Log file viewer, search, and background process management tools
The server provides 11 tools with reasonable naming and input schemas, but suffers from inconsistent description quality, missing output schema documentation, and gaps in error handling guidance. Tool names follow verb-noun convention (log_tail, log_search, log_run) which aids discoverability. All tools have input schemas with type definitions and parameter descriptions. However, descriptions vary widely in quality and depth, some are clear ('Read the last N lines of a log file') while others are vague ('Return a snapshot') or lack context about side effects. No tools document their output structure, which forces LLMs to guess what fields they'll receive. Error handling is minimal, no recovery guidance, no actionable error messages, and no distinction between retryable vs fatal errors. The log_run family (run, status, output, kill, restart) exhibits good composition and naming clarity, but lacks documentation around process lifecycle guarantees (e.g., how long output is buffered, what happens on restart). Security considerations (path traversal, command injection) are absent from descriptions, despite log_run accepting shell commands.
List log files in a directory or common log locations
Parse a log file using json, syslog, or auto-detection format
Run a shell command in the background and capture its output for live viewing
Kill a running background process by ID (SIGTERM then SIGKILL after 3s)
List all tracked background processes with their status
Get captured output from a background process (last N lines or filtered by regex)
Kill and re-run a background process with the same command and working directory
Output schemas are completely undocumented. No tool describes what fields the response will contain, forcing LLMs to infer structure from output alone.
Error handling lacks recovery guidance. No tool description explains what to do if it fails, which error codes are retryable, or what the agent should try next.
log_run accepts arbitrary shell commands without documenting security constraints (injection risk, available binaries, working directory limits). No mention of sandboxing or safety guardrails.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-22 | D | 56 | 2026-07-28+ | v2 |
| 2026-03-09 | D | 59 | - | v1 |
Check the status of a background process (running/finished/failed, PID, uptime, last N lines)
Search a log file for lines matching a regular expression, with optional context lines
Read the last N lines of a log file
Return a snapshot of the last N lines of a log file (streaming not supported)
Descriptions of log_watch and log_run are imprecise. 'Return a snapshot' (log_watch) and 'Run a shell command in the background' (log_run) lack detail about what distinguishes them from similar tools or what state they manage.
Process lifecycle not documented. log_run family does not explain: how long output is buffered, what happens to running processes on server restart, whether process IDs are stable across server reboots, or when processes are auto-cleaned.
log_parse enum constraint is well-formed, but description does not explain when to use 'auto' detection vs explicit format, or what parse failures look like.
log_list_sources description ('List log files in a directory...') omits what 'common log locations' are, preventing users from predicting behavior when directory is omitted.