Logs
| Tool | Permission | Purpose |
|---|---|---|
get_logs | read:sensitive | Fetch recent logs for an application, database, service, or service child. |
get_deployment | read:sensitive | Optionally return a capped, best-effort-redacted deployment log summary with include_log_summary=true. Set the length with log_lines: default 40, maximum 100. |
get_application_preview | read:sensitive | Fetch container logs of a preview deployment with the logs action. |
get_logs requires a running container on a reachable server. It returns 100 lines by default and up to 500 lines and may return a structured failure reason with suggested next tools.
Log redaction is best effort, not a guarantee. Do not send unrestricted production logs to an AI client unless required.
Resource Environment values in logs settings also apply to supported MCP log output. Locked values and recognized secret formats remain redacted even when an administrator chooses Hide locked values only. See Environment values in logs.