MCP Server Quickstart¶
OWL MCP Server is a server-side implementation based on the Model Context Protocol, provided by TrueWatch. It encapsulates TrueWatch capabilities—including metrics, logs, events, monitors, APM, RUM, infrastructure, and notes—as MCP tools, which can be invoked by any MCP-compatible AI client.
This document describes how to connect to OWL MCP Server via streamableHttp.
The server supports two modes of tool exposure: the default facade mode provides three wrapper tools (list_catalogs, list_tools, exec_tool); the static mode directly exposes the allowed business tools via the MCP tools/list endpoint. The mode is determined by server configuration and does not require the client to switch transport protocols.
Representative tools that can be invoked by an MCP client include:
- Cross-workspace Trace query within the same organization: First discover candidate workspaces with
owl.account.workspace.same_org.list, then pass the returnedworkspace_uuidasworkspace_uuidstoowl.data.same_org.trace.query;workspace_idis only used for list pagination and cannot be used in queries. - Notes (
owl.nbook_note.list/owl.nbook_note.get/owl.nbook_note.add/owl.nbook_note.modify/owl.nbook_note.delete): List, read, create, modify, and delete notes. Supportsnormalandrunbooktypes;listcan filter bytype,addcan settype. Onlygetreturns the Markdown body;add,modify, anddeleteare write tools; it is recommended to configure manual confirmation in the MCP client. - Event queries (
owl.event.list/owl.event.get): Query events by time range and status, and retrieve event details by document ID. - Pipeline queries and sample validation (
owl.pipeline.list/owl.pipeline.validate): Query Pipelines or validate processing results with sample data. Validation only runs tests and does not create or modify Pipelines. - Simplified data query (
owl.data.simple_query): A more user-friendly data query entry. - Document search (
mdsearch_search/mdsearch_document/mdsearch_catalog): Search TrueWatch documentation. - SLO list (
owl.slo.list): List configured SLOs.
Prerequisites¶
Before connecting, ensure the following are ready:
- An TrueWatch API Key with the required business permissions has been created
- The OWL MCP Endpoint corresponding to the workspace's site has been obtained
- The MCP client is configured to connect to the OWL MCP service
- The current network environment can reach the OWL MCP Endpoint
Endpoint¶
OWL MCP Server provides a dedicated Endpoint per site. Select the address that matches the site of your workspace.
| Deployment Type | Site Name | Endpoint |
|---|---|---|
| SaaS | Global 1 (Oregon) | https://us1-owl-mcp.truewatch.com/mcp |
| SaaS | Europe 1 (Frankfurt) | https://eu1-owl-mcp.truewatch.com/mcp |
| SaaS | Asia Pacific 1 (Singapore) | https://ap1-owl-mcp.truewatch.com/mcp |
| SaaS | Africa 1 (South Africa) | https://za1-owl-mcp.truewatch.com/mcp |
| SaaS | Indonesia 1 (Jakarta) | https://id1-owl-mcp.truewatch.com/mcp |
| SaaS | Middle East 1 (UAE) | https://me1-owl-mcp.truewatch.com/mcp |
Authentication¶
Configure the request header in your MCP client:
<API Key> is your TrueWatch API Key. Keep it secure; do not write it into public code repositories, shared documents, or long-term logs.
OWL MCP Server authenticates the request before processing it via MCP. Unauthenticated or invalid credentials will be rejected with a
401 Unauthorizedresponse and the headerWWW-Authenticate: Bearer realm="mcp". Additionally, rate limiting returns429, and requests from IPs not in the whitelist return403.
Client Configuration¶
OWL MCP Server uses the standard streamableHttp transport, which can be used by any MCP client that supports this transport. Configuration entry points and field names may vary slightly between clients; refer to the actual client documentation for details.
The following examples illustrate configuration for Cherry Studio, Claude Code, Codex, OpenClaw, and Hermes. Other MCP clients that support streamableHttp can be configured following the same principles:
- Set the URL to the OWL MCP Endpoint corresponding to the workspace's site
- Configure the request header
Authorization: Bearer <API Key> - Enable the MCP service
The placeholder your-owl-mcp-endpoint is used in the examples below. When connecting, replace it with the actual OWL MCP Endpoint for your workspace's site.
Cherry Studio¶
Add a new MCP service in Cherry Studio with the following configuration:
- Type:
streamableHttp - URL:
your-owl-mcp-endpoint - Headers:
Authorization=Bearer <API Key>
After configuring, save and enable the service, then return to the client home page and select this MCP service.
Claude Code¶
Claude Code uses the http type to connect to a Streamable HTTP service. Create or edit .mcp.json in the project root directory and add the following configuration:
{
"mcpServers": {
"owl": {
"type": "http",
"url": "your-owl-mcp-endpoint",
"headers": {
"Authorization": "${OWL_MCP_AUTHORIZATION}"
}
}
}
}
Set OWL_MCP_AUTHORIZATION as a local environment variable, injecting the full authentication string via a team-approved credential management method. Do not write actual credentials directly into .mcp.json or commit them to the repository. After saving, restart Claude Code and run claude mcp list; you can also type /mcp in a session to confirm that owl is connected and tools are discoverable.
Codex¶
Simply copy the MCP JSON to Codex and type "Help me configure this MCP", and Codex will complete the configuration automatically.
To configure manually, Codex desktop, CLI, and IDE extensions share MCP configuration. Edit ~/.codex/config.toml and add the following:
[mcp_servers.owl]
url = "your-owl-mcp-endpoint"
bearer_token_env_var = "OWL_MCP_API_KEY"
default_tools_approval_mode = "writes"
In the environment where Codex is launched, set OWL_MCP_API_KEY to your TrueWatch API Key. Codex automatically sends this value as a Bearer Token; do not prepend Bearer in the variable value, and do not write actual credentials directly into config.toml or commit them to the repository.
After saving the configuration, restart Codex and run codex mcp list; you can also type /mcp in a session to confirm that owl is connected and tools are discoverable. The example includes default_tools_approval_mode = "writes", which requests confirmation before invoking tools that may write data; it is recommended to keep this setting.
OpenClaw¶
openclaw mcp set owl '{
"type": "streamableHttp",
"url": "your-owl-mcp-endpoint",
"headers": {
"Authorization": "Bearer <API Key>"
},
"enabled": true
}'
Verify the configuration:
Hermes¶
Edit ~/.hermes/config.yaml:
mcp_servers:
owl:
type: streamableHttp
url: your-owl-mcp-endpoint
headers:
Authorization: Bearer <API Key>
enabled: true
Verify the configuration:
Usage Conventions¶
When using OWL MCP Server, we recommend following these conventions:
| Category | Convention |
|---|---|
| Time range tools | Always use 13-digit millisecond timestamps |
| Pagination tools | Typically support page_size and page_index |
| Detail tools | Typically rely on identifier fields returned by list tools, e.g., rule_uuid, incident_uuid, issue_id, note_uuid |
| Data query tools | It is recommended to follow a "discover first, query later" order: first use discovery tools to obtain available source, field, index, then execute the actual query |
Verification¶
After configuration, you can ask your MCP client:
In facade mode, the client should discover
list_catalogs,list_tools,exec_tool, and can invokeowl.metric.listviaexec_tool. In static mode, the client will directly discover business tools such asowl.metric.list. If the server has an exclusion list configured, some tools will not appear. If you cannot connect, authentication fails, the tool list is empty, or the returned results are empty, refer to Troubleshooting.