# mcp-server-logs-sieve

[![npm version](https://img.shields.io/npm/v/mcp-server-logs-sieve.svg)](https://www.npmjs.com/package/mcp-server-logs-sieve)
[![npm downloads](https://img.shields.io/npm/dm/mcp-server-logs-sieve.svg)](https://www.npmjs.com/package/mcp-server-logs-sieve)
[![CI](https://img.shields.io/github/actions/workflow/status/Oluwatunmise-olat/mcp-server-logs-sieve/ci.yml?label=CI)](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/actions/workflows/ci.yml)
[![license](https://img.shields.io/npm/l/mcp-server-logs-sieve.svg)](https://www.npmjs.com/package/mcp-server-logs-sieve)
[![mcp-server-logs-sieve MCP server](https://glama.ai/mcp/servers/Oluwatunmise-olat/mcp-server-logs-sieve/badges/score.svg)](https://glama.ai/mcp/servers/Oluwatunmise-olat/mcp-server-logs-sieve)
[![mcp-server-logs-sieve MCP server](https://glama.ai/mcp/servers/Oluwatunmise-olat/mcp-server-logs-sieve/badges/card.svg)](https://glama.ai/mcp/servers/Oluwatunmise-olat/mcp-server-logs-sieve)

`mcp-server-logs-sieve` is an MCP server that lets AI assistants query logs directly from your observability backend.

Ask debugging questions in plain language, and let Logs Sieve pull the exact logs and context for you.

## Why this exists

During incidents, a lot of time goes into repetitive steps:

- finding the right log source
- narrowing the time window
- spotting recurring failure patterns
- following one trace across services

Logs Sieve packages those workflows into four tools: `query_logs`, `summarize_logs`, `trace_request`, and `list_log_sources`.

## Supported providers

- Google Cloud Logging (`gcp`)
- AWS CloudWatch Logs (`aws`)
- Azure Monitor Logs (`azure`)
- Grafana Loki (`loki`)
- Elasticsearch (`elasticsearch`)

## Prerequisites

> **⚠️ Node.js 20 or above is required.**
>
> This package uses ES modules and dependencies that need Node.js 20+. If you see `ERR_MODULE_NOT_FOUND` errors, check your Node version with `node -v` and upgrade if needed.
>
> This applies whether you run via `npx`, install globally, or use from source.

## Quick MCP config

Example `.mcp.json`:

```json
{
  "mcpServers": {
    "logs-sieve": {
      "command": "npx",
      "args": ["-y", "mcp-server-logs-sieve@latest", "--provider", "gcp"]
    }
  }
}
```

If you are running from this repo source directly, you can still use `node ./bin/mcp-server-logs-sieve.js --provider gcp`.

**First-time setup:** On first use, `npx` needs to download and install the package (~40s). Claude Code may time out waiting for this. Run the following once in your terminal to prime the cache before adding it to your MCP config:

```bash
npx mcp-server-logs-sieve@latest --provider gcp
# (Ctrl+C once it starts — you just need the install to complete)
```

After that, Claude Code will start the server instantly from the npx cache.

After updating config, restart your MCP client and confirm with `/mcp`.

## Provider auth and env vars

See provider-specific setup and auth docs:

- [GCP](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/providers/gcp.md)
- [AWS](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/providers/aws.md)
- [Azure](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/providers/azure.md)
- [Loki](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/providers/loki.md)
- [Elasticsearch](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/providers/elasticsearch.md)

For Elasticsearch API compatibility headers:

```bash
export ELASTICSEARCH_COMPAT_VERSION=8
```

## CLI usage

The package also includes a CLI for direct terminal usage:

```bash
mcp-server-logs-sieve query --provider gcp --scope my-project --last 1h --filter "payment failed"
mcp-server-logs-sieve summarize --provider gcp --scope my-project --last 24h
mcp-server-logs-sieve trace --provider gcp --scope my-project --trace <trace-id>
mcp-server-logs-sieve sources --provider gcp --scope my-project
```

## Documentation

- [Docs home](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/index.md)
- [Getting started](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/getting-started.md)
- [MCP client setup (Claude Code, Claude Desktop, Cursor, Windsurf)](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/guides/mcp-clients.md)
- [Tool reference](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/tools/query-logs.md)
- [Troubleshooting](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/troubleshooting.md)
- [Compatibility matrix](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/docs/reference/compatibility.md)

## Contributing

Contributions are welcome.

- Start here: [CONTRIBUTING.md](https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/blob/main/CONTRIBUTING.md)
- Issues: <https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/issues>
- Discussions: <https://github.com/Oluwatunmise-olat/mcp-server-logs-sieve/discussions>