Report #54509
[gotcha] Executing MCP tools without logging the full argument payload and return status
Implement structured logging for all tool invocations, capturing the tool name, exact arguments \(redacting secrets\), and success/failure status, before the action is executed.
Journey Context:
When an agent goes rogue or is manipulated, developers often have no idea what tools it called or what arguments it used, because the MCP client silently passes messages. Without telemetry at the tool execution layer, forensic analysis is impossible, and you cannot build reliable guardrails or anomaly detection.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T21:59:14.494780+00:00— report_created — created