
      • iidinteger · int64 or nulloptionalThe subject's number, as it is now — a work item that has moved since shows its new number.
      • titlestring or nulloptionalThe subject's title: its current title while it exists, the title it had at the time once it has been deleted. Absent when neither is known.
      • uidIssueUid (string · uuid) or nulloptionalThe subject's permanent identifier, for a work item.
  • next_tokenstring or nulloptional
200 exampleSynthesized example
{
"items": [
{
"domain": "domain-9b9b",
"event_id": "c7e8fc4f-abf5-4d9f-a227-bb022c9cc323",
"kind": "kind-dc17",
"metadata": {},
"occurred_at": "2026-10-12T09:43:49Z",
"scope": {
"full_path": "acme/payments-api",
"id": "id-c74d",
"type": "group"
}
},
{
"domain": "domain-65ad",
"event_id": "eb6a5260-a2bb-4e50-ad95-20ac87739183",
"kind": "kind-b75a",
"metadata": {},
"occurred_at": "2026-10-17T08:11:36Z",
"scope": {
"full_path": "acme/payments-api",
"id": "id-7926",
"type": "group"
}
}
],
"next_token": "next-token-6abe"
}
400Unknown domain or malformed windowapplication/json
Error codes
  • BAD_REQUESTThe request is malformed: a parameter or a body field is not a well-formed value of its type
  • errorErrorBody
    • The ErrorBody schema
    • codestringThe coarse category, tied to the status: NOT_FOUND, CONFLICT, INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all.
    • messagestringWhat went wrong, for a person. Written to be read, not parsed: match on reason or code.
    • fieldstring or nulloptionalOn a 400 that refused one field's value, the field, as its JSON path: email, items[0].name. Put the message under that input. Absent on every other error.
    • reasonstring or nulloptionalThe specific code, when the error has one: LAST_ORGANIZATION_OWNER, BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and on code otherwise.
    • required_scopestring or nulloptionalThe scope the access token was missing, on INSUFFICIENT_SCOPE.
    • violationsanyoptionalPresent on the structured-validation errors (PROVIDER_VALIDATION_FAILED per-node, PIPELINE_VALIDATION_FAILED DAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
400 exampleSynthesized example
{
"error": {
"code": "code-26b0",
"message": "Pin a page's payload to the build that rendered it"
}
}
401Unauthenticated — no credential, or an invalid oneapplication/json
Error codes
  • UNAUTHORIZEDNo credential was sent, or the one sent is invalid, expired or revoked
  • errorErrorBody
    • The ErrorBody schema
    • codestringThe coarse category, tied to the status: NOT_FOUND, CONFLICT, INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all.
    • messagestringWhat went wrong, for a person. Written to be read, not parsed: match on reason or code.
    • fieldstring or nulloptionalOn a 400 that refused one field's value, the field, as its JSON path: email, items[0].name. Put the message under that input. Absent on every other error.
    • reasonstring or nulloptionalThe specific code, when the error has one: LAST_ORGANIZATION_OWNER, BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and on code otherwise.
    • required_scopestring or nulloptionalThe scope the access token was missing, on INSUFFICIENT_SCOPE.
    • violationsanyoptionalPresent on the structured-validation errors (PROVIDER_VALIDATION_FAILED per-node, PIPELINE_VALIDATION_FAILED DAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
401 exampleSynthesized example
{
"error": {
"code": "code-7701",
"message": "Pin a page's payload to the build that rendered it"
}
}
403Forbidden — the caller's access level or token scope is insufficientapplication/json
Error codes
  • FORBIDDENYou are signed in but may not do this here; reason names the permission or the rule that refused it
  • INSUFFICIENT_SCOPEThe access token lacks the scope this operation needs; required_scope names it
  • PERMISSION_REQUIREDYou need a permission you do not hold here; the message names it
  • errorErrorBody
    • The ErrorBody schema
    • codestringThe coarse category, tied to the status: NOT_FOUND, CONFLICT, INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all.
    • messagestringWhat went wrong, for a person. Written to be read, not parsed: match on reason or code.
    • fieldstring or nulloptionalOn a 400 that refused one field's value, the field, as its JSON path: email, items[0].name. Put the message under that input. Absent on every other error.
    • reasonstring or nulloptionalThe specific code, when the error has one: LAST_ORGANIZATION_OWNER, BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and on code otherwise.
    • required_scopestring or nulloptionalThe scope the access token was missing, on INSUFFICIENT_SCOPE.
    • violationsanyoptionalPresent on the structured-validation errors (PROVIDER_VALIDATION_FAILED per-node, PIPELINE_VALIDATION_FAILED DAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
403 exampleSynthesized example
{
"error": {
"code": "code-e33f",
"message": "Inline scalar newtypes but keep their brand"
}
}
404No such repository, or it is not visible to the callerapplication/json
Error codes
  • NOT_FOUNDThe resource does not exist — or exists and you cannot see it: a private resource you have no access to answers exactly as an absent one does
  • errorErrorBody
    • The ErrorBody schema
    • codestringThe coarse category, tied to the status: NOT_FOUND, CONFLICT, INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all.
    • messagestringWhat went wrong, for a person. Written to be read, not parsed: match on reason or code.
    • fieldstring or nulloptionalOn a 400 that refused one field's value, the field, as its JSON path: email, items[0].name. Put the message under that input. Absent on every other error.
    • reasonstring or nulloptionalThe specific code, when the error has one: LAST_ORGANIZATION_OWNER, BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and on code otherwise.
    • required_scopestring or nulloptionalThe scope the access token was missing, on INSUFFICIENT_SCOPE.
    • violationsanyoptionalPresent on the structured-validation errors (PROVIDER_VALIDATION_FAILED per-node, PIPELINE_VALIDATION_FAILED DAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
404 exampleSynthesized example
{
"error": {
"code": "code-0879",
"message": "Pin a page's payload to the build that rendered it"
}
}

CLI

gitmoap activity list-repo-activity

  • --repo-ididThe repository's id (id or owner/repo path)
  • --actorstringoptionalNarrow to one principal
  • --domainstringoptionalComma-separated activity domains
  • --fromstringoptionalRFC-3339 start of the window
  • --limitnumberoptionalPage size (1-50, default 20)
  • --next-tokenstringoptionalPagination cursor
  • --tostringoptionalRFC-3339 end of the window

Used in these guides