NetBird Full API Reference + Read-Only MCP Prototype
GET/api/agent-network/access-logs

List Agent Network access logs

Returns a paginated, server-side-filtered list of agent-network (LLM) access log entries. Available only when the account has log collection enabled; otherwise entries are not retained. Callers without the account-wide grant are not denied - the response is scoped to their own requests (any user_id or group_id filter is overridden).

14 parameters
pageintegeroptional
Page number for pagination (1-indexed).
Default:1
page_sizeintegeroptional
Number of items per page (max 100).
Default:50
sort_bystringoptional
Field to sort by.
Allowed:timestampmodelproviderstatus_codedurationcost_usdtotal_tokensuser_iddecisionDefault:timestamp
sort_orderstringoptional
Sort order (ascending or descending).
Allowed:ascdescDefault:desc
searchstringoptional
General search across log ID, host, path, model, and user email/name.
user_idstringoptional
Filter by authenticated user ID.
session_idstringoptional
Filter to a single conversation / coding session id (groups all requests of one session).
group_idarray<string>optional
Filter by authorising group id. Repeat for multiple (matches any).
provider_idarray<string>optional
Filter by resolved provider id. Repeat for multiple (matches any).
modelarray<string>optional
Filter by model. Repeat for multiple (matches any).
decisionstringoptional
Filter by policy decision (e.g. allow, deny).
pathstringoptional
Filter by request path prefix (matches entries whose path starts with this value).
start_datestringoptional
Filter by timestamp >= start_date (RFC3339 format).
end_datestringoptional
Filter by timestamp <= end_date (RFC3339 format).

4 status codes
200Paginated list of agent-network access logs
dataarray<object>required
List of agent-network access log entries.
pageintegerrequired
Current page number.
page_sizeintegerrequired
Number of items per page.
total_pagesintegerrequired
Total number of pages available.
total_recordsintegerrequired
Total number of log records matching the filter.
401Requires authentication
403Forbidden
500Internal Server Error

Error handling

A 401 is returned: Requires authentication. A 403 is returned: Forbidden. A 500 is returned: Internal Server Error.