list_sources
List every configured source and its type, and report whether each is reachable. Takes no required parameters. Start here to confirm connectivity before triaging.
get_log_files
Enumerate the log files a source exposes. Parameters: source (required) - the named connection; optional path / glob to narrow the listing. Returns file names with sizes and modified times.
tail_log
Return the last lines of a log file (bounded). Parameters: source (required), file (required) - the log path; optional lines (default up to 2000, capped) and a byte cap (default 256 KiB). Output is redacted.
search_logs
Search one or more log files for a pattern. Parameters: source (required), query / pattern (required), optional file or glob, and optional caps on matches and context lines. Results are bounded and redacted.
get_errors
Extract error-level and warning lines (and stack traces) from a source's logs without hand-writing a query. Parameters: source (required), optional file, time window, and result cap. A fast first pass for triage.
get_server_status
Report the health and reachability of a source's host/log backend - for example SSH connectivity and log directory availability for a linux-ssh source. Parameters: source (required).
watch_log
Watch a log for new lines over a bounded window (a snapshot-style follow rather than an open-ended stream). Parameters: source (required), file (required), optional duration/poll and line/byte caps. Output is redacted.
assess_logs
Hand the model a reduced, structured view of a source's recent logs so it can summarize what is happening, surface likely errors and patterns, and suggest root causes. Parameters: source (required), optional file, time window, and focus hints. This is the "model assesses" step of the server-reduces / model-assesses split.
scan_secret_exposure
Scan logs for exposed secrets, credentials, tokens, emails, card numbers, and JWTs - reporting where exposures occur while keeping the values masked. Parameters: source (required), optional file or glob and result cap. Useful for catching secrets that should never have been logged.
emit_finding
Record a structured triage finding (severity, source, affected file/lines, summary) so results can be collected and acted on. Parameters typically include source, a severity, and a summary / detail payload describing the issue.