MCP server for searching Sumo Logic logs, detecting issues, generating reports, and querying Kubernetes metrics
Tools have basic verb-prefixed naming (list_, search_, get_, detect_), clear high-level descriptions (160-190 chars on average), and complete input schemas with parameter descriptions. However, there are significant gaps in documentation completeness, output schema documentation, error handling guidance, and several parameter descriptions are generic or missing detail. No tool descriptions explain WHEN to use them vs. similar tools, no dependency hints between tools, no documented output schemas, and error handling is minimal. This server sits at the median quality baseline, functional but missing production-grade polish.
Detect and analyze issues including error spikes, anomalies, and performance degradation
Query infrastructure metrics (CPU, memory, etc.) for a namespace
Retrieve performance metrics including latency, throughput, error rates, and endpoint performance
List and filter log entries from Sumo Logic
List available Sumo Logic regions with configuration details
Search logs across all production regions simultaneously
Search logs in a specific Kubernetes cluster
No documented output schemas. Tools return data but LLMs cannot understand the structure of responses (field names, types, nesting). This forces LLMs to guess at response structure and causes downstream tool selection errors when chaining results.
No error handling guidance. Tools likely return HTTP errors (400, 401, 500) but do not include recovery hints. E.g., 'Invalid region' should suggest 'Call list_regions() first to see available regions', not a bare 400. Agents cannot self-correct.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-22 | C | 63 | <=2025-11-25 | v2 |
| 2026-03-09 | F | 27 | - | v1 |
Search Sumo Logic logs using a custom query string
Generate a summary of logs including log level distribution and error analysis
Tool descriptions lack WHEN-to-use guidance. 'search_sumologic' vs 'search_by_cluster' vs 'search_all_prod_regions' are all search tools, descriptions do not explain which to use when. LLMs will guess and often pick the wrong one.
Multiple metrics tools with overlapping responsibility: 'get_metrics' (infrastructure metrics), 'get_performance_metrics' (latency/throughput/errors), and 'detect_issues' (anomalies). Descriptions do not clarify boundaries, LLMs will not know which to call for 'CPU usage' vs 'endpoint latency'.
Parameter descriptions are generic. 'from' and 'to' parameters say 'Start time' and 'End time' but do not document format (ISO 8601 required? relative times allowed?). Constraint is buried in description as '(ISO 8601 or relative like -15m)', should be in a formal pattern/enum.
No pagination guidance. Tools likely return large result sets (logs, metrics, issues) but do not advertise limit, offset, or cursor support in schema. Without pagination, results can blow context window. Search tools should document max result size and next-page mechanism.
No tool composition guidance. Response from search_sumologic or search_by_cluster should return IDs or references needed to call downstream tools (e.g., if detecting issues, return issue_id for further analysis), but schema is not visible. This breaks tool chaining.