> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-leet-slack-mcp-docs.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # List History > ListHistory returns the change history (newest first) for a single resource server — each entry is a snapshot plus who/when metadata. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples get /api/v1/apps/{app_id}/xaa/resource_servers/{id}/history openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/apps/{app_id}/xaa/resource_servers/{id}/history: get: tags: - Cross-App Access summary: List History description: |- ListHistory returns the change history (newest first) for a single resource server — each entry is a snapshot plus who/when metadata. operationId: c1.api.cross_app_access.v1.XAAResourceServerService.ListHistory parameters: - in: path name: app_id required: true schema: description: The application this resource server fronts. type: string - in: path name: id required: true schema: description: Unique identifier for the resource server. type: string - in: query name: page_size schema: description: Page size (max 200). format: int32 type: integer - in: query name: page_token schema: description: Page token for pagination. type: string responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAResourceServerServiceListHistoryResponse description: >- XAAResourceServerServiceListHistoryResponse returns resource server history entries. x-codeSamples: - lang: go label: ListHistory source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/operations\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.XAAResourceServer.ListHistory(ctx, operations.C1APICrossAppAccessV1XAAResourceServerServiceListHistoryRequest{\n AppID: \"\",\n ID: \"\",\n })\n if err != nil {\n log.Fatal(err)\n }\n if res.XAAResourceServerServiceListHistoryResponse != nil {\n // handle response\n }\n}" components: schemas: c1.api.cross_app_access.v1.XAAResourceServerServiceListHistoryResponse: description: >- XAAResourceServerServiceListHistoryResponse returns resource server history entries. properties: list: description: The page of history entries, newest first. items: $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAResourceServerHistoryEntry type: - array - 'null' nextPageToken: description: >- Pagination token for the next page, or empty if there are no more results. type: string title: Xaa Resource Server Service List History Response type: object x-speakeasy-name-override: XAAResourceServerServiceListHistoryResponse c1.api.cross_app_access.v1.XAAResourceServerHistoryEntry: description: >- XAAResourceServerHistoryEntry is one version of a resource server and its history metadata. properties: metadata: oneOf: - $ref: '#/components/schemas/c1.api.history.v1.HistoryEntryMetadata' - type: 'null' snapshot: oneOf: - $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAResourceServer - type: 'null' title: Xaa Resource Server History Entry type: object x-speakeasy-name-override: XAAResourceServerHistoryEntry c1.api.history.v1.HistoryEntryMetadata: description: |- HistoryEntryMetadata is the shared metadata envelope embedded on every per-service HistoryEntry. The strongly-typed snapshot lives on the per-service entry message alongside this envelope. properties: actor: oneOf: - $ref: '#/components/schemas/c1.api.history.v1.HistoryActor' - type: 'null' annotations: description: |- Server-rendered annotations: known keys carry display_label and (for ticket_id, etc.) display_url resolved from tenant config. Cap mirrors the per-object annotation ceiling (16). items: $ref: '#/components/schemas/c1.api.history.v1.HistoryAnnotation' type: - array - 'null' changeKind: description: |- Storage-model enum re-exported here for wire compatibility with the storage row. UNSPECIFIED should never appear on the wire. enum: - CHANGE_KIND_UNSPECIFIED - CHANGE_KIND_CREATE - CHANGE_KIND_PUT - CHANGE_KIND_HARD_DELETE type: string x-speakeasy-unknown-values: allow createdAt: format: date-time type: - string - 'null' id: description: KSUID. Same value as c1.models.history.v1.ObjectHistory.id. type: string syslogEventId: description: |- System Log event id — KSUID of the OCSF event recorded for this write. Empty for non-RPC writes (workflows, cron). Customer-facing copy says "System Log event"; the underlying format is OCSF. type: string traceId: description: |- OTel trace correlation. Empty when no valid span at write time. 32-hex-char otel trace id or empty. type: string title: History Entry Metadata type: object x-speakeasy-name-override: HistoryEntryMetadata c1.api.cross_app_access.v1.XAAResourceServer: description: |- XAAResourceServer is a third-party authorization server registered as a permitted cross-app-access audience for one application. properties: appId: description: The application this resource server fronts. type: string createdAt: format: date-time type: - string - 'null' deletedAt: format: date-time type: - string - 'null' description: description: Description of the resource server. type: string disabled: description: >- When true, exchange requests for this resource server are rejected without removing the registration (a kill switch). type: boolean displayName: description: Display name for the resource server. type: string id: description: Unique identifier for this resource server. type: string maxGrantLifetime: format: duration type: - string - 'null' modifyClaimsHook: oneOf: - $ref: >- #/components/schemas/c1.api.cross_app_access.v1.XAAModifyClaimsHook - type: 'null' normalizedAudience: description: >- The resource authorization server's issuer identifier (RFC 8414). Becomes the audience of every grant minted for this server. Stored normalized: lowercase scheme and host, no trailing slash, https only. Immutable after creation. Must not equal your own tenant's issuer. type: string requireProofOfPossession: description: >- When true, mint proof-of-possession-bound grants for clients presenting a DPoP proof. type: boolean resourceUris: description: >- The resource identifiers this server governs (RFC 8707). An allowlist for the token-exchange resource parameter; empty rejects any request that carries a resource parameter. items: type: string type: - array - 'null' sectorId: description: |- Optional pairwise sector override. Empty means the resource server's audience is its own sector. Set to the well-known global sentinel sector to opt into a correlatable shared `sub`, or to a shared value to share one pairwise `sub` across a trust group of audiences. Immutable once set. type: string signingAlgorithm: description: >- JWS algorithm for grants minted for this server. UNSPECIFIED uses the tenant default. Minting fails if no active signing key exists for the resolved algorithm. enum: - XAA_SIGNING_ALGORITHM_UNSPECIFIED - XAA_SIGNING_ALGORITHM_EDDSA - XAA_SIGNING_ALGORITHM_RS256 - XAA_SIGNING_ALGORITHM_ES256 type: string x-speakeasy-unknown-values: allow updatedAt: format: date-time type: - string - 'null' title: Xaa Resource Server type: object x-speakeasy-name-override: XAAResourceServer c1.api.history.v1.HistoryActor: description: |- HistoryActor is a typed reference to whoever performed the change. kind mirrors the storage-model ActorKind enum; user_id is set when kind corresponds to a user principal (API / SUPPORT) so the frontend can resolve the user via its own avatar / lookup hooks. Protos reference objects by id; the frontend renders / caches itself. The raw passport fields (token_id / principal_id) intentionally do not leave the server. Non-user actors (workflow, connector, internal) are identified by `kind` alone; correlating IDs (workflow_run_id, etc.) flow through `HistoryAnnotation` instead of being plucked into the actor message. properties: kind: description: The kind field. enum: - ACTOR_KIND_UNSPECIFIED - ACTOR_KIND_API - ACTOR_KIND_SLACK - ACTOR_KIND_MSTEAMS - ACTOR_KIND_JIRA_CLOUD - ACTOR_KIND_INTERNAL - ACTOR_KIND_SUPPORT - ACTOR_KIND_WORKFLOW type: string x-speakeasy-unknown-values: allow userId: description: |- Bare KSUID. Set when kind = ACTOR_KIND_API or ACTOR_KIND_SUPPORT. Empty otherwise. The frontend resolves user_id → display name via the same lookup paths it uses elsewhere (avatars, mentions, ...). type: string title: History Actor type: object x-speakeasy-name-override: HistoryActor c1.api.history.v1.HistoryAnnotation: description: |- HistoryAnnotation is a single operator-provided key/value rendered with per-key display metadata. Annotations are minted from the Tx.*WithHistoryAnnotations / db.WithHistoryAnnotations call options. properties: displayLabel: description: Server-rendered label, e.g. "Ticket". type: string displayUrl: description: |- Resolved from tenant config; "" if none. Frontend applies its own scheme allowlist. type: string displayValue: description: UI-friendly rendering (truncated / reshaped from raw_value). type: string key: description: 'Storage-side key. Bounds: ^[a-z][a-z0-9_.-]{0,63}$.' type: string kind: description: The kind field. enum: - ANNOTATION_KIND_UNSPECIFIED - ANNOTATION_KIND_GENERIC - ANNOTATION_KIND_TICKET - ANNOTATION_KIND_REASON - ANNOTATION_KIND_WORKFLOW - ANNOTATION_KIND_BATCH - ANNOTATION_KIND_CORRELATION - ANNOTATION_KIND_AUTOMATION type: string x-speakeasy-unknown-values: allow rawValue: description: >- Raw value as stored in ObjectHistory.annotations; storage-side values are capped at 512 bytes. type: string title: History Annotation type: object x-speakeasy-name-override: HistoryAnnotation c1.api.cross_app_access.v1.XAAModifyClaimsHook: description: >- XAAModifyClaimsHook registers a tenant Function invoked just before a grant is signed. The function may deny issuance or narrow the outgoing claims. It always runs blocking and fails closed: any error, timeout, or invalid result denies the grant. properties: commitId: description: |- Pin to a specific commit of the function. Empty uses the function's published commit, resolved when the resource server is saved. type: string disabled: description: When true, the hook is configured but not invoked. type: boolean functionId: description: The Function to invoke. type: string title: Xaa Modify Claims Hook type: object x-speakeasy-name-override: XAAModifyClaimsHook securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````