Who is behind a credential

GET

/provision/databases/{id}/policies/trace

The watermark. Every key is prefix.secret and the prefix is what appears in logs and events. Given the whole key or just the prefix, this names the account it was issued to, its privilege and state, and every address it has been used from. Only the prefix is used or echoed. A prefix that belongs to no key on this database is a 404, not a lead.

Capability: audit:read (area resource, on the database).

Request

Path Params

Query Params

Responses

🟢200

application/json

The trace

Bodyapplication/json

🟠404

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.prod-orm.io/provision/databases//policies/trace?credential='

Response Example

{
    "trace": {
        "prefix": "string",
        "key": {
            "uuid": "095be615-a8ad-4c33-8e9c-c7612fbf6c9f",
            "name": "string",
            "privilege": "owner",
            "createdAt": "2019-08-24T14:15:22.123Z",
            "lastUsedAt": "2019-08-24T14:15:22.123Z",
            "expiresAt": "2019-08-24T14:15:22.123Z",
            "revokedAt": "2019-08-24T14:15:22.123Z",
            "live": true
        },
        "issuedTo": {
            "id": 0,
            "username": "string",
            "email": "user@example.com"
        },
        "addresses": [
            {
                "ip": "string",
                "first": "2019-08-24T14:15:22.123Z",
                "last": "2019-08-24T14:15:22.123Z",
                "count": 0
            }
        ],
        "recent": [
            {
                "at": "2019-08-24T14:15:22.123Z",
                "action": "string",
                "ip": "string",
                "detail": {
                    "property1": "string",
                    "property2": "string"
                }
            }
        ]
    }
}

Modified at 2026-10-05 14:01:12

Evaluate the periodic policies now

The database's passwordless sessions