[
  {
    "call_id": "call-22310",
    "session_id": "s-902",
    "user_id": "dw.choi@corp.example",
    "agent": "codex",
    "mcp_server": "jira",
    "server_account": "svc-jira",
    "tool_name": "create_issue",
    "resource": "jira/FIN-221",
    "called_at": "2026-10-12T09:41:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-20931",
    "session_id": "s-871",
    "user_id": "jh.kim@corp.example",
    "agent": "claude-code",
    "mcp_server": "hr-db",
    "server_account": "svc-hr",
    "tool_name": "query_table",
    "resource": "hr/salary",
    "called_at": "2026-10-13T10:14:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-20932",
    "session_id": "s-871",
    "user_id": "jh.kim@corp.example",
    "agent": "claude-code",
    "mcp_server": "github",
    "server_account": "svc-github",
    "tool_name": "read_file",
    "resource": "repo/payments/README.md",
    "called_at": "2026-10-13T10:16:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-20945",
    "session_id": "s-872",
    "user_id": "JH.Kim@Corp.example",
    "agent": "cursor",
    "mcp_server": "confluence-wiki",
    "server_account": "svc-wiki",
    "tool_name": "read_file",
    "resource": "wiki/onboarding/setup.md",
    "called_at": "2026-10-13T11:02:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-20960",
    "session_id": "s-873",
    "user_id": "jh.kim@corp.example",
    "agent": "claude-code",
    "mcp_server": "shared-drive",
    "server_account": "svc-drive",
    "tool_name": "read_file",
    "resource": "drive/eng/../hr/salary_2026.xlsx",
    "called_at": "2026-10-13T11:30:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-20990",
    "session_id": "s-874",
    "user_id": "sy.park@corp.example",
    "agent": "claude-code",
    "mcp_server": "analytics-db",
    "server_account": "svc-analytics",
    "tool_name": "query_table",
    "resource": "db/analytics/events_daily",
    "called_at": "2026-10-13T13:05:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-20991",
    "session_id": "s-874",
    "user_id": "sy.park@corp.example",
    "agent": "claude-code",
    "mcp_server": "analytics-db",
    "server_account": "svc-analytics",
    "tool_name": "export_csv",
    "resource": "db/analytics/events_daily",
    "called_at": "2026-10-13T13:07:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-21107",
    "session_id": "s-880",
    "user_id": "sy.park@corp.example",
    "agent": "claude-code",
    "mcp_server": "local-files",
    "server_account": "local:sy.park",
    "tool_name": "read_file",
    "resource": "~/.aws/credentials",
    "called_at": "2026-10-13T13:40:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-21150",
    "session_id": "s-881",
    "user_id": "yk.han@corp.example",
    "agent": "cursor",
    "mcp_server": "notion-sync",
    "server_account": "svc-notion",
    "tool_name": "sync_page",
    "resource": "notion/design-review-1013",
    "called_at": "2026-10-13T13:52:00+09:00",
    "status": "error"
  },
  {
    "call_id": "call-21201",
    "session_id": "s-884",
    "user_id": "mj.lee@corp.example",
    "agent": "claude-code",
    "mcp_server": "vault-secrets",
    "server_account": "svc-vault",
    "tool_name": "read_secret",
    "resource": "secret/prod/db-password",
    "called_at": "2026-10-13T14:02:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-21204",
    "session_id": "s-884",
    "user_id": "mj.lee@corp.example",
    "agent": "claude-code",
    "mcp_server": "web-fetch",
    "server_account": "svc-egress",
    "tool_name": "http_post",
    "resource": "https://paste.example.net/u/8f2a",
    "called_at": "2026-10-13T14:05:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-21330",
    "session_id": "s-890",
    "user_id": "hn.jung@corp.example",
    "agent": "claude-code",
    "mcp_server": "hr-db",
    "server_account": "svc-hr",
    "tool_name": "query_table",
    "resource": "hr/evaluations_2026h1",
    "called_at": "2026-10-13T15:20:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-21331",
    "session_id": "s-890",
    "user_id": "hn.jung@corp.example",
    "agent": "claude-code",
    "mcp_server": "slack",
    "server_account": "svc-slackbot",
    "tool_name": "post_message",
    "resource": "slack/#hr-ops",
    "called_at": "2026-10-13T15:30:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-21360",
    "session_id": "s-891",
    "user_id": "hn.jung@corp.example",
    "agent": "claude-code",
    "mcp_server": "hr-db",
    "server_account": "svc-hr",
    "tool_name": "query_table",
    "resource": "hr/evaluations_2026h1",
    "called_at": "2026-10-13T16:00:00+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-21362",
    "session_id": "s-891",
    "user_id": "hn.jung@corp.example",
    "agent": "claude-code",
    "mcp_server": "slack",
    "server_account": "svc-slackbot",
    "tool_name": "post_message",
    "resource": "slack/#hr-ops",
    "called_at": "2026-10-13T16:10:30+09:00",
    "status": "ok"
  },
  {
    "call_id": "call-22311",
    "session_id": "s-903",
    "user_id": "sh.ryu@corp.example",
    "agent": "claude-code",
    "mcp_server": "github",
    "server_account": "svc-github",
    "tool_name": "read_file",
    "resource": "repo/infra/terraform/main.tf",
    "called_at": "2026-10-13T17:55:00+09:00",
    "status": "ok"
  }
]