Skip to content

Tool footprint

Tool footprint is the per-session inventory of every tool and MCP call the agent made.

"Called gmail.send 3×, slack.post 1×, github.search 12×, internal-mcp/jira/create 1×." Plus what arguments, plus who/what was on the receiving end.

Footprint is derived, not stored separately — it's a query over the audit trail's tool-call events.

Derived fromAudit trail events tagged tool.call and mcp.call
Scoped toone Session (typical) or aggregated across sessions
Grouped bytool id → target (recipient, repo, channel, …)
SurfacesSessions UI per-session detail · per-agent rollup · compliance reports
Statusnext

For a single session:

ToolCallsTargetsNotable
gmail.send32 unique recipients1 outside org domain — flagged
github.search124 reposall in catalog
internal-mcp/jira/create1project KEY-123ticket created
slack.post1#support-botswithin allowed channel list

Per-agent and per-project rollups answer: "which tools does this agent reach for? where does it write data? what's the blast radius if it goes wrong?"

Footprint is the outbound view of a session: every external action the agent took. It complements:

Three projections of the same session data, each tuned for a different operator question.

Footprint is also the input to:

  • Catalog completeness. Calls to uncatalogued tools land in Tool discovery for review.
  • Anomaly detection. Footprint baselines drive drift detection — "this agent has never written to this repo before."
  • Compliance evidence. "All external email recipients in Q2" — a footprint query.
PersonaSurfaceWhat they see
OperatorSessions detail page → Footprint tabPer-session inventory, drill into each call
OperatorAgent dashboard → Tools rollupMost-called tools, anomalous targets
AuditorCompliance reportFootprint filtered by tool category (e.g., outbound communication)
Catalog reviewerTool discovery queueFootprint calls to uncatalogued tools