Mist API Reference
Mist Automation Guide
HomeSDKsAPI ReferenceContext Plugin
OrgsSCEP

searchOrgScepEvents

GET
/api/v1/orgs/{org_id}/setting/mist_scep/events/search

Search Mist SCEP PKI operation events for the organization. Use this to audit certificate issuance errors and diagnose client onboarding problems.

Authorization

Authorization<token>

Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.

Format: Authorization: Token {apitoken}

Notes:

  • An API token generated for a specific admin has the same privileges as that admin
  • An API token is automatically removed if it is not used for more than 90 days
  • SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.

In: header

Path Parameters

org_id*string
Formatuuid

Query Parameters

type?string

Filter by event type. enum: failure, success

Value in

  • "failure"
  • "success"
cert_provider?string

Filter by the MDM or certificate provider that triggered the operation

common_name?string

Partial match against the certificate common name, such as a user UPN

device_id?string

Filter by the device identifier associated with the SCEP operation

Formatuuid
text?string

Keyword search within the event reason text

limit?integer

Maximum number of results to return per page

Range0 <= value
Default100
page?integer

Select the page number to return when using page-based pagination; starts at 1

Range1 <= value
Default1

Response Body

curl -X GET "https://example.com/api/v1/orgs/000000ab-00ab-00ab-00ab-0000000000ab/setting/mist_scep/events/search?cert_provider=jamf&common_name=john%40corp.com&text=invalid+challenge"
{  "end": 1748314800,  "limit": 100,  "page": 1,  "results": [    {      "cert_provider": "jamf",      "common_name": "name@company.net bb08e3c5-a1d9-5f21-a3b7-cd0821eab8f6",      "device_id": "bb08e3c5-a1d9-5f21-a3b7-cd0821eab8f6",      "org_id": "9301bff6-8992-49d6-b1ea-907ee81bb5fb",      "text": "invalid challenge/expired",      "timestamp": 1748227903,      "type": "SCEP_PKI_OPERATION_FAILURE"    },    {      "cert_provider": "jamf",      "common_name": "name@company.net aa3d2e37-6063-4bc0-9d5f-3bc13509f1f4",      "device_id": "",      "org_id": "9342bff6-8992-49d6-b1ea-907ee81bb5fb",      "text": "invalid CN or device_id",      "timestamp": 1748227803,      "type": "SCEP_PKI_OPERATION_FAILURE"    },    {      "cert_provider": "jamf",      "common_name": "name@company.net aa3d2e37-6063-4bc0-9d5f-3bc13509f1f4",      "device_id": "aa3d2e37-6063-4bc0-9d5f-3bc13509f1f4",      "org_id": "9342bff6-8992-49d6-b1ea-907ee81bb5fb",      "text": "scep PKI operation successful",      "timestamp": 1748227803,      "type": "SCEP_PKI_OPERATION_SUCCESS"    }  ],  "start": 1748228400,  "total": 3}

revokeOrgIssuedClientCertificates POST

Revoke issued Mist SCEP client certificates by certificate serial number.

activateSdkInvite POST

Activate a mobile SDK invite by verifying the invite secret and binding it to the supplied device identifier. The response returns the device-specific secret used by the mobile SDK client.