> ## Documentation Index
> Fetch the complete documentation index at: https://quintsecurity.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Session Events

> List all events belonging to a specific session.

<Note>
  Requires `Authorization: Bearer` header with a deploy token (`qt_deploy_*`) or Supabase JWT.
</Note>

## Path Parameters

<ParamField path="id" type="string" required>
  UUID of the session whose events to retrieve.
</ParamField>

## Response

<ResponseField name="events" type="array">
  Array of events belonging to this session, ordered by timestamp.

  <Expandable title="event object properties">
    <ResponseField name="id" type="string">
      Event UUID.
    </ResponseField>

    <ResponseField name="action_type" type="string">
      Type of action: `PROCESS_EXEC`, `FILE_READ`, `FILE_WRITE`, `FILE_DELETE`, `NETWORK_CONNECT`.
    </ResponseField>

    <ResponseField name="tool_name" type="string">
      Binary basename of the invoked tool.
    </ResponseField>

    <ResponseField name="arguments" type="array">
      Process arguments or file paths.
    </ResponseField>

    <ResponseField name="risk_score" type="integer">
      Computed risk score (0-100).
    </ResponseField>

    <ResponseField name="timestamp" type="datetime">
      When the event occurred.
    </ResponseField>
  </Expandable>
</ResponseField>

<RequestExample>
  ```bash cURL theme={null}
  curl https://api.quintai.dev/v1/sessions/6ba7b810-9dad-11d1-80b4-00c04fd430c8/events \
    -H "Authorization: Bearer qt_deploy_YOUR_TOKEN"
  ```

  ```python Python theme={null}
  import requests

  response = requests.get(
      "https://api.quintai.dev/v1/sessions/6ba7b810-9dad-11d1-80b4-00c04fd430c8/events",
      headers={"Authorization": "Bearer qt_deploy_YOUR_TOKEN"},
  )
  print(response.json())
  ```
</RequestExample>

<ResponseExample>
  ```json 200 theme={null}
  {
    "events": [
      {
        "id": "550e8400-e29b-41d4-a716-446655440000",
        "action_type": "FILE_READ",
        "tool_name": "cat",
        "arguments": ["/app/src/middleware/auth.ts"],
        "risk_score": 5,
        "timestamp": "2026-04-12T14:01:00Z"
      },
      {
        "id": "550e8400-e29b-41d4-a716-446655440001",
        "action_type": "FILE_WRITE",
        "tool_name": "node",
        "arguments": ["/app/src/middleware/auth.ts"],
        "risk_score": 15,
        "timestamp": "2026-04-12T14:05:00Z"
      },
      {
        "id": "550e8400-e29b-41d4-a716-446655440002",
        "action_type": "PROCESS_EXEC",
        "tool_name": "git",
        "arguments": ["commit", "-m", "Fix auth middleware"],
        "risk_score": 12,
        "timestamp": "2026-04-12T14:06:00Z"
      }
    ]
  }
  ```
</ResponseExample>