feat: track when API tokens were last used

packages/lib/server-only/public-api/get-api-token-by-token.ts

@@ -96,6 +96,17 @@ export const getApiTokenByToken = async ({ token, bypassRateLimit = false }: Get
     });
   }
 
+  void prisma.apiToken
+    .update({
+      where: {
+        id: apiToken.id,
+      },
+      data: {
+        lastUsedAt: new Date(),
+      },
+    })
+    .catch(() => null);
+
   return {
     ...apiToken,
     user,

packages/lib/server-only/public-api/get-api-tokens.ts

@@ -22,6 +22,7 @@ export const getApiTokens = async ({ userId, teamId }: GetApiTokensOptions) => {
       name: true,
       createdAt: true,
       expires: true,
+      lastUsedAt: true,
     },
     orderBy: {
       createdAt: 'desc',

packages/prisma/migrations/20260818081941_add_api_token_last_used_property/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "ApiToken" ADD COLUMN     "lastUsedAt" TIMESTAMP(3);

packages/prisma/schema.prisma

@@ -220,16 +220,17 @@ enum ApiTokenAlgorithm {
 }
 
 model ApiToken {
-  id        Int               @id @default(autoincrement())
-  name      String
-  token     String            @unique
-  algorithm ApiTokenAlgorithm @default(SHA512)
-  expires   DateTime?
-  createdAt DateTime          @default(now())
-  userId    Int?
-  user      User?             @relation(fields: [userId], references: [id], onDelete: Cascade)
-  teamId    Int
-  team      Team              @relation(fields: [teamId], references: [id], onDelete: Cascade)
+  id         Int               @id @default(autoincrement())
+  name       String
+  token      String            @unique
+  algorithm  ApiTokenAlgorithm @default(SHA512)
+  expires    DateTime?
+  createdAt  DateTime          @default(now())
+  lastUsedAt DateTime?
+  userId     Int?
+  user       User?             @relation(fields: [userId], references: [id], onDelete: Cascade)
+  teamId     Int
+  team       Team              @relation(fields: [teamId], references: [id], onDelete: Cascade)
 }
 
 enum SubscriptionStatus {

packages/trpc/server/api-token-router/get-api-tokens.types.ts

@@ -9,6 +9,7 @@ export const ZGetApiTokensResponseSchema = z.array(
     name: true,
     createdAt: true,
     expires: true,
+    lastUsedAt: true,
   }),
 );