logging-and-observability
Installation
SKILL.md
Logging and Observability for MCP Servers
Security Requirement
MCP servers MUST implement comprehensive, centralized, structured logging. This is vital for auditing, troubleshooting, and detecting security incidents.
Centralized and Structured Logging
| Requirement | Details |
|---|---|
| Format | JSON or other structured format (not unstructured text) |
| Destination | MCP servers must be capable of sending logs to a central system (e.g., OpenShift logging stack, ELK, Splunk) |
| Protocol | Standard log shipping (syslog, OTLP, Fluentd, or equivalent) |
| Configurable | Deployers must be able to configure the log destination |
Audit Trail Requirements
Logs MUST capture enough detail to reconstruct a security incident: