MCP server for querying logs from Chronosphere using the logs API
Single tool with basic schema and description. Tool name 'query_logs' is appropriately verb-noun formatted. Description exists but lacks critical context: no mention of prerequisites (API token setup), when to use vs alternatives, or what the return structure contains. Parameter descriptions are present but generic, 'The log query string' doesn't explain syntax, constraints, or examples. Schema includes types but lacks enums, patterns, or min/max constraints. No output schema documented. Error handling is minimal: TimeoutError and ValueError are raised but provide no recovery guidance. The tool accepts both explicit timestamps and simple_time_range with precedence rules, but this dependency is buried in the docstring rather than clearly documented in parameter descriptions. No pagination guidance despite the page_token parameter suggesting multi-page results.
Query logs from Chronosphere using the logs API. Args: query: The log query string start_time: Start time for the query range e.g. 2025-05-08T18:08:35.000Z end_time: End time for the query range e.g. 2025-05-08T18:20:35.000Z page_token: Next page token for the query. If provided, the query will continue from the next page. simple_time_range: Simple time range for the query range e.g. 1h, 1d, 1w, 1m, 1y. This takes precedence over start_time and end_time, if provided. Returns: Dict containing the query results
Output schema not documented. Tool returns 'Dict containing the query results' with no field definitions. LLM cannot plan downstream operations or extract specific fields.
Parameter descriptions lack actionable constraints. 'The log query string' does not explain syntax, valid operators, or examples. 'Start time for the query range e.g. 2025-05-08T18:08:35.000Z' includes an example value that LLMs may reuse literally rather than adapting to context.
Mutually exclusive parameters (start_time/end_time vs simple_time_range) not clearly documented. Precedence rule buried in docstring; parameter descriptions do not state 'simple_time_range takes precedence' or mark one as optional.
Error handling provides no recovery guidance. TimeoutError and ValueError are raised but do not tell the LLM what to do next (retry? adjust query? check API token?).
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 41 | <=2025-11-25 | v2 |
Tool description lacks prerequisites and context. Does not mention CHRONOSPHERE_API_TOKEN environment variable requirement, API domain hardcoding, or when to call this tool vs alternatives.