Setup Guide Tool Reference

# MCP Tool Reference

20 Oracle tools for Claude Desktop and Claude Code. Query health data, run SQL, check ADOP status, scan for CVEs, and manage TuneOps tickets — all via natural language through your AI assistant.

Total Tools
20
Transport
Streamable HTTP
Protocol
JSON-RPC 2.0
Authentication

### Bearer API Key

Generate an API key at /settings/api. Every request to `POST /mcp` must include `Authorization: Bearer tv_...`. All 20 tools require authentication — there is no public/anonymous access.

Quick Setup

Add TuneVault to your Claude Desktop or Claude Code config file. See the full setup guide for step-by-step instructions including how to verify the connection.

    // claude_desktop_config.json  (or .claude/settings.json for Claude Code)
    {
      "mcpServers": {
        "tunevault": {
          "type": "http",
          "url": "https://tunevault.app/mcp",
          "headers": {
            "Authorization": "Bearer YOUR_API_KEY"
          }
        }
      }
    }

Discovery
Tool list_connections

List all Oracle database connections available in TuneVault for the authenticated user. Returns connection ID, name, host, service name, server type (db/apps/both), connection type (proxy/direct), proxy version, and EBS instance name.

No parameters required.

Tool get_fleet_status

Return a live fleet overview — all Oracle connections for the user with online/offline status, latest health scores, agent versions, and last-seen timestamps.

No parameters required.

Health Checks
Tool run_health_check

Return a link to trigger a health check for a connection and instructions on how to retrieve results once complete. Health checks run 200+ checks across 13 DB categories.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection (from list_connections).

Tool get_latest_health_check

Return the most recent health check result for a connection — score, summary, top recommended action, and critical/warning findings.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection.

Tool list_health_check_history

List the last N health check runs for a connection — score, status, timestamp, and critical/warning finding counts per run.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection.
limit | number | optional | Number of runs to return. Default 10, max 30.

Tool run_ebs_health_check EBS

Run a live EBS application-tier health check on an app-tier connection — calls the agent's /api/ebs-app-healthcheck endpoint. Returns findings, score, critical/warning counts, and top issues. connection_id must be a server_type=apps or both connection.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the EBS app-tier connection (server_type = apps or both).

Security
Tool security_posture_scan

Return the latest Security Posture scan result for a connection. Covers default passwords, privilege escalation, public grants, init params, audit trail, encryption, DB links, and patch currency. Reads saved results — does not re-run the scan.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection.

Tool get_security_posture

Return a concise structured summary of the latest Security Posture scan — score, scan date, and critical/warning group breakdowns. Does NOT re-run the scan; reads saved results only. Use security_posture_scan for full detail.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection.

Tool get_vulnerability_exposure proxy agent

Run a live vulnerability scan — detects unpatched CVEs by comparing the DB version and applied SQL patches against the TuneVault CVE index. Requires a proxy-agent connection (not direct TCP).

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection (must use proxy agent).

Database
Tool get_tablespace_usage proxy agent

Query DBA_TABLESPACE_USAGE_METRICS + DBA_TABLESPACES for used_mb, total_mb, and pct_used. Filters low-usage TEMP tablespaces. Flags tablespaces >85% as warning and >95% as critical. Adds a note when connected to a CDB root.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle DB connection (proxy-agent).

Tool get_blocking_sessions proxy agent

Query V$SESSION for blocking and blocked sessions. Returns blocker details (SID, username, SQL, wait event) and blocked session count. Returns a clean message when no blocking sessions exist.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle DB connection (proxy-agent).

Tool get_resilience_status

Return the latest Resilience scan for a connection: RMAN backup currency, archivelog mode, Data Guard, FRA usage, and redo log health.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection.

Tool get_patch_advisor proxy agent

Return current Oracle patch level and top 5 recommended patches for a DB connection. Checks advisor_findings for cached data; falls back to a live dba_registry_sqlpatch query via the proxy agent.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle DB connection (proxy-agent).

Tool run_sql_query proxy agent

Execute a read-only SELECT or WITH query against an Oracle database via the proxy agent. Only SELECT/WITH permitted — no DML. Returns up to 200 rows as a markdown table. username and password are optional; if omitted, stored connection credentials are used.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection (must use proxy agent, not direct TCP).
sql | string | required | The SELECT or WITH SQL query to execute.
username | string | optional | Oracle username. Omit to use stored connection credentials.
password | string | optional | Oracle password. Omit to use stored connection credentials.

EBS / Oracle Apps
Tool get_adop_status EBS proxy agent

Query live ADOP (AD Online Patching) session status for an EBS database connection. Returns active patch cycles, current phase (prepare/apply/finalize/cutover/cleanup), session ID, and node name. Requires APPS schema access.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle DB connection (proxy-agent, must have APPS schema access).
username | string | optional | Oracle username (e.g. apps). Omit to use stored credentials.
password | string | optional | Oracle password.

Tool get_concurrent_manager_status EBS

Query FND_CONCURRENT_QUEUES_VL for Concurrent Manager status — running/max processes, control code, manager type. App-tier connections auto-pair to the DB agent via ebs_instance_name. Pass username=apps + password for APPS schema access.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection (app-tier or DB-tier, proxy-agent).
username | string | optional | Oracle username (e.g. apps). Omit to use stored credentials.
password | string | optional | Oracle password.

Tool get_workflow_errors EBS

Query WF_ITEM_ACTIVITY_STATUSES for Workflow items in ERROR status within the last N hours. Returns item_type, item_key, error_name, and error_message. App-tier connections auto-pair to the DB agent.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection (app-tier or DB-tier, proxy-agent).
hours | number | optional | Look back this many hours. Default 24, max 168.
username | string | optional | Oracle username (e.g. apps). Omit to use stored credentials.
password | string | optional | Oracle password.

Tool list_ebs_patches EBS proxy agent

List EBS patches applied via ADOP — queries AD_ADOP_SESSION_PATCHES for bug numbers, status, session type, fs_clone status, and start/end dates. Works with app-tier or DB-tier connections.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | required | Numeric ID of the Oracle connection (app-tier or DB-tier, proxy-agent).
username | string | optional | Oracle username (e.g. apps). Omit to use stored credentials.
password | string | optional | Oracle password.
limit | number | optional | Number of patch rows to return. Default 20, max 100.
session_id | number | optional | Filter to a specific ADOP session ID.

Tickets
Tool list_tuneops_tickets

List TuneOps tickets — auto-generated DBA issues and recommendations for the user's Oracle connections. Filter by connection, status, or severity.

Parameter | Type | Required | Description
--- | --- | --- | ---
connection_id | number | optional | Filter by connection ID.
status | string | optional | OPEN, ACKNOWLEDGED, EXECUTING, RESOLVED, REOPENED, or DEFERRED.
severity | string | optional | critical, warning, or info.
limit | number | optional | Max tickets to return. Default 20, max 100.

Tool create_tuneops_ticket

Create a new TuneOps ticket manually — use this to log a DBA task, issue, or observation that needs tracking. Returns the ticket number (TO-XXXX) and full ticket details.

Parameter | Type | Required | Description
--- | --- | --- | ---
title | string | required | Short title for the ticket.
description | string | optional | Detailed description of the issue or task.
severity | string | optional | critical, warning, or info. Default: warning.
connection_id | number | optional | Oracle connection this ticket relates to.