List tool call logs

Returns a cursor-paginated page of the organization's tool call logs, ordered oldest-first. Poll repeatedly, passing the returned `next_cursor` as `cursor`, until `has_more` is false. Only the last 30 days of logs are available. Credential values in headers (e.g. Authorization, API keys) are redacted. This endpoint is available on the Enterprise plan. Contact your account team to enable it.

Authentication

AuthorizationBearer

Token-based authentication with required prefix “Bearer”

Query parameters

client_trace_idstringOptional

Exact match on the caller’s W3C traceparent trace id (32 hex). The Merge Gateway request log records the same value on the model requests of the same prompt, so one id joins the two logs.

connector_idstringOptionalformat: "uuid"
Filter by connector ID.
created_afterdatetimeOptional

Only logs at or after this timestamp (ISO 8601). Clamped to the last 30 days — older values are raised to the 30-day floor.

created_beforedatetimeOptional

Only logs at or before this timestamp (ISO 8601).

cursorstringOptional

Opaque cursor from a previous response’s next_cursor.

error_reasonstringOptional

Exact match on why execution failed (e.g. tool_execution_error, reauth_required, blocked_by_security_rule). Executed calls only; refusals decided before execution are not logged as tool calls.

page_sizeintegerOptional

Records per page (1-1000, default 100).

statusstringOptional
Filter by execution status.
tool_namestringOptional

Filter by tool name (partial match).

turn_idstringOptional

Exact match on the agent turn id: the caller’s X-Merge-Turn-Id, else Codex CLI’s turn id. Also recorded on the Gateway request log.

Response

resultslist of objects
next_cursorstring or null
has_moreboolean