ark_search_audit_events

ark.search_audit_events

Search the permissioned ARK audit timeline by view, domain, subject, actor, event, provider, trace, team, date range, or text query.

Availability: Expanded preview
Scopes: audit:read
ARK permissions: canViewAuditTimeline
Team visibility: Not entity-scoped
Approval policy: none
ARK approval request: Not required
Idempotency: Not required
Read-only: Yes
Destructive: No
External side effect: No
Rate limit: OAuth MCP credential and organization budgets

Input

viewstring

Audit view to search.

one of: activity, security, payments, integrations, exports, diagnostics; default: "activity"

domainViewstring

Optional domain-specific audit projection.

one of: load.case_file, load.spot_quote_funnel, load.carrier_award, load.dispatch_exceptions, load.load_board, load.tracking, carrier.trust, carrier.onboarding, carrier.payment_risk, carrier.compliance_documents, carrier.provider_monitoring, carrier.rejections_dnu, finance.payment_ledger, finance.ap_settlement, finance.ar_invoice_payment, finance.nacha, finance.quickbooks, finance.pay_holds, finance.report_snapshots, integration.edi_trace, integration.tracking_visibility, integration.settings, evidence.documents, evidence.pod_review, customer.account, customer.locations, people.activity, admin.security, admin.org_config, admin.internal_tools, audit.exports, audit.operations

qstring

min length: 1; max length: 200

fromstring

format: date-time

tostring

format: date-time

subjectTypestring

min length: 1; max length: 100

subjectIdstring

min length: 1; max length: 200

actorTypestring

min length: 1; max length: 100

actorUserIdstring

format: uuid

eventKeystring

min length: 1; max length: 200

eventFamilystring

min length: 1; max length: 100

visibilityClassstring

one of: business, security, admin, operational

sourcestring

min length: 1; max length: 100

providerstring

min length: 1; max length: 100

correlationIdstring

min length: 1; max length: 200

transactionIdstring

idempotencyKeystring

min length: 1; max length: 200

requestIdstring

min length: 1; max length: 200

teamIdstring

format: uuid

cursorOccurredAtstring

format: date-time

cursorIdstring

format: uuid

limitinteger

default: 50; min: 1; max: 100

Result

The tool returns the canonical ark.search_audit_events operation result in structuredContent and mirrors the same JSON as text. Errors set isError: true and return a stable error code, message, and optional details.