Skip to main content
Glama

List audit log

list_audit_log
Read-only

List the workspace's MCP security audit log — one entry per tool call (WHO via token label, WHAT tool + outcome, WHICH record ids, WHEN), newest first. OWNER-ONLY: only the workspace owner sees entries; a non-owner gets an empty list. Read-only. Optionally filter by 'tool_name' and page with 'limit'. Use to review what an AI connection has been doing in the workspace.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "list_audit_log"
  }
}

Input Schema

NameRequiredDescriptionDefault
limitNo
tool_nameNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint/destructiveHint=false, so safety is covered; the description goes beyond them with the owner-only authorization rule and the non-owner empty-list outcome, which are non-obvious behaviors an agent must anticipate. It also discloses sort order and no-filter default behavior. It stops short of stating the default page size or whether a total count is returned.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded: purpose and entry shape come first, then the owner-only constraint, then parameters, then the use case. Dense and nearly waste-free, with only minor redundancy in "Read-only" restating the readOnlyHint annotation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, and the description compensates well by enumerating the entry fields and ordering. For a two-parameter read tool this is nearly complete; the only gaps are pagination mechanics (default limit, whether more pages exist), which an agent calling repeatedly would want.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry parameter meaning; it does explain that 'tool_name' filters and 'limit' pages. However, it does not say whether tool_name is an exact match or a substring, nor what the default limit is (the schema only bounds it at 1–100). Useful but incomplete compensation for the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ("List the workspace's MCP security audit log") and immediately defines what one entry contains (token label, tool + outcome, record ids, timestamp) plus ordering (newest first). An agent knows exactly what this returns without consulting any other field.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit usage context — "Use to review what an AI connection has been doing in the workspace" — and a hard precondition (owner-only, non-owners get an empty list). It does not name an alternative tool or a when-not-to-use case, but the sibling names given are unrelated logging/list domains rather than substitutes, so there is little to exclude.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources