Auralogs

Name: Auralogs
Author: auralogs-ai

SAFEgrade B · trust 89/100

Auralogs MCP server: read-only MCP access to production logs and AI analyses for Claude, Cursor, Codex, Cline, and any Streamable HTTP client

Overview

From the repository's own README, as read at the audited commit.

<p align="center">  <img src="logo.png" alt="Auralogs" width="120" height="120"></p># Auralogs MCP ServerHosted, read-only MCP server for [Auralogs](https://auralogs.ai), the logging platform built for AI-assisted teams. Connect Claude Code, Claude Desktop, Cursor, Codex, Cline, or any Streamable HTTP MCP client to your production logs, then ask your agent "what's broken in production right now?" instead of copy-pasting stack traces.[![Add to Cursor](https://img.shields.io/badge/Add_to-Cursor-1a1a1a)](https://cursor.com/install-mcp?name=auralogs&config=eyJ1cmwiOiJodHRwczovL21jcC5hdXJhbG9ncy5haS9tY3AiLCJoZWFkZXJzIjp7IkF1dGhvcml6YXRpb24iOiJCZWFyZXIgYXVyYV9yZWFkX1lPVVJfS0VZIn19)[![Docs](https://img.shields.io/badge/docs-docs.auralogs.ai-7c5cff)](https://docs.auralogs.ai/read-api/setup/)- **Endpoint:** `https://mcp.auralogs.ai/mcp` (Streamable HTTP)- **Auth:** `Authorization: Bearer aura_read_...` (project-scoped read key)- **Read-only by design:** no write tools exist. Agents can look, not touch.- **Rate limit:** 60 requests/minute per key## Tools| Tool | Description || --- | --- || `list_projects` | List projects accessible to the current read key || `get_project` | Get a project by id || `list_logs` | List logs, filtered by level and time range || `search_logs` | Full-text search across log messages || `get_log` | Get a single log with full context (stack, metadata) || `list_analyses` | List AI analyses, filtered by severity and type || `get_analysis` | Get one analysis (diagnosis, suggested fix, PR link) |## Get a key1. Sign up free at [auralogs.ai](https://auralogs.ai/) (10,000 logs/month, no credit card).2. Create a project and copy the **MCP/API read key** from the startup modal, or create one later under **Settings → API & MCP keys → Read keys**.Keys look like `aura_read_...`, are scoped to one project, and can be revoked instantly from the dashboard.## Connect### Claude Code```bashclaude mcp add --transport http auralogs https://mcp.auralogs.ai/mcp \  --header

Details

Source: auralogs-ai/auralogs-mcp
Transports: streamable-http
Tools: Registered at runtime; the list could not be read from source.
License: MIT
Stars: 0 · pushed 94d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	NA
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (2)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862

streamable-http

Why it matters. a network transport with no auth environment variable found

Fix. require a token

LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104

server.json

Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source

Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 772a12e4327f · full audit: observations/trust-audit/mcp-server/auralogs-ai__auralogs.json · Report an issue or request a re-scan

Audit history

Date	Source	Verdict	Grade	Score	Change
2026-09-13	`772a12e4327f`	SAFE	B	89	source changed, verdict held

Also audited

Servers with a similar trust profile.

Magic
0r/0w/0d · SAFE AgentTrust — Identity & Trust for A2A Agents
12r/6w/1d · CAUTION AIノアカリ☆ Agent Trust Receipt
0r/0w/0d · SAFE SpotDB
0r/0w/0d · SAFE Analytics Legends — SAP Analytics Intelligence
0r/0w/0d · SAFE Chart Generator
26r/0w/0d · SAFE

Questions

What is the Auralogs MCP server?

Auralogs MCP server: read-only MCP access to production logs and AI analyses for Claude, Cursor, Codex, Cline, and any Streamable HTTP client

Is Auralogs safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Auralogs need?

No credential environment variables were found in its source, so it appears to need none.

How does Auralogs run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (772a12e4327f), read on 2026-09-13. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13