---
title: API Key Forensics REST API
description: API Key forensics application programming interface (API) provides forensics information for a API Key during a specified period.
component: pingintelligence
version: 5.2
page_id: pingintelligence:pingintelligence_reference_guide:pingintelligence_api_keys_forensics_rest_api
canonical_url: https://docs.pingidentity.com/pingintelligence/5.2/pingintelligence_reference_guide/pingintelligence_api_keys_forensics_rest_api.html
revdate: April 3, 2024
---

# API Key Forensics REST API

API Key forensics application programming interface (API) *(tooltip: \<div class="paragraph">
\<p>A specification of interactions available for building software to access an application or service.\</p>
\</div>)* provides forensics information for a API Key during a specified period.

Information provided includes attack types, metrics, and anomaly details.

`Method: GET`

`URL: /v4/abs?later_date=<>T<hh:mm>&earlier_date=<>T<hh:mm> &api_key=<api_key>`

|            | Header     | Value      |
| ---------- | ---------- | ---------- |
| Access Key | `x-abs-ak` | `<string>` |
| Secret Key | `x-abs-sk` | `<string>` |

Sample Response:

```json
{
    "company": "ping identity",
    "name": "api_abs_api_key",
    "description": "This report contains a summary and detailed information on metrics, attacks and anomalies for the specified api key across all APIs.",
    "earlier_date": "Sat Jan 12 13:30:00:000 2019",
    "later_date": "Tue Dec 31 18:00:00:000 2019",
    "summary": {
        "total_requests": 2621,
        "total_attacks": 1,
        "total_anomalies": 1
    },
    "details": {
        "metrics": {
            "api_key": "finite_api_key",
            "total_requests": 2621,
            "ip_list": [
                {
                    "ip": "192.168.2.2",
                    "total_requests": 457,
                    "devices": {
                        "UNKNOWN": 457
                    },
                    "methods": {
                        "GET": 457
                    },
                    "urls": {
                        "/atm_app/getzipcode": 457
                    },
                    "apis": {
                        "atm_app": 457
                    }
                },
                {
                    "ip": "192.168.2.1",
                    "total_requests": 560,
                    "devices": {
                        "UNKNOWN": 560
                    },
                    "methods": {
                        "GET": 560
                    },
                    "urls": {
                        "/atm_app/getzipcode": 560
                    },
                    "apis": {
                        "atm_app": 560
                    }
                },
                {
                    "ip": "192.168.2.3",
                    "total_requests": 404,
                    "devices": {
                        "UNKNOWN": 404
                    },
                    "methods": {
                        "GET": 404
                    },
                    "urls": {
                        "/atm_app/getzipcode": 404
                    },
                    "apis": {
                        "atm_app": 404
                    }
                },
                {
                    "ip": "192.168.2.5",
                    "total_requests": 1200,
                    "devices": {
                        "UNKNOWN": 1200
                    },
                    "methods": {
                        "GET": 1200
                    },
                    "urls": {
                        "/atm_app/getzipcode": 1200
                    },
                    "apis": {
                        "atm_app": 1200
                    }
                }
            ]
        },
        "attack_types": {
            "Stolen API Key Attack- Per API Key": [
                "all"
            ]
        },
        "anomaly_types": {
            "Stolen API Key Attack- Per API Key": [
                "all"
            ]
        }
    }
}
```