Skip to content
MCP Gateway

Ingest metadata-only DP runtime audit events into CP audit storage.

POST
/v1/runtime/audit-events

Data planes batch runtime metadata back to the control plane with projection version, upstream transport, decision, status, latency, and error category. Raw tool arguments, result bodies, environment values, tokens, and credential material are forbidden.

Authorizations

Section titled “Authorizations ”

Request Body required

Section titled “Request Body required ”
object
schemaVersion
required
tenantId
required
string
>= 1 characters
environmentId
required
string
>= 1 characters
dataPlaneId
required
string
>= 1 characters
projectionVersion
required
string
>= 1 characters
events
required
Array<object>
>= 1 items
object
eventId
required
string
>= 1 characters
requestId
required
string
>= 1 characters
tenantId
required
string
>= 1 characters
environmentId
required
string
>= 1 characters
serverId
required
string
>= 1 characters
toolId
required
string
>= 1 characters
projectionVersion
required
string
>= 1 characters
policyVersion
required
string
>= 1 characters
credentialMode
required
Allowed values: none service_account user_delegated agent_scoped workload_mapped
upstreamTransport
required
Allowed values: streamable_http legacy_sse stdio
decision
required
Allowed values: allow deny
outcome
required
Allowed values: succeeded denied failed
latencyMs
required
integer
statusCode
required
integer | null
>= 100
errorCategory
required
Allowed values: none policy_denied schema_invalid upstream_timeout upstream_error transport_error projection_stale
metadataOnly
required
rawArgsLogged
required
secretMaterialLogged
required

Responses

Section titled “ Responses ”

202

Section titled “202 ”

Runtime audit metadata accepted for durable audit append.

object
schemaVersion
required
accepted
required
boolean
tenantId
required
string
>= 1 characters
environmentId
required
string
>= 1 characters
dataPlaneId
required
string
>= 1 characters
projectionVersion
required
string
>= 1 characters
acceptedEventCount
required
integer
redactionStatus
required

400

Section titled “400 ”

Audit batch was malformed or contained unsafe material.

403

Section titled “403 ”

Data plane identity is not allowed to write audit events for the scoped tenant/environment.

Type set in Geist, Source Serif 4, and Departure Mono.