Skip to main content
Glama

Audit log

get_audit_log
Read-only

Reads the append-only audit trail for an organisation, newest first. Each entry says what happened (action, e.g. create/approve/sync/flag), to what (entity_type + entity_id), by whom (actor_type: human/system/api), why (reason), and when (created_at, ISO 8601). Use it to answer "who approved this", "what happened to event X" (filter by entity_id), or "what has the pipeline done recently". Filter with entity_type (e.g. classified_event) and/or entity_id. Paginate by passing the returned next_cursor as cursor; next_cursor is null on the last page. total_count is the full match count ignoring pagination. Detailed before/after state is never returned through this tool.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
limitNoEntries per page, default 50, max 200.
cursorNoThe next_cursor value from the previous page (last seen entry id).
org_idNoOptional. Defaults to the organisation the authenticated API key is bound to, so you normally omit it and never need to ask the user for their organisation UUID. If provided, it must match the key’s org or the request is rejected.0e91146d-511c-469f-bdee-5c867b26ae0d
entity_idNoFilter to one entity by UUID.
entity_typeNoFilter to one entity type, e.g. "classified_event" or "integration".

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
entriesYes
next_cursorYes
total_countYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, the description discloses ordering (newest first), append-only nature, pagination semantics (next_cursor null on last page, total_count ignores pagination), and explicitly states that detailed before/after state is never returned. This gives the agent accurate expectations for the tool's behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The most important fact (what the tool reads and ordering) is front-loaded, and every subsequent sentence adds operational value: entry fields, use cases, filters, pagination, and the before/after caveat. No filler or repetition of the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, zero-required-parameter tool with an output schema, the description covers purpose, filtering, pagination, and output semantics. It gives an agent everything needed to decide to call it and to invoke it correctly, and the output schema covers return structure.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds value beyond the schema by explaining the cursor continuation contract ('next_cursor as cursor; next_cursor is null on the last page'), clarifying how filters combine, and giving a concrete entity_type example. All five parameters themselves are already documented in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description opens with a specific verb and resource: 'Reads the append-only audit trail for an organisation, newest first.' It details the exact entry shape (action, entity_type/entity_id, actor_type, reason, created_at), which makes the tool's purpose unmistakable and differentiates it from transaction- or balance-reading siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit use cases ('who approved this', 'what happened to event X', 'what has the pipeline done recently') and filter guidance (entity_type/entity_id). It does not name sibling alternatives or state when not to use this tool, so it misses full exclusion guidance but is otherwise clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources