> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neuro-tech.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Event Log MCP server

> Search structured events and let authorized agents record operational activity

The Event Log server at `/MCP/EventLog` connects agents to Neuron's structured operational log.

## Logging tools

There is one tool for each event severity:

```text theme={null}
Log Debug Event
Log Informational Event
Log Notice Event
Log Warning Event
Log Error Event
Log Critical Error Event
Log Alert Event
Log Emergency Event
```

Each has its own privilege below `OAUTH.Scope.MCP.EventLog.Tools.Log`.

Common fields are:

| Field     | Purpose                                       |
| --------- | --------------------------------------------- |
| Message   | Human-readable body                           |
| Object    | Object affected by the event                  |
| Actor     | Subject that caused it                        |
| Level     | Minor, Medium, or Major operational impact    |
| Event ID  | Stable identifier for reports and correlation |
| Facility  | External component or subsystem               |
| Module    | Component inside the facility                 |
| Meta Data | Structured key/value tags                     |

Alert and Emergency events are propagated to operators immediately. Do not use them for normal retryable failures.

## Search for Events

The search tool accepts pagination plus optional UTC time range and event-field filters. Results indicate whether more events exist and the offset for the next page. Grant it with:

```text theme={null}
OAUTH.Scope.MCP.EventLog.Tools.Search
```

## Find Sensitive Information prompt

The built-in prompt helps an agent inspect logged events for potentially sensitive information. It requires:

```text theme={null}
OAUTH.Scope.MCP.EventLog.Prompts.FindSensitiveInfo
```

The prompt assists review; it does not replace retention, redaction, or access-control policy.

## Logging guidance for agents

* Use a stable event ID for the same class of event.
* Put identifiers in structured fields, not prose.
* Do not log access tokens, passwords, private keys, full identity documents, or contract secrets.
* Record the actor that authorized an external action.
* Log a denied destructive request as a security-relevant event without copying the secret input.