Skip to content

Conversation

@saurabhjain1592
Copy link
Member

Complete audit trail for MCP connector operations. All MCP queries are now logged to the mcp_query_audits table with policy evaluation results.

Changes

  • Migration: New mcp_query_audits table for persisting MCP operations
  • Audit Queue: Extended with MCP audit type and LogMCPQueryAudit() method
  • MCP Handler: Integrated audit logging at REQUEST, RESPONSE, EXFILTRATION phases
  • Examples: MCP audit examples for Go, Python, TypeScript, Java, and HTTP
  • Documentation: User guide for MCP audit logging

Audit Captures

  • REQUEST phase: blocked queries, matched policies
  • RESPONSE phase: PII redaction, redacted field paths
  • EXFILTRATION phase: row counts, limit violations

Enterprise PR: #1007

Add complete audit trail for MCP connector operations:
- New mcp_query_audits table (migration 040)
- AuditQueue extended with LogMCPQueryAudit method
- MCP handler captures REQUEST/RESPONSE/EXFILTRATION phases
- Examples for all SDKs (Go, Python, TypeScript, Java, HTTP)
- Documentation guide for MCP audit logging

Source commit: 3e68c90
Enterprise PR: #1007
@saurabhjain1592 saurabhjain1592 added the community-sync Sync from enterprise repository label Jan 16, 2026
@saurabhjain1592 saurabhjain1592 added this pull request to the merge queue Jan 16, 2026
Merged via the queue into main with commit 30fccdd Jan 16, 2026
32 checks passed
@saurabhjain1592 saurabhjain1592 deleted the sync/enterprise-20260116-100708-21062996792 branch January 16, 2026 10:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

community-sync Sync from enterprise repository

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants