usage_events
Query the observed-usage log to audit LLM prompts and findings, filter by model, risk level, allowed status, and time, and review risky or blocked calls.
Instructions
[READ] Query the observed-usage log (route-through prompts + their findings).
Args: model: Filter by model name. risk_level: Filter by risk band (none/low/medium/high/critical). allowed: True = only allowed calls; False = only blocked. since: ISO start timestamp. limit: Max rows.
Returns {"events": [...], "count": N, "returned": N, "limit": L, "truncated": bool}. When truncated is true more prompts were observed
than were returned — raise the limit or narrow the filters. Never conclude
"no risky prompts were observed" from a truncated result.
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "usage_events"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| model | No | ||
| since | No | ||
| allowed | No | ||
| risk_level | No |