Action / tool name
Severity level of the event
ISO-8601 timestamp
OptionaldurationWall-clock duration of the operation in milliseconds
OptionalparamsSanitised tool input parameters
OptionalresultOutcome metadata
OptionaltoolMCP tool name (if the event was triggered by a tool call)
Structured audit event used for MCP tool call tracking.
Designed to be serialised to JSON for append-only log sinks (CloudWatch, Elasticsearch, etc.).