{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Gets a list of Access authentication audit logs for an account.","properties":{"path":{"type":"object","properties":{"account_id":{"$ref":"#/definitions/access_identifier"}},"required":["account_id"],"additionalProperties":false},"query":{"type":"object","properties":{"limit":{"type":"integer","default":25,"examples":[25],"description":"The maximum number of log entries to retrieve."},"direction":{"type":"string","default":"desc","enum":["desc","asc"],"examples":["desc"],"description":"The chronological sorting order for the logs."},"since":{"type":"string","format":"date-time","examples":["2020-07-01T05:20:00Z"],"description":"The earliest event timestamp to query."},"until":{"type":"string","format":"date-time","examples":["2020-10-01T05:20:00Z"],"description":"The latest event timestamp to query."},"page":{"description":"Page number of results.","type":"integer","default":1},"per_page":{"description":"Number of results per page.","type":"integer","default":25},"email":{"$ref":"#/definitions/access_email-3","description":"Filter by user email. Match mode is controlled by `emailOp` (preferred) or the legacy `email_exact` flag.\n- Default (no `emailOp`, `email_exact=false` or unset): substring match — `email=@example.com` returns all events with that domain.\n- Exact match: set `emailOp=eq` (preferred) or `email_exact=true` — e.g. `email=user@example.com&email_exact=true` returns only that user.\n- Explicit substring match: set `emailOp=contains` (without `email_exact=true`). When both are set, `email_exact=true` takes precedence and the match is exact.\n- Exclusion: set `emailOp=neq`. With `email_exact=true` this is an exact-value exclusion; without it, a fuzzy substring exclusion.\n"},"email_exact":{"type":"boolean","default":false,"examples":[true],"description":"When true, `email` is matched exactly instead of substring matching."},"user_id":{"$ref":"#/definitions/access_user_id","description":"Deprecated. Accepted for backward compatibility but no longer applied\nas a filter. Use `email` instead.\n"},"allowedOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Operator for the `allowed` filter."},"country_codeOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Operator for the `country_code` filter."},"app_typeOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Operator for the `app_type` filter."},"app_uidOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Operator for the `app_uid` filter."},"ray_idOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Operator for the `ray_id` filter."},"emailOp":{"type":"string","default":"eq","enum":["eq","neq","contains"],"description":"Operator for the `email` filter.\n`contains` performs a substring (case-sensitive) match. When `email_exact=true`\nis also set, `email_exact` takes precedence and `contains` is ignored.\n"},"idpOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Operator for the `idp` filter."},"non_identityOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Operator for the `non_identity` filter."},"user_idOp":{"type":"string","default":"eq","enum":["eq","neq"],"description":"Deprecated. Accepted for backward compatibility but no longer applied\nas a filter (the `user_id` parameter is itself deprecated).\n"},"fields":{"type":"string","examples":["action,allowed,app_name,country,created_at,ray_id,user_email"],"description":"Comma-separated list of fields to include in the response.\nWhen omitted, all fields are returned.\n"}},"required":[],"additionalProperties":false}},"required":["path"],"additionalProperties":false,"definitions":{"access_identifier":{"description":"Identifier.","type":"string","maxLength":32,"examples":["023e105f4ecef8ad9ca31a8372d0c353"]},"access_email-3":{"description":"The email address of the authenticating user.","type":"string","format":"email","examples":["user@example.com"]},"access_user_id":{"description":"The UUID of the authenticating user.","type":"string","format":"uuid","examples":["f757c5c3-c1b2-50f7-9126-150a099b6f7e"]}}},"name":"Get Access authentication logs","id":"cloudflare.access-authentication-logs-get-access-authentication-logs","example":{"path":{"account_id":"023e105f4ecef8ad9ca31a8372d0c353"}},"maxRequests":1,"summary":false}}