# Audit logs MCP tools

This page documents **4 tools** in the audit logs group. Return to the [complete MCP tool reference](/docs/developers/api/mcp/tools) to browse another group.

Select a tool to inspect its schemas and behavior. Schema links open the exact definition in GitHub.

### `getAuditLogEntry` — Get Audit Log Entry

Get an audit log entry by ID.

- **Input:** [`GetAuditLogEntryInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11820-L11827)
- **Output:** [`GetAuditLogEntryOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11829-L11835)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20331–L20342 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20331-L20342)

### `listAuditLogEntries` — List Audit Log Entries

List audit log entries for the organization. Audit log entries record write actions (create, update, delete) performed by users and API keys.

- **Input:** [`ListAuditLogEntriesInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11854-L11885)
- **Output:** [`ListAuditLogEntriesOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11887-L11898)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20343–L20354 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20343-L20354)

### `requestAuditLogExport` — Request Audit Log Export

Request an export of audit log entries for the organization within a time range. The export will be emailed as a CSV download link.

- **Input:** [`RequestAuditLogExportInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11900-L11919)
- **Output:** [`RequestAuditLogExportOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11921-L11928)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20355–L20366 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20355-L20366)

### `requestSCIMEventExport` — Request SCIM Event Export

Request an export of SCIM events for the organization within a time range. The export will be emailed as a CSV download link.

- **Input:** [`RequestSCIMEventExportInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11930-L11949)
- **Output:** [`RequestSCIMEventExportOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11951-L11958)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20367–L20378 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20367-L20378)