mulewatch
NPM · MULEWATCH · SCANNED SEP 25
Read-only MCP server for MuleSoft Anypoint: app logs, archive search, Runtime Manager, Exchange.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 6 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1650 tokens (~183/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management57
- Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the mulewatch MCP server?
mulewatch runs locally as an npm package, launched with npx -y mulewatch. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mulewatch
claude mcp add brbousnguar-mulewatch -- npx -y mulewatch
{
"mcpServers": {
"brbousnguar-mulewatch": {
"command": "npx",
"args": [
"-y",
"mulewatch"
]
}
}
} {
"servers": {
"brbousnguar-mulewatch": {
"command": "npx",
"args": [
"-y",
"mulewatch"
]
}
}
} codex mcp add brbousnguar-mulewatch -- npx -y mulewatch
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"brbousnguar-mulewatch": {
"type": "local",
"command": [
"npx",
"-y",
"mulewatch"
],
"enabled": true
}
}
} openclaw mcp add brbousnguar-mulewatch --command npx --arg -y --arg mulewatch
mcp_servers:
brbousnguar-mulewatch:
command: "npx"
args: ["-y", "mulewatch"] {
"McpServers": {
"brbousnguar-mulewatch": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"mulewatch"
]
}
}
} assistant mcp add brbousnguar-mulewatch -t stdio -c npx -a -y mulewatch
{
"mcpServers": {
"brbousnguar-mulewatch": {
"command": "npx",
"args": [
"-y",
"mulewatch"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 23 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 +11
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → 0.85 ▲ functional
- 18 Sept 26 −10
- Known CVEs: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Stability: 0.30 → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Dependency health: 0.85 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- Package version: 0.1.1 → 0.1.2 functional
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +3
- Stability: unverified → 0.23 ▲ functional
- 9 Sept 26 +15
- Malware scan: unverified → pass ▲ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Sept 2026 · Analysed npm/mulewatch@0.1.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 95 packages
| Packages resolved | 95 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
anypoint_get_app_logs_for_analysis Analyze application logs ~347
Fetch live-tail logs for a Mule application and return an analysis-ready payload: normalized lines plus counts by priority, logger and instance. Prefer this over anypoint_list_app_logs when diagnosing a problem.
| Name | Type | Req | Description |
|---|---|---|---|
| appName | string | yes | Deployment/application name as shown in Runtime Manager. |
| deploymentId | string | – | Use when the app name is ambiguous or already known. |
| descending | boolean | – | Return latest first, default true. |
| endTime | string | – | Application Manager time filter, ISO 8601. |
| environmentId | string | – | Environment id. Use instead of environmentName. |
| environmentName | string | – | Environment name, e.g. 'Production'. Resolved to an id, must match exactly one. |
| errorOnly | boolean | – | Only return ERROR and FATAL lines. |
| includeErrors | boolean | – | Include failed target errors when target is auto. |
| includeRaw | boolean | – | Include the raw Anypoint API objects alongside the normalized fields. |
| limit | integer | – | Maximum log entries, default 100, max 500. |
| offset | integer | – | Application Manager log offset, default 0. |
| orgId | string | – | Business group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization. |
| searchTerms | array | – | Case-insensitive filters matched against timestamp, priority, message, logger, thread or instance. |
| specId | string | – | Specific Application Manager deployment spec/config id. |
| startTime | string | – | Application Manager time filter, ISO 8601. |
| target | string | – | Log source. Defaults to auto, which tries Application Manager then CloudHub. |
No output schema declared.
No examples provided.
anypoint_list_api_manager_instances List API Manager instances ~181
List API instances managed by Anypoint API Manager in an environment, with their assets, endpoints and technology.
| Name | Type | Req | Description |
|---|---|---|---|
| assetId | string | – | Filter by Exchange asset id. |
| environmentId | string | – | Environment id. Use instead of environmentName. |
| environmentName | string | – | Environment name, e.g. 'Production'. Resolved to an id, must match exactly one. |
| includeRaw | boolean | – | Include the raw Anypoint API objects alongside the normalized fields. |
| limit | integer | – | Maximum records, default 100. |
| offset | integer | – | Pagination offset, default 0. |
| orgId | string | – | Business group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization. |
| technology | string | – | Filter by technology, e.g. mule4, flexGateway. |
No output schema declared.
No examples provided.
anypoint_list_app_logs List application logs ~304
List the latest Runtime Manager logs for a Mule application. This reads the live tail only — a small rolling buffer. For anything older than the buffer, use anypoint_search_archived_logs.
| Name | Type | Req | Description |
|---|---|---|---|
| appName | string | yes | Deployment/application name as shown in Runtime Manager. |
| deploymentId | string | – | Use when the app name is ambiguous or already known. |
| descending | boolean | – | Return latest first, default true. |
| endTime | string | – | Application Manager time filter, ISO 8601. |
| environmentId | string | – | Environment id. Use instead of environmentName. |
| environmentName | string | – | Environment name, e.g. 'Production'. Resolved to an id, must match exactly one. |
| includeErrors | boolean | – | Include failed target errors when target is auto. |
| includeRaw | boolean | – | Include the raw Anypoint API objects alongside the normalized fields. |
| limit | integer | – | Maximum log entries, default 100, max 500. |
| offset | integer | – | Application Manager log offset, default 0. |
| orgId | string | – | Business group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization. |
| specId | string | – | Specific Application Manager deployment spec/config id. |
| startTime | string | – | Application Manager time filter, ISO 8601. |
| target | string | – | Log source. Defaults to auto, which tries Application Manager then CloudHub. |
No output schema declared.
No examples provided.
anypoint_list_business_groups List business groups ~70
List the business groups under the credentials' organization, with their ids. Environments live on business groups, not on the root organization — call this first if anypoint_list_environments returns nothing.
| Name | Type | Req | Description |
|---|---|---|---|
| rootOrgId | string | – | Root organization id. Defaults to the credentials' own organization. |
No output schema declared.
No examples provided.
anypoint_list_deployed_apps List deployed applications ~185
List deployed Mule applications in an environment, across Application Manager (CloudHub 2.0 / Runtime Fabric), legacy CloudHub, and hybrid on-prem targets.
| Name | Type | Req | Description |
|---|---|---|---|
| environmentId | string | – | Environment id. Use instead of environmentName. |
| environmentName | string | – | Environment name, e.g. 'Production'. Resolved to an id, must match exactly one. |
| includeErrors | boolean | – | Include per-target errors when a target endpoint is unavailable or not permitted. |
| includeRaw | boolean | – | Include the raw Anypoint API objects alongside the normalized fields. |
| limit | integer | – | Maximum records to return, default 100. |
| orgId | string | – | Business group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization. |
| target | string | – | Deployment target to query. Defaults to application_manager. |
No output schema declared.
No examples provided.
anypoint_list_environments List environments ~87
List the Anypoint environments in a business group. If this returns nothing, the orgId is probably the root organization — call anypoint_list_business_groups to find the right id. Restricted to ANYPOINT_ALLOWED_ENVIRONMENTS when that is set.
| Name | Type | Req | Description |
|---|---|---|---|
| orgId | string | – | Business group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization. |
No output schema declared.
No examples provided.
anypoint_search_archived_logs Search archived logs ~291
Search historical Mule application logs via the Anypoint Monitoring Archive API, for dates beyond the live tail's rolling buffer. Requires Anypoint Monitoring to be enabled for the organization. Use this for any past-date incident investigation.
| Name | Type | Req | Description |
|---|---|---|---|
| appName | string | yes | Deployment name, must match the Runtime Manager name exactly. |
| date | string | yes | Required date to search, YYYY-MM-DD (UTC). |
| endDate | string | – | Inclusive range end, YYYY-MM-DD (UTC). Max 7 days total. |
| environmentId | string | – | Environment id. Use instead of environmentName. |
| environmentName | string | – | Environment name, e.g. 'Production'. Resolved to an id, must match exactly one. |
| errorOnly | boolean | – | Only return ERROR and FATAL lines. |
| includeRaw | boolean | – | Include the raw Anypoint API objects alongside the normalized fields. |
| limit | integer | – | Cap on matched lines returned, default 500. |
| maxEntities | integer | – | Cap on replica entities probed during a full-scan fallback, default 150. |
| maxFiles | integer | – | Cap on archive files downloaded and parsed, default 100. |
| orgId | string | – | Business group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization. |
| searchTerms | array | – | Case-insensitive text filters. |
No output schema declared.
No examples provided.
anypoint_search_exchange_assets Search Exchange assets ~142
Search Anypoint Exchange for assets in the organization — APIs, connectors, templates, examples and fragments.
| Name | Type | Req | Description |
|---|---|---|---|
| includeRaw | boolean | – | Include the raw Anypoint API objects alongside the normalized fields. |
| limit | integer | – | Maximum records, default 50. |
| offset | integer | – | Pagination offset, default 0. |
| orgId | string | – | Business group id. Defaults to ANYPOINT_ORG_ID, or the credentials' own organization. |
| search | string | – | Free-text search over asset names and descriptions. |
| types | array | – | Filter by asset type, e.g. rest-api, connector, template, example. |
No output schema declared.
No examples provided.
anypoint_whoami Check Anypoint connection ~43
Verify the configured Anypoint credentials and show which business group, host and environment allowlist this server is operating with. Use this first when a call fails.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
What is the mulewatch MCP server?
mulewatch is an MCP server listed in the public MCP registry as io.github.brbousnguar/mulewatch. Read-only MCP server for MuleSoft Anypoint: app logs, archive search, Runtime Manager, Exchange. This page covers its npm package (mulewatch).
Is the mulewatch MCP server safe to use?
mulewatch scores 77 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 25 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the mulewatch MCP server expose?
mulewatch exposes 9 tools: anypoint_whoami, anypoint_list_business_groups, anypoint_list_environments, anypoint_list_deployed_apps, anypoint_list_app_logs, and 4 more. Their descriptions and schemas cost roughly 1,650 tokens of context every time the server is loaded.
Is the mulewatch MCP server still maintained?
mulewatch is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the mulewatch MCP server under?
mulewatch declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.