audit_tail
Retrieve recent tamper-evident audit log entries from keywarden, showing credential, capability, host, and allow/deny status. Optionally filter by credential ref and limit.
Instructions
Recent entries from keywarden's tamper-evident audit log: which credential was used, by which capability, against which host or command, and whether it was allowed or denied.
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "audit_tail"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | Optional: only entries for this credential ref. | |
| limit | No | How many entries. Default 20, max 200. |