Logs

What is logged

Opensend records REST API requests it can attribute to your team, and requests the SMTP gateway makes on your behalf (source SMTP, paths /smtp/auth and /smtp/emails). Requests rejected before the team is known, such as those with a missing or invalid API key, cannot be logged. Actions you take in the dashboard are not API requests and do not appear here.

Browse logs

Open Logs. The list shows Endpoint, Status, Method and Created, newest first. Narrow it with:

• the search box, which matches the method, path and status code, for example POST /emails 422;
• a date range;
• Filter by status: 2xx, 3xx, 4xx or 5xx;
• Filter by user agent, listing the user agents seen in the retained logs;
• Filter by source.

The export button downloads the filtered list as CSV. View log on an email opens the list filtered to that email, and an API key's page lists its Recent requests.

Click a log to see its Endpoint, Date, Method, Duration, User agent, Source, API key, request headers, Request body and Response body.

Redaction

• The Authorization, Cookie and Proxy-Authorization headers are replaced by [redacted]. Other header values are cut at 1,024 characters.
• API-key creation tokens and webhook-create/secret-rotation signing secrets are replaced by [redacted]. Email-share responses are fully redacted.
• GET /webhooks/{id} returns a signing secret, and its response is currently retained in logs without this redaction.
• Request and response bodies are cut at 65,536 characters.

These are application request headers, not a network trace. Logging is best-effort: a logging failure does not fail an otherwise successful request.

Use the API

curl "$OPENSEND_BASE_URL/logs?limit=20" -H "Authorization: Bearer $OPENSEND_API_KEY"

List logs and retrieve a log need a full-access key. Logs are kept for 30 days.