---
title: "Get Egress Traffic Summary Rollup"
method: GET
path: "/api/v1/edges/egress/traffic-summary"
tags: ["Edge"]
---

# Get Egress Traffic Summary Rollup

`GET /api/v1/edges/egress/traffic-summary`

## Request

- Base URL: `https://example.conductor.one`
- URL: `https://example.conductor.one/api/v1/edges/egress/traffic-summary`
- Auth: HTTP bearer and OAuth 2
  - Client credentials
  - Token URL: `/auth/v1/token`

Returns MCP traffic counts, verdicts and transferred bytes across the Edges the caller manages.

## Query parameters

- `bucket` 'TB_TIME_BUCKET_UNSPECIFIED' | 'TB_TIME_BUCKET_HOUR' | 'TB_TIME_BUCKET_DAY': The bucket field.
- `since` string, int64: The since field.
- `until` string, int64: The until field.

## Response `200`

Successful response

- C1ApiEdgeV1EdgeServiceGetEgressTrafficSummaryRollupResponse: The EdgeServiceGetEgressTrafficSummaryRollupResponse message.
  - `agentKindCounts` C1ApiEdgeV1AgentKindCount[], nullable: Distinct source_principal per source_principal_kind.
    - `count` string, int64: The count field.
    - `kind` string: The kind field.
  - `allowedEvents` string, uint64: The allowedEvents field.
  - `deniedEvents` string, uint64: The deniedEvents field.
  - `distinctAgentCount` string, uint64: The distinctAgentCount field.
  - `distinctDestinationCount` string, int64: uniqExact(dest_host) over the window, excluding empty dest_host.
  - `distinctToolCount` string, uint64: The distinctToolCount field.
  - `edgeCount` integer: Number of authorized Edges included. Zero means the caller manages no Edges, as distinct from Edges that have no traffic yet.
  - `fallbackAgentCount` string, int64: Distinct source_principal with at least one row whose verdict resolved via the fail-closed default rather than an explicit policy match.
  - `series` C1ApiEdgeV1TBTrafficSummaryBucket[], nullable: The series field.
    - `allowedEvents` string, uint64: The allowedEvents field.
    - `bucketStart` string, date-time, nullable
    - `deniedEvents` string, uint64: The deniedEvents field.
    - `unspecifiedEvents` string, uint64: The unspecifiedEvents field.
  - `totalEvents` string, uint64: The totalEvents field.
  - `totalRequestBytes` string, uint64: The totalRequestBytes field.
  - `totalResponseBytes` string, uint64: The totalResponseBytes field.
  - `unspecifiedEvents` string, uint64: The unspecifiedEvents field.

## Changes

- **2026-10-06** `918a4e749f56`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/edges/egress/traffic-summary/get.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) - [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conductorone/apis/c1-api/revisions/fe943bedf41b?raw)