@dynatrace-oss/dynatrace-mcp-server 0.3.0 → 0.4.0

package/README.md

@@ -110,39 +110,35 @@ A **Dynatrace OAuth Client** is needed to communicate with your Dynatrace Enviro
 [creating an Oauth Client in Dynatrace](https://docs.dynatrace.com/docs/manage/identity-access-management/access-tokens-and-oauth-clients/oauth-clients),
 and set up the following environment variables in order for this MCP to work:
 
-* `DT_ENVIRONMENT` (string, e.g., https://abc12345.apps.dynatrace.com) - URL to your Dynatrace Platform (do not use Dynatrace classic URLs like `abc12345.live.dynatrace.com`)
-* `OAUTH_CLIENT_ID` (string, e.g., `dt0s02.SAMPLE`) - Dynatrace OAuth Client ID
-* `OAUTH_CLIENT_SECRET` (string, e.g., `dt0s02.SAMPLE.abcd1234`) - Dynatrace OAuth Client Secret
-* OAuth Client Scopes:
-  * `app-engine:apps:run` - needed for environmentInformationClient
-  * `app-engine:functions:run` - needed for environmentInformationClient
-  * `hub:catalog:read` - get details about installed Apps on Dynatrace Environment
-  * `environment-api:security-problems:read` - needed for reading security problems
-  * `environment-api:entities:read` - read monitored entities
-  * `environment-api:problems:read` - get problems
-  * `environment-api:metrics:read` - read metrics
-  * `environment-api:slo:read` - read SLOs
-  * `storage:buckets:read` - Read all system data stored on Grail
-  * `storage:logs:read` - Read logs for reliability guardian validations
-  * `storage:metrics:read` - Read metrics for reliability guardian validations
-  * `storage:bizevents:read` - Read bizevents for reliability guardian validations
-  * `storage:spans:read` - Read spans from Grail
-  * `storage:entities:read` - Read Entities from Grail
-  * `storage:events:read` -  Read Events from Grail
-  * `storage:system:read` - Read System Data from Grail
-  * `storage:user.events:read` - Read User events from Grail
-  * `storage:user.sessions:read` - Read User sessions from Grail
-  * `settings:objects:read` - needed for reading ownership information and Guardians (SRG) from settings
-
-    **Note**: Please ensure that `settings:objects:read` is used, and *not* the similarly named scope `app-settings:objects:read`.
+- `DT_ENVIRONMENT` (string, e.g., https://abc12345.apps.dynatrace.com) - URL to your Dynatrace Platform (do not use Dynatrace classic URLs like `abc12345.live.dynatrace.com`)
+- `OAUTH_CLIENT_ID` (string, e.g., `dt0s02.SAMPLE`) - Dynatrace OAuth Client ID
+- `OAUTH_CLIENT_SECRET` (string, e.g., `dt0s02.SAMPLE.abcd1234`) - Dynatrace OAuth Client Secret
+- OAuth Client Scopes:
+  - `app-engine:apps:run` - needed for environmentInformationClient
+  - `app-engine:functions:run` - needed for environmentInformationClient
+  - `hub:catalog:read` - get details about installed Apps on Dynatrace Environment
+  - `environment-api:security-problems:read` - needed for reading security problems
+  - `environment-api:entities:read` - read monitored entities
+  - `environment-api:problems:read` - get problems
+  - `environment-api:metrics:read` - read metrics
+  - `environment-api:slo:read` - read SLOs
+  - `storage:buckets:read` - Read all system data stored on Grail
+  - `storage:logs:read` - Read logs for reliability guardian validations
+  - `storage:metrics:read` - Read metrics for reliability guardian validations
+  - `storage:bizevents:read` - Read bizevents for reliability guardian validations
+  - `storage:spans:read` - Read spans from Grail
+  - `storage:entities:read` - Read Entities from Grail
+  - `storage:events:read` - Read Events from Grail
+  - `storage:system:read` - Read System Data from Grail
+  - `storage:user.events:read` - Read User events from Grail
+  - `storage:user.sessions:read` - Read User sessions from Grail
+  - `settings:objects:read` - needed for reading ownership information and Guardians (SRG) from settings
+
+    **Note**: Please ensure that `settings:objects:read` is used, and _not_ the similarly named scope `app-settings:objects:read`.
 
 In addition, depending on the features you use, the following variables can be configured:
 
-* `SLACK_CONNECTION_ID` (string) - connection ID of a [Slack Connection](https://docs.dynatrace.com/docs/analyze-explore-automate/workflows/actions/slack)
-* `USE_APP_SETTINGS`  (boolean, `true` or `false`; default: `false`)
-  * Requires scope `app-settings:objects:read` to read settings-objects from app settings
-* `USE_WORKFLOWS` (boolean, `true` or `false`; default: `false`)
-  * Requires scopes `automation:workflows:read`, `automation:workflows:write` and `automation:workflows:run` to read, write and execute Workflows
+- `SLACK_CONNECTION_ID` (string) - connection ID of a [Slack Connection](https://docs.dynatrace.com/docs/analyze-explore-automate/workflows/actions/slack)
 
 ## ✨ Example prompts ✨
 
@@ -150,32 +146,41 @@ Use these example prompts as a starting point. Just copy them into your IDE or a
 and extend them as needed. They’re here to help you imagine how real-time observability and automation work together in the MCP context in your IDE.
 
 **Find open vulnerabilities on production, setup alert.**
+
 ```
 I have this code snippet here in my IDE, where I get a dependency vulnerability warning for my code.
 Check if I see any open vulnerability/cve on production.
 Analyze a specific production problem.
 Setup a workflow that sends Slack alerts to the #devops-alerts channel when availability problems occur.
 ```
+
 **Debug intermittent 503 errors.**
+
 ```
 Our load balancer is intermittently returning 503 errors during peak traffic.
 Pull all recent problems detected for our front-end services and
 run a query to correlate error rates with service instance health indicators.
 I suspect we have circuit breakers triggering, but need confirmation from the telemetry data.
 ```
+
 **Correlate memory issue with logs.**
+
 ```
 There's a problem with high memory usage on one of our hosts.
 Get the problem details and then fetch related logs to help understand
 what's causing the memory spike? Which file in this repo is this related to?
 ```
+
 **Trace request flow analysis.**
+
 ```
 Our users are experiencing slow checkout processes.
 Can you execute a DQL query to show me the full request trace for our checkout flow,
 so I can identify which service is causing the bottleneck?
 ```
+
 **Analyze Kubernetes cluster events.**
+
 ```
 Our application deployments seem to be failing intermittently.
 Can you fetch recent events from our "production-cluster"
@@ -194,6 +199,7 @@ In case of any problems, you can troubleshoot SSO/OAuth issues based on our [Dyn
 It is recommended to try access the following API (which requires minimal scopes `app-engine:apps:run` and `app-engine:functions:run`):
 
 1. Use OAuth Client ID and Secret to retrieve a Bearer Token (only valid for a couple of minutes):
+
 ```bash
 curl --request POST 'https://sso.dynatrace.com/sso/oauth2/token' \
   --header 'Content-Type: application/x-www-form-urlencoded' \
@@ -204,6 +210,7 @@ curl --request POST 'https://sso.dynatrace.com/sso/oauth2/token' \
 ```
 
 2. Use `access_token` from the response of the above call as the bearer-token in the next call:
+
 ```bash
 curl -X GET https://abc12345.apps.dynatrace.com/platform/management/v1/environment \
   -H 'accept: application/json' \
@@ -211,6 +218,7 @@ curl -X GET https://abc12345.apps.dynatrace.com/platform/management/v1/environme
 ```
 
 3. You should retrieve a result like this:
+
 ```json
 {
   "environmentId": "abc12345",
@@ -220,35 +228,32 @@ curl -X GET https://abc12345.apps.dynatrace.com/platform/management/v1/environme
 }
 ```
 
-
 ### Problem accessing data on Grail
 
 Grail has a dedicated section about permissions in the Dynatrace Docs. Please refer to https://docs.dynatrace.com/docs/discover-dynatrace/platform/grail/data-model/assign-permissions-in-grail for more details.
 
-
 ## Development
 
 For local development purposes, you can use VSCode and GitHub Copilot.
 
 First, enable Copilot for your Workspace `.vscode/settings.json`:
+
 ```json
 {
   "github.copilot.enable": {
     "*": true
   }
 }
-
 ```
 
 Second, add the MCP to `.vscode/mcp.json`:
+
 ```json
 {
   "servers": {
     "my-dynatrace-mcp-server": {
       "command": "node",
-      "args": [
-        "${workspaceFolder}/dist/index.js"
-      ],
+      "args": ["${workspaceFolder}/dist/index.js"],
       "envFile": "${workspaceFolder}/.env"
     }
   }
@@ -259,7 +264,7 @@ Third, create a `.env` file in this repository (you can copy from `.env.template
 
 Last but not least, switch to Agent Mode in CoPilot and reload tools.
 
-
 ## Notes
+
 This product is not officially supported by Dynatrace.
 Please contact us via [GitHub Issues](https://github.com/dynatrace-oss/dynatrace-mcp/issues) if you have feature requests, questions, or need help.

package/dist/authentication/dynatrace-clients.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOAuthClient = exports.ExtendedOauthClient = void 0;
+const http_client_1 = require("@dynatrace-sdk/http-client");
+const dt_app_1 = require("dt-app");
+const package_json_1 = require("../../package.json");
+/**
+ * Uses the provided oauth Client ID and Secret and requests a token via client-credentials flow
+ * @param clientId - OAuth Client ID for Dynatrace
+ * @param clientSecret - Oauth Client Secret for Dynatrace
+ * @param ssoAuthUrl - SSO Authentication URL
+ * @param scopes - List of requested scopes
+ * @returns
+ */
+const requestToken = async (clientId, clientSecret, ssoAuthUrl, scopes) => {
+    const res = await fetch(ssoAuthUrl, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+        },
+        body: new URLSearchParams({
+            grant_type: 'client_credentials',
+            client_id: clientId,
+            client_secret: clientSecret,
+            scope: scopes.join(' '),
+        }),
+    });
+    // check if the response was okay (HTTP 2xx) or not (HTTP 4xx or 5xx)
+    if (!res.ok) {
+        // log the error
+        console.error(`Failed to fetch token: ${res.status} ${res.statusText}`);
+    }
+    // and return the JSON result, as it contains additional information
+    return await res.json();
+};
+/**
+ * ExtendedOAuthClient that takes parameters for clientId, secret, scopes, environmentUrl, authUrl, and the version of the dynatrace-mcp-server
+ */
+class ExtendedOauthClient extends http_client_1._OAuthHttpClient {
+    userAgent;
+    constructor(config, userAgent) {
+        super(config);
+        this.userAgent = userAgent;
+    }
+    send(options) {
+        // add the user-agent header to the request
+        options.headers = {
+            ...options.headers,
+            'User-Agent': this.userAgent,
+        };
+        // call the parent send method
+        return super.send(options);
+    }
+}
+exports.ExtendedOauthClient = ExtendedOauthClient;
+/** Create an Oauth Client based on clientId, clientSecret, environmentUrl and scopes
+ * This uses a client-credentials flow to request a token from the SSO endpoint.
+ */
+const createOAuthClient = async (clientId, clientSecret, environmentUrl, scopes) => {
+    if (!clientId) {
+        throw new Error('Failed to retrieve OAuth client id from env "DT_APP_OAUTH_CLIENT_ID"');
+    }
+    if (!clientSecret) {
+        throw new Error('Failed to retrieve OAuth client secret from env "DT_APP_OAUTH_CLIENT_SECRET"');
+    }
+    if (!environmentUrl) {
+        throw new Error('Failed to retrieve environment URL from env "DT_ENVIRONMENT"');
+    }
+    console.error(`Trying to authenticate API Calls to ${environmentUrl} via OAuthClientId ${clientId} with the following scopes: ${scopes.join(', ')}`);
+    const ssoBaseUrl = await (0, dt_app_1.getSSOUrl)(environmentUrl);
+    const ssoAuthUrl = new URL('/sso/oauth2/token', ssoBaseUrl).toString();
+    console.error(`Using SSO auth URL: ${ssoAuthUrl}`);
+    // try to request a token, just to verify that everything is set up correctly
+    const tokenResponse = await requestToken(clientId, clientSecret, ssoAuthUrl, scopes);
+    // in case we didn't get a token, or error / error_description / issueId is set, we throw an error
+    if (!tokenResponse.access_token || tokenResponse.error || tokenResponse.error_description || tokenResponse.issueId) {
+        throw new Error(`Failed to retrieve OAuth token (IssueId: ${tokenResponse.issueId}): ${tokenResponse.error} - ${tokenResponse.error_description}. Note: Your OAuth client is most likely not configured correctly and/or is missing scopes.`);
+    }
+    console.error(`Successfully retrieved token from SSO!`);
+    const userAgent = `dynatrace-mcp-server/v${package_json_1.version} (${process.platform}-${process.arch})`;
+    return new ExtendedOauthClient({
+        scopes,
+        clientId,
+        secret: clientSecret,
+        environmentUrl,
+        authUrl: ssoAuthUrl,
+    }, userAgent);
+};
+exports.createOAuthClient = createOAuthClient;

package/dist/authentication/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/capabilities/call-app-function.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callAppFunction = void 0;
+/** Helper function to call an app-function via platform-api */
+const callAppFunction = async (dtClient, appId, functionName, payload) => {
+    console.error(`Sending payload ${JSON.stringify(payload)}`);
+    const response = await dtClient.send({
+        url: `/platform/app-engine/app-functions/v1/apps/${appId}/api/${functionName}`,
+        method: 'POST',
+        headers: {
+            'Accept': 'application/json',
+            'Content-Type': 'application/json',
+        },
+        body: payload,
+        statusValidator: (status) => {
+            return [200].includes(status);
+        },
+    });
+    return await response.body('json');
+};
+exports.callAppFunction = callAppFunction;

package/dist/capabilities/create-workflow-for-problem-notification.js

@@ -12,18 +12,18 @@ const createWorkflowForProblemNotification = async (dtClient, teamName, channel,
         slowdown: false,
         resource: false,
         custom: false,
-        info: false
+        info: false,
     };
     // default trigger config
     let triggerConfig = {
         type: 'event',
         value: {
             eventType: 'events',
-            query: ''
-        }
+            query: '',
+        },
     };
     // special case: Security Problems
-    if (problemType.toUpperCase().indexOf("SECURITY") !== -1) {
+    if (problemType.toUpperCase().indexOf('SECURITY') !== -1) {
         triggerConfig.value.query = `event.kind=="SECURITY_EVENT"
         and event.type=="VULNERABILITY_STATUS_CHANGE_EVENT"
         and event.level == "ENTITY"
@@ -65,8 +65,8 @@ const createWorkflowForProblemNotification = async (dtClient, teamName, channel,
         triggerConfig = {
             type: 'davis-problem',
             value: {
-                categories
-            }
+                categories,
+            },
         };
     }
     let notificationWorkflow = {
@@ -76,28 +76,28 @@ const createWorkflowForProblemNotification = async (dtClient, teamName, channel,
         type: 'SIMPLE',
         // define the send_notification task
         tasks: {
-            "send_notification": {
-                name: "Send notification",
-                action: "dynatrace.slack:slack-send-message",
-                description: "Sends a notification to a Slack channel",
+            send_notification: {
+                name: 'Send notification',
+                action: 'dynatrace.slack:slack-send-message',
+                description: 'Sends a notification to a Slack channel',
                 input: {
-                    connectionId: "slack-connection-id",
+                    connectionId: 'slack-connection-id',
                     channel: `{{ \"${channel}\" }}`,
                     message: `🚨 Alert for Team ${teamName}\n*Problem Type*: ${problemType}\n*Problem ID*: {{ event()["display_id"] }}\n*Status*: {{ event()["event.status"] }}\n\n<{{ environment().url }}/ui/apps/dynatrace.davis.problems/problem/{{ event()["event.id"] }}|Click here for details>`,
                 },
                 active: true,
-            }
+            },
         },
         // define a trigger
         trigger: {
             eventTrigger: {
                 isActive: true,
                 triggerConfiguration: triggerConfig,
-            }
-        }
+            },
+        },
     };
     return await workflowsclient.createWorkflow({
-        body: notificationWorkflow
+        body: notificationWorkflow,
     });
 };
 exports.createWorkflowForProblemNotification = createWorkflowForProblemNotification;

package/dist/capabilities/execute-dql.js

@@ -7,7 +7,7 @@ const verifyDqlStatement = async (dtClient, dqlStatement) => {
     const response = await queryAssistanceClient.queryVerify({
         body: {
             query: dqlStatement,
-        }
+        },
     });
     return response;
 };
@@ -17,7 +17,7 @@ const executeDql = async (dtClient, dqlStatement) => {
     const response = await queryExecutionClient.queryExecute({
         body: {
             query: dqlStatement,
-        }
+        },
     });
     if (response.result) {
         // return response result immediately
@@ -29,7 +29,7 @@ const executeDql = async (dtClient, dqlStatement) => {
         let pollResponse;
         do {
             // sleep for 2 seconds
-            await new Promise(resolve => setTimeout(resolve, 2000));
+            await new Promise((resolve) => setTimeout(resolve, 2000));
             pollResponse = await queryExecutionClient.queryPoll({
                 requestToken: response.requestToken,
             });

package/dist/capabilities/get-monitored-entity-details.js

@@ -5,7 +5,7 @@ const client_classic_environment_v2_1 = require("@dynatrace-sdk/client-classic-e
 const getMonitoredEntityDetails = async (dtClient, entityId) => {
     const monitoredEntitiesClient = new client_classic_environment_v2_1.MonitoredEntitiesClient(dtClient);
     const entityDetails = await monitoredEntitiesClient.getEntity({
-        entityId: entityId
+        entityId: entityId,
     });
     return entityDetails;
 };

package/dist/capabilities/get-ownership-information.js

@@ -1,15 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getOwnershipInformation = void 0;
-const dynatrace_clients_1 = require("../dynatrace-clients");
+const call_app_function_1 = require("./call-app-function");
 const getOwnershipInformation = async (dtClient, entityIds) => {
-    const ownershipResponse = await (0, dynatrace_clients_1.callAppFunction)(dtClient, 'dynatrace.ownership', 'get-ownership-from-entity', { entityIds: entityIds });
+    const ownershipResponse = await (0, call_app_function_1.callAppFunction)(dtClient, 'dynatrace.ownership', 'get-ownership-from-entity', {
+        entityIds: entityIds,
+    });
     if (ownershipResponse.error) {
         // e.g., "Not enough parameters provided"
         return `Error: ${ownershipResponse.error}`;
     }
     if (ownershipResponse.result && ownershipResponse.result.owners && ownershipResponse.result.owners.length == 0) {
-        return "No owners found - please check out how to setup owners on https://docs.dynatrace.com/docs/deliver/ownership";
+        return 'No owners found - please check out how to setup owners on https://docs.dynatrace.com/docs/deliver/ownership';
     }
     return ownershipResponse.result;
 };

package/dist/capabilities/get-problem-details.js

@@ -7,7 +7,7 @@ const getProblemDetails = async (dtClient, problemId) => {
     const problemsClient = new client_classic_environment_v2_1.ProblemsClient(dtClient);
     const problemDetails = await problemsClient.getProblem({
         problemId: problemId,
-        fields: 'evidenceDetails,affectedEntities'
+        fields: 'evidenceDetails,affectedEntities',
     });
     return problemDetails;
 };

package/dist/capabilities/get-vulnerability-details.js

@@ -6,7 +6,7 @@ const getVulnerabilityDetails = async (dtClient, securityProblemId) => {
     const securityProblemsClient = new client_classic_environment_v2_1.SecurityProblemsClient(dtClient);
     const response = await securityProblemsClient.getSecurityProblem({
         id: securityProblemId,
-        fields: 'riskAssessment,codeLevelVulnerabilityDetails,globalCounts,description,remediationDescription,exposedEntities,affectedEntities,relatedAttacks,entryPoints'
+        fields: 'riskAssessment,codeLevelVulnerabilityDetails,globalCounts,description,remediationDescription,exposedEntities,affectedEntities,relatedAttacks,entryPoints',
     });
     return response;
 };

package/dist/capabilities/list-vulnerabilities.js

@@ -7,7 +7,7 @@ const listVulnerabilities = async (dtClient) => {
     const response = await securityProblemsClient.getSecurityProblems({
         sort: '-riskAssessment.riskScore',
         pageSize: 100,
-        securityProblemSelector: `minRiskScore("8.0")`
+        securityProblemSelector: `minRiskScore("8.0")`,
     });
     const securityProblems = response.securityProblems?.map((secProb) => {
         return `${secProb.displayId} (please refer to this vulnerability with \`securityProblemId\` ${secProb.securityProblemId}): ${secProb.title} (Technology: ${secProb.technology}, External Vulnerability ID: ${secProb.externalVulnerabilityId}, CVE: ${secProb.cveIds?.join(', ')})`;

package/dist/capabilities/send-slack-message.js

@@ -1,14 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.sendSlackMessage = void 0;
-const dynatrace_clients_1 = require("../dynatrace-clients");
+const call_app_function_1 = require("./call-app-function");
 const sendSlackMessage = async (dtClient, connectionId, channel, message) => {
-    const response = await (0, dynatrace_clients_1.callAppFunction)(dtClient, 'dynatrace.slack', 'slack-send-message', {
-        message: message, channel: channel, connection: connectionId,
+    const response = await (0, call_app_function_1.callAppFunction)(dtClient, 'dynatrace.slack', 'slack-send-message', {
+        message: message,
+        channel: channel,
+        connection: connectionId,
         workflowID: 'foobar-123',
         executionID: 'exec-123',
         executionDate: new Date().toString(),
-        appendToThread: false
+        appendToThread: false,
     });
     if (response.error) {
         // e.g., "Not enough parameters provided"

package/dist/capabilities/update-workflow.js

@@ -6,7 +6,7 @@ const updateWorkflow = async (dtClient, workflowId, body) => {
     const workflowsclient = new client_automation_1.WorkflowsClient(dtClient);
     return await workflowsclient.updateWorkflow({
         id: workflowId,
-        body: body
+        body: body,
     });
 };
 exports.updateWorkflow = updateWorkflow;

package/dist/dynatrace-clients.js

@@ -1,105 +1 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.callAppFunction = exports.createOAuthClient = exports.ExtendedOauthClient = void 0;
-const http_client_1 = require("@dynatrace-sdk/http-client");
-const dt_app_1 = require("dt-app");
-const package_json_1 = require("../package.json");
-/**
- * Uses the provided oauth Client ID and Secret and requests a token
- * @param clientId - OAuth Client ID for Dynatrace
- * @param clientSecret - Oauth Client Secret for Dynatrace
- * @param authUrl - SSO Authentication URL
- * @param scopes - List of requested scopes
- * @returns
- */
-const requestToken = async (clientId, clientSecret, authUrl, scopes) => {
-    const res = await fetch(authUrl, {
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/x-www-form-urlencoded',
-        },
-        body: new URLSearchParams({
-            grant_type: 'client_credentials',
-            client_id: clientId,
-            client_secret: clientSecret,
-            scope: scopes.join(' '),
-        }),
-    });
-    // check if the response was okay (HTTP 2xx) or not (HTTP 4xx or 5xx)
-    if (!res.ok) {
-        // log the error
-        console.error(`Failed to fetch token: ${res.status} ${res.statusText}`);
-    }
-    // and return the JSON result, as it contains additional information
-    return await res.json();
-};
-/**
- * ExtendedOAuthClient that takes parameters for clientId, secret, scopes, environmentUrl, authUrl, and the version of the dynatrace-mcp-server
- */
-class ExtendedOauthClient extends http_client_1._OAuthHttpClient {
-    userAgent;
-    constructor(config, userAgent) {
-        super(config);
-        this.userAgent = userAgent;
-    }
-    send(options) {
-        // add the user-agent header to the request
-        options.headers = {
-            ...options.headers,
-            'User-Agent': this.userAgent,
-        };
-        // call the parent send method
-        return super.send(options);
-    }
-}
-exports.ExtendedOauthClient = ExtendedOauthClient;
-/** Create an Oauth Client based on clientId, clientSecret, environmentUrl and scopes */
-const createOAuthClient = async (clientId, clientSecret, environmentUrl, scopes) => {
-    if (!clientId) {
-        throw new Error('Failed to retrieve OAuth client id from env "DT_APP_OAUTH_CLIENT_ID"');
-    }
-    if (!clientSecret) {
-        throw new Error('Failed to retrieve OAuth client secret from env "DT_APP_OAUTH_CLIENT_SECRET"');
-    }
-    if (!environmentUrl) {
-        throw new Error('Failed to retrieve environment URL from env "DT_ENVIRONMENT"');
-    }
-    console.error(`Trying to authenticate API Calls to ${environmentUrl} via OAuthClientId ${clientId}`);
-    const ssoBaseUrl = await (0, dt_app_1.getSSOUrl)(environmentUrl);
-    const ssoAuthUrl = new URL('/sso/oauth2/token', ssoBaseUrl).toString();
-    console.error(`Using SSO auth URL: ${ssoAuthUrl}`);
-    // try to request a token, just to verify that everything is set up correctly
-    const tokenResponse = await requestToken(clientId, clientSecret, ssoAuthUrl, scopes);
-    // in case we didn't get a token, or error / error_description / issueId is set, we throw an error
-    if (!tokenResponse.access_token || tokenResponse.error || tokenResponse.error_description || tokenResponse.issueId) {
-        throw new Error(`Failed to retrieve OAuth token (IssueId: ${tokenResponse.issueId}): ${tokenResponse.error} - ${tokenResponse.error_description}. Note: Your OAuth client is most likely not configured correctly.`);
-    }
-    console.error(`Successfully retrieved token from SSO!`);
-    const userAgent = `dynatrace-mcp-server/v${package_json_1.version} (${process.platform}-${process.arch})`;
-    return new ExtendedOauthClient({
-        scopes,
-        clientId,
-        secret: clientSecret,
-        environmentUrl,
-        authUrl: ssoAuthUrl,
-    }, userAgent);
-};
-exports.createOAuthClient = createOAuthClient;
-/** Helper function to call an app-function via platform-api */
-const callAppFunction = async (dtClient, appId, functionName, payload) => {
-    console.error(`Sending payload ${JSON.stringify(payload)}`);
-    const response = await dtClient.send({
-        url: `/platform/app-engine/app-functions/v1/apps/${appId}/api/${functionName}`,
-        method: 'POST',
-        headers: {
-            'Accept': 'application/json',
-            'Content-Type': 'application/json',
-        },
-        body: payload,
-        statusValidator: (status) => {
-            return [200].includes(status);
-        },
-    });
-    return await response.body('json');
-};
-exports.callAppFunction = callAppFunction;

package/dist/getDynatraceEnv.js

@@ -9,15 +9,15 @@ function getDynatraceEnv(env = process.env) {
     const oauthClient = env.OAUTH_CLIENT_ID;
     const oauthClientSecret = env.OAUTH_CLIENT_SECRET;
     const dtEnvironment = env.DT_ENVIRONMENT;
-    const slackConnectionId = env.SLACK_CONNECTION_ID || "fake-slack-connection-id";
+    const slackConnectionId = env.SLACK_CONNECTION_ID || 'fake-slack-connection-id';
     if (!oauthClient || !oauthClientSecret || !dtEnvironment) {
-        throw new Error("Please set OAUTH_CLIENT_ID and OAUTH_CLIENT_SECRET and DT_ENVIRONMENT environment variables");
+        throw new Error('Please set OAUTH_CLIENT_ID and OAUTH_CLIENT_SECRET and DT_ENVIRONMENT environment variables');
     }
-    if (!dtEnvironment.startsWith("https://")) {
-        throw new Error("Please set DT_ENVIRONMENT to a valid Dynatrace Environment URL (e.g., https://<environment-id>.apps.dynatrace.com)");
+    if (!dtEnvironment.startsWith('https://')) {
+        throw new Error('Please set DT_ENVIRONMENT to a valid Dynatrace Environment URL (e.g., https://<environment-id>.apps.dynatrace.com)');
     }
-    if (!dtEnvironment.includes("apps.dynatrace.com") && !dtEnvironment.includes("apps.dynatracelabs.com")) {
-        throw new Error("Please set DT_ENVIRONMENT to a valid Dynatrace Platform Environment URL (e.g., https://<environment-id>.apps.dynatrace.com)");
+    if (!dtEnvironment.includes('apps.dynatrace.com') && !dtEnvironment.includes('apps.dynatracelabs.com')) {
+        throw new Error('Please set DT_ENVIRONMENT to a valid Dynatrace Platform Environment URL (e.g., https://<environment-id>.apps.dynatrace.com)');
     }
     return { oauthClient, oauthClientSecret, dtEnvironment, slackConnectionId };
 }

package/dist/getDynatraceEnv.test.js

@@ -1,58 +1,70 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const getDynatraceEnv_1 = require("./getDynatraceEnv");
-describe("getDynatraceEnv", () => {
+describe('getDynatraceEnv', () => {
     const baseEnv = {
-        OAUTH_CLIENT_ID: "dt0s02.SAMPLE",
-        OAUTH_CLIENT_SECRET: "dt0s02.SAMPLE.abcd1234",
-        DT_ENVIRONMENT: "https://abc123.apps.dynatrace.com",
-        SLACK_CONNECTION_ID: "slack-conn-id"
+        OAUTH_CLIENT_ID: 'dt0s02.SAMPLE',
+        OAUTH_CLIENT_SECRET: 'dt0s02.SAMPLE.abcd1234',
+        DT_ENVIRONMENT: 'https://abc123.apps.dynatrace.com',
+        SLACK_CONNECTION_ID: 'slack-conn-id',
     };
-    it("returns all required values when environment is valid", () => {
+    it('returns all required values when environment is valid', () => {
         const env = { ...baseEnv };
         const result = (0, getDynatraceEnv_1.getDynatraceEnv)(env);
         expect(result).toEqual({
             oauthClient: env.OAUTH_CLIENT_ID,
             oauthClientSecret: env.OAUTH_CLIENT_SECRET,
             dtEnvironment: env.DT_ENVIRONMENT,
-            slackConnectionId: env.SLACK_CONNECTION_ID
+            slackConnectionId: env.SLACK_CONNECTION_ID,
         });
     });
-    it("uses default slackConnectionId if not set", () => {
+    it('uses default slackConnectionId if not set', () => {
         const env = { ...baseEnv, SLACK_CONNECTION_ID: undefined };
         const result = (0, getDynatraceEnv_1.getDynatraceEnv)(env);
-        expect(result.slackConnectionId).toBe("fake-slack-connection-id");
+        expect(result.slackConnectionId).toBe('fake-slack-connection-id');
     });
-    it("throws if OAUTH_CLIENT_ID is missing", () => {
+    it('throws if OAUTH_CLIENT_ID is missing', () => {
         const env = { ...baseEnv, OAUTH_CLIENT_ID: undefined };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).toThrow(/OAUTH_CLIENT_ID/);
     });
-    it("throws if OAUTH_CLIENT_SECRET is missing", () => {
+    it('throws if OAUTH_CLIENT_SECRET is missing', () => {
         const env = { ...baseEnv, OAUTH_CLIENT_SECRET: undefined };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).toThrow(/OAUTH_CLIENT_SECRET/);
     });
-    it("throws if DT_ENVIRONMENT is missing", () => {
+    it('throws if DT_ENVIRONMENT is missing', () => {
         const env = { ...baseEnv, DT_ENVIRONMENT: undefined };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).toThrow(/DT_ENVIRONMENT/);
     });
-    it("throws if DT_ENVIRONMENT does not start with https://", () => {
-        const env = { ...baseEnv, DT_ENVIRONMENT: "http://abc123.apps.dynatrace.com" };
+    it('throws if DT_ENVIRONMENT does not start with https://', () => {
+        const env = {
+            ...baseEnv,
+            DT_ENVIRONMENT: 'http://abc123.apps.dynatrace.com',
+        };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).toThrow(/https:\/\//);
     });
-    it("throws if DT_ENVIRONMENT is not a Dynatrace Platform URL (any URL)", () => {
-        const env = { ...baseEnv, DT_ENVIRONMENT: "https://abc123.example.com" };
+    it('throws if DT_ENVIRONMENT is not a Dynatrace Platform URL (any URL)', () => {
+        const env = { ...baseEnv, DT_ENVIRONMENT: 'https://abc123.example.com' };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).toThrow(/Dynatrace Platform Environment URL/);
     });
-    it("throws if DT_ENVIRONMENT is not a Dynatrace Platform URL (contains live)", () => {
-        const env = { ...baseEnv, DT_ENVIRONMENT: "https://abc123.live.dynatrace.com" };
+    it('throws if DT_ENVIRONMENT is not a Dynatrace Platform URL (contains live)', () => {
+        const env = {
+            ...baseEnv,
+            DT_ENVIRONMENT: 'https://abc123.live.dynatrace.com',
+        };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).toThrow(/Dynatrace Platform Environment URL/);
     });
-    it("accepts DT_ENVIRONMENT with apps.dynatracelabs.com", () => {
-        const env = { ...baseEnv, DT_ENVIRONMENT: "https://xyz789.apps.dynatracelabs.com" };
+    it('accepts DT_ENVIRONMENT with apps.dynatracelabs.com', () => {
+        const env = {
+            ...baseEnv,
+            DT_ENVIRONMENT: 'https://xyz789.apps.dynatracelabs.com',
+        };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).not.toThrow();
     });
-    it("accepts DT_ENVIRONMENT with apps.dynatrace.com", () => {
-        const env = { ...baseEnv, DT_ENVIRONMENT: "https://env123.apps.dynatrace.com" };
+    it('accepts DT_ENVIRONMENT with apps.dynatrace.com', () => {
+        const env = {
+            ...baseEnv,
+            DT_ENVIRONMENT: 'https://env123.apps.dynatrace.com',
+        };
         expect(() => (0, getDynatraceEnv_1.getDynatraceEnv)(env)).not.toThrow();
     });
 });

package/dist/index.js

@@ -8,7 +8,7 @@ const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const dotenv_1 = require("dotenv");
 const zod_1 = require("zod");
 const package_json_1 = require("../package.json");
-const dynatrace_clients_1 = require("./dynatrace-clients");
+const dynatrace_clients_1 = require("./authentication/dynatrace-clients");
 const list_vulnerabilities_1 = require("./capabilities/list-vulnerabilities");
 const list_problems_1 = require("./capabilities/list-problems");
 const get_problem_details_1 = require("./capabilities/get-problem-details");
@@ -24,38 +24,10 @@ const send_slack_message_1 = require("./capabilities/send-slack-message");
 const find_monitored_entity_by_name_1 = require("./capabilities/find-monitored-entity-by-name");
 const getDynatraceEnv_1 = require("./getDynatraceEnv");
 (0, dotenv_1.config)();
-let scopes = [
+let scopesBase = [
     'app-engine:apps:run', // needed for environmentInformationClient
     'app-engine:functions:run', // needed for environmentInformationClient
-    'hub:catalog:read', // get details about installed Apps on Dynatrace Environment
-    'environment-api:security-problems:read', // needed for reading security problems
-    'environment-api:entities:read', // read monitored entities
-    'environment-api:problems:read', // get problems
-    'environment-api:metrics:read', // read metrics
-    'environment-api:slo:read', // read SLOs
-    'settings:objects:read', // needed for reading settings objects, like ownership information and Guardians (SRG) from settings
-    // 'settings:objects:write', // [OPTIONAL] not used right now
-    // Grail related permissions: https://docs.dynatrace.com/docs/discover-dynatrace/platform/grail/data-model/assign-permissions-in-grail
-    'storage:buckets:read', // Read all system data stored on Grail
-    'storage:logs:read', // Read logs for reliability guardian validations
-    'storage:metrics:read', // Read metrics for reliability guardian validations
-    'storage:bizevents:read', // Read bizevents for reliability guardian validations
-    'storage:spans:read', // Read spans from Grail
-    'storage:entities:read', // Read Entities from Grail
-    'storage:events:read', // Read events from Grail
-    'storage:system:read', // Read System Data from Grail
-    'storage:user.events:read', // Read User events from Grail
-    'storage:user.sessions:read', // Read User sessions from Grail
 ];
-// configurable call for app settings scope (not available on all environments)
-if (process.env.USE_APP_SETTINGS) {
-    scopes.push('app-settings:objects:read'); // needed when using app settings in Workflows, see below
-}
-if (process.env.USE_WORKFLOWS) {
-    scopes.push('automation:workflows:read'); // read workflows
-    scopes.push('automation:workflows:write'); // write workflows
-    scopes.push('automation:workflows:run'); // execute workflows
-}
 const main = async () => {
     // read Environment variables
     let dynatraceEnv;
@@ -67,11 +39,9 @@ const main = async () => {
         process.exit(1);
     }
     const { oauthClient, oauthClientSecret, dtEnvironment, slackConnectionId } = dynatraceEnv;
-    // create an oauth-client
-    const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopes);
     console.error(`Starting Dynatrace MCP Server v${package_json_1.version}...`);
     const server = new mcp_js_1.McpServer({
-        name: "Dynatrace MCP Server",
+        name: 'Dynatrace MCP Server',
         version: package_json_1.version,
     }, {
         capabilities: {
@@ -84,7 +54,7 @@ const main = async () => {
             try {
                 const response = await cb(args);
                 return {
-                    content: [{ type: "text", text: response }],
+                    content: [{ type: 'text', text: response }],
                 };
             }
             catch (error) {
@@ -93,13 +63,15 @@ const main = async () => {
                     const e = error;
                     let additionalErrorInformation = '';
                     if (e.response.status == 403) {
-                        additionalErrorInformation = 'Note: Your user or service-user is most likely lacking the necessary permissions/scopes for this API Call.';
+                        additionalErrorInformation =
+                            'Note: Your user or service-user is most likely lacking the necessary permissions/scopes for this API Call.';
                     }
                     return {
-                        content: [{
-                                type: "text",
-                                text: `Client Request Error: ${e.message} with HTTP status: ${e.response.status}. ${additionalErrorInformation} (body: ${JSON.stringify(e.body)})`
-                            }
+                        content: [
+                            {
+                                type: 'text',
+                                text: `Client Request Error: ${e.message} with HTTP status: ${e.response.status}. ${additionalErrorInformation} (body: ${JSON.stringify(e.body)})`,
+                            },
                         ],
                         isError: true,
                     };
@@ -107,14 +79,16 @@ const main = async () => {
                 // else: We don't know what kind of error happened - best-case we can provide error.message
                 console.log(error);
                 return {
-                    content: [{ type: "text", text: `Error: ${error.message}` }],
+                    content: [{ type: 'text', text: `Error: ${error.message}` }],
                     isError: true,
                 };
             }
         };
-        server.tool(name, description, paramsSchema, args => wrappedCb(args));
+        server.tool(name, description, paramsSchema, (args) => wrappedCb(args));
     };
-    tool("get_environment_info", "Get information about the connected Dynatrace Environment (Tenant)", {}, async ({}) => {
+    tool('get_environment_info', 'Get information about the connected Dynatrace Environment (Tenant)', {}, async ({}) => {
+        // create an oauth-client
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase);
         const environmentInformationClient = new client_platform_management_service_1.EnvironmentInformationClient(dtClient);
         const environmentInfo = await environmentInformationClient.getEnvironmentInformation();
         let resp = `Environment Information (also referred to as tenant):
@@ -122,10 +96,11 @@ const main = async () => {
         resp += `You can reach it via ${dtEnvironment}\n`;
         return resp;
     });
-    tool("list_vulnerabilities", "List all vulnerabilities from Dynatrace", {}, async ({}) => {
+    tool('list_vulnerabilities', 'List all vulnerabilities from Dynatrace', {}, async ({}) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('environment-api:security-problems:read'));
         const result = await (0, list_vulnerabilities_1.listVulnerabilities)(dtClient);
         if (!result || result.length === 0) {
-            return "No vulnerabilities found";
+            return 'No vulnerabilities found';
         }
         let resp = `Found the following vulnerabilities:`;
         result.forEach((vulnerability) => {
@@ -134,12 +109,13 @@ const main = async () => {
         resp += `\nWe recommend to take a look at ${dtEnvironment}/ui/apps/dynatrace.security.vulnerabilities to get a better overview of vulnerabilities.\n`;
         return resp;
     });
-    tool("get_vulnerabilty_details", "Get details of a vulnerability by `securityProblemId` on Dynatrace", {
-        securityProblemId: zod_1.z.string().optional()
+    tool('get_vulnerabilty_details', 'Get details of a vulnerability by `securityProblemId` on Dynatrace', {
+        securityProblemId: zod_1.z.string().optional(),
     }, async ({ securityProblemId }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('environment-api:security-problems:read'));
         const result = await (0, get_vulnerability_details_1.getVulnerabilityDetails)(dtClient, securityProblemId);
         let resp = `The Security Problem (Vulnerability) ${result.displayId} with securityProblemId ${result.securityProblemId} has the title ${result.title}.\n`;
-        resp += `The related CVEs are ${result.cveIds?.join(",") || "unknown"}.\n`;
+        resp += `The related CVEs are ${result.cveIds?.join(',') || 'unknown'}.\n`;
         resp += `The description is: ${result.description}.\n`;
         resp += `The remediation description is: ${result.remediationDescription}.\n`;
         if (result.affectedEntities && result.affectedEntities.length > 0) {
@@ -181,16 +157,18 @@ const main = async () => {
         resp += `Tell the user to access the link ${dtEnvironment}/ui/apps/dynatrace.security.vulnerabilities/vulnerabilities/${result.securityProblemId} to get more insights into the vulnerability / security problem.\n`;
         return resp;
     });
-    tool("list_problems", "List all problems known on Dynatrace", {}, async ({}) => {
+    tool('list_problems', 'List all problems known on Dynatrace', {}, async ({}) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('environment-api:problems:read'));
         const result = await (0, list_problems_1.listProblems)(dtClient);
         if (!result || result.length === 0) {
-            return "No problems found";
+            return 'No problems found';
         }
-        return `Found these problems: ${result.join(",")}`;
+        return `Found these problems: ${result.join(',')}`;
     });
-    tool("get_problem_details", "Get details of a problem on Dynatrace", {
-        problemId: zod_1.z.string().optional()
+    tool('get_problem_details', 'Get details of a problem on Dynatrace', {
+        problemId: zod_1.z.string().optional(),
     }, async ({ problemId }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('environment-api:problems:read'));
         const result = await (0, get_problem_details_1.getProblemDetails)(dtClient, problemId);
         let resp = `The problem ${result.displayId} with the title ${result.title} (ID: ${result.problemId}).` +
             `The severity is ${result.severityLevel}, and it affects ${result.affectedEntities.length} entities:`;
@@ -211,48 +189,53 @@ const main = async () => {
         resp += `Tell the user to access the link ${dtEnvironment}/ui/apps/dynatrace.davis.problems/problem/${result.problemId} to get more insights into the problem.\n`;
         return resp;
     });
-    tool("find_entity_by_name", "Get the entityId of a monitored entity based on the name of the entity on Dynatrace", {
-        entityName: zod_1.z.string()
+    tool('find_entity_by_name', 'Get the entityId of a monitored entity based on the name of the entity on Dynatrace', {
+        entityName: zod_1.z.string(),
     }, async ({ entityName }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('environment-api:entities:read', 'storage:entities:read'));
         const entityResponse = await (0, find_monitored_entity_by_name_1.findMonitoredEntityByName)(dtClient, entityName);
         return entityResponse;
     });
-    tool("get_entity_details", "Get details of a monitored entity based on the entityId on Dynatrace", {
-        entityId: zod_1.z.string().optional()
+    tool('get_entity_details', 'Get details of a monitored entity based on the entityId on Dynatrace', {
+        entityId: zod_1.z.string().optional(),
     }, async ({ entityId }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('environment-api:entities:read'));
         const entityDetails = await (0, get_monitored_entity_details_1.getMonitoredEntityDetails)(dtClient, entityId);
         let resp = `Entity ${entityDetails.displayName} of type ${entityDetails.type} with \`entityId\` ${entityDetails.entityId}\n` +
             `Properties: ${JSON.stringify(entityDetails.properties)}\n`;
-        if (entityDetails.type == "SERVICE") {
+        if (entityDetails.type == 'SERVICE') {
             resp += `You can find more information about the service at ${dtEnvironment}/ui/apps/dynatrace.services/explorer?detailsId=${entityDetails.entityId}&sidebarOpen=false`;
         }
-        else if (entityDetails.type == "HOST") {
+        else if (entityDetails.type == 'HOST') {
             resp += `You can find more information about the host at ${dtEnvironment}/ui/apps/dynatrace.infraops/hosts/${entityDetails.entityId}`;
         }
-        else if (entityDetails.type == "KUBERNETES_CLUSTER") {
+        else if (entityDetails.type == 'KUBERNETES_CLUSTER') {
             resp += `You can find more information about the cluster at ${dtEnvironment}/ui/apps/dynatrace.infraops/kubernetes/${entityDetails.entityId}`;
         }
-        else if (entityDetails.type == "CLOUD_APPLICATION") {
+        else if (entityDetails.type == 'CLOUD_APPLICATION') {
             resp += `You can find more details about the application at ${dtEnvironment}/ui/apps/dynatrace.kubernetes/explorer/workload?detailsId=${entityDetails.entityId}`;
         }
         return resp;
     });
-    tool("send_slack_message", "Sends a Slack message to a dedicated Slack Channel via Slack Connector on Dynatrace", {
+    tool('send_slack_message', 'Sends a Slack message to a dedicated Slack Channel via Slack Connector on Dynatrace', {
         channel: zod_1.z.string().optional(),
-        message: zod_1.z.string().optional()
+        message: zod_1.z.string().optional(),
     }, async ({ channel, message }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('app-settings:objects:read'));
         const response = await (0, send_slack_message_1.sendSlackMessage)(dtClient, slackConnectionId, channel, message);
         return `Message sent to Slack channel: ${JSON.stringify(response)}`;
     });
-    tool("get_logs_for_entity", "Get Logs for a monitored entity based on name of the entity on Dynatrace", {
-        entityName: zod_1.z.string().optional()
+    tool('get_logs_for_entity', 'Get Logs for a monitored entity based on name of the entity on Dynatrace', {
+        entityName: zod_1.z.string().optional(),
     }, async ({ entityName }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('storage:logs:read'));
         const logs = await (0, get_logs_for_entity_1.getLogsForEntity)(dtClient, entityName);
-        return `Logs:\n${JSON.stringify(logs?.map(logLine => logLine ? logLine.content : 'Empty log'))}`;
+        return `Logs:\n${JSON.stringify(logs?.map((logLine) => (logLine ? logLine.content : 'Empty log')))}`;
     });
-    tool("verify_dql", "Verify a Dynatrace Query Language (DQL) statement on Dynatrace GRAIL before executing it. This is useful to ensure that the DQL statement is valid and can be executed without errors.", {
-        dqlStatement: zod_1.z.string()
+    tool('verify_dql', 'Verify a Dynatrace Query Language (DQL) statement on Dynatrace GRAIL before executing it. This is useful to ensure that the DQL statement is valid and can be executed without errors.', {
+        dqlStatement: zod_1.z.string(),
     }, async ({ dqlStatement }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase);
         const response = await (0, execute_dql_1.verifyDqlStatement)(dtClient, dqlStatement);
         let resp = 'DQL Statement Verification:\n';
         if (response.notifications && response.notifications.length > 0) {
@@ -269,24 +252,36 @@ const main = async () => {
         }
         return resp;
     });
-    tool("execute_dql", 'Get Logs, Metrics, Spans or Events from Dynatrace GRAIL by executing a Dynatrace Query Language (DQL) statement. Always use "verify_dql" tool before you execute a DQL statement. A valid statement looks like this: "fetch [logs, metrics, spans, events] | filter <some-filter> | summarize count(), by:{some-fields}. Adapt filters for certain attributes: `traceId` could be `trace_id` or `trace.id`.', {
-        dqlStatement: zod_1.z.string()
+    tool('execute_dql', 'Get Logs, Metrics, Spans or Events from Dynatrace GRAIL by executing a Dynatrace Query Language (DQL) statement. Always use "verify_dql" tool before you execute a DQL statement. A valid statement looks like this: "fetch [logs, metrics, spans, events] | filter <some-filter> | summarize count(), by:{some-fields}. Adapt filters for certain attributes: `traceId` could be `trace_id` or `trace.id`.', {
+        dqlStatement: zod_1.z.string(),
     }, async ({ dqlStatement }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('storage:buckets:read', // Read all system data stored on Grail
+        'storage:logs:read', // Read logs for reliability guardian validations
+        'storage:metrics:read', // Read metrics for reliability guardian validations
+        'storage:bizevents:read', // Read bizevents for reliability guardian validations
+        'storage:spans:read', // Read spans from Grail
+        'storage:entities:read', // Read Entities from Grail
+        'storage:events:read', // Read events from Grail
+        'storage:system:read', // Read System Data from Grail
+        'storage:user.events:read', // Read User events from Grail
+        'storage:user.sessions:read', // Read User sessions from Grail
+        'storage:security.events:read'));
         const response = await (0, execute_dql_1.executeDql)(dtClient, dqlStatement);
         return `DQL Response: ${JSON.stringify(response)}`;
     });
-    tool("create_workflow_for_notification", "Create a notification for a team based on a problem type within Workflows in Dynatrace", {
+    tool('create_workflow_for_notification', 'Create a notification for a team based on a problem type within Workflows in Dynatrace', {
         problemType: zod_1.z.string().optional(),
         teamName: zod_1.z.string().optional(),
         channel: zod_1.z.string().optional(),
-        isPrivate: zod_1.z.boolean().optional().default(false)
+        isPrivate: zod_1.z.boolean().optional().default(false),
     }, async ({ problemType, teamName, channel, isPrivate }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('automation:workflows:write', 'automation:workflows:read', 'automation:workflows:run'));
         const response = await (0, create_workflow_for_problem_notification_1.createWorkflowForProblemNotification)(dtClient, teamName, channel, problemType, isPrivate);
         let resp = `Workflow Created: ${response?.id} with name ${response?.title}.\nYou can access the Workflow via the following link: ${dtEnvironment}/ui/apps/dynatrace.automations/workflows/${response?.id}.\nTell the user to inspect the Workflow by visiting the link.\n`;
-        if (response.type == "SIMPLE") {
+        if (response.type == 'SIMPLE') {
             resp += `Note: This is a simple workflow. Workflow-hours will not be billed.\n`;
         }
-        else if (response.type == "STANDARD") {
+        else if (response.type == 'STANDARD') {
             resp += `Note: This is a standard workflow. Workflow-hours will be billed.\n`;
         }
         if (isPrivate) {
@@ -294,23 +289,29 @@ const main = async () => {
         }
         return resp;
     });
-    tool("make_workflow_public", "Modify a workflow and make it publicly available to everyone on the Dynatrace Environment", {
-        workflowId: zod_1.z.string().optional()
+    tool('make_workflow_public', 'Modify a workflow and make it publicly available to everyone on the Dynatrace Environment', {
+        workflowId: zod_1.z.string().optional(),
     }, async ({ workflowId }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('automation:workflows:write', 'automation:workflows:read', 'automation:workflows:run'));
         const response = await (0, update_workflow_1.updateWorkflow)(dtClient, workflowId, {
             isPrivate: false,
         });
         return `Workflow ${response.id} is now public!\nYou can access the Workflow via the following link: ${dtEnvironment}/ui/apps/dynatrace.automations/workflows/${response?.id}.\nTell the user to inspect the Workflow by visiting the link.\n`;
     });
-    tool("get_kubernetes_events", "Get all events from a specific Kubernetes (K8s) cluster", {
-        clusterId: zod_1.z.string().optional().describe(`The Kubernetes (K8s) Cluster Id, referred to as k8s.cluster.uid (this is NOT the Dynatrace environment)`)
+    tool('get_kubernetes_events', 'Get all events from a specific Kubernetes (K8s) cluster', {
+        clusterId: zod_1.z
+            .string()
+            .optional()
+            .describe(`The Kubernetes (K8s) Cluster Id, referred to as k8s.cluster.uid (this is NOT the Dynatrace environment)`),
     }, async ({ clusterId }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('storage:events:read'));
         const events = await (0, get_events_for_cluster_1.getEventsForCluster)(dtClient, clusterId);
         return `Kubernetes Events:\n${JSON.stringify(events)}`;
     });
-    tool("get_ownership", "Get detailed Ownership information for one or multiple entities on Dynatrace", {
-        entityIds: zod_1.z.string().optional().describe("Comma separated list of entityIds"),
+    tool('get_ownership', 'Get detailed Ownership information for one or multiple entities on Dynatrace', {
+        entityIds: zod_1.z.string().optional().describe('Comma separated list of entityIds'),
     }, async ({ entityIds }) => {
+        const dtClient = await (0, dynatrace_clients_1.createOAuthClient)(oauthClient, oauthClientSecret, dtEnvironment, scopesBase.concat('environment-api:entities:read', 'settings:objects:read'));
         console.error(`Fetching ownership for ${entityIds}`);
         const ownershipInformation = await (0, get_ownership_information_1.getOwnershipInformation)(dtClient, entityIds);
         console.error(`Done!`);
@@ -319,11 +320,11 @@ const main = async () => {
         return resp;
     });
     const transport = new stdio_js_1.StdioServerTransport();
-    console.error("Connecting server to transport...");
+    console.error('Connecting server to transport...');
     await server.connect(transport);
-    console.error("Dynatrace MCP Server running on stdio");
+    console.error('Dynatrace MCP Server running on stdio');
 };
 main().catch((error) => {
-    console.error("Fatal error in main():", error);
+    console.error('Fatal error in main():', error);
     process.exit(1);
 });

package/dist/types/http-client-types.js

@@ -0,0 +1 @@
+"use strict";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynatrace-oss/dynatrace-mcp-server",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Model Context Protocol (MCP) server for Dynatrace",
   "keywords": [
     "Dynatrace",
@@ -37,7 +37,9 @@
     "build": "tsc --build",
     "prepare": "npm run build",
     "watch": "tsc --watch",
-    "test": "jest"
+    "test": "jest",
+    "prettier": "prettier --check .",
+    "prettier:fix": "prettier --write ."
   },
   "author": "Dynatrace",
   "license": "MIT",
@@ -56,6 +58,7 @@
     "@types/jest": "^30.0.0",
     "@types/node": "^22",
     "jest": "^30.0.0",
+    "prettier": "^3.6.2",
     "ts-jest": "^29.4.0",
     "ts-node": "^10.9.2",
     "typescript": "^5.6.2"