> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nekt.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Token Access Log

> One log line plus the request content recorded with it.



## OpenAPI

````yaml GET /api/v1/token-access-logs/{id}/
openapi: 3.0.3
info:
  title: Nekt API
  version: v1
  description: Nekt API Documentation
  contact:
    email: support@nekt.ai
servers:
  - url: https://api.nekt.ai
security: []
paths:
  /api/v1/token-access-logs/{id}/:
    get:
      tags:
        - v1
      summary: Retrieve a token access log
      description: >-
        One log line plus the `content` recorded for it: the request body, the
        query string and a short allowlist of request headers. Credentials are
        masked and no authentication header is ever stored.


        **`content` may be `null`, and that is not an error.** The body is
        shipped separately from the log line itself, so it can be missing while
        the line is intact — `content_status` says which case you got,
        `available` or `unavailable`. The response is `200` either way.
      operationId: v1_token_access_logs_retrieve
      parameters:
        - in: path
          name: id
          schema:
            type: string
            format: uuid
          description: A UUID string identifying this token access log.
          required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenAccessLogDetail'
          description: ''
      security:
        - ApiKeyAuth: []
components:
  schemas:
    TokenAccessLogDetail:
      type: object
      description: >-
        One access-log line plus the request and response content recorded with
        it.


        `content` has no fixed shape and may gain or lose fields over time —
        read it as a document,

        not as a fixed set of columns. It can also be absent: `content_status`
        says whether it was

        available for this line.
      properties:
        id:
          type: string
          format: uuid
          readOnly: true
        created_at:
          type: string
          format: date-time
          readOnly: true
        token_kind:
          allOf:
            - $ref: '#/components/schemas/TokenKindEnum'
          readOnly: true
        token_id:
          type: string
          format: uuid
          readOnly: true
          nullable: true
          description: >-
            The APIToken's or the MCPToken's id — `token_kind` says which. Not a
            foreign key because it points at two different tables. Null when
            authentication failed, and there is no token to name.
        token_description:
          type: string
          readOnly: true
        token_owner:
          type: integer
          readOnly: true
          nullable: true
        token_owner_email:
          type: string
          readOnly: true
        action:
          type: string
          readOnly: true
          description: >-
            Client-facing action slug from the audit registry (`source.create`,
            `data.sql_query`, ...), derived from the resolved route — never from
            the raw URL. `unknown` is a valid value: a route nobody has mapped
            yet is still recorded.
        transport:
          allOf:
            - $ref: '#/components/schemas/TransportEnum'
          readOnly: true
        method:
          type: string
          readOnly: true
        path:
          type: string
          readOnly: true
        status_code:
          type: integer
          readOnly: true
          nullable: true
        response_content_length:
          type: integer
          readOnly: true
          nullable: true
          description: >-
            How much data left with this response — the size question an access
            audit exists to answer.
        duration_ms:
          type: integer
          readOnly: true
          nullable: true
        remote_address:
          type: string
          readOnly: true
        client_tool:
          type: string
          readOnly: true
          description: >-
            MCP tool name, when the caller declares one. Informational only — it
            comes from the client, so it authorises nothing.
        content:
          type: string
          readOnly: true
        content_status:
          type: string
          readOnly: true
      required:
        - action
        - client_tool
        - content
        - content_status
        - created_at
        - duration_ms
        - id
        - method
        - path
        - remote_address
        - response_content_length
        - status_code
        - token_description
        - token_id
        - token_kind
        - token_owner
        - token_owner_email
        - transport
    TokenKindEnum:
      enum:
        - api-token
        - mcp-token
      type: string
      description: |-
        * `api-token` - API token
        * `mcp-token` - MCP token
    TransportEnum:
      enum:
        - http
        - websocket
      type: string
      description: |-
        * `http` - HTTP
        * `websocket` - WebSocket
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key
      description: 'API Key authentication. Format: ''x-api-key: api_key'''

````