Audit Log

MCP tools for the Audit Log module. See the Audit Log module docs for permissions and data model.

list-audit-entries

List audit entries

Arguments

Argument	Type	Required	Description
project_id	string	no	Project ID (scopes results; required if not using project key auth for a specific project)
action	string	no	Exact permission-action string, e.g. secrets:DeleteSecret
principal_id	string	no	Public id of the principal (user_… or key_…)
resource_public_id	string	no	Exact target resource public id, e.g. sec_…
resource_srn	string	no	SRN prefix match, e.g. srn:{project}:secret:. The log is append-only, so a stored SRN is never rewritten; the filter matches it as stored.
from	string	no	Only entries created at or after this timestamp (ISO 8601)
to	string	no	Only entries created at or before this timestamp (ISO 8601)
limit	number	no	Results per page. Above 200 it is clamped, and limit in the response reports the page served; below 1 or not an integer it is 400 VALIDATION_FAILED.
offset	number	no	Results to skip. Negative or not an integer it is 400 VALIDATION_FAILED.

get-audit-entry

Get an audit entry

Arguments

Argument	Type	Required	Description
entry_id	string	yes	Audit entry ID