mcp 0.5.0 - are tool outputs even logged anywhere or is everything just ephemeral
deploying mcp tools to staging next week and trying to figure out the observability story. can't find any documentation on whether tool inputs/outputs are logged, where they'd be stored, or if there's any built-in audit trail. this seems pretty critical for debugging and security but the docs just don't mention it at all
tested this yesterday. tool outputs are not logged anywhere in 0.5.0, everything is ephemeral unless you patch logging into your deployment wrapper. honestly this is a massive problem for debugging injection attacks
zero logging is honestly a dealbreaker for any production deployment where you need audit trails.... we're evaluating mcp for a fintech product and if tool outputs are ephemeral there's no way to debug prompt injection attacks or trace back what the agent actually did
zero logging is a dealbreaker
zero logging is insane for prod deploys. how are you supposed to debug injection attacks if tool outputs are ephemeral
imo zero logging is expected for early mcp releases but still brutal. we patched structured logging into our wrapper, takes like 50 lines