---
title: "Fetch authentication attempts"
url: "https://developer.incode.com/api-reference/authentications-external-search/"
section: "api-reference"
group: "Authentications"
version: "v1.1"
status: "live"
endpoint: "POST /omni/authentications/external/search"
---
# Fetch authentication attempts

`POST /omni/authentications/external/search`

Base URL: `https://demo-api.incodesmile.com` — Incode demo environment

This API allows for searching through stored authentication records, providing insight into both 1:1 (one to one) and 1:N (one to many) authentication modes. It includes data for successful and failed login attempts, enabling an overview of authentication activity within the organization. 
Works with <Glossary>Admin Token</Glossary>.

## Path & query parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `offset` | query | integer (int32) |  |  |
| `limit` | query | integer (int32) |  |  |
| `api-version` | header | string | yes |  |

## Request body

Content-Type: `application/json`

## Responses

### 200

OK

Response body (`application/json`):

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `authenticationAttempts` | array[AuthenticationAttemptExternalDto] |  |  |
| `authenticationAttempts.customerId` | string |  |  |
| `authenticationAttempts.deviceType` | string |  | Enum: `IOS`, `ANDROID`, `WEBAPP` |
| `authenticationAttempts.deviceName` | string |  |  |
| `authenticationAttempts.version` | string |  |  |
| `authenticationAttempts.isSpoof` | boolean |  |  |
| `authenticationAttempts.get_updatedAt` | integer (int64) |  |  |
| `authenticationAttempts.url` | string |  |  |
| `authenticationAttempts.isAuthenticated` | boolean |  |  |
| `authenticationAttempts.recognitionConfidence` | number (float) |  |  |
| `authenticationAttempts.source` | string |  |  |
| `authenticationAttempts.transactionId` | string |  |  |
| `authenticationAttempts.authenticationType` | string |  | Enum: `ONE_TO_ONE`, `ONE_TO_N` |
| `authenticationAttempts.authenticationMethod` | string |  | Enum: `server`, `local`, `hybrid` |
| `authenticationAttempts.faceEnrollmentForced` | boolean |  |  |
| `authenticationAttempts.isBlocklisted` | boolean |  |  |
| `authenticationAttempts.clientRecognitionThreshold` | number (float) |  |  |
| `authenticationAttempts.clientLivenessThreshold` | number (float) |  |  |
| `authenticationAttempts.blocklistConfidence` | number (float) |  |  |
| `authenticationAttempts.videoRecordingUrl` | string |  |  |
| `total` | integer (int32) |  |  |
| `more` | boolean |  |  |

### 400

Bad Request

Response body (`application/json`):

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `timestamp` | integer (int64) |  | UTC timestamp in milliseconds |
| `status` | integer (int32) |  | Custom error code or HTTP status code |
| `error` | string |  | HTTP status error |
| `message` | string |  | Custom error message |
| `path` | string |  | Endpoint path |
| `details` | object |  | Custom error details |

## Code samples

Generated from this endpoint's method, path, and the conventional Incode headers. The base URL is the Incode demo environment; replace `<YOUR_API_KEY>` with a key for your region.

### cURL

```bash
curl -X POST https://demo-api.incodesmile.com/omni/authentications/external/search \
  -H "x-api-key: <YOUR_API_KEY>" \
  -H "api-version: 1.0" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### Node

```js
const res = await fetch("https://demo-api.incodesmile.com/omni/authentications/external/search", {
  method: "POST",
  headers: {
      "x-api-key": "<YOUR_API_KEY>",
      "api-version": "1.0",
      "Content-Type": "application/json",
  },
    body: JSON.stringify({}),
});
const data = await res.json();
```

### Python

```python
import requests

headers = {
    "x-api-key": "<YOUR_API_KEY>",
    "api-version": "1.0",
    "Content-Type": "application/json",
}
res = requests.post("https://demo-api.incodesmile.com/omni/authentications/external/search", headers=headers, json={})
data = res.json()
```

### Java

```java
HttpRequest req = HttpRequest.newBuilder()
    .uri(URI.create("https://demo-api.incodesmile.com/omni/authentications/external/search"))
    .header("x-api-key", "<YOUR_API_KEY>")
    .header("api-version", "1.0")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("{}"))
    .build();
HttpResponse<String> res = HttpClient.newHttpClient()
    .send(req, HttpResponse.BodyHandlers.ofString());
```

### Example response

```json
{
  "success": true,
  "status": "OK"
}
```