Skip to navigation
ObserveLogs

Tool calls

Every tool call an employee's AI client makes, with full context

Logs → Tool calls records every tool call that runs through Workforce: succeeded, failed, redacted, or blocked. For the HTTP requests behind each call, see API request logs.

Fields on a tool call

FieldWhat it holds
Tool name<Connector>__<tool>, like slack__post_message
EmployeeWhose credentials ran the call
Tool PackThe pack the call came through
StatusSuccess, failure, pending, or blocked
DurationTime from receipt to response
ArgumentsWhat the client passed, post-redaction
ResultWhat came back, post-redaction, including the Connector’s error on a failure
HeadersThe client’s X- headers and W3C trace context (traceparent, tracestate, baggage)
Request IDReturned to the client as dev.merge/request_id in MCP _meta and in X-Request-ID

The API calls tab on a call lists each request the Connector made to the third party. The same records come from GET /api/v1/logs/tool-calls/; see Stream logs to a SIEM.

Filter tool calls

Filter by employee, Connector, tool name, Tool Pack, status, date, request ID (exact match), or free text in request headers and the response. Filters combine.

Correlating with the model request

Two fields join a tool call to the model requests from the same prompt in LLM calls:

FieldSource
client_trace_idThe trace ID in the W3C traceparent header
turn_idX-Merge-Turn-Id, otherwise turn_id in Codex CLI’s x-codex-turn-metadata header

Claude Code sends traceparent only with OpenTelemetry tracing on, an otlp exporter, and CLAUDE_CODE_PROPAGATE_TRACEPARENT=1. The Workforce CLI sets this with mfw env. Codex CLI sends turn metadata on model requests only.

Debug a failed tool call

  1. Filter to the employee, tool, and time
  2. Read the error in the result JSON
  3. If the arguments are wrong, use a tool description override or tool input override
  4. If a field is missing, check Violations and alerts for the rule that redacted it
  5. Open the API calls tab: 401/403 means the employee must reconnect the Connector, 404 means the resource is missing or inaccessible, 429 means a third-party quota

Tool call logs are kept for 90 days.