Skip to main content
Glama

Recent changes before an incident

get_recent_changes
Read-only

What changed on a monitor before a moment (default: the outage start) and shortly after: audit-log changes to the monitor and to its escalation policies (regions, URL, timeout, pause / resume..., with who made them; needs the owner or admin role and the plan that includes the Audit Log, like the Audit Log page), maintenance windows that started or ended, alert mutes, earlier outages and latency / error-rate anomalies of the same monitor, SSL certificate replaced or erroring; plus the state: maintenance in progress at that moment, paused now, the current SSL certificate's validity (and since when it is served), domain registration expiry. Window: before_minutes (default 360 = 6 h) before to after_minutes (default 30) after; 7 days at most. Up to 60 items, newest first: at (UTC), rel_min (minutes relative to the moment, negative = before), kind, actor when known, one-line summary. Also counts the project's other audit-log changes of the window by action. Pass outage_uuid ("outage_…" or "INC-12"), or monitor_uuid with an optional at.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
atNoThe moment: ISO 8601 or epoch ms. Default: the outage start, else now.
outage_uuidNoOutage ("outage_…" or "INC-12"); the moment defaults to its start.
monitor_uuidNoMonitor ("mon_…") when there is no outage.
after_minutesNoMinutes after the moment. Default 30.
before_minutesNoMinutes before the moment. Default 360.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only cover readOnlyHint/openWorldHint, but the description goes far beyond: it discloses the required role and plan, the window limits ('7 days at most', up to 60 items), sort order (newest first), and the returned fields (at, rel_min, kind, actor, one-line summary) plus an aggregate count by action. This is exactly the behavioral context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Content is information-dense with little outright waste and the core purpose is front-loaded, but it is delivered as a single run-on block stuffed with semicolon-separated lists. The return shape, constraints, and prerequisites would be far more scannable as separate sentences; structure is a real weakness here.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex investigative tool with no output schema, the description covers prerequisites, the input window semantics, output cardinality and fields, and the ancillary aggregate. An agent has everything it needs to call it correctly and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema coverage the baseline is 3, but the description adds a genuine constraint not expressible per-field: the combined window is capped at '7 days at most', and it clarifies the moment-resolution chain ('default: the outage start, else now') that spans multiple params. Defaults are largely restated from the schema, which keeps this from a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a precise verb+resource: 'What changed on a monitor before a moment' with an enumerated set of change categories (audit log, maintenance windows, mutes, prior outages, SSL, domain). This is clearly distinguishable from siblings like list_audit_log (project-wide) and get_outage_timeline, so an agent can tell what this returns without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides strong context for when to reach for it (pre-incident investigation, correlated to an outage or monitor) plus an explicit prerequisite: 'needs the owner or admin role and the plan that includes the Audit Log.' However, it never names alternatives (e.g., list_audit_log, find_correlated_outages) or states when NOT to use it, so routing to a sibling is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.