NetBird Full API Reference + Read-Only MCP Prototype
GET/api/agent-network/access-log-sessions

List Agent Network access logs grouped by session

Returns a paginated, server-side-filtered list of agent-network (LLM) access logs grouped by session. The page unit is a session (total_records counts sessions); each session carries an aggregate summary and its ordered entries. Requests the client sent no session id for each form their own singleton group. Accepts the same filters as the flat access-logs endpoint. Available only when the account has log collection enabled. Callers without the account-wide grant are not denied - the response is scoped to their own requests (any user_id or group_id filter is overridden).

14 parameters
pageintegeroptional
Page number for pagination (1-indexed).
Default:1
page_sizeintegeroptional
Number of sessions per page (max 100).
Default:50
sort_bystringoptional
Session-level field to sort by. "timestamp" is the session's last activity, "started_at" its first.
Allowed:timestampstarted_atcost_usdtotal_tokensdurationrequest_countstatus_codeuser_iddecisionDefault:timestamp
sort_orderstringoptional
Sort order (ascending or descending).
Allowed:ascdescDefault:desc
searchstringoptional
General search across log ID, host, path, model, and user email/name.
user_idstringoptional
Filter by authenticated user ID.
session_idstringoptional
Filter to a single conversation / coding session id.
group_idarray<string>optional
Filter by authorising group id. Repeat for multiple (matches any).
provider_idarray<string>optional
Filter by resolved provider id. Repeat for multiple (matches any).
modelarray<string>optional
Filter by model. Repeat for multiple (matches any).
decisionstringoptional
Filter by policy decision (e.g. allow, deny).
pathstringoptional
Filter by request path prefix (matches entries whose path starts with this value).
start_datestringoptional
Filter by timestamp >= start_date (RFC3339 format).
end_datestringoptional
Filter by timestamp <= end_date (RFC3339 format).

4 status codes
200Paginated list of session-grouped agent-network access logs
dataarray<object>required
List of session-grouped agent-network access logs.
pageintegerrequired
Current page number.
page_sizeintegerrequired
Number of sessions per page.
total_pagesintegerrequired
Total number of pages available.
total_recordsintegerrequired
Total number of sessions matching the filter.
401Requires authentication
403Forbidden
500Internal Server Error

Error handling

A 401 is returned: Requires authentication. A 403 is returned: Forbidden. A 500 is returned: Internal Server Error.