Skip to main content
GET
Agent tool list directory logs

Path Parameters

workspaceId
string<uuid>
required
userId
string
required

Query Parameters

TimeFilteringType
any
required

Time window for the lookup. Allowed values: ThreeHours, SixHours, TwelveHours, TwentyFourHours, FourtyEightHours, Custom. Prefer the smallest window that resolves your specific uncertainty — directory audit volume can be high. Default: TwentyFourHours.

Available options:
ThreeHours,
SixHours,
TwelveHours,
TwentyFourHours,
FourtyEightHours,
Custom,
null
StartDate
string<date-time>

UTC start instant for Custom windows. Required when TimeFilteringType is Custom; ignored otherwise.

EndDate
string<date-time>

UTC end instant for Custom windows. Required when TimeFilteringType is Custom; ignored otherwise.

Pagination cursor returned by a previous call's response. Pass to fetch the next page of results; omit for the first page.

EntityName
string

Display name of the user entity being investigated. Surfaced in the audit trail; not used for matching.

ResourceId
string

Audit-trail anchor — the ID of the resource the lookup is attributed to. Typically the incident ID.

ResourceName
string

Audit-trail anchor — the display name of the resource the lookup is attributed to. Typically the incident title.

Response

OK

Standard v2 API response envelope for single-item responses.

data
object

Token-efficient envelope for agent-tool list responses. Rows are stored as parallel arrays aligned to a single shared List<string> AgentToolTabularResult.Columns header so column names are written exactly once rather than once per row.

meta
object