Wanted to check if queries using the Open Targets MCP are logged, and if so what is the retention period and are the queries used for any kind of analytics?
Hi Ken, thanks for asking. Yes—the GraphQL queries sent through the Open Targets MCP are logged at the API layer and retained for 30 days. Currently, we use these logs only for performance monitoring and debugging.
The MCP server calls the Open Targets GraphQL API under the hood. Here’s what each layer logs:
-
MCP server: Records the types of operations performed and the names of tools invoked, without logging request or response payloads.
-
API server: Records the full GraphQL queries it receives, including those sent through the MCP.
Both services also generate standard HTTP request logs, containing metadata such as the request method, URL, status and timing. These do not include request bodies, though parameters sent in the URL can appear in the logs.
All these logs are stored in Google Cloud Logging’s default bucket and retained for 30 days, matching its default retention period.
If your queries contain sensitive information, we recommend hosting both the Platform API and the MCP server yourself, with the MCP pointing to your own API. Hosting only the MCP would still send queries to our public API, where the logging described above applies.