Skip to main content
Glama
brbousnguar

mulewatch

by brbousnguar

What it does

mulewatch bridges an MCP client — Claude Desktop, Claude Code, Cursor, OpenClaw — to MuleSoft Anypoint Platform, so you can ask about a Mule estate in plain language and get real answers from the platform APIs. It is aimed at the person holding the pager, not the person writing the flow: no local Mule project is required, and every tool is read-only.

  • Application logs from Runtime Manager, normalized across CloudHub 2.0, Runtime Fabric and legacy CloudHub.

  • Historical log search through the Anypoint Monitoring Archive API, reaching incidents long past the live tail's rolling buffer.

  • Analysis-ready log payloads — normalized lines plus counts by priority, logger and replica.

  • Runtime Manager inventory across Application Manager, CloudHub and hybrid on-prem targets.

  • API Manager instances and Exchange assets, so a single server answers "what is deployed, what is it fronted by, and what broke".

Nothing is hardcoded to one customer: business groups, environments and credentials all come from your own connected app.

How this relates to the official MuleSoft MCP server

MuleSoft publishes its own MCP server (mulesoft-mcp-server, docs). It is a development tool — it scaffolds Mule projects, generates flows and API specs, and deploys applications, largely from a local project in an IDE.

mulewatch is an operations tool. It never writes to your estate, it assumes no local project, and it covers the one area the official server does not address at all: retrieving and searching application logs, including historical logs from the Monitoring Archive. The two run happily side by side, and if you want deployment or scaffolding tools, use the official one.

Related MCP server: LGTM MCP Server

Requirements

  • Node.js 20+

  • An Anypoint Platform account with access to the business group you want to read

  • A connected app (recommended) with "acts on its own behalf" enabled, or platform credentials

  • For historical log search only: Anypoint Monitoring enabled for the organization

Connected-app scopes

Grant the scopes for the surfaces you intend to use, on the business groups and environments you care about. Anypoint returns a bare 403 Forbidden when a scope is missing; mulewatch catches that and names the scope you probably need.

Surface

Scope

Environments, business groups

View Environments, View Organization

Runtime Manager apps and logs

Read Applications

Historical archive search

Anypoint Monitoring Viewer

API Manager instances

View APIs Configuration

Exchange assets

Exchange viewer access

Setup

Create a connected app in Anypoint Platform → Access Management → Connected Apps, choose "App acts on its own behalf (client credentials)", grant the scopes above, and copy the client id and secret.

Configuration is environment variables only — there is no config file and no organization default.

ANYPOINT_CLIENT_ID=your_connected_app_client_id
ANYPOINT_CLIENT_SECRET=your_connected_app_client_secret

Variable

Required

Purpose

ANYPOINT_CLIENT_ID / ANYPOINT_CLIENT_SECRET

one auth method

Connected app client credentials, preferred for automation

ANYPOINT_USERNAME / ANYPOINT_PASSWORD

one auth method

Platform login

ANYPOINT_ACCESS_TOKEN

one auth method

Pre-generated bearer token; takes precedence over the other two

ANYPOINT_ORG_ID

no

Business group id. Unset means "the organization the credentials belong to"

ANYPOINT_ALLOWED_ENVIRONMENTS

no

Comma-separated environment names or ids; when set, every tool refuses anything outside the list

ANYPOINT_BASE_URL

no

Control plane host, defaults to https://anypoint.mulesoft.com

ANYPOINT_MONITORING_BASE_URL

no

Monitoring host, defaults to https://monitoring.anypoint.mulesoft.com

Business groups

Environments live on business groups, not on the root organization. If anypoint_list_environments comes back empty, your credentials resolved to the root org — call anypoint_list_business_groups to list the ids, then pass one as orgId or pin it with ANYPOINT_ORG_ID.

Keeping production out of reach

ANYPOINT_ALLOWED_ENVIRONMENTS scopes the whole server, not one tool. With

ANYPOINT_ALLOWED_ENVIRONMENTS=Dev,Sandbox

every tool refuses an environment outside the list and says why, whichever business group is targeted. Combine it with a connected app that only has access to those environments for defence in depth.

Run

Nothing to install — point your MCP client at npx:

{
  "mcpServers": {
    "mulewatch": {
      "command": "npx",
      "args": ["-y", "mulewatch"],
      "env": {
        "ANYPOINT_CLIENT_ID": "your_connected_app_client_id",
        "ANYPOINT_CLIENT_SECRET": "your_connected_app_client_secret"
      }
    }
  }
}

That block works as-is in Claude Desktop (claude_desktop_config.json), Cursor (.cursor/mcp.json) and OpenClaw. For Claude Code:

claude mcp add mulewatch --env ANYPOINT_CLIENT_ID=... --env ANYPOINT_CLIENT_SECRET=... -- npx -y mulewatch

From a clone instead:

npm install
npm run build
npm start

The server speaks stdio, which is what MCP clients expect. Start with anypoint_whoami to confirm credentials, business group and scope before anything else.


Tools

Every tool is read-only. All of them accept orgId to override the configured business group.

anypoint_whoami

Confirms which credentials, business group, hosts and environment allowlist the server is running with. No arguments. Call this first when anything fails.

anypoint_list_business_groups

Lists the business groups beneath the credentials' organization, with ids and nesting depth.

{ "rootOrgId": "optional-root-organization-id" }

anypoint_list_environments

Lists environments for a business group, filtered by ANYPOINT_ALLOWED_ENVIRONMENTS when set.

{ "orgId": "your-business-group-id" }

anypoint_list_deployed_apps

Lists deployed Mule applications for an environment, by environmentId or environmentName.

{ "environmentName": "Dev", "target": "all" }

Option

Purpose

target

application_manager (default), cloudhub, hybrid, or all

limit

Maximum records to return, default 100

includeRaw

Include raw API objects in the response

includeErrors

Include per-target errors when a target endpoint is unavailable or not permitted

application_manager covers CloudHub 2.0 and Runtime Fabric deployments, cloudhub legacy CloudHub, hybrid on-prem Runtime Manager. all queries every target and reports per-target failures instead of aborting.

anypoint_list_app_logs

Lists the latest Runtime Manager logs for an application.

{ "environmentName": "Dev", "appName": "my-mule-app" }

Option

Purpose

environmentId

Use instead of environmentName

deploymentId

Use when the app name is ambiguous or already known

specId

A specific Application Manager deployment spec/config id

target

auto (default), application_manager, or cloudhub

limit

Maximum log entries, default 100, max 500

offset

Application Manager log offset, default 0

descending

Latest first, default true

startTime / endTime

Application Manager time filter, ISO 8601

includeRaw

Include the raw API response

includeErrors

Include failed target errors when target is auto

For CloudHub 2.0 and Runtime Fabric the tool resolves appName to a deployment, resolves the current spec, then reads that spec's logs. For legacy CloudHub it calls the CloudHub logs endpoint directly.

anypoint_get_app_logs_for_analysis

Same sources as above, but returns an analysis-ready payload rather than a raw list. Prefer it when diagnosing something.

{ "environmentName": "Dev", "appName": "my-mule-app", "limit": 200, "errorOnly": true }

Takes every option of anypoint_list_app_logs, plus:

Option

Purpose

searchTerms

Case-insensitive filters matched against timestamp, priority, message, logger, thread or instance

errorOnly

Only return ERROR and FATAL lines

The response carries analysis.totalFetched, analysis.totalMatched, analysis.priorityCounts, analysis.loggerCounts, analysis.instanceCounts and analysis.logs. Counts describe everything fetched; logs holds what matched.

anypoint_search_archived_logs

Searches historical logs through the Anypoint Monitoring Archive API, for dates beyond what the live tail can see.

This is the tool the others cannot replace. anypoint_list_app_logs and anypoint_get_app_logs_for_analysis read Runtime Manager's live tail — a small rolling buffer that can scroll out within minutes on a busy application, no matter what startTime/endTime you pass. The archive lands files roughly ten minutes after each ten-minute window closes and keeps them far longer.

Requires Anypoint Monitoring to be enabled for the organization. Without it every call 403s or 404s; fall back to a manual Download Logs export from the Runtime Manager UI.

{
  "environmentName": "Prod",
  "appName": "my-mule-app",
  "date": "2026-08-09",
  "searchTerms": ["Started product import", "Import finished"]
}

Option

Purpose

date

Required, YYYY-MM-DD (UTC)

endDate

Optional inclusive range end, YYYY-MM-DD (UTC), max 7 days total

searchTerms

Case-insensitive text filters

errorOnly

Only return ERROR and FATAL lines

maxEntities

Cap on replica entities probed during a full-scan fallback, default 150, max 300

maxFiles

Cap on archive files downloaded and parsed, default 100, max 500

limit

Cap on matched lines returned, default 500, max 2000

includeRaw

Include the raw parsed entry alongside the normalized fields

How it finds your logs. The Archive API indexes per replica/pod ({appName}_{replicaId}), not per application, so the replica has to be identified before anything can be read. mulewatch first tries the replica ids visible in the live Runtime Manager tail (entityResolution: "live-replica") — pods are usually long-lived between redeploys, so that same replica normally produced the logs on recent past dates too, and a typical lookup costs a handful of archive calls. If that replica has no files for the requested dates — the application was redeployed since, say — it falls back to listing every replica the app has ever had and probing each (entityResolution: "full-scan"), bounded by maxEntities.

The Archive API allows 60 requests/minute; the client throttles beneath that and backs off on 429. A full-scan fallback across many replicas can take a while, so narrow the date range where you can. The response reports which path was taken and whether any cap truncated the result.

anypoint_list_api_manager_instances

Lists API instances managed by API Manager in an environment.

{ "environmentName": "Dev", "assetId": "my-api" }

Option

Purpose

assetId

Filter by Exchange asset id

technology

Filter by technology, e.g. mule4, flexGateway

limit / offset

Pagination, default 100 / 0

includeRaw

Include raw API objects

anypoint_search_exchange_assets

Searches Anypoint Exchange for assets in the organization.

{ "search": "customer", "types": ["rest-api"], "limit": 20 }

Option

Purpose

search

Free-text search over asset names and descriptions

types

Filter by asset type, e.g. rest-api, connector, template, example

limit / offset

Pagination, default 50 / 0

includeRaw

Include raw API objects


Tech stack

Layer

Technology

Runtime

Node.js 20+, ES modules

Language

TypeScript 5.7, strict, compiled to dist/

Protocol

Model Context Protocol SDK 1.30, stdio transport

Validation

zod 4

Auth

Anypoint client_credentials token flow, username/password, or bearer token

Tests

node:test, no runner dependency

Repository layout

.
├── src/
│   ├── index.ts          # bin entry: config check, stdio wiring
│   ├── tools.ts          # MCP tool registration and argument schemas
│   ├── client.ts         # AnypointClient: auth, org resolution, all API calls
│   ├── config.ts         # env-var config, environment allowlist
│   ├── normalize.ts      # envelope unwrapping, log normalization, analysis
│   ├── archive-parse.ts  # archive log line parsing, date range enumeration
│   └── errors.ts         # AnypointApiError and message formatting
├── test/                 # unit tests for the pure logic
├── docs/logo.png         # project mark, used in this README
├── server.json           # MCP registry manifest
└── .env.example

Verification status

Read paths were exercised against a live Anypoint organization during development:

Tool

Status

anypoint_whoami

Verified live

anypoint_list_business_groups

Verified live

anypoint_list_environments

Verified live

anypoint_list_deployed_apps

Verified live (application_manager; cloudhub/hybrid targets not exercised)

anypoint_list_app_logs

Verified live (Application Manager path)

anypoint_get_app_logs_for_analysis

Verified live (Application Manager path)

anypoint_search_exchange_assets

Verified live

anypoint_search_archived_logs

Verified live — both the live-replica fast path and the full-scan fallback

anypoint_list_api_manager_instances

Not verified — the test connected app lacked the View APIs Configuration scope and the call returned 403

On the application used for that check, the archive held 669 historical replica entities. Searching the current day resolved through the live-replica fast path and probed one of them, finding 127 archive files and parsing 2,859 log lines. Searching a date from before the last redeploy correctly fell through to the full-scan path, which is the slow case the maxEntities cap exists to bound.

Notes

  • Every tool is read-only. There are no deploy, stop, restart or policy-mutation tools, by design — an LLM should not be mutating a production Mule estate, and the official MuleSoft server already covers deployment.

  • Tokens are cached in memory until a minute before expiry and never written to disk.

  • Credentials are read from the environment only; nothing is logged.

  • Anypoint returns bare 403s for missing connected-app scopes. Those are caught and annotated with the scope that is probably missing.

  • EU and other control planes work by overriding ANYPOINT_BASE_URL and ANYPOINT_MONITORING_BASE_URL.

License

Apache-2.0. MuleSoft, Anypoint Platform and CloudHub are trademarks of Salesforce, Inc.; this is an independent project and is not affiliated with or endorsed by Salesforce.


Available Tools

9 tools
anypoint_get_app_logs_for_analysisAnalyze application logsA

Fetch live-tail logs for a Mule application and return an analysis-ready payload: normalized lines plus counts by priority, logger and instance. Prefer this over anypoint_list_app_logs when diagnosing a problem.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum log entries, default 100, max 500.
orgIdNoBusiness group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization.
offsetNoApplication Manager log offset, default 0.
specIdNoSpecific Application Manager deployment spec/config id.
targetNoLog source. Defaults to auto, which tries Application Manager then CloudHub.
appNameYesDeployment/application name as shown in Runtime Manager.
endTimeNoApplication Manager time filter, ISO 8601.
errorOnlyNoOnly return ERROR and FATAL lines.
startTimeNoApplication Manager time filter, ISO 8601.
descendingNoReturn latest first, default true.
includeRawNoInclude the raw Anypoint API objects alongside the normalized fields.
searchTermsNoCase-insensitive filters matched against timestamp, priority, message, logger, thread or instance.
deploymentIdNoUse when the app name is ambiguous or already known.
environmentIdNoEnvironment id. Use instead of environmentName.
includeErrorsNoInclude failed target errors when target is auto.
environmentNameNoEnvironment name, e.g. 'Production'. Resolved to an id, must match exactly one.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden, and it does disclose meaningful traits: the logs are live-tail (not archived, implying ephemeral/non-historical data) and the response is an analysis-ready aggregate rather than raw entries. It still omits the read-only safety profile, permission requirements, and any latency or streaming caveats around live-tail fetching.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with zero filler; the capability and payload shape come first, then the routing preference. Nothing is repeated from the schema and every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully characterizes the return payload, and the rich parameter schema covers input details. It is nearly complete for a read tool of this complexity, though pagination/offset behavior on a live-tail stream and failure modes when no target is reachable are left unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% across 16 parameters, including defaults, ranges and enum values, so the schema already documents parameter meaning thoroughly. The description adds only indirect context (the priority/logger/instance fields that searchTerms match against), so the baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Fetch live-tail logs for a Mule application') and goes further by naming the shape of the returned payload (normalized lines plus counts by priority, logger and instance). It explicitly distinguishes itself from the sibling anypoint_list_app_logs, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear selection rule: 'Prefer this over anypoint_list_app_logs when diagnosing a problem.' It names the alternative and the condition that favors this tool. It stops short of stating when the sibling is the better choice (e.g., raw paginated log listing), so it is not fully bidirectional guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_list_api_manager_instancesList API Manager instancesB

List API instances managed by Anypoint API Manager in an environment, with their assets, endpoints and technology.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum records, default 100.
orgIdNoBusiness group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization.
offsetNoPagination offset, default 0.
assetIdNoFilter by Exchange asset id.
includeRawNoInclude the raw Anypoint API objects alongside the normalized fields.
technologyNoFilter by technology, e.g. mule4, flexGateway.
environmentIdNoEnvironment id. Use instead of environmentName.
environmentNameNoEnvironment name, e.g. 'Production'. Resolved to an id, must match exactly one.

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are supplied, so the description carries the full behavioral burden. It usefully discloses what comes back (assets, endpoints, technology) and, via the includeRaw parameter, that normalized fields are the default. However, it says nothing about pagination semantics, permission/credential requirements, or rate limits for what is implicitly a read-only list operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence that names the operation, the scope, and the return payload with no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only list tool with no annotations and no output schema, the description does the essential work of stating what is listed and roughly what is returned. It is nearly complete; pagination and environment-selection nuance are covered by the rich schema, so only minor context is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all eight parameters including defaults, filtering, and the environmentId/environmentName exclusivity. The description adds nothing about parameter behavior, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (List) and a precisely bounded resource (API instances managed by Anypoint API Manager), plus the scope (an environment) and the payload returned (assets, endpoints, technology). It is naturally distinct from siblings like anypoint_list_deployed_apps and anypoint_list_environments, though it never explicitly contrasts itself with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'in an environment' hints that environment scoping matters, but there is no explicit when-to-use guidance, no prerequisites, and no mention of when a caller should reach for this tool versus anypoint_list_deployed_apps or anypoint_search_exchange_assets. An agent gets no routing help from the text.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_list_app_logsList application logsA

List the latest Runtime Manager logs for a Mule application. This reads the live tail only — a small rolling buffer. For anything older than the buffer, use anypoint_search_archived_logs.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum log entries, default 100, max 500.
orgIdNoBusiness group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization.
offsetNoApplication Manager log offset, default 0.
specIdNoSpecific Application Manager deployment spec/config id.
targetNoLog source. Defaults to auto, which tries Application Manager then CloudHub.
appNameYesDeployment/application name as shown in Runtime Manager.
endTimeNoApplication Manager time filter, ISO 8601.
startTimeNoApplication Manager time filter, ISO 8601.
descendingNoReturn latest first, default true.
includeRawNoInclude the raw Anypoint API objects alongside the normalized fields.
deploymentIdNoUse when the app name is ambiguous or already known.
environmentIdNoEnvironment id. Use instead of environmentName.
includeErrorsNoInclude failed target errors when target is auto.
environmentNameNoEnvironment name, e.g. 'Production'. Resolved to an id, must match exactly one.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it does disclose the most consequential behavioral trait: results come from a bounded rolling buffer rather than full history. It omits other traits the agent would want — read-only nature (only implied by 'List'), rate/volume limits, and how the 'auto' target fallback behaves — but the buffer caveat is the key gotcha and it is stated plainly.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with zero filler; the scope limitation is front-loaded and the alternative is appended as the resolution. Nothing redundant with the name or title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 14-parameter tool with no annotations and no output schema, the description covers the essential conceptual gap (live tail vs. archive) but says nothing about output shape, pagination across offset/limit, or the behavior of the auto target fallback and includeErrors flag. Adequate, though an agent still infers a fair amount from the schema alone.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% across all 14 parameters, so the schema already explains limit, offset, target, time filters, environment resolution, and the rest. The description adds no parameter-level detail beyond what the schema provides, which is the expected baseline when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('List the latest Runtime Manager logs for a Mule application') and immediately bounds what 'logs' means here. It also names the sibling it is not (anypoint_search_archived_logs), so an agent can distinguish it from anypoint_get_app_logs_for_analysis and the archived-log tool without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly defines the operating window ('live tail only — a small rolling buffer') and states the exclusion condition plus the named alternative: 'For anything older than the buffer, use anypoint_search_archived_logs.' That is a direct when-to-use/when-not-to-use routing rule.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_list_business_groupsList business groupsA

List the business groups under the credentials' organization, with their ids. Environments live on business groups, not on the root organization — call this first if anypoint_list_environments returns nothing.

ParametersJSON Schema
NameRequiredDescriptionDefault
rootOrgIdNoRoot organization id. Defaults to the credentials' own organization.

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It does disclose a meaningful domain behavior (environments live on business groups, not the root organization) and that ids are returned, but it says nothing about auth/permission requirements, pagination, or the size/shape of the result set.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tightly written sentences with zero filler; the core purpose comes first and the fallback routing follows. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-optional-param, annotation-free read tool with no output schema, the description covers purpose, scope, defaulting behavior, and cross-tool routing. Remaining gaps (result size, pagination, permission needs) are minor given the tool's simplicity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and there is only one optional parameter (rootOrgId), whose default behavior is already documented in the schema. The description adds no syntax or format detail beyond the schema, so the 3 baseline applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('List the business groups') and scope ('under the credentials' organization'), plus notes the returned ids. It also implicitly separates itself from anypoint_list_environments by explaining that environments hang off business groups rather than the root org.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit conditional directive: 'call this first if anypoint_list_environments returns nothing,' naming the sibling tool and the failure condition that should route the agent here. This is exactly the when/when-alternative guidance the dimension asks for.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_list_deployed_appsList deployed applicationsB

List deployed Mule applications in an environment, across Application Manager (CloudHub 2.0 / Runtime Fabric), legacy CloudHub, and hybrid on-prem targets.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum records to return, default 100.
orgIdNoBusiness group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization.
targetNoDeployment target to query. Defaults to application_manager.
includeRawNoInclude the raw Anypoint API objects alongside the normalized fields.
environmentIdNoEnvironment id. Use instead of environmentName.
includeErrorsNoInclude per-target errors when a target endpoint is unavailable or not permitted.
environmentNameNoEnvironment name, e.g. 'Production'. Resolved to an id, must match exactly one.

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It usefully discloses that the tool federates across Application Manager, legacy CloudHub, and hybrid targets, which is real behavioral context not available in the schema, but it is silent on read-only nature, permission requirements, and empty-result behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence that names the resource first and then qualifies scope; every clause carries information and there is no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter list tool with no output schema and full schema coverage, the description is nearly complete. The only gap is the absence of any hint about the shape of the normalized results, which the schema cannot supply.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so every parameter (limit, target, orgId, environmentId/environmentName, includeRaw, includeErrors) is already documented. The description echoes the environment scoping and target variety but adds no syntax or precedence detail beyond the schema's baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (List) and resource (deployed Mule applications), and scopes them to an environment across three target families. It does not name or contrast any sibling tool, so an agent must infer how it differs from anypoint_list_app_logs or anypoint_list_environments.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance, no exclusions, and no alternative tools mentioned. The phrase 'in an environment' hints that an environment parameter is expected, but the description never states the condition that selects this tool over its siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_list_environmentsList environmentsA

List the Anypoint environments in a business group. If this returns nothing, the orgId is probably the root organization — call anypoint_list_business_groups to find the right id. Restricted to ANYPOINT_ALLOWED_ENVIRONMENTS when that is set.

ParametersJSON Schema
NameRequiredDescriptionDefault
orgIdNoBusiness group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization.

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full disclosure burden, and it does add real behavior: output may be filtered by the ANYPOINT_ALLOWED_ENVIRONMENTS setting, and an empty result has a specific diagnostic meaning (root org) rather than 'no data'. It still omits pagination and permission/auth requirements, so it is not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the core action, followed by the empty-result remedy and the filtering caveat. No filler and nothing redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single optional-parameter list tool with no output schema, the description covers the action, the result caveat, the fallback path, and the filtering constraint. An agent has everything needed to call it correctly and interpret an empty response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the schema already documents the orgId default chain (ANYPOINT_ORG_ID, then credentials' organization). The description only echoes the 'business group' framing and adds the root-org troubleshooting hint, so it does not meaningfully extend parameter meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource with scope: 'List the Anypoint environments in a business group.' That is concrete enough for an agent to act on immediately. It does not explicitly contrast itself with the sibling listing tools, though it does route to anypoint_list_business_groups for a specific failure mode.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit conditional path: if the call returns nothing, the orgId is likely the root organization and the agent should call anypoint_list_business_groups instead. It also flags that results are restricted when ANYPOINT_ALLOWED_ENVIRONMENTS is set, which tells the agent when a partial list is expected rather than a bug.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_search_archived_logsSearch archived logsA

Search historical Mule application logs via the Anypoint Monitoring Archive API, for dates beyond the live tail's rolling buffer. Requires Anypoint Monitoring to be enabled for the organization. Use this for any past-date incident investigation.

ParametersJSON Schema
NameRequiredDescriptionDefault
dateYesRequired date to search, YYYY-MM-DD (UTC).
limitNoCap on matched lines returned, default 500.
orgIdNoBusiness group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization.
appNameYesDeployment name, must match the Runtime Manager name exactly.
endDateNoInclusive range end, YYYY-MM-DD (UTC). Max 7 days total.
maxFilesNoCap on archive files downloaded and parsed, default 100.
errorOnlyNoOnly return ERROR and FATAL lines.
includeRawNoInclude the raw Anypoint API objects alongside the normalized fields.
maxEntitiesNoCap on replica entities probed during a full-scan fallback, default 150.
searchTermsNoCase-insensitive text filters.
environmentIdNoEnvironment id. Use instead of environmentName.
environmentNameNoEnvironment name, e.g. 'Production'. Resolved to an id, must match exactly one.

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It usefully discloses the enabling prerequisite, but says nothing about read-only nature, authorization failures when Monitoring is disabled, throttling, or the archive-file download/parse cost implied by maxFiles/maxEntities. Prerequisite disclosure is real added value, but the behavioral picture is incomplete.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with no filler; the API/purpose leads, the prerequisite follows, and the use case closes. Nothing is repeated from the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 12-parameter tool with no output schema and no annotations, the description covers purpose, scope boundary, prerequisite, and intended use case adequately. It could do slightly more on fallback behavior (full-scan replica probing) and return shape, but the essential calling context is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and every parameter (date range, limit, maxFiles, maxEntities, errorOnly, environment resolution) is already documented in the schema. The description adds no parameter-level meaning beyond it, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (search) and resource (historical Mule application logs) and names the underlying API. It also distinguishes itself from sibling log tools by scope ('dates beyond the live tail's rolling buffer'), so an agent can separate it from anypoint_list_app_logs without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear context ('for dates beyond the live tail's rolling buffer', 'past-date incident investigation') and states a prerequisite (Anypoint Monitoring enabled). It doesn't explicitly name the sibling to use for live/near-real-time logs, leaving that routing to inference, which keeps it short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_search_exchange_assetsSearch Exchange assetsC

Search Anypoint Exchange for assets in the organization — APIs, connectors, templates, examples and fragments.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum records, default 50.
orgIdNoBusiness group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization.
typesNoFilter by asset type, e.g. rest-api, connector, template, example.
offsetNoPagination offset, default 0.
searchNoFree-text search over asset names and descriptions.
includeRawNoInclude the raw Anypoint API objects alongside the normalized fields.

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure, and it says nothing about read-only safety, authentication/organization scoping, or rate limits. It also adds no return-shape or pagination behavior beyond what the schema already documents for limit/offset. The implicit read-only nature of 'search' is the only signal.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single efficient sentence with the verb and resource front-loaded and the covered asset types listed as a scannable clause. Nothing is wasted, though the sentence is short enough that it leaves obvious gaps unfilled rather than being maximally informative.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With six optional parameters, 100% schema coverage, and no output schema, the description is adequate but minimal. It does not describe what the returned assets look like or how search interacts with the types filter, so an agent gets no help on result interpretation beyond the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all six parameters are already documented in the schema (limit, orgId, types, offset, search, includeRaw). The description reinforces the types filter by naming asset kinds, but adds no format or syntax detail beyond the schema. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb (Search) and resource (Anypoint Exchange assets), and enumerates the asset kinds covered (APIs, connectors, templates, examples, fragments). It is instantly distinguishable from the sibling tools, which all target different resources (environments, apps, logs, business groups). No explicit sibling routing is needed because none of them overlap.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance, no prerequisites, and no mention of alternatives or when not to use it. That you would call it to find assets is only implied by the verb. For a search tool this leaves the agent to infer scoping and pagination strategy on its own.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

anypoint_whoamiCheck Anypoint connectionA

Verify the configured Anypoint credentials and show which business group, host and environment allowlist this server is operating with. Use this first when a call fails.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it does distinguish itself as a verification/inspection read rather than a mutation and frames itself as a troubleshooting entry point. It omits whether verification fails hard on bad credentials and what the output looks like, which is a minor gap given zero parameters.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tightly written sentences with no filler. The identity/verification purpose comes first and the troubleshooting cue is placed last as the actionable instruction.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although there is no output schema, the description enumerates the fields it surfaces (business group, host, environment allowlist), which is enough for an agent to know what it gets back. Only the failure semantics of a bad-credential check are unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes no parameters, so there is nothing to disambiguate; baseline is 4. The description correctly indicates the results are derived from server-side configuration rather than caller-supplied input.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description pairs specific verbs (verify, show) with concrete resources (Anypoint credentials, business group, host, environment allowlist), going well beyond the name 'whoami'. It is clearly a diagnostic/identity tool, which cleanly separates it from the list_* siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit triggering condition: 'Use this first when a call fails.' That is real when-to-use guidance. It stops short of naming alternatives or stating when not to use it, but no sibling serves the same diagnostic purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 9 tool updatesv0.1.1
    • First observedanypoint_get_app_logs_for_analysis
    • First observedanypoint_list_api_manager_instances
    • First observedanypoint_list_app_logs
    • First observedanypoint_list_business_groups
    • First observedanypoint_list_deployed_apps
    • First observedanypoint_list_environments
    • First observedanypoint_search_archived_logs
    • First observedanypoint_search_exchange_assets
    • First observedanypoint_whoami

TDQS

A3.8/5.0

Scored across 9 tools

Disambiguation4/5

Most tools target a clearly distinct resource (environments, business groups, deployed apps, API instances, exchange assets). The only real overlap is anypoint_list_app_logs vs anypoint_get_app_logs_for_analysis, which both read the live tail, but the descriptions explicitly differentiate them and recommend the analysis variant for diagnosis.

Naming Consistency5/5

All nine tools follow a strict anypoint_verb_noun pattern (list_environments, get_app_logs_for_analysis, search_archived_logs, etc.). The prefix is uniform and verb choice (list/get/search) is used predictably.

Tool Count5/5

Nine tools is well within the sweet spot for an observability/management server. Each tool maps to a distinct Anypoint concern (org topology, apps, logs, API manager, exchange) so nothing feels padded.

Completeness4/5

The surface covers topology discovery, app listing, live and archived logs, API instances, and Exchange assets — a solid monitoring story. Minor gaps remain: no single-app detail/health/metrics lookup and only list-style access for apps, but agents can work around these with the existing calls.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables natural-language investigation of Datadog data including logs, metrics, monitors, traces, hosts, dashboards, events, and incidents, all through read-only API access.
    2,145 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides read-only access to Loki, Prometheus, and Tempo APIs, enabling natural language queries for logs, metrics, and traces. Supports multiple instances and authentication via bearer tokens.
    1
    MIT