get_audit_log_artifacts
Query the organization's immutable Parquet audit-log artifacts with pagination (defaults page 1, limit 25) and exact-match filters, including content_hash for pinpointing one artifact. Artifacts are the tamper-evident copy of the audit trail; use get_audit_logs for the live audit-event table. Requires an admin API key; a workspace-scoped key sees only its own workspace's artifacts. Read-only. Returns entries plus total, page, limit, and pages.
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "get_audit_log_artifacts"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | 1-based page number; defaults to 1. | |
| limit | No | Entries per page, up to 100; defaults to 25. | |
| action | No | Keep only artifacts with this action. | |
| result | No | Keep only artifacts with this result value. | |
| actor_email | No | Keep only artifacts by this actor email. | |
| content_hash | No | Keep only the artifact with this content hash. | |
| request_hash | No | Keep only artifacts tied to this request hash. | |
| resource_type | No | Keep only artifacts against this resource type. | |
| manifest_version | No | Keep only artifacts tied to this runtime manifest version. | |
| policy_snapshot_id | No | Keep only artifacts tied to this execution-policy snapshot. | |
| schema_snapshot_id | No | Keep only artifacts tied to this schema snapshot. |