MCP Tool Reference — TuneVault

Authentication

Bearer API Key

Generate an API key at /settings/api. Every request to POST /mcp must include Authorization: Bearer tv_.... All 20 tools require authentication — there is no public/anonymous access.

Quick Setup

Add TuneVault to your Claude Desktop or Claude Code config file. See the full setup guide for step-by-step instructions including how to verify the connection.

// claude_desktop_config.json  (or .claude/settings.json for Claude Code)
{
  "mcpServers": {
    "tunevault": {
      "type": "http",
      "url": "https://tunevault.app/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Discovery

Tool list_connections

List all Oracle database connections available in TuneVault for the authenticated user. Returns connection ID, name, host, service name, server type (db/apps/both), connection type (proxy/direct), proxy version, and EBS instance name.

No parameters required.

Tool get_fleet_status

Return a live fleet overview — all Oracle connections for the user with online/offline status, latest health scores, agent versions, and last-seen timestamps.

No parameters required.

Health Checks

Tool run_health_check

Return a link to trigger a health check for a connection and instructions on how to retrieve results once complete. Health checks run 200+ checks across 13 DB categories.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection (from list_connections).

Tool get_latest_health_check

Return the most recent health check result for a connection — score, summary, top recommended action, and critical/warning findings.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection.

Tool list_health_check_history

List the last N health check runs for a connection — score, status, timestamp, and critical/warning finding counts per run.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection.
limit	number	optional	Number of runs to return. Default 10, max 30.

Tool run_ebs_health_check EBS

Run a live EBS application-tier health check on an app-tier connection — calls the agent's /api/ebs-app-healthcheck endpoint. Returns findings, score, critical/warning counts, and top issues. connection_id must be a server_type=apps or both connection.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the EBS app-tier connection (server_type = apps or both).

Security

Tool security_posture_scan

Return the latest Security Posture scan result for a connection. Covers default passwords, privilege escalation, public grants, init params, audit trail, encryption, DB links, and patch currency. Reads saved results — does not re-run the scan.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection.

Tool get_security_posture

Return a concise structured summary of the latest Security Posture scan — score, scan date, and critical/warning group breakdowns. Does NOT re-run the scan; reads saved results only. Use security_posture_scan for full detail.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection.

Tool get_vulnerability_exposure proxy agent

Run a live vulnerability scan — detects unpatched CVEs by comparing the DB version and applied SQL patches against the TuneVault CVE index. Requires a proxy-agent connection (not direct TCP).

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection (must use proxy agent).

Database

Tool get_tablespace_usage proxy agent

Query DBA_TABLESPACE_USAGE_METRICS + DBA_TABLESPACES for used_mb, total_mb, and pct_used. Filters low-usage TEMP tablespaces. Flags tablespaces >85% as warning and >95% as critical. Adds a note when connected to a CDB root.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle DB connection (proxy-agent).

Tool get_blocking_sessions proxy agent

Query V$SESSION for blocking and blocked sessions. Returns blocker details (SID, username, SQL, wait event) and blocked session count. Returns a clean message when no blocking sessions exist.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle DB connection (proxy-agent).

Tool get_resilience_status

Return the latest Resilience scan for a connection: RMAN backup currency, archivelog mode, Data Guard, FRA usage, and redo log health.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection.

Tool get_patch_advisor proxy agent

Return current Oracle patch level and top 5 recommended patches for a DB connection. Checks advisor_findings for cached data; falls back to a live dba_registry_sqlpatch query via the proxy agent.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle DB connection (proxy-agent).

Tool run_sql_query proxy agent

Execute a read-only SELECT or WITH query against an Oracle database via the proxy agent. Only SELECT/WITH permitted — no DML. Returns up to 200 rows as a markdown table. username and password are optional; if omitted, stored connection credentials are used.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection (must use proxy agent, not direct TCP).
sql	string	required	The SELECT or WITH SQL query to execute.
username	string	optional	Oracle username. Omit to use stored connection credentials.
password	string	optional	Oracle password. Omit to use stored connection credentials.

EBS / Oracle Apps

Tool get_adop_status EBS proxy agent

Query live ADOP (AD Online Patching) session status for an EBS database connection. Returns active patch cycles, current phase (prepare/apply/finalize/cutover/cleanup), session ID, and node name. Requires APPS schema access.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle DB connection (proxy-agent, must have APPS schema access).
username	string	optional	Oracle username (e.g. apps). Omit to use stored credentials.
password	string	optional	Oracle password.

Tool get_concurrent_manager_status EBS

Query FND_CONCURRENT_QUEUES_VL for Concurrent Manager status — running/max processes, control code, manager type. App-tier connections auto-pair to the DB agent via ebs_instance_name. Pass username=apps + password for APPS schema access.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection (app-tier or DB-tier, proxy-agent).
username	string	optional	Oracle username (e.g. apps). Omit to use stored credentials.
password	string	optional	Oracle password.

Tool get_workflow_errors EBS

Query WF_ITEM_ACTIVITY_STATUSES for Workflow items in ERROR status within the last N hours. Returns item_type, item_key, error_name, and error_message. App-tier connections auto-pair to the DB agent.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection (app-tier or DB-tier, proxy-agent).
hours	number	optional	Look back this many hours. Default 24, max 168.
username	string	optional	Oracle username (e.g. apps). Omit to use stored credentials.
password	string	optional	Oracle password.

Tool list_ebs_patches EBS proxy agent

List EBS patches applied via ADOP — queries AD_ADOP_SESSION_PATCHES for bug numbers, status, session type, fs_clone status, and start/end dates. Works with app-tier or DB-tier connections.

Parameter	Type	Required	Description
connection_id	number	required	Numeric ID of the Oracle connection (app-tier or DB-tier, proxy-agent).
username	string	optional	Oracle username (e.g. apps). Omit to use stored credentials.
password	string	optional	Oracle password.
limit	number	optional	Number of patch rows to return. Default 20, max 100.
session_id	number	optional	Filter to a specific ADOP session ID.

Tickets

Tool list_tuneops_tickets

List TuneOps tickets — auto-generated DBA issues and recommendations for the user's Oracle connections. Filter by connection, status, or severity.

Parameter	Type	Required	Description
connection_id	number	optional	Filter by connection ID.
status	string	optional	OPEN, CONFIRMED, EXECUTING, RESOLVED, REOPENED, or ACKNOWLEDGED.
severity	string	optional	critical, warning, or info.
limit	number	optional	Max tickets to return. Default 20, max 100.

Tool create_tuneops_ticket

Create a new TuneOps ticket manually — use this to log a DBA task, issue, or observation that needs tracking. Returns the ticket number (TO-XXXX) and full ticket details.

Parameter	Type	Required	Description
title	string	required	Short title for the ticket.
description	string	optional	Detailed description of the issue or task.
severity	string	optional	critical, warning, or info. Default: warning.
connection_id	number	optional	Oracle connection this ticket relates to.