Skip to main content
Glama
deslicer

MCP Server for Splunk

by deslicer

Workflow Builder

workflow_builder

Creates, edits, validates, and generates templates for custom Splunk troubleshooting workflows. Use it to build well-structured, dependency-checked workflow definitions.

Instructions

Interactive tool for creating, editing, and validating custom workflows.

This tool provides comprehensive workflow development capabilities for creating custom troubleshooting workflows that integrate with the MCP Server for Splunk dynamic troubleshooting system. It supports multiple modes of operation to accommodate different workflow development needs.

Modes:

  • create: Interactive workflow creation with guided prompts

  • edit: Modify existing workflow definitions with validation

  • validate: Comprehensive validation of workflow structure and dependencies

  • template: Generate pre-built workflow templates for common use cases

  • process: Process and validate finished workflow definitions

Key Capabilities:

  • Step-by-step workflow creation with validation

  • Template generation for common workflow patterns

  • Comprehensive validation including dependency analysis

  • JSON output generation with proper formatting

  • Integration testing and compatibility verification

  • Processing of complete workflow definitions

Validation Features:

  • Schema compliance verification

  • Circular dependency detection

  • Tool availability checking

  • Context variable validation

  • Integration compatibility assessment

When to use

  • Use to create new workflows from templates or from scratch

  • Use to edit or validate an existing workflow JSON before contributing or running it

  • Use to generate templates and examples for standard categories (security, performance, data quality)

Arguments

  • mode (optional): "create", "edit", "validate", "template", or "process" (default: "create")

  • workflow_data (optional): JSON string or object when editing/validating/processing

  • template_type (optional): Template key when mode="template" (e.g., "minimal", "security")

  • file_path (optional): Path to workflow file when mode="validate"

Outputs

  • Structured results including validation summaries, templates, or processed workflow data

  • Ready-to-validate workflow JSON for discovery via list_workflows

Perfect for workflow contributors who need guided assistance in creating well-structured, validated workflows for contrib or core catalogs.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
modeNocreate
file_pathNo
template_typeNominimal
workflow_dataNo
Install Server

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the burden. It does disclose key behaviors: multiple modes, interactive creation, validation features (dependency analysis, circular detection), JSON output generation. However, it lacks specifics about side effects (e.g., does 'edit' modify in-place or return new JSON? does 'validate' require file system access?), authentication needs, and the exact output structure. The description adds moderate context beyond the bare schema, but leaves ambiguity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections: Modes, Key Capabilities, Validation Features, When to use, Arguments, Outputs. Each section is concise and scannable. Sentences are direct and without fluff. It front-loads the core purpose and then details specifics. Length is appropriate for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (5 modes, 4 mixed parameters, no annotations, no output schema), the description covers the main dimensions: modes, capabilities, validation features, usage guidance, and parameter semantics. It doesn't specify exact response format or error handling, but the 'Outputs' section gives a general idea. The description is sufficient for an agent to understand what the tool does and when to invoke it, though edge cases (e.g., what if mode=edit without workflow_data?) are not clarified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides minimal info with 0% description coverage in schema. The description compensates reasonably by explaining each parameter: mode lists allowed values, workflow_data for editing/validating/processing, template_type for template mode, file_path for validate mode. It adds meaning ('JSON string or object'), but doesn't provide format details, allowed modes enum (though lists them in prose), or examples. Since schema coverage is low, the description's per-parameter details are valuable, hence a 3 rather than 2.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: an interactive tool for creating, editing, and validating custom workflows. It explicitly lists various modes and capabilities, and distinguishes itself from siblings by focusing on workflow construction rather than execution. The verb 'create/edit/validate' plus resource 'custom workflows' is specific, though it bundles multiple operations which slightly dulls clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a 'When to use' section with explicit use cases such as creating new workflows, editing/validating before contributing, and generating templates. It doesn't explicitly state when NOT to use it, but the sibling tools (e.g., list_workflows for discovery, run_splunk_search for execution) imply clear boundaries. The several 'use to' bullets are helpful.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/deslicer/mcp-for-splunk'

If you have feedback or need assistance with the MCP directory API, please join our Discord server