graylog-mcp-fix 1.0.0

package/.claude/settings.local.json

@@ -0,0 +1,9 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(npx tsc:*)",
+      "Bash(echo \"Exit: $?\")",
+      "Bash(git:*)"
+    ]
+  }
+}

package/AGENTS.md

@@ -0,0 +1,61 @@
+# graylog-mcp-fix
+
+## What this is
+
+A local MCP proxy for Graylog. It fetches tools from a remote Graylog MCP endpoint at startup, fixes their schemas and response data, then serves them to local MCP clients over stdio.
+
+## Run
+
+```bash
+node index.js
+# or
+npm start
+```
+
+## Architecture
+
+Single source file: `index.js` (plain JavaScript, ES modules, no build step)
+
+**Startup flow:**
+1. Load `.env` via `process.loadEnvFile()`
+2. Initialize session with remote Graylog MCP (`initialize` method)
+3. Fetch all tools (`tools/list`)
+4. Fix tool schemas: `resolveLocalRefs` → `fixOutputSchema`
+5. Start low-level `Server` (stdio transport) and register handlers
+
+**Request flow:**
+- `tools/list` → return fixed `remoteTools`
+- `tools/call` → proxy to Graylog, then fix response via `fixToolResponseContent` (text content) and `fixStructuredContent` (structured content)
+
+## Schema fixes applied
+
+### `resolveLocalRefs(schema)`
+- Replaces `$ref: "#/$defs/..."` nodes with `{}` (accept-any)
+- Strips all `$defs` sections
+- Collapses `allOf/anyOf/oneOf` where all items are now `{}` (were refs): removes `allOf`, `type`, and `required` from the node, making optional typed fields (like `unit`) accept null
+
+### `fixOutputSchema(schema, propName)`
+- `datarows` array properties: forces `items: { type: "object", additionalProperties: true }`
+- Non-root property schemas with `type: "object"`: removes `type` and `required` to allow null values (Graylog returns null for many optional object fields)
+
+## Response fixes applied
+
+### `fixToolResponseContent(content)` — text content
+- Converts `datarows` arrays-of-arrays to arrays-of-objects (keyed by field name)
+- Wraps `effective_timerange.from`/`.to` primitives into `{ type: "absolute", timestamp }` objects
+
+### `fixStructuredContent(obj, schema)` — structured content
+- Same datarows conversion, schema-aware (uses `field ?? name` from the schema array)
+- Same `effective_timerange` fix
+- Schema-aware: passes output schema through recursion so null replacements are guided by the schema
+
+## Why `Server` not `McpServer`
+
+`McpServer` requires Zod schemas for tool registration. This proxy receives raw JSON Schema from a remote server and can't convert at runtime. The SDK explicitly designates `Server` for "advanced use cases" like this proxy pattern.
+
+## Environment variables
+
+| Variable | Description |
+|---|---|
+| `GRAYLOG_TOKEN` | Raw API token — encoded as `base64(token:token)` for Basic Auth |
+| `GRAYLOG_MCP_URL` | Remote Graylog MCP endpoint |

package/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lauris Vavere
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,62 @@
+# graylog-mcp-fix
+
+A local MCP proxy that sits between your AI client and a Graylog MCP server, fixing schema and response compatibility issues that prevent standard MCP clients from working with Graylog's API.
+
+## Why
+
+Graylog's MCP implementation has several issues that cause MCP clients to reject its responses:
+
+- Output schemas contain `$ref`/`$defs` references that clients cannot resolve
+- `datarows` are returned as arrays-of-arrays instead of arrays-of-objects
+- `effective_timerange.from`/`.to` are returned as primitives but schemas require objects
+- Optional object fields (e.g. `unit`) are returned as `null` but schemas lack null support
+
+This proxy transparently fixes all of these on the fly.
+
+## Setup
+
+```bash
+npm install
+```
+
+Create a `.env` file in the project root:
+
+```
+GRAYLOG_TOKEN=your_api_token_here
+GRAYLOG_MCP_URL=https://your-graylog-instance/api/mcp
+```
+
+The token is used as HTTP Basic Auth: `Authorization: Basic base64(token:token)`.
+
+## Running
+
+```bash
+node index.js
+```
+
+## MCP client configuration
+
+For opencode (`~/.config/opencode/opencode.json`):
+
+```json
+{
+  "mcp": {
+    "graylog": {
+      "type": "local",
+      "command": "node /path/to/graylog-mcp-fix/index.js",
+      "enabled": true,
+      "environment": {
+        "GRAYLOG_MCP_URL": "Graylog MCP endpoint URL",
+        "GRAYLOG_TOKEN": "Graylog API token"
+      }
+    }
+  }
+}
+```
+
+## Environment variables
+
+| Variable | Default | Description |
+|---|---|---|
+| `GRAYLOG_TOKEN` | _(empty)_ | Graylog API token |
+| `GRAYLOG_MCP_URL` | _(built-in URL)_ | Graylog MCP endpoint URL |

package/dist/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,284 @@
+// Server (low-level) is used intentionally: McpServer requires Zod schemas but this
+// proxy receives raw JSON Schema from a remote server. The SDK docs explicitly say
+// "Only use Server for advanced use cases" — a dynamic proxy qualifies.
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+// Load .env file if present (Node 20.6+ built-in, no extra dependency needed)
+try {
+    process.loadEnvFile();
+}
+catch { /* .env not found, continue with process.env */ }
+const GRAYLOG_MCP_URL = process.env.GRAYLOG_MCP_URL ?? "";
+const GRAYLOG_TOKEN = process.env.GRAYLOG_TOKEN ?? "";
+const GRAYLOG_AUTH = "Basic " + Buffer.from(`${GRAYLOG_TOKEN}:token`).toString("base64");
+let sessionId;
+let remoteTools = [];
+async function graylogRequest(method, params = {}, skipError = false) {
+    const resp = await fetch(GRAYLOG_MCP_URL, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: GRAYLOG_AUTH,
+            ...(sessionId ? { "Mcp-Session-Id": sessionId } : {}),
+        },
+        body: JSON.stringify({
+            jsonrpc: "2.0",
+            id: Date.now(),
+            method,
+            params,
+        }),
+    });
+    const sid = resp.headers.get("Mcp-Session-Id");
+    if (sid)
+        sessionId = sid;
+    const data = await resp.json();
+    if (data.error) {
+        if (skipError)
+            return null;
+        throw new Error(`Graylog MCP error: ${data.error.message ?? JSON.stringify(data.error)}`);
+    }
+    if (!resp.ok) {
+        throw new Error(`Graylog MCP HTTP ${resp.status}: ${resp.statusText}`);
+    }
+    return data.result;
+}
+// Recursively replace any $ref pointing to a local $defs entry with an open schema ({})
+// and strip all $defs sections. Graylog emits $defs references (DateTime, Unit, etc.)
+// that MCP clients cannot resolve. Using {} (accepts any value) is safer than guessing
+// the concrete type — the actual type may be string, null, number, or object.
+function resolveLocalRefs(schema) {
+    if (!schema || typeof schema !== "object")
+        return schema;
+    if (Array.isArray(schema))
+        return schema.map(resolveLocalRefs);
+    if (typeof schema.$ref === "string" && schema.$ref.startsWith("#/$defs/")) {
+        return {};
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(schema)) {
+        if (key === "$defs")
+            continue;
+        result[key] = resolveLocalRefs(value);
+    }
+    // If allOf/anyOf/oneOf now contains only open schemas (all items were $refs → {}),
+    // the type definition came entirely from external $defs. Strip allOf, type, and
+    // required so the field accepts null (which Graylog actually returns for optional
+    // typed fields). Any inline properties become optional hints rather than constraints.
+    for (const kw of ["allOf", "anyOf", "oneOf"]) {
+        if (Array.isArray(result[kw])) {
+            const allOpen = result[kw].every((s) => typeof s === "object" && Object.keys(s).length === 0);
+            if (allOpen) {
+                delete result[kw];
+                delete result.type;
+                delete result.required;
+                break;
+            }
+        }
+    }
+    return result;
+}
+// Recursively walk schema by property name so we find datarows/from/to regardless
+// of how deeply they are nested or whether intermediate nodes lost their `properties`
+// via resolveLocalRefs $ref replacement.
+function fixOutputSchema(schema, propName) {
+    if (!schema || typeof schema !== "object" || Array.isArray(schema))
+        return schema;
+    // Any property named "datarows" that is an array → make items be plain objects.
+    // Handles both 1D (items = $ref→object) and 2D (items = array of $ref→object) cases.
+    if (propName === "datarows" && schema.type === "array") {
+        return { ...schema, items: { type: "object", additionalProperties: true } };
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(schema)) {
+        if (key === "properties" && value && typeof value === "object" && !Array.isArray(value)) {
+            // Recurse into each named property with its name
+            const newProps = {};
+            for (const [pName, pSchema] of Object.entries(value)) {
+                newProps[pName] = fixOutputSchema(pSchema, pName);
+            }
+            result[key] = newProps;
+        }
+        else if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+            result[key] = fixOutputSchema(value, key);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    // For non-root property schemas, remove type:"object" so null values pass validation.
+    // Graylog marks many fields as type:object but returns null for optional ones.
+    // Removing the constraint (not changing to an array type) is the safest approach.
+    if (propName !== undefined && result.type === "object") {
+        delete result.type;
+        delete result.required;
+    }
+    return result;
+}
+// Returns true if the JSON Schema node requires an object (not null).
+function schemaRequiresObject(schema) {
+    if (!schema || typeof schema !== "object")
+        return false;
+    if (schema.type === "object")
+        return true;
+    if (Array.isArray(schema.allOf))
+        return schema.allOf.some(schemaRequiresObject);
+    return false;
+}
+// Collect the merged properties map from a schema node (including allOf members).
+function schemaProperties(schema) {
+    if (!schema || typeof schema !== "object")
+        return {};
+    const props = { ...(schema.properties ?? {}) };
+    for (const s of schema.allOf ?? []) {
+        Object.assign(props, schemaProperties(s));
+    }
+    return props;
+}
+// Recursively fix structured content to match the output schema:
+//  - datarows arrays-of-arrays → arrays-of-objects
+//  - effective_timerange.from/.to primitives → objects
+//  - null values where the schema requires an object → {}
+function fixStructuredContent(obj, schema) {
+    if (obj === null || obj === undefined)
+        return obj;
+    if (typeof obj !== "object")
+        return obj;
+    if (Array.isArray(obj)) {
+        const itemSchema = schema?.items;
+        return obj.map((item) => fixStructuredContent(item, itemSchema));
+    }
+    const result = { ...obj };
+    const props = schemaProperties(schema);
+    // Fix effective_timerange.from/.to: Graylog returns these as timestamps (number/string)
+    // but the output schema requires objects.
+    if (result.effective_timerange && typeof result.effective_timerange === "object" &&
+        !Array.isArray(result.effective_timerange)) {
+        const tr = result.effective_timerange;
+        if (typeof tr.from === "number" || typeof tr.from === "string") {
+            tr.from = { type: "absolute", timestamp: tr.from };
+        }
+        if (typeof tr.to === "number" || typeof tr.to === "string") {
+            tr.to = { type: "absolute", timestamp: tr.to };
+        }
+    }
+    // If this level has both schema and datarows (array of arrays), transform in place
+    if (Array.isArray(result.schema) && Array.isArray(result.datarows) &&
+        result.datarows.length > 0 && Array.isArray(result.datarows[0])) {
+        const fieldNames = result.schema.map((s) => s.field ?? s.name ?? String(s));
+        result.datarows = result.datarows.map((row) => {
+            const o = {};
+            fieldNames.forEach((name, i) => { o[name] = row[i] ?? null; });
+            return o;
+        });
+        for (const key of Object.keys(result)) {
+            if (key !== "datarows" && key !== "schema") {
+                result[key] = fixStructuredContent(result[key], props[key]);
+            }
+        }
+        return result;
+    }
+    for (const key of Object.keys(result)) {
+        result[key] = fixStructuredContent(result[key], props[key]);
+    }
+    return result;
+}
+function fixToolResponseContent(content) {
+    for (const item of content) {
+        if (item?.type !== "text")
+            continue;
+        const textItem = item;
+        try {
+            const parsed = JSON.parse(textItem.text);
+            // Graylog returns {schema: [...], datarows: [[...], [...]]}
+            // Convert to {schema: [...], datarows: [{...}, {...}]}
+            if (parsed.datarows && Array.isArray(parsed.datarows) && parsed.schema && Array.isArray(parsed.schema)) {
+                const fieldNames = parsed.schema.map((s) => s.name);
+                parsed.datarows = parsed.datarows.map((row) => {
+                    const obj = {};
+                    fieldNames.forEach((name, i) => {
+                        obj[name] = row[i] ?? null;
+                    });
+                    return obj;
+                });
+            }
+            // Also handle nested data.datarows format
+            if (parsed.data?.datarows && parsed.data.metadata?.schema) {
+                const schema = parsed.data.metadata.schema;
+                if (Array.isArray(schema)) {
+                    const fieldNames = schema.map((s) => s.name);
+                    parsed.data.datarows = parsed.data.datarows.map((row) => {
+                        const obj = {};
+                        fieldNames.forEach((name, i) => {
+                            obj[name] = row[i] ?? null;
+                        });
+                        return obj;
+                    });
+                }
+            }
+            // Fix effective_timerange primitives -> objects
+            if (parsed.data?.metadata?.effective_timerange) {
+                const tr = parsed.data.metadata.effective_timerange;
+                if (typeof tr.from === "number" || typeof tr.from === "string") {
+                    tr.from = { type: "absolute", timestamp: tr.from };
+                }
+                if (typeof tr.to === "number" || typeof tr.to === "string") {
+                    tr.to = { type: "absolute", timestamp: tr.to };
+                }
+            }
+            textItem.text = JSON.stringify(parsed);
+        }
+        catch {
+            // not JSON, leave as-is
+        }
+    }
+    return content;
+}
+// Initialize session with remote server
+const initResult = await graylogRequest("initialize", {
+    protocolVersion: "2025-06-18",
+    capabilities: {},
+    clientInfo: { name: "graylog", version: "1.0.0" },
+});
+// Fetch remote tools
+const toolsResult = await graylogRequest("tools/list");
+remoteTools = toolsResult.tools ?? [];
+// Fix schemas on all tools: resolve local $ref/$defs that clients can't follow,
+// then apply Graylog-specific structural fixes.
+for (const tool of remoteTools) {
+    if (tool.inputSchema) {
+        tool.inputSchema = resolveLocalRefs(tool.inputSchema);
+    }
+    if (tool.outputSchema) {
+        tool.outputSchema = resolveLocalRefs(tool.outputSchema);
+        tool.outputSchema = fixOutputSchema(tool.outputSchema);
+    }
+}
+// Notify remote server we're initialized (may not be supported, ignore errors)
+try {
+    await graylogRequest("notifications/initialized", {}, true);
+}
+catch {
+    // Graylog MCP doesn't support this notification, skip
+}
+console.error(`graylog-mcp-fix: proxied ${remoteTools.length} tools from Graylog MCP`);
+const server = new Server({ name: "graylog", version: "1.0.0" }, { capabilities: { tools: { listChanged: false } } });
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: remoteTools,
+}));
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    const result = await graylogRequest("tools/call", { name, arguments: args });
+    if (result.content && Array.isArray(result.content)) {
+        result.content = fixToolResponseContent(result.content);
+    }
+    if (result.structuredContent) {
+        const toolSchema = remoteTools.find((t) => t.name === name)?.outputSchema;
+        result.structuredContent = fixStructuredContent(result.structuredContent, toolSchema);
+    }
+    return result;
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+console.error("graylog-mcp-fix running on stdio");
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mFAAmF;AACnF,wEAAwE;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAEnG,8EAA8E;AAC9E,IAAI,CAAC;IAAC,OAAO,CAAC,WAAW,EAAE,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;AAExF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;AAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;AACtD,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAEzF,IAAI,SAA6B,CAAC;AAClC,IAAI,WAAW,GAAU,EAAE,CAAC;AAE5B,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,SAAkC,EAAE,EAAE,SAAS,GAAG,KAAK;IACnG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,YAAY;YAC3B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,MAAM;YACN,MAAM;SACP,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,GAAG;QAAE,SAAS,GAAG,GAAG,CAAC;IAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,wFAAwF;AACxF,sFAAsF;AACtF,uFAAuF;AACvF,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,MAAW;IACnC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/D,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,mFAAmF;IACnF,gFAAgF;IAChF,kFAAkF;IAClF,sFAAsF;IACtF,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;YACnG,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClB,OAAO,MAAM,CAAC,IAAI,CAAC;gBACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;gBACvB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,sFAAsF;AACtF,yCAAyC;AACzC,SAAS,eAAe,CAAC,MAAW,EAAE,QAAiB;IACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAElF,gFAAgF;IAChF,qFAAqF;IACrF,IAAI,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,iDAAiD;YACjD,MAAM,QAAQ,GAAQ,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAA4B,CAAC,EAAE,CAAC;gBAC5E,QAAQ,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QACzB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,sFAAsF;IACtF,+EAA+E;IAC/E,kFAAkF;IAClF,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,IAAI,CAAC;QACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,SAAS,oBAAoB,CAAC,MAAW;IACvC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,MAAW;IACnC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,KAAK,GAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,mDAAmD;AACnD,uDAAuD;AACvD,0DAA0D;AAC1D,SAAS,oBAAoB,CAAC,GAAQ,EAAE,MAAY;IAClD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,MAAM,EAAE,KAAK,CAAC;QACjC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAEvC,wFAAwF;IACxF,0CAA0C;IAC1C,IAAI,MAAM,CAAC,mBAAmB,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ;QAC5E,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,mBAA8C,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/D,EAAE,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3D,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAc,EAAE,EAAE;YACvD,MAAM,CAAC,GAA4B,EAAE,CAAC;YACtC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAY,EAAE,CAAS,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAkB;IAChD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAK,IAA0B,EAAE,IAAI,KAAK,MAAM;YAAE,SAAS;QAC3D,MAAM,QAAQ,GAAG,IAAwB,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,4DAA4D;YAC5D,uDAAuD;YACvD,IAAI,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvG,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAc,EAAE,EAAE;oBACvD,MAAM,GAAG,GAA4B,EAAE,CAAC;oBACxC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAY,EAAE,CAAS,EAAE,EAAE;wBAC7C,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;oBAC7B,CAAC,CAAC,CAAC;oBACH,OAAO,GAAG,CAAC;gBACb,CAAC,CAAC,CAAC;YACL,CAAC;YACD,0CAA0C;YAC1C,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;gBAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC/D,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAc,EAAE,EAAE;wBACjE,MAAM,GAAG,GAA4B,EAAE,CAAC;wBACxC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAY,EAAE,CAAS,EAAE,EAAE;4BAC7C,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;wBAC7B,CAAC,CAAC,CAAC;wBACH,OAAO,GAAG,CAAC;oBACb,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,gDAAgD;YAChD,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;gBAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBACpD,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/D,EAAE,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;gBACrD,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAC3D,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjD,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE;IACpD,eAAe,EAAE,YAAY;IAC7B,YAAY,EAAE,EAAE;IAChB,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;CAClD,CAAC,CAAC;AAEH,qBAAqB;AACrB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;AACvD,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;AAEtC,gFAAgF;AAChF,gDAAgD;AAChD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,IAAI,CAAC;IACH,MAAM,cAAc,CAAC,2BAA2B,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAAC,MAAM,CAAC;IACP,sDAAsD;AACxD,CAAC;AAED,OAAO,CAAC,KAAK,CAAC,4BAA4B,WAAW,CAAC,MAAM,yBAAyB,CAAC,CAAC;AAEvF,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EACrC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CACpD,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,WAAW;CACnB,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY,CAAC;QAC/E,MAAM,CAAC,iBAAiB,GAAG,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC"}

package/index.js

@@ -0,0 +1,293 @@
+#!/usr/bin/env node
+// Server (low-level) is used intentionally: McpServer requires Zod schemas but this
+// proxy receives raw JSON Schema from a remote server. The SDK docs explicitly say
+// "Only use Server for advanced use cases" — a dynamic proxy qualifies.
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+
+// Load .env file if present (Node 20.6+ built-in, no extra dependency needed)
+try { process.loadEnvFile(); } catch { /* .env not found, continue with process.env */ }
+
+const GRAYLOG_MCP_URL = process.env.GRAYLOG_MCP_URL ?? "";
+const GRAYLOG_TOKEN = process.env.GRAYLOG_TOKEN ?? "";
+const GRAYLOG_AUTH = "Basic " + Buffer.from(`${GRAYLOG_TOKEN}:token`).toString("base64");
+
+let sessionId;
+let remoteTools = [];
+
+async function graylogRequest(method, params = {}, skipError = false) {
+  const resp = await fetch(GRAYLOG_MCP_URL, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: GRAYLOG_AUTH,
+      ...(sessionId ? { "Mcp-Session-Id": sessionId } : {}),
+    },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: Date.now(),
+      method,
+      params,
+    }),
+  });
+
+  const sid = resp.headers.get("Mcp-Session-Id");
+  if (sid) sessionId = sid;
+
+  const data = await resp.json();
+  if (data.error) {
+    if (skipError) return null;
+    throw new Error(`Graylog MCP error: ${data.error.message ?? JSON.stringify(data.error)}`);
+  }
+  if (!resp.ok) {
+    throw new Error(`Graylog MCP HTTP ${resp.status}: ${resp.statusText}`);
+  }
+  return data.result;
+}
+
+// Recursively replace any $ref pointing to a local $defs entry with an open schema ({})
+// and strip all $defs sections. Graylog emits $defs references (DateTime, Unit, etc.)
+// that MCP clients cannot resolve. Using {} (accepts any value) is safer than guessing
+// the concrete type — the actual type may be string, null, number, or object.
+function resolveLocalRefs(schema) {
+  if (!schema || typeof schema !== "object") return schema;
+  if (Array.isArray(schema)) return schema.map(resolveLocalRefs);
+  if (typeof schema.$ref === "string" && schema.$ref.startsWith("#/$defs/")) {
+    return {};
+  }
+  const result = {};
+  for (const [key, value] of Object.entries(schema)) {
+    if (key === "$defs") continue;
+    result[key] = resolveLocalRefs(value);
+  }
+  // If allOf/anyOf/oneOf now contains only open schemas (all items were $refs → {}),
+  // the type definition came entirely from external $defs. Strip allOf, type, and
+  // required so the field accepts null (which Graylog actually returns for optional
+  // typed fields). Any inline properties become optional hints rather than constraints.
+  for (const kw of ["allOf", "anyOf", "oneOf"]) {
+    if (Array.isArray(result[kw])) {
+      const allOpen = result[kw].every((s) => typeof s === "object" && Object.keys(s).length === 0);
+      if (allOpen) {
+        delete result[kw];
+        delete result.type;
+        delete result.required;
+        break;
+      }
+    }
+  }
+  return result;
+}
+
+// Recursively walk schema by property name so we find datarows/from/to regardless
+// of how deeply they are nested or whether intermediate nodes lost their `properties`
+// via resolveLocalRefs $ref replacement.
+function fixOutputSchema(schema, propName) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) return schema;
+
+  // Any property named "datarows" that is an array → make items be plain objects.
+  // Handles both 1D (items = $ref→object) and 2D (items = array of $ref→object) cases.
+  if (propName === "datarows" && schema.type === "array") {
+    return { ...schema, items: { type: "object", additionalProperties: true } };
+  }
+
+  const result = {};
+  for (const [key, value] of Object.entries(schema)) {
+    if (key === "properties" && value && typeof value === "object" && !Array.isArray(value)) {
+      // Recurse into each named property with its name
+      const newProps = {};
+      for (const [pName, pSchema] of Object.entries(value)) {
+        newProps[pName] = fixOutputSchema(pSchema, pName);
+      }
+      result[key] = newProps;
+    } else if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+      result[key] = fixOutputSchema(value, key);
+    } else {
+      result[key] = value;
+    }
+  }
+  // For non-root property schemas, remove type:"object" so null values pass validation.
+  // Graylog marks many fields as type:object but returns null for optional ones.
+  // Removing the constraint (not changing to an array type) is the safest approach.
+  if (propName !== undefined && result.type === "object") {
+    delete result.type;
+    delete result.required;
+  }
+  return result;
+}
+
+// Returns true if the JSON Schema node requires an object (not null).
+function schemaRequiresObject(schema) {
+  if (!schema || typeof schema !== "object") return false;
+  if (schema.type === "object") return true;
+  if (Array.isArray(schema.allOf)) return schema.allOf.some(schemaRequiresObject);
+  return false;
+}
+
+// Collect the merged properties map from a schema node (including allOf members).
+function schemaProperties(schema) {
+  if (!schema || typeof schema !== "object") return {};
+  const props = { ...(schema.properties ?? {}) };
+  for (const s of schema.allOf ?? []) {
+    Object.assign(props, schemaProperties(s));
+  }
+  return props;
+}
+
+// Recursively fix structured content to match the output schema:
+//  - datarows arrays-of-arrays → arrays-of-objects
+//  - effective_timerange.from/.to primitives → objects
+//  - null values where the schema requires an object → {}
+function fixStructuredContent(obj, schema) {
+  if (obj === null || obj === undefined) return obj;
+  if (typeof obj !== "object") return obj;
+  if (Array.isArray(obj)) {
+    const itemSchema = schema?.items;
+    return obj.map((item) => fixStructuredContent(item, itemSchema));
+  }
+
+  const result = { ...obj };
+  const props = schemaProperties(schema);
+
+  // Fix effective_timerange.from/.to: Graylog returns these as timestamps (number/string)
+  // but the output schema requires objects.
+  if (result.effective_timerange && typeof result.effective_timerange === "object" &&
+      !Array.isArray(result.effective_timerange)) {
+    const tr = result.effective_timerange;
+    if (typeof tr.from === "number" || typeof tr.from === "string") {
+      tr.from = { type: "absolute", timestamp: tr.from };
+    }
+    if (typeof tr.to === "number" || typeof tr.to === "string") {
+      tr.to = { type: "absolute", timestamp: tr.to };
+    }
+  }
+
+  // If this level has both schema and datarows (array of arrays), transform in place
+  if (Array.isArray(result.schema) && Array.isArray(result.datarows) &&
+      result.datarows.length > 0 && Array.isArray(result.datarows[0])) {
+    const fieldNames = result.schema.map((s) => s.field ?? s.name ?? String(s));
+    result.datarows = result.datarows.map((row) => {
+      const o = {};
+      fieldNames.forEach((name, i) => { o[name] = row[i] ?? null; });
+      return o;
+    });
+    for (const key of Object.keys(result)) {
+      if (key !== "datarows" && key !== "schema") {
+        result[key] = fixStructuredContent(result[key], props[key]);
+      }
+    }
+    return result;
+  }
+
+  for (const key of Object.keys(result)) {
+    result[key] = fixStructuredContent(result[key], props[key]);
+  }
+  return result;
+}
+
+function fixToolResponseContent(content) {
+  for (const item of content) {
+    if (item?.type !== "text") continue;
+    try {
+      const parsed = JSON.parse(item.text);
+      // Graylog returns {schema: [...], datarows: [[...], [...]]}
+      // Convert to {schema: [...], datarows: [{...}, {...}]}
+      if (parsed.datarows && Array.isArray(parsed.datarows) && parsed.schema && Array.isArray(parsed.schema)) {
+        const fieldNames = parsed.schema.map((s) => s.name);
+        parsed.datarows = parsed.datarows.map((row) => {
+          const obj = {};
+          fieldNames.forEach((name, i) => {
+            obj[name] = row[i] ?? null;
+          });
+          return obj;
+        });
+      }
+      // Also handle nested data.datarows format
+      if (parsed.data?.datarows && parsed.data.metadata?.schema) {
+        const schema = parsed.data.metadata.schema;
+        if (Array.isArray(schema)) {
+          const fieldNames = schema.map((s) => s.name);
+          parsed.data.datarows = parsed.data.datarows.map((row) => {
+            const obj = {};
+            fieldNames.forEach((name, i) => {
+              obj[name] = row[i] ?? null;
+            });
+            return obj;
+          });
+        }
+      }
+      // Fix effective_timerange primitives -> objects
+      if (parsed.data?.metadata?.effective_timerange) {
+        const tr = parsed.data.metadata.effective_timerange;
+        if (typeof tr.from === "number" || typeof tr.from === "string") {
+          tr.from = { type: "absolute", timestamp: tr.from };
+        }
+        if (typeof tr.to === "number" || typeof tr.to === "string") {
+          tr.to = { type: "absolute", timestamp: tr.to };
+        }
+      }
+      item.text = JSON.stringify(parsed);
+    } catch {
+      // not JSON, leave as-is
+    }
+  }
+  return content;
+}
+
+// Initialize session with remote server
+const initResult = await graylogRequest("initialize", {
+  protocolVersion: "2025-06-18",
+  capabilities: {},
+  clientInfo: { name: "graylog", version: "1.0.0" },
+});
+
+// Fetch remote tools
+const toolsResult = await graylogRequest("tools/list");
+remoteTools = toolsResult.tools ?? [];
+
+// Fix schemas on all tools: resolve local $ref/$defs that clients can't follow,
+// then apply Graylog-specific structural fixes.
+for (const tool of remoteTools) {
+  if (tool.inputSchema) {
+    tool.inputSchema = resolveLocalRefs(tool.inputSchema);
+  }
+  if (tool.outputSchema) {
+    tool.outputSchema = resolveLocalRefs(tool.outputSchema);
+    tool.outputSchema = fixOutputSchema(tool.outputSchema);
+  }
+}
+
+// Notify remote server we're initialized (may not be supported, ignore errors)
+try {
+  await graylogRequest("notifications/initialized", {}, true);
+} catch {
+  // Graylog MCP doesn't support this notification, skip
+}
+
+console.error(`graylog-mcp-fix: proxied ${remoteTools.length} tools from Graylog MCP`);
+
+const server = new Server(
+  { name: "graylog", version: "1.0.0" },
+  { capabilities: { tools: { listChanged: false } } },
+);
+
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+  tools: remoteTools,
+}));
+
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const { name, arguments: args } = request.params;
+  const result = await graylogRequest("tools/call", { name, arguments: args });
+  if (result.content && Array.isArray(result.content)) {
+    result.content = fixToolResponseContent(result.content);
+  }
+  if (result.structuredContent) {
+    const toolSchema = remoteTools.find((t) => t.name === name)?.outputSchema;
+    result.structuredContent = fixStructuredContent(result.structuredContent, toolSchema);
+  }
+  return result;
+});
+
+const transport = new StdioServerTransport();
+await server.connect(transport);
+console.error("graylog-mcp-fix running on stdio");

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "graylog-mcp-fix",
+  "version": "1.0.0",
+  "description": "Local MCP proxy for Graylog — fixes schemas and response data for standard MCP client compatibility",
+  "main": "index.js",
+  "bin": {
+    "graylog-mcp-fix": "index.js"
+  },
+  "scripts": {
+    "start": "node index.js"
+  },
+  "keywords": ["mcp", "graylog", "proxy"],
+  "author": "Lauris Vavere <lauris.vavere@gmail.com>",
+  "license": "MIT",
+  "type": "module",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0"
+  }
+}