audit_search
Search executed write audit entries for your tenant. Filter by tool name, actor type, and ISO date range to trace changes.
Instructions
Search executed write audit entries for this tenant. Filter by tool name, actor type (org_token or sso), and optional ISO date range. Reads ~/.advocatehub-mcp/audit/-YYYY-MM.jsonl (and legacy .jsonl).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | Filter by write tool name, e.g. "log_event". | |
| limit | No | Max matching entries to return (newest first, max 500). | |
| end_at | No | Inclusive upper bound (ISO 8601). | |
| start_at | No | Inclusive lower bound (ISO 8601), e.g. "2026-01-01T00:00:00.000Z". | |
| actor_type | No | Filter by credential type that performed the write. |