Skip to main content
Glama
ExQA
by ExQA

query_live_capture_entries

Filter and inspect live HTTP traffic captured by Charles Proxy. Apply structured summary-first queries to find entries by method, status, host, path, body content, or time window.

Instructions

Analyze the active live capture with structured summary-first filtering. This is the RECOMMENDED tool for inspecting live / ongoing traffic. Prefer this over query_recorded_traffic / analyze_recorded_traffic unless the user explicitly names a saved recording (.chlsj). Use this summary path before calling get_traffic_entry_detail. Does NOT advance the cursor — safe to call repeatedly with different filters. Default cursor=0 scans all captured data from the beginning. Use get_traffic_entry_detail to drill down into a specific entry_id.

Pass since_seconds=N to look only at traffic captured in the last N seconds (relative to "now" at query time). This is the preferred shortcut when the user asks for "just now / recent" traffic and removes the need to thread the cursor through follow-up calls.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
cursorNo
presetNoapi_focus
max_itemsNo
method_inNo
status_inNo
capture_idYes
scan_limitNo
host_containsNo
path_containsNo
since_secondsNo
max_preview_charsNo
resource_class_inNo
min_priority_scoreNo
request_json_queryNo
request_header_nameNo
response_json_queryNo
include_body_previewNo
max_headers_per_sideNo
request_content_typeNo
response_header_nameNo
request_body_containsNo
response_content_typeNo
response_body_containsNo
request_header_value_containsNo
response_header_value_containsNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
itemsNo
sourceYes
warningsNo
truncatedNo
next_cursorNo
total_itemsNo
matched_countNo
scanned_countNo
filtered_out_countNo
filtered_out_by_classNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the behavioral disclosure burden and does so well: it states the tool does NOT advance the cursor, is safe to call repeatedly, defaults cursor=0 to scan from the beginning, and defines since_seconds as relative to query time. It does not cover every possible behavioral nuance, but the non-mutating, stateless nature is clearly conveyed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is longer than average but earns its length by front-loading the recommended usage and providing routing and cursor semantics. The get_traffic_entry_detail pointer appears twice in slightly different forms, which is a minor redundancy. Overall it remains well-structured and readable for the complexity involved.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers tool selection, cursor safety, and the recent-traffic shortcut, which is enough for basic correct use. However, with 25 parameters, no annotations, and no parameter-level descriptions in the schema, the high-level guidance is not sufficient for an agent to confidently use advanced filters or presets. An output schema exists, but that does not compensate for the underdocumented input semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate; it only explains cursor and since_seconds. The remaining 23 parameters, including preset, scan_limit, max_items, min_priority_score, and the JSON query filters, are left to be inferred from their names and enum values. This is a significant gap for a 25-parameter tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Analyze') and resource ('active live capture'), and explicitly frames the tool as the recommended way to inspect live/ongoing traffic. It clearly distinguishes itself from query_recorded_traffic and analyze_recorded_traffic, and positions itself as a summary layer before get_traffic_entry_detail. An agent can confidently tell what this tool is for and how it differs from siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use guidance: prefer this for live/ongoing traffic, use recorded-analysis tools only when the user names a saved .chlsj recording. It also instructs to call this summary path before get_traffic_entry_detail, and recommends since_seconds for 'just now / recent' queries. This is exemplary routing guidance with named alternatives and conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.