Skip to main content
Glama
LiLara-AI

ShadowGraph

Official
by LiLara-AI
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Local

shadowgraph_redact

Read-onlyIdempotent

Generate a redacted export of store data, replacing secret-like keys and values with placeholders to prevent secrets from appearing in audit trails or shared files.

Instructions

Return a redacted copy of the store export, with secret-looking keys and values replaced. shadowgraph_backup writes an unredacted snapshot to disk, shadowgraph_purge actually removes data. Reads only, writes no file, and redacts journal payloads too, so a secret cannot survive in the audit trail.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
projectNoLimit the export to one project. Omit to redact everything.
patternsNoCase-insensitive regular expressions matched against key names, replacing the default set (password, secret, token, api[-_]?key, authorization, private[-_]?key). Supplying this replaces the defaults rather than adding to them; idempotency keys, evidence references, and signatures are always redacted.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
factsYesObserved facts with their provenance claims.
eventsYesCompatibility event log.
journalYesThe append-oriented journal.
recordsYesDecisions, attempts, and memories.
revisionYesConcurrency token of the state this export was taken from.
relationsYesRelationships.
journalSeqYesHighest journal sequence issued.
idempotencyYesRetry-key entries, each { key, value }.
journalEpochYesFirst replayable sequence, or null when nothing is replayable.
reviewSignalsYesPersisted review signals.
schemaVersionYesStorage schema version of this export.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Changed3 schema fields changedv0.40.1
    • addedInput schema / properties / patterns / description
      Added value: +"Case-insensitive regular expressions matched against key names, replacing the default set (password, secret, token, api[-_]?key, authorization, private[-_]?key). Supplying this replaces the defaults rather than adding to them; idempotency keys, evidence references, and signatures are always redacted."
    • addedInput schema / properties / project / description
      Added value: +"Limit the export to one project. Omit to redact everything."
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "description": "A complete store export.",
+  "properties": {
+    "events": {
+      "description": "Compatibility event log.",
+      "type": "array"
+    },
+    "facts": {
+      "description": "Observed facts with their provenance claims.",
+      "items": {
+        "description": "A stored fact with its provenance claim and validity window.",
+        "properties": {
+          "actor": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Who performed the write."
+          },
+          "client": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Which client performed the write."
+          },
+          "confidence": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Caller-declared confidence in the observation, 0-1."
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 creation time."
+          },
+          "expiresAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Caller-declared expiry instant, or null."
+          },
+          "id": {
+            "description": "Stable entity identifier.",
+            "type": "string"
+          },
+          "key": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Fact name, unique per project among active facts."
+          },
+          "kind": {
+            "description": "Entity kind: decision, attempt, memory, fact, relation, review, or alternative.",
+            "type": "string"
+          },
+          "observedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 time the fact was observed."
+          },
+          "project": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Project namespace; records imported from a schema that predates projects may carry null."
+          },
+          "schemaVersion": {
+            "description": "Storage schema version this entity was written under. A value above the build’s own version is preserved rather than downgraded.",
+            "type": "integer"
+          },
+          "sessionId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Session identifier recorded with the write."
+          },
+          "source": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Legacy alias of sourceClass, retained for compatibility."
+          },
+          "sourceClass": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Claimed origin class recorded with the write. A claim, never proof."
+          },
+          "sourceRaw": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The original origin label when it differed from sourceClass. Audit only; never evidence."
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "active, superseded, or expired."
+          },
+          "temporal": {
+            "description": "Bi-temporal window: validFrom, validTo, recordedAt, invalidatedAt.",
+            "type": "object"
+          },
+          "updatedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 time of the last change."
+          },
+          "validityPolicy": {
+            "description": "Declared expiry inputs and the effective expiration boundary derived from them.",
+            "type": "object"
+          },
+          "value": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "number"
+              },
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              },
+              {
+                "type": "array"
+              },
+              {
+                "type": "object"
+              }
+            ],
+            "description": "The observed value, any lossless JSON value."
+          },
+          "verification": {
+            "description": "Present only on a signed verification: the attestation this build checked.",
+            "type": "object"
+          },
+          "verificationStatus": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "unverified, contradicted, expired, or verified. Only the separately configured signed-evidence verifier can produce verified."
+          }
+        },
+        "required": [
+          "key"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "idempotency": {
+      "description": "Retry-key entries, each { key, value }.",
+      "type": "array"
+    },
+    "journal": {
+      "description": "The append-oriented journal.",
+      "items": {
+        "description": "One journal entry: a complete post-operation snapshot. Entries imported from older schemas may lack seq or payload.",
+        "properties": {
+          "at": {
+            "description": "ISO 8601 time the entry was appended.",
+            "type": "string"
+          },
+          "causationId": {
+            "description": "Present only when this entry was caused by another; carries that entry id.",
+            "type": "string"
+          },
+          "entityId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Identifier of that entity; null on a redacted skeleton."
+          },
+          "entityKind": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Kind of the entity the entry is about."
+          },
+          "id": {
+            "description": "Entry identifier.",
+            "type": "string"
+          },
+          "idempotencyKey": {
+            "description": "Present only when the write carried a retry key.",
+            "type": "string"
+          },
+          "payload": {
+            "anyOf": [
+              {
+                "type": "object"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The complete post-operation snapshot, or null once a logical purge reduced the entry to an audit skeleton."
+          },
+          "project": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Project the entry belongs to."
+          },
+          "provenance": {
+            "description": "actor, client, and sessionId recorded with the write; all null on purged skeletons.",
+            "type": "object"
+          },
+          "redacted": {
+            "description": "Present only on entries reduced by a logical purge.",
+            "type": "boolean"
+          },
+          "redactedReason": {
+            "description": "Why the entry was reduced.",
+            "type": "string"
+          },
+          "schemaVersion": {
+            "description": "Schema version the entry was written under.",
+            "type": "integer"
+          },
+          "seq": {
+            "description": "Monotonic sequence number. Absent on pre-journal metadata entries.",
+            "type": "integer"
+          },
+          "transition": {
+            "description": "Present only on lifecycle changes; carries from, to, and the actor that made them.",
+            "type": "object"
+          },
+          "type": {
+            "description": "Entry type, such as decision.recorded, fact.observed, memory.superseded, or project.purged.",
+            "type": "string"
+          }
+        },
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "journalEpoch": {
+      "anyOf": [
+        {
+          "type": "integer"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "First replayable sequence, or null when nothing is replayable."
+    },
+    "journalSeq": {
+      "description": "Highest journal sequence issued.",
+      "type": "integer"
+    },
+    "records": {
+      "description": "Decisions, attempts, and memories.",
+      "items": {
+        "description": "One stored entity: a decision, attempt, memory, fact, or alternative. Fields vary by kind, and an entity imported from an older schema may carry fewer of them.",
+        "properties": {
+          "actor": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Who performed the write."
+          },
+          "client": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Which client performed the write."
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 creation time."
+          },
+          "id": {
+            "description": "Stable entity identifier.",
+            "type": "string"
+          },
+          "kind": {
+            "description": "Entity kind: decision, attempt, memory, fact, relation, review, or alternative.",
+            "type": "string"
+          },
+          "project": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Project namespace; records imported from a schema that predates projects may carry null."
+          },
+          "schemaVersion": {
+            "description": "Storage schema version this entity was written under. A value above the build’s own version is preserved rather than downgraded.",
+            "type": "integer"
+          },
+          "sessionId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Session identifier recorded with the write."
+          },
+          "sourceClass": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Claimed origin class recorded with the write. A claim, never proof."
+          },
+          "sourceRaw": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The original origin label when it differed from sourceClass. Audit only; never evidence."
+          },
+          "updatedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 time of the last change."
+          }
+        },
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "relations": {
+      "description": "Relationships.",
+      "items": {
+        "description": "A stored relationship between two entities.",
+        "properties": {
+          "actor": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Who performed the write."
+          },
+          "client": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Which client performed the write."
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 creation time."
+          },
+          "from": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Source entity identifier."
+          },
+          "id": {
+            "description": "Stable entity identifier.",
+            "type": "string"
+          },
+          "kind": {
+            "description": "Entity kind: decision, attempt, memory, fact, relation, review, or alternative.",
+            "type": "string"
+          },
+          "project": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Project namespace; records imported from a schema that predates projects may carry null."
+          },
+          "relation": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Relationship name, such as depends_on or supersedes."
+          },
+          "schemaVersion": {
+            "description": "Storage schema version this entity was written under. A value above the build’s own version is preserved rather than downgraded.",
+            "type": "integer"
+          },
+          "sessionId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Session identifier recorded with the write."
+          },
+          "sourceClass": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Claimed origin class recorded with the write. A claim, never proof."
+          },
+          "sourceRaw": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The original origin label when it differed from sourceClass. Audit only; never evidence."
+          },
+          "temporal": {
+            "description": "Bi-temporal window for the relationship.",
+            "type": "object"
+          },
+          "to": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Target entity identifier."
+          },
+          "updatedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 time of the last change."
+          }
+        },
+        "required": [
+          "id",
+          "from",
+          "to",
+          "relation"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "reviewSignals": {
+      "description": "Persisted review signals.",
+      "items": {
+        "description": "A persisted review signal.",
+        "properties": {
+          "acknowledgedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "ISO 8601 time of the most recent acknowledgement."
+          },
+          "alternativesToReconsider": {
+            "description": "Alternative labels to look at again.",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "createdAt": {
+            "description": "ISO 8601 time the signal was raised.",
+            "type": "string"
+          },
+          "decisionId": {
+            "description": "The decision this signal is about.",
+            "type": "string"
+          },
+          "id": {
+            "description": "Signal identifier, used by shadowgraph_ack_review.",
+            "type": "string"
+          },
+          "kind": {
+            "const": "review",
+            "description": "Always \"review\".",
+            "type": "string"
+          },
+          "reason": {
+            "description": "Why the signal was raised. Together with decisionId this is the dedupe identity, so the same cause never raises a second signal.",
+            "type": "string"
+          },
+          "status": {
+            "description": "open until acknowledged.",
+            "enum": [
+              "open",
+              "acknowledged"
+            ],
+            "type": "string"
+          },
+          "title": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Decision title, when the stored decision has one."
+          }
+        },
+        "required": [
+          "id",
+          "kind",
+          "decisionId",
+          "reason",
+          "alternativesToReconsider",
+          "status",
+          "createdAt"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "revision": {
+      "description": "Concurrency token of the state this export was taken from.",
+      "type": "integer"
+    },
+    "schemaVersion": {
+      "description": "Storage schema version of this export.",
+      "type": "integer"
+    }
+  },
+  "required": [
+    "schemaVersion",
+    "revision",
+    "records",
+    "facts",
+    "relations",
+    "reviewSignals",
+    "idempotency",
+    "events",
+    "journal",
+    "journalSeq",
+    "journalEpoch"
+  ],
+  "type": "object"
+}
  2. First observedv0.40.0

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations already declaring readOnlyHint=true and idempotentHint=true, the description adds concrete behavioral guarantees: no file is written, and journal payloads are also redacted so secrets cannot survive in the audit trail. This is meaningful context that annotations alone do not provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, front-loaded with the core purpose, and every sentence adds value: purpose, sibling contrast, and behavioral guarantees. There is no filler or repetition of schema-only details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 2-parameter, no-required-parameter tool with an output schema, the description is complete: it states the operation, differentiates from destructive and backup siblings, and discloses the critical journal-redaction behavior. Nothing necessary for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters and the default pattern set. The description adds the general notion of 'secret-looking keys and values' but does not significantly extend the parameter semantics already present in the input schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and resource ('redacted copy of the store export'), and immediately differentiates itself from shadowgraph_backup and shadowgraph_purge. An agent can tell exactly what the tool does without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly positions the tool as a safe, non-writing alternative to shadowgraph_backup and shadowgraph_purge, and states that it reads only and writes no file. It does not explicitly enumerate all when-not-to-use scenarios, but the contrast with the two most relevant siblings provides clear routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/LiLara-AI/shadowgraph'

If you have feedback or need assistance with the MCP directory API, please join our Discord server