---
title: "Export the MCP disclosure log for your organization."
method: GET
path: "/internal/api/mcp/disclosures"
tags: ["MCP CONNECTOR"]
---

# Export the MCP disclosure log for your organization.

`GET /internal/api/mcp/disclosures`

## Request

- Base URL: `https://api.signalshq.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.signalshq.io/internal/api/mcp/disclosures`
- Auth: OAuth 2
  - Password
  - Token URL: `/auth/login`

Answer "who looked at this return, and what were they told?".

Under §7216 the disclosure is the regulated event, so this is the
compliance artifact — self-service on purpose, because a firm should
not need a support ticket to answer a taxpayer.

Pass ``client_id`` for the taxpayer's own question. Results are
tenant-scoped unconditionally: an export is one firm's record of its
own disclosures, and a missing predicate here would turn the
compliance artifact into the leak it exists to prevent.

## Query parameters

- `client_id` string, uuid, nullable
- `limit` integer

## Response `200`

Successful Response

- DisclosureListResponse
  - `records` DisclosureRecord[]
    - `occurred_at` string, date-time, required
    - `tool` string, required
    - `actor` string, required: 'service:<id>' for an organization credential, 'user:<id>' for a named CPA. A shared connector credential CANNOT be attributed to a person, and this prefix keeps an audit from reading it as though it could.
    - `api_key_id` string, nullable
    - `client_id` string, uuid, nullable
    - `tax_year` integer, nullable
    - `question_text` string, nullable
    - `outcome` string, required: ok | denied | not_found | clarification | timeout | error. Denied attempts are recorded on purpose — an attempt to reach a return is a fact a reviewer wants.
    - `elapsed_ms` integer, nullable
    - `correlation_id` string, nullable
  - `truncated` boolean: More records exist than were returned. NEVER present a truncated export as a complete disclosure history.

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/signalshq/apis/signals-api.md) - [All operations](https://skmtc.dev/signalshq/apis/signals-api/llms.txt) - [OpenAPI document](https://skmtc.dev/signalshq/apis/signals-api/revisions/2c22af3b5576?raw)