Called v3

{
  "action": "extension_connector.called",
  "actor": {
    "id": "01FCNDV6P870EA6S7TK1DSYDG0",
    "metadata": {
      "user_base_role_slug": "admin",
      "user_custom_role_slugs": "engineering,security"
    },
    "name": "John Doe",
    "type": "user"
  },
  "context": {
    "location": "1.2.3.4",
    "user_agent": "Chrome/91.0.4472.114"
  },
  "metadata": {
    "access_source": "policy",
    "class": "write",
    "incident_id": "01FCNDV6P870EA6S7TK1DSYDG0",
    "outcome": "denied",
    "reason": "denied_by_rule",
    "source_kind": "mcp",
    "surface": "chat",
    "telemetry_query_id": "01FCNDV6P870EA6S7TK1DSYDG0",
    "write": "true"
  },
  "occurred_at": "2021-08-17T13:28:57.801578Z",
  "targets": [
    {
      "id": "01FCNDV6P870EA6S7TK1DSYDG0",
      "name": "Acme Deploy",
      "type": "extension_connector"
    },
    {
      "id": "01FCNDV6P870EA6S7TK1DSYDG0",
      "name": "restart_service",
      "type": "extension_connector_tool"
    }
  ],
  "version": 3
}