ark_get_audit_event

ark.get_audit_event

Return permissioned audit event detail, including requested changes, traces, evidence, or sanitized facts.

Availability: Expanded preview
Scopes: audit:read
ARK permissions: canViewAuditTimeline
Team visibility: Not entity-scoped
Approval policy: none
ARK approval request: Not required
Idempotency: Not required
Read-only: Yes
Destructive: No
External side effect: No
Rate limit: OAuth MCP credential and organization budgets

Input

eventIdstringrequired

Audit event ID from ark_search_audit_events.

format: uuid

occurredAtstringrequired

Audit event occurredAt timestamp from ark_search_audit_events.

format: date-time

viewstring

Audit view used to permission and project the detail.

one of: activity, security, payments, integrations, exports, diagnostics; default: "activity"

domainViewstring

Optional domain-specific audit projection.

one of: load.case_file, load.spot_quote_funnel, load.carrier_award, load.dispatch_exceptions, load.load_board, load.tracking, carrier.trust, carrier.onboarding, carrier.payment_risk, carrier.compliance_documents, carrier.provider_monitoring, carrier.rejections_dnu, finance.payment_ledger, finance.ap_settlement, finance.ar_invoice_payment, finance.nacha, finance.quickbooks, finance.pay_holds, finance.report_snapshots, integration.edi_trace, integration.tracking_visibility, integration.settings, evidence.documents, evidence.pod_review, customer.account, customer.locations, people.activity, admin.security, admin.org_config, admin.internal_tools, audit.exports, audit.operations

sectionsarray<string>

Optional detail sections to return, such as changes, trace, evidence, or facts.

min items: 1; max items: 20

Result

The tool returns the canonical ark.get_audit_event operation result in structuredContent and mirrors the same JSON as text. Errors set isError: true and return a stable error code, message, and optional details.