query_audit_logs
InactiveTool of io.github.butterbase-ai/mcp
Query audit events for an app — authentication, admin mutations, and function invocations. Returns a unified event stream. Each event has: category 'auth' | 'admin' | 'function' event_type e.g. 'login', 'schema.apply', 'function.deploy', 'function.invoke' action 'create' | 'update' | 'delete' | 'invoke' | 'enable' | 'disable' | null resource_type which resource the event acted on resource_id the resource identifier (function name, policy name, deployment id, etc.) actor_type 'platform_user' | 'app_user' | 'api_key' | 'system' | 'anonymous' actor_id platform user id / app user id / api key id event_data event-specific payload success whether the event succeeded correlation_id request id (ties related events together) Use this to: - Investigate who did what and when - Debug failing auth / admin / function flows - Monitor suspicious activity - Trace a request across subsystems via correlation_id Common filters: - category='admin' to see only administrative mutations - resource_type='function' + resource_id='my-fn' to see one function's history - actor_id=<user-id> to see one actor's activity - from / to to narrow to a time window Idempotency: Safe to call anytime (read-only). Historical auth events predating migration 034 are included (normalized).
Parameters schema
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"app_id"
],
"properties": {
"to": {
"type": "string",
"description": "ISO-8601 timestamp, exclusive upper bound on created_at"
},
"from": {
"type": "string",
"description": "ISO-8601 timestamp, inclusive lower bound on created_at"
},
"limit": {
"type": "integer",
"default": 100,
"maximum": 500,
"description": "Number of logs to return (default 100, max 500)",
"exclusiveMinimum": 0
},
"action": {
"enum": [
"create",
"update",
"delete",
"invoke",
"enable",
"disable"
],
"type": "string",
"description": "Action filter"
},
"app_id": {
"type": "string",
"description": "The app ID (e.g. app_abc123def456)"
},
"offset": {
"type": "integer",
"default": 0,
"minimum": 0,
"description": "Pagination offset (default 0)"
},
"user_id": {
"type": "string",
"description": "DEPRECATED — alias for actor_id"
},
"actor_id": {
"type": "string",
"description": "Actor ID filter (platform user, app user, or API key id)"
},
"category": {
"enum": [
"auth",
"admin",
"function"
],
"type": "string",
"description": "Event category filter"
},
"event_type": {
"type": "string",
"description": "Exact event type match (e.g. \"login\", \"schema.apply\", \"function.invoke\")"
},
"resource_id": {
"type": "string",
"description": "Resource identifier filter"
},
"resource_type": {
"type": "string",
"description": "Resource type filter (e.g. \"function\", \"rls_policy\")"
}
},
"additionalProperties": false
}No endpoints wrapped at confidence ≥ 0.50.
Parent server
io.github.butterbase-ai/mcp
https://github.com/butterbase-ai/butterbase-oss
1/7 registries