Skip to main content
Glama
Sign In

Onplana

by io.github.Onplana
OverviewDiscussionsAdmin

export_audit_log

Read-onlyIdempotent

Read org audit log entries (ENTERPRISE+ feature). Requires OWNER or ADMIN org role. Returns up to 200 entries per call with optional filters: action, resource, userId, date range (from/to as ISO strings), and pagination (limit/offset). Each entry carries clientSurface (which client made the request: WEB, MAKER, EXTENSION, DESKTOP, MOBILE, MCP, PAT, SYSTEM, UNKNOWN) and clientLabel (the precise client). Distinct from actorType, which is the actor's privilege. Null on rows predating client attribution; that history is deliberately not backfilled, so a missing value means unknown rather than web.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "export_audit_log"
  }
}

Input Schema

NameRequiredDescriptionDefault
toNoISO date upper bound (inclusive).
fromNoISO date lower bound (inclusive).
limitNoMax entries to return. Default 50, max 200.
actionNoFilter by exact action name.
offsetNoSkip this many entries. Default 0.
userIdNoFilter to entries where this user is the actor.
resourceNoFilter by resource type (e.g. Task, Project).

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (which already cover read-only, idempotent, non-destructive), the description adds the enterprise gating, required role, the 200-entry ceiling, and the subtle data-model semantics of clientSurface vs actorType. It also explains that null client values mean unknown rather than a default, which prevents a serious misreading of the data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose, then prerequisites, then filters and return shape in a logical order with no filler sentences. The clientSurface/clientLabel explanation is detailed but earns its place by disambiguating the field; it could be trimmed slightly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description takes on the burden of describing returned fields and does so – entry count ceiling, filterable fields, and the clientSurface enumeration with null-handling. Nothing needed to call or interpret the result is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all seven parameters including defaults and ISO semantics. The description restates the filter set and the from/to ISO format but adds no syntax or behavioral detail for the parameters themselves. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (read org audit log entries) plus the gating tier, so an agent immediately knows what the call does. It does not, however, name or distinguish itself from the sibling audit tools (list_audit_log, get_audit_entry), so the agent must infer which is appropriate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly gives the entitlement and role prerequisites (ENTERPRISE+ feature, OWNER or ADMIN org role), which tells the agent when the call is valid. It stops short of naming an alternative to use when the role/tier requirement is unmet or when a single entry is wanted.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Onplana toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources