For audit logging, the strongest fit is Elastic 1, which provides dedicated Kibana and Elasticsearch audit-logging actions covering setup, event filtering and investigation 11. WorkOS 3 offers audit-log export and querying for application audit activity 13, and Perplexity's Audit API 4 lets organization admins pull audit events into SIEM tooling. The request does not say which platform or stack is in use, so the best choice depends on whether logs come from Elastic, a SaaS app, or clou
A question back: Which platform or stack do the audit logs come from (for example Elastic, a SaaS app, or Google Cloud), so the right audit source can be chosen?
- 1
Elasticelastic.coverified and signed
Elasticsearch and Kibana security audit logging, with actions to enable, configure and query audit logs and filter events 11.
official:MCP server · Elasticsearch MCP ServerSDK · elasticsearchlibrary · Elasticsearch.Netskill · elasticsearch-esql+29 community tools built for it
for agents: kibana-audit · elasticsearch-audit · anonymize-logs
- 2
WorkOS Audit Logsworkos.comfound in code, not yet checked
Exports and filters WorkOS audit logs and returns summaries and sample rows for answering questions about audit activity 13.
official:MCP server · WorkOS+5 community tools built for it
for agents: workos_audit_query · workos_audit_status · workos
- 3
Perplexity Audit APIperplexity.aiverified and signed
Read-only, organization-scoped API that pulls enterprise audit events into a SIEM or compliance tooling on a pull basis 4.
official:package · Perplexity API Platform
for agents: ask-ai · perplexity
- 4
Google Cloud Logginggoogle.comverified and signed
Logging API for writing, listing and querying log entries across projects, organizations and folders 18.
official:API · Cloud Logging APIskill · cloud-logging-configuration-basicsskill · cloud-logging-cross-project-configurationskill · cloud-logging-query-generation
for agents: logging.entries.write · logging.logs.list · logging.folders.logs.list
Sources
- 1Elastic: The search database for AI | Search, AI agents, Observability, and Security | Elasticelastic.co · read 2026-10-29
- 3WorkOS — Your app, Enterprise Ready.workos.com · read 2026-10-29
- 4Audit API - Perplexitydocs.perplexity.ai · read 2026-10-29
- 8AI and Cloud Computing Services | Google Cloudcloud.google.com · read 2026-10-29
- 11kibana-audit: declares "kibana-audit" (the record we read and signed)unfragile.ai · read 2026-10-24
- 13workos-audit-harness: declares "workos_audit_query" (the record we read)github.com · read 2026-10-24
- 18Cloud Logging API: declares "logging.entries.write" (the record we read and signed)unfragile.ai · read 2026-10-24
For agents: the 10 actions behind this answer
kibana-audit · kibana-audit verified and signed
Enable and configure Kibana audit logging for saved object access, logins, and space operations. Use when setting up Kibana audit, filtering events, or correlating Kibana and ES audit logs.
opentelemetry · @opentelemetry/sdk-logs verified and signed
workos_audit_query · workos-audit-harness found in code, not yet checked
Export filtered WorkOS audit logs, parse the CSV, and return summaries plus sample rows for answering questions about audit activity.
Logging · OpenTelemetry.Api verified and signed
ask-ai · Perplexity AI (Activepieces) verified and signed
Ask AI — Ask a question and get an answer sourced from the live web.
· aio-libs Aiobotocore website read, tools not yet checked
· VictoriaLogs website read, tools not yet checked
Documentation for VictoriaLogs, a database for storing and querying logs. Learn how to ingest, query, operate, and integrate it.
logging · testcontainers verified and signed
logging.entries.write · Cloud Logging API verified and signed
Writes log entries to Logging. This API method is the only way to send log entries to Logging. This method is used, directly or indirectly, by the Logging agent (fluentd) and all logging libraries con
· aio-libs Aiohttp website read, tools not yet checked
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.