Request Log Debugging

StackOne records a request log for every API call it handles on your behalf — action (RPC) runs, MCP tool calls, and the connector steps behind them. This guide shows which endpoints to call, in what order, when debugging failures.

This guide covers request logs only — the same data shown on the Request Logs dashboard page. It does not cover platform or audit logs.The API follows the same drill-down hierarchy as the dashboard: list → detail → advanced / steps / defender.

To build admin or customer-facing log dashboards, see Request Log Dashboards. To export logs into Grafana, Datadog, or a data warehouse, see Observability & Log Sync.

Drill-down hierarchy

Start at the list endpoint and drill down only when you need more detail — exactly as the dashboard does.

Order	Endpoint	Returns
1. List	List Logs `POST /logs`	Paginated summary rows. Each row includes an `action_run_id` for drill-down.
2. Detail	Get Action Log `GET /logs/actions/{actionRunId}`	Full metadata for a single request (status, duration, connector, account, action).
3a. Steps	List Action Step Logs `GET /logs/actions/{actionRunId}/steps`	Connector execution steps within the request. Requires `page` and `page_size` query parameters.
3b. Advanced	Get Action Advanced Log `GET /logs/actions/{actionRunId}/advanced`	HTTP request and response bodies.
3c. Defender	Get Action Defender Log `GET /logs/actions/{actionRunId}/defender`	Defender scan output for AI agent tool calls.
4. Single step	Get Step Log / Get Step Advanced Log	Summary or full payloads for a single step.

For dashboard KPIs without listing individual rows, use Get Logs Stats Aggregate and Get Logs Stats Dimensions.

List filters

List Logs accepts a POST body with filters and pagination. Common filters mirror the dashboard search bar:

Filter	Use for
`account_ids`	Scope to one or more linked accounts (required for customer-facing views)
`connector_keys` / `providers`	Filter by integration (e.g. `bamboohr`, `workday`)
`start_time` / `end_time`	Time window
`success` / `status_codes`	Errors only, or specific HTTP statuses
`action_ids`	Filter by specific action

See the List Logs API reference for the full filter schema.

Example: list recent errors for an account

cURL
Python

curl -X POST "https://api.stackone.com/logs" \
  -H "Authorization: Basic $(printf '%s' "${STACKONE_API_KEY}:" | base64)" \
  -H "Content-Type: application/json" \
  -d '{
    "filter": {
      "start_time": "2024-01-15T00:00:00Z",
      "end_time": "2024-01-15T23:59:59Z",
      "account_ids": ["45355976281015164504"],
      "success": false
    },
    "page": 1,
    "page_size": 50
  }'

import requests
import base64
import os

api_key = os.environ["STACKONE_API_KEY"]
headers = {
    "Authorization": f"Basic {base64.b64encode(f'{api_key}:'.encode()).decode()}",
    "Content-Type": "application/json",
}

response = requests.post(
    "https://api.stackone.com/logs",
    headers=headers,
    json={
        "filter": {
            "start_time": "2024-01-15T00:00:00Z",
            "end_time": "2024-01-15T23:59:59Z",
            "account_ids": ["45355976281015164504"],
            "success": False,
        },
        "page": 1,
        "page_size": 50,
    },
)
logs = response.json()["data"]

Each list row includes an action_run_id. Pass that to the detail and drill-down endpoints.

Debug a failed request

Trace a single failed call from the list through to the step that failed.

Order	Endpoint	ID from previous call
1. Find the log	List Logs	—
2. Get request summary	Get Action Log	`action_run_id` from order 1
3. List execution steps	List Action Step Logs	same `action_run_id`
4. Inspect a failed step	Get Step Advanced Log	`action_run_id` + `step_index` from order 3
5. (Optional) Full request payload	Get Action Advanced Log	same `action_run_id`
6. (Optional) Defender scan	Get Action Defender Log	same `action_run_id`

Use the Error Explainer in the StackOne dashboard for AI-generated resolution steps when investigating errors in the request logs UI.

Defender security review

Defender must be enabled in your project settings before defender log endpoints return scan results.

Review Defender scan results for AI agent tool calls.

List flagged requests — List Logs and filter by risk_level (returned on log records when Defender is enabled).
Get Defender details — Get Action Defender Log for the full scan output including risk_level, tier2_score, and classification metadata.
Inspect the response — Get Action Advanced Log to see the sanitized payload Defender evaluated.

Advanced logs: request and response bodies

List Logs, Get Action Log, and Get Step Log return metadata only. To retrieve full HTTP request and response bodies, use the advanced endpoints:

Scope	Endpoint
Entire request	Get Action Advanced Log
Single step	Get Step Advanced Log

Advanced log retention depends on your project’s Advanced Logs settings. Configure retention period and error-only mode in the StackOne dashboard.

Fetch advanced logs on demand — not for every row in a high-volume feed.

Legacy endpoints

Only use these endpoints if you are debugging request logs from legacy unified connectors. For action-based connectors, use the drill-down hierarchy above.

The following endpoints remain available for integrations that generate request logs via legacy unified connectors:

Legacy endpoint	Replacement
`GET /requests/logs`	List Logs `POST /logs`
`/logs/unified/*`	List Logs + Get Action Log
`/logs/provider/*`	List Action Step Logs + Get Step Advanced Log

Request Log Dashboards

Build admin or customer-facing log dashboards

Observability & Log Sync

Sync logs to Grafana, Datadog, or custom pipelines

Request Logs (Dashboard)

View and filter logs in the StackOne dashboard

List Logs API

List request logs endpoint reference

Defender

Scan AI tool responses for prompt injection

​Drill-down hierarchy

​List filters

​Example: list recent errors for an account

​Debug a failed request

​Defender security review

​Advanced logs: request and response bodies

​Legacy endpoints

​Related

Request Log Dashboards

Observability & Log Sync

Request Logs (Dashboard)

List Logs API

Defender

Drill-down hierarchy

List filters

Example: list recent errors for an account

Debug a failed request

Defender security review

Advanced logs: request and response bodies

Legacy endpoints

Related