Log

io.github.rog0xPublished by GitHub account rog0xv1.0.2Updated Oct 25, 2026

Log parse, filter, analyze for AI agents

VerifiedSTDIODesktop onlyDeveloper ToolsData & Analytics

Overview

AI-generated overview

A local MCP server that lets an AI assistant parse, filter, analyze, format and summarize log files in common formats such as JSON, Apache/Nginx, syslog and CSV

What you can do
Parse log content in JSON, Apache/Nginx, syslog and structured formats, or with custom regex patterns using named capture groups, extracting timestamp, level, message and source fields. Filter parsed entries by level, ISO 8601 date range, keyword, regex or source, with level counts returned. Analyze patterns for top frequent errors, error rate over time, request volume, slowest endpoints and anomaly detection. Convert between JSON, plain text, CSV and table output, add ANSI colorization and generate summary reports. Compute statistics such as level distribution, date coverage, unique IPs, top user agents, HTTP status codes and throughput.
When to use it
Useful when you have log files or pasted log text and want an assistant to triage errors, filter by time or level, spot spikes and slow endpoints, or turn raw logs into a readable report without writing parsing scripts yourself.
Requirements
Runs as a local process over stdio; install the npm package and build it, then point the client at the built entry file with Node.js. No accounts, API keys, environment variables or headers are declared.
Before you install
Log content is passed to the assistant and its model provider, so logs containing credentials, tokens, personal data or internal hostnames are exposed to that provider. The tools read and transform supplied text; the README does not describe writing or deleting files.

Installation

In SourceWeft

  1. Open Log in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@rog0x/mcp-log-tools

Log analysis and processing tools for AI agents, exposed via the Model Context Protocol (MCP).

Tools

parse_logs

Parse log content in common formats: JSON logs, Apache/Nginx access logs, syslog, and structured logs. Supports custom regex patterns with named capture groups. Extracts timestamp, level, message, source, and additional structured fields.

filter_logs

Filter parsed log entries by:

  • Log level (ERROR, WARN, INFO, DEBUG)
  • Date range (ISO 8601)
  • Keyword search (case-insensitive)
  • Regex pattern matching
  • Source/logger name

Returns matched entries along with level occurrence counts.

analyze_logs

Analyze log patterns to surface operational insights:

  • Top 10 most frequent errors (normalized)
  • Error rate over time (hourly buckets)
  • Request volume per hour
  • Slowest endpoints (from HTTP access logs)
  • Anomaly detection (sudden spikes or drops using standard deviation)

format_logs

Convert between log formats and produce reports:

  • JSON to plain text, plain to JSON, CSV, or table
  • ANSI colorization by log level
  • Structured field extraction
  • Summary report generation

log_stats

Compute comprehensive log statistics:

  • Total and non-empty line counts
  • Level distribution with percentages
  • Date range coverage
  • Unique IP addresses and request counts
  • Top user agents
  • HTTP status code distribution
  • Throughput (entries per second)

Setup

bash
npm installnpm run build

Usage with Claude Desktop

Add to your claude_desktop_config.json:

json
{  "mcpServers": {    "log-tools": {      "command": "node",      "args": ["path/to/mcp-log-tools/dist/index.js"]    }  }}

Supported Log Formats

FormatExample
JSON{"timestamp":"2024-01-15T10:30:00Z","level":"ERROR","message":"Connection failed"}
Apache/Nginx127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /index.html HTTP/1.1" 200 2326
SyslogJan 1 00:00:00 hostname process[1234]: Something happened
Structured2024-01-15T10:30:00.000Z [ERROR] [ModuleName] Something failed
CustomAny format using a regex with named capture groups

License

MIT

Source: README.md at commit 8a042e8

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.2LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.