feat!: telemetry metrics updates as per semantic convention#2566
feat!: telemetry metrics updates as per semantic convention#2566Yuan325 merged 5 commits intogoogleapis:mainfrom
Conversation
Summary of ChangesHello @AjmeraParth132, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request significantly refactors the telemetry system to align with OpenTelemetry semantic conventions, enhancing observability and debuggability. By replacing a fragmented set of metrics with a unified, future-proof collection, it provides clearer insights into the performance and behavior of MCP operations, sessions, and backend tool executions. This change simplifies metric collection while offering more granular data for identifying bottlenecks and understanding system health. Highlights
Changelog
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
There was a problem hiding this comment.
Code Review
This pull request refactors the telemetry system to align with OpenTelemetry semantic conventions, removing outdated metrics and introducing a new, more descriptive set for MCP operations and sessions. However, a critical security concern has been identified: several new telemetry metrics, specifically labels like mcp.method.name, toolset.name, gen_ai.tool.name, and gen_ai.prompt.name, are populated directly from untrusted user input without prior validation. This poses a significant risk of metrics cardinality explosion, potentially leading to a Denial of Service by exhausting memory. Additionally, there are suggestions to improve code clarity and robustness regarding how metric attributes are handled to prevent potential slice aliasing issues.
Yuan325
left a comment
There was a problem hiding this comment.
Thank you for being prompt in this PR submission :)
99f70f8 to
b67c3c7
Compare
|
hello @Yuan325, updated the PR and added some comments. |
b67c3c7 to
5506358
Compare
|
/gcbrun |
|
@Yuan325 changed both the attribute copying as well - wasn't a problem for us, but agreed this is a clearer way to do so |
|
/gcbrun |
|
/gcbrun |
|
/gcbrun |
…oogleapis#2566) ## Description This PR updates MCP telemetry to align with [OTel semantic conventions](https://opentelemetry.io/docs/specs/semconv/gen-ai/mcp/#metrics) by removing all existing transport-specific and HTTP-API metrics and introducing a unified, future-proof set. It adds 1. `mcp.server.operation.duration` to capture per-method request rate, latency, and errors across all MCP transports; 2. `mcp.server.session.duration` to track session lifecycles for stdio and SSE; 3. `toolbox.server.mcp.active_sessions` for real-time capacity, saturation, and leak detection. 4. `toolbox.tool.operation.duration` to isolate backend tool execution time from MCP/protocol overhead, enabling clearer attribution of performance bottlenecks between the MCP layer and tool runtime. Together, these changes simplify the metrics surface while significantly improving observability and debuggability with minimal runtime overhead. ## PR Checklist - [x] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [ ] Appropriate docs were updated (if necessary) - [x] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#2222 --------- Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 131d764
…is#2566) ## Description This PR updates MCP telemetry to align with [OTel semantic conventions](https://opentelemetry.io/docs/specs/semconv/gen-ai/mcp/#metrics) by removing all existing transport-specific and HTTP-API metrics and introducing a unified, future-proof set. It adds 1. `mcp.server.operation.duration` to capture per-method request rate, latency, and errors across all MCP transports; 2. `mcp.server.session.duration` to track session lifecycles for stdio and SSE; 3. `toolbox.server.mcp.active_sessions` for real-time capacity, saturation, and leak detection. 4. `toolbox.tool.operation.duration` to isolate backend tool execution time from MCP/protocol overhead, enabling clearer attribution of performance bottlenecks between the MCP layer and tool runtime. Together, these changes simplify the metrics surface while significantly improving observability and debuggability with minimal runtime overhead. ## PR Checklist - [x] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [ ] Appropriate docs were updated (if necessary) - [x] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#2222 --------- Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>
🤖 I have created a release *beep* *boop* --- ## [0.29.0](v0.28.0...v0.29.0) (2026-03-13) ### ⚠ BREAKING CHANGES * **source/alloydb:** restructure prebuilt toolsets ([#2639](#2639)) * **source/spanner:** restructure prebuilt toolsets ([#2641](#2641)) * **source/dataplex:** restructure prebuilt toolsets ([#2640](#2640)) * **source/oss-db:** restructure prebuilt toolsets ([#2638](#2638)) * **source/cloudsql:** restructure prebuilt toolsets ([#2635](#2635)) * **source/bigquery:** restructure prebuilt toolsets ([#2637](#2637)) * **source/firestore:** restructure prebuilt toolsets ([#2636](#2636)) * telemetry metrics updates as per semantic convention ([#2566](#2566)) ### Features * Add user agent to embeddings generation ([#2572](#2572)) ([287251a](287251a)) * **skill:** Attach user agent metadata for generated skill ([#2697](#2697)) ([9598a6a](9598a6a)) * **skills:** Add additional-notes flag to generate skills command ([#2696](#2696)) ([73bf962](73bf962)) * **skill:** Update skill generation logic ([#2646](#2646)) ([c233eee](c233eee)) * **source/alloydb:** Restructure prebuilt toolsets ([#2639](#2639)) ([5f3f063](5f3f063)) * **source/bigquery:** Restructure prebuilt toolsets ([#2637](#2637)) ([dc984ba](dc984ba)) * **sources/bigquery:** Support custom oauth header name ([#2564](#2564)) ([d3baf77](d3baf77)) * **source/cloudsql:** Restructure prebuilt toolsets ([#2635](#2635)) ([99613dc](99613dc)) * **source/dataplex:** Restructure prebuilt toolsets ([#2640](#2640)) ([acb9a80](acb9a80)) * **source/firestore:** Restructure prebuilt toolsets ([#2636](#2636)) ([22ab7b9](22ab7b9)) * **source/oss-db:** Restructure prebuilt toolsets ([#2638](#2638)) ([5196c6a](5196c6a)) * **source/spanner:** Restructure prebuilt toolsets ([#2641](#2641)) ([ea2b698](ea2b698)) * Telemetry metrics updates as per semantic convention ([#2566](#2566)) ([131d764](131d764)) * **tools/mongodb:** Add tool annotations to MongoDB tools for improved LLM understanding ([#2219](#2219)) ([b7a5f80](b7a5f80)) * **tools/serverless-spark:** Add get_session_template tool ([#2308](#2308)) ([a136e16](a136e16)) * **tools/serverless-spark:** Add list/get sessions tools ([#2576](#2576)) ([a554298](a554298)) ### Bug Fixes * Improve list locks integration test for postgres ([#2279](#2279)) ([d9ebe5d](d9ebe5d)) * **mcp:** Guard nil SSE session lookup and return 400 for missing session ([#2681](#2681)) ([f66189f](f66189f)) * **oracle:** Update oracle-execute-sql tool interface to match source signature ([#2627](#2627)) ([81699a3](81699a3)) * Return AllParams for GetParameter() for tools with templateParameter([#2734](#2734)) ([bfd7ba6](bfd7ba6)) * **server/mcp:** Scope defer span.End inside loop iteration ([#2558](#2558)) ([c88a62d](c88a62d)), closes [#2549](#2549) * **skill:** Fix env variable propagation ([#2645](#2645)) ([5271368](5271368)) * **sources/looker:** Looker and looker-dev prebuilt tools should share one source definition. ([#2620](#2620)) ([df7f2fd](df7f2fd)) * **telemetry:** Histogram buckets from OTel standard to MCP standards ([#2729](#2729)) ([87cd4a0](87cd4a0)) * **ui:** Remove module from script ([#2703](#2703)) ([6943ab6](6943ab6)) * Update toolset attributes naming ([#2554](#2554)) ([3d6ae4e](3d6ae4e)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>
🤖 I have created a release *beep* *boop* --- ## [0.29.0](v0.28.0...v0.29.0) (2026-03-13) ### ⚠ BREAKING CHANGES * **source/alloydb:** restructure prebuilt toolsets ([#2639](#2639)) * **source/spanner:** restructure prebuilt toolsets ([#2641](#2641)) * **source/dataplex:** restructure prebuilt toolsets ([#2640](#2640)) * **source/oss-db:** restructure prebuilt toolsets ([#2638](#2638)) * **source/cloudsql:** restructure prebuilt toolsets ([#2635](#2635)) * **source/bigquery:** restructure prebuilt toolsets ([#2637](#2637)) * **source/firestore:** restructure prebuilt toolsets ([#2636](#2636)) * telemetry metrics updates as per semantic convention ([#2566](#2566)) ### Features * Add user agent to embeddings generation ([#2572](#2572)) ([287251a](287251a)) * **skill:** Attach user agent metadata for generated skill ([#2697](#2697)) ([9598a6a](9598a6a)) * **skills:** Add additional-notes flag to generate skills command ([#2696](#2696)) ([73bf962](73bf962)) * **skill:** Update skill generation logic ([#2646](#2646)) ([c233eee](c233eee)) * **source/alloydb:** Restructure prebuilt toolsets ([#2639](#2639)) ([5f3f063](5f3f063)) * **source/bigquery:** Restructure prebuilt toolsets ([#2637](#2637)) ([dc984ba](dc984ba)) * **sources/bigquery:** Support custom oauth header name ([#2564](#2564)) ([d3baf77](d3baf77)) * **source/cloudsql:** Restructure prebuilt toolsets ([#2635](#2635)) ([99613dc](99613dc)) * **source/dataplex:** Restructure prebuilt toolsets ([#2640](#2640)) ([acb9a80](acb9a80)) * **source/firestore:** Restructure prebuilt toolsets ([#2636](#2636)) ([22ab7b9](22ab7b9)) * **source/oss-db:** Restructure prebuilt toolsets ([#2638](#2638)) ([5196c6a](5196c6a)) * **source/spanner:** Restructure prebuilt toolsets ([#2641](#2641)) ([ea2b698](ea2b698)) * Telemetry metrics updates as per semantic convention ([#2566](#2566)) ([131d764](131d764)) * **tools/mongodb:** Add tool annotations to MongoDB tools for improved LLM understanding ([#2219](#2219)) ([b7a5f80](b7a5f80)) * **tools/serverless-spark:** Add get_session_template tool ([#2308](#2308)) ([a136e16](a136e16)) * **tools/serverless-spark:** Add list/get sessions tools ([#2576](#2576)) ([a554298](a554298)) ### Bug Fixes * Improve list locks integration test for postgres ([#2279](#2279)) ([d9ebe5d](d9ebe5d)) * **mcp:** Guard nil SSE session lookup and return 400 for missing session ([#2681](#2681)) ([f66189f](f66189f)) * **oracle:** Update oracle-execute-sql tool interface to match source signature ([#2627](#2627)) ([81699a3](81699a3)) * Return AllParams for GetParameter() for tools with templateParameter([#2734](#2734)) ([bfd7ba6](bfd7ba6)) * **server/mcp:** Scope defer span.End inside loop iteration ([#2558](#2558)) ([c88a62d](c88a62d)), closes [#2549](#2549) * **skill:** Fix env variable propagation ([#2645](#2645)) ([5271368](5271368)) * **sources/looker:** Looker and looker-dev prebuilt tools should share one source definition. ([#2620](#2620)) ([df7f2fd](df7f2fd)) * **telemetry:** Histogram buckets from OTel standard to MCP standards ([#2729](#2729)) ([87cd4a0](87cd4a0)) * **ui:** Remove module from script ([#2703](#2703)) ([6943ab6](6943ab6)) * Update toolset attributes naming ([#2554](#2554)) ([3d6ae4e](3d6ae4e)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 39832a0
🤖 I have created a release *beep* *boop* --- ## [0.29.0](googleapis/mcp-toolbox@v0.28.0...v0.29.0) (2026-03-13) ### ⚠ BREAKING CHANGES * **source/alloydb:** restructure prebuilt toolsets ([googleapis#2639](googleapis#2639)) * **source/spanner:** restructure prebuilt toolsets ([googleapis#2641](googleapis#2641)) * **source/dataplex:** restructure prebuilt toolsets ([googleapis#2640](googleapis#2640)) * **source/oss-db:** restructure prebuilt toolsets ([googleapis#2638](googleapis#2638)) * **source/cloudsql:** restructure prebuilt toolsets ([googleapis#2635](googleapis#2635)) * **source/bigquery:** restructure prebuilt toolsets ([googleapis#2637](googleapis#2637)) * **source/firestore:** restructure prebuilt toolsets ([googleapis#2636](googleapis#2636)) * telemetry metrics updates as per semantic convention ([googleapis#2566](googleapis#2566)) ### Features * Add user agent to embeddings generation ([googleapis#2572](googleapis#2572)) ([287251a](googleapis@287251a)) * **skill:** Attach user agent metadata for generated skill ([googleapis#2697](googleapis#2697)) ([9598a6a](googleapis@9598a6a)) * **skills:** Add additional-notes flag to generate skills command ([googleapis#2696](googleapis#2696)) ([73bf962](googleapis@73bf962)) * **skill:** Update skill generation logic ([googleapis#2646](googleapis#2646)) ([c233eee](googleapis@c233eee)) * **source/alloydb:** Restructure prebuilt toolsets ([googleapis#2639](googleapis#2639)) ([5f3f063](googleapis@5f3f063)) * **source/bigquery:** Restructure prebuilt toolsets ([googleapis#2637](googleapis#2637)) ([dc984ba](googleapis@dc984ba)) * **sources/bigquery:** Support custom oauth header name ([googleapis#2564](googleapis#2564)) ([d3baf77](googleapis@d3baf77)) * **source/cloudsql:** Restructure prebuilt toolsets ([googleapis#2635](googleapis#2635)) ([99613dc](googleapis@99613dc)) * **source/dataplex:** Restructure prebuilt toolsets ([googleapis#2640](googleapis#2640)) ([acb9a80](googleapis@acb9a80)) * **source/firestore:** Restructure prebuilt toolsets ([googleapis#2636](googleapis#2636)) ([22ab7b9](googleapis@22ab7b9)) * **source/oss-db:** Restructure prebuilt toolsets ([googleapis#2638](googleapis#2638)) ([5196c6a](googleapis@5196c6a)) * **source/spanner:** Restructure prebuilt toolsets ([googleapis#2641](googleapis#2641)) ([ea2b698](googleapis@ea2b698)) * Telemetry metrics updates as per semantic convention ([googleapis#2566](googleapis#2566)) ([131d764](googleapis@131d764)) * **tools/mongodb:** Add tool annotations to MongoDB tools for improved LLM understanding ([googleapis#2219](googleapis#2219)) ([b7a5f80](googleapis@b7a5f80)) * **tools/serverless-spark:** Add get_session_template tool ([googleapis#2308](googleapis#2308)) ([a136e16](googleapis@a136e16)) * **tools/serverless-spark:** Add list/get sessions tools ([googleapis#2576](googleapis#2576)) ([a554298](googleapis@a554298)) ### Bug Fixes * Improve list locks integration test for postgres ([googleapis#2279](googleapis#2279)) ([d9ebe5d](googleapis@d9ebe5d)) * **mcp:** Guard nil SSE session lookup and return 400 for missing session ([googleapis#2681](googleapis#2681)) ([f66189f](googleapis@f66189f)) * **oracle:** Update oracle-execute-sql tool interface to match source signature ([googleapis#2627](googleapis#2627)) ([81699a3](googleapis@81699a3)) * Return AllParams for GetParameter() for tools with templateParameter([googleapis#2734](googleapis#2734)) ([bfd7ba6](googleapis@bfd7ba6)) * **server/mcp:** Scope defer span.End inside loop iteration ([googleapis#2558](googleapis#2558)) ([c88a62d](googleapis@c88a62d)), closes [googleapis#2549](googleapis#2549) * **skill:** Fix env variable propagation ([googleapis#2645](googleapis#2645)) ([5271368](googleapis@5271368)) * **sources/looker:** Looker and looker-dev prebuilt tools should share one source definition. ([googleapis#2620](googleapis#2620)) ([df7f2fd](googleapis@df7f2fd)) * **telemetry:** Histogram buckets from OTel standard to MCP standards ([googleapis#2729](googleapis#2729)) ([87cd4a0](googleapis@87cd4a0)) * **ui:** Remove module from script ([googleapis#2703](googleapis#2703)) ([6943ab6](googleapis@6943ab6)) * Update toolset attributes naming ([googleapis#2554](googleapis#2554)) ([3d6ae4e](googleapis@3d6ae4e)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 39832a0
🤖 I have created a release *beep* *boop* --- ## [0.29.0](googleapis/mcp-toolbox@v0.28.0...v0.29.0) (2026-03-13) ### ⚠ BREAKING CHANGES * **source/alloydb:** restructure prebuilt toolsets ([googleapis#2639](googleapis#2639)) * **source/spanner:** restructure prebuilt toolsets ([googleapis#2641](googleapis#2641)) * **source/dataplex:** restructure prebuilt toolsets ([googleapis#2640](googleapis#2640)) * **source/oss-db:** restructure prebuilt toolsets ([googleapis#2638](googleapis#2638)) * **source/cloudsql:** restructure prebuilt toolsets ([googleapis#2635](googleapis#2635)) * **source/bigquery:** restructure prebuilt toolsets ([googleapis#2637](googleapis#2637)) * **source/firestore:** restructure prebuilt toolsets ([googleapis#2636](googleapis#2636)) * telemetry metrics updates as per semantic convention ([googleapis#2566](googleapis#2566)) ### Features * Add user agent to embeddings generation ([googleapis#2572](googleapis#2572)) ([287251a](googleapis@287251a)) * **skill:** Attach user agent metadata for generated skill ([googleapis#2697](googleapis#2697)) ([9598a6a](googleapis@9598a6a)) * **skills:** Add additional-notes flag to generate skills command ([googleapis#2696](googleapis#2696)) ([73bf962](googleapis@73bf962)) * **skill:** Update skill generation logic ([googleapis#2646](googleapis#2646)) ([c233eee](googleapis@c233eee)) * **source/alloydb:** Restructure prebuilt toolsets ([googleapis#2639](googleapis#2639)) ([5f3f063](googleapis@5f3f063)) * **source/bigquery:** Restructure prebuilt toolsets ([googleapis#2637](googleapis#2637)) ([dc984ba](googleapis@dc984ba)) * **sources/bigquery:** Support custom oauth header name ([googleapis#2564](googleapis#2564)) ([d3baf77](googleapis@d3baf77)) * **source/cloudsql:** Restructure prebuilt toolsets ([googleapis#2635](googleapis#2635)) ([99613dc](googleapis@99613dc)) * **source/dataplex:** Restructure prebuilt toolsets ([googleapis#2640](googleapis#2640)) ([acb9a80](googleapis@acb9a80)) * **source/firestore:** Restructure prebuilt toolsets ([googleapis#2636](googleapis#2636)) ([22ab7b9](googleapis@22ab7b9)) * **source/oss-db:** Restructure prebuilt toolsets ([googleapis#2638](googleapis#2638)) ([5196c6a](googleapis@5196c6a)) * **source/spanner:** Restructure prebuilt toolsets ([googleapis#2641](googleapis#2641)) ([ea2b698](googleapis@ea2b698)) * Telemetry metrics updates as per semantic convention ([googleapis#2566](googleapis#2566)) ([131d764](googleapis@131d764)) * **tools/mongodb:** Add tool annotations to MongoDB tools for improved LLM understanding ([googleapis#2219](googleapis#2219)) ([b7a5f80](googleapis@b7a5f80)) * **tools/serverless-spark:** Add get_session_template tool ([googleapis#2308](googleapis#2308)) ([a136e16](googleapis@a136e16)) * **tools/serverless-spark:** Add list/get sessions tools ([googleapis#2576](googleapis#2576)) ([a554298](googleapis@a554298)) ### Bug Fixes * Improve list locks integration test for postgres ([googleapis#2279](googleapis#2279)) ([d9ebe5d](googleapis@d9ebe5d)) * **mcp:** Guard nil SSE session lookup and return 400 for missing session ([googleapis#2681](googleapis#2681)) ([f66189f](googleapis@f66189f)) * **oracle:** Update oracle-execute-sql tool interface to match source signature ([googleapis#2627](googleapis#2627)) ([81699a3](googleapis@81699a3)) * Return AllParams for GetParameter() for tools with templateParameter([googleapis#2734](googleapis#2734)) ([bfd7ba6](googleapis@bfd7ba6)) * **server/mcp:** Scope defer span.End inside loop iteration ([googleapis#2558](googleapis#2558)) ([c88a62d](googleapis@c88a62d)), closes [googleapis#2549](googleapis#2549) * **skill:** Fix env variable propagation ([googleapis#2645](googleapis#2645)) ([5271368](googleapis@5271368)) * **sources/looker:** Looker and looker-dev prebuilt tools should share one source definition. ([googleapis#2620](googleapis#2620)) ([df7f2fd](googleapis@df7f2fd)) * **telemetry:** Histogram buckets from OTel standard to MCP standards ([googleapis#2729](googleapis#2729)) ([87cd4a0](googleapis@87cd4a0)) * **ui:** Remove module from script ([googleapis#2703](googleapis#2703)) ([6943ab6](googleapis@6943ab6)) * Update toolset attributes naming ([googleapis#2554](googleapis#2554)) ([3d6ae4e](googleapis@3d6ae4e)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 39832a0
🤖 I have created a release *beep* *boop* --- ## [0.29.0](googleapis/mcp-toolbox@v0.28.0...v0.29.0) (2026-03-13) ### ⚠ BREAKING CHANGES * **source/alloydb:** restructure prebuilt toolsets ([#2639](googleapis/mcp-toolbox#2639)) * **source/spanner:** restructure prebuilt toolsets ([#2641](googleapis/mcp-toolbox#2641)) * **source/dataplex:** restructure prebuilt toolsets ([#2640](googleapis/mcp-toolbox#2640)) * **source/oss-db:** restructure prebuilt toolsets ([#2638](googleapis/mcp-toolbox#2638)) * **source/cloudsql:** restructure prebuilt toolsets ([#2635](googleapis/mcp-toolbox#2635)) * **source/bigquery:** restructure prebuilt toolsets ([#2637](googleapis/mcp-toolbox#2637)) * **source/firestore:** restructure prebuilt toolsets ([#2636](googleapis/mcp-toolbox#2636)) * telemetry metrics updates as per semantic convention ([#2566](googleapis/mcp-toolbox#2566)) ### Features * Add user agent to embeddings generation ([#2572](googleapis/mcp-toolbox#2572)) ([287251a](googleapis/mcp-toolbox@287251a)) * **skill:** Attach user agent metadata for generated skill ([#2697](googleapis/mcp-toolbox#2697)) ([9598a6a](googleapis/mcp-toolbox@9598a6a)) * **skills:** Add additional-notes flag to generate skills command ([#2696](googleapis/mcp-toolbox#2696)) ([73bf962](googleapis/mcp-toolbox@73bf962)) * **skill:** Update skill generation logic ([#2646](googleapis/mcp-toolbox#2646)) ([c233eee](googleapis/mcp-toolbox@c233eee)) * **source/alloydb:** Restructure prebuilt toolsets ([#2639](googleapis/mcp-toolbox#2639)) ([5f3f063](googleapis/mcp-toolbox@5f3f063)) * **source/bigquery:** Restructure prebuilt toolsets ([#2637](googleapis/mcp-toolbox#2637)) ([dc984ba](googleapis/mcp-toolbox@dc984ba)) * **sources/bigquery:** Support custom oauth header name ([#2564](googleapis/mcp-toolbox#2564)) ([d3baf77](googleapis/mcp-toolbox@d3baf77)) * **source/cloudsql:** Restructure prebuilt toolsets ([#2635](googleapis/mcp-toolbox#2635)) ([99613dc](googleapis/mcp-toolbox@99613dc)) * **source/dataplex:** Restructure prebuilt toolsets ([#2640](googleapis/mcp-toolbox#2640)) ([acb9a80](googleapis/mcp-toolbox@acb9a80)) * **source/firestore:** Restructure prebuilt toolsets ([#2636](googleapis/mcp-toolbox#2636)) ([22ab7b9](googleapis/mcp-toolbox@22ab7b9)) * **source/oss-db:** Restructure prebuilt toolsets ([#2638](googleapis/mcp-toolbox#2638)) ([5196c6a](googleapis/mcp-toolbox@5196c6a)) * **source/spanner:** Restructure prebuilt toolsets ([#2641](googleapis/mcp-toolbox#2641)) ([ea2b698](googleapis/mcp-toolbox@ea2b698)) * Telemetry metrics updates as per semantic convention ([#2566](googleapis/mcp-toolbox#2566)) ([131d764](googleapis/mcp-toolbox@131d764)) * **tools/mongodb:** Add tool annotations to MongoDB tools for improved LLM understanding ([#2219](googleapis/mcp-toolbox#2219)) ([b7a5f80](googleapis/mcp-toolbox@b7a5f80)) * **tools/serverless-spark:** Add get_session_template tool ([#2308](googleapis/mcp-toolbox#2308)) ([a136e16](googleapis/mcp-toolbox@a136e16)) * **tools/serverless-spark:** Add list/get sessions tools ([#2576](googleapis/mcp-toolbox#2576)) ([a554298](googleapis/mcp-toolbox@a554298)) ### Bug Fixes * Improve list locks integration test for postgres ([#2279](googleapis/mcp-toolbox#2279)) ([d9ebe5d](googleapis/mcp-toolbox@d9ebe5d)) * **mcp:** Guard nil SSE session lookup and return 400 for missing session ([#2681](googleapis/mcp-toolbox#2681)) ([f66189f](googleapis/mcp-toolbox@f66189f)) * **oracle:** Update oracle-execute-sql tool interface to match source signature ([#2627](googleapis/mcp-toolbox#2627)) ([81699a3](googleapis/mcp-toolbox@81699a3)) * Return AllParams for GetParameter() for tools with templateParameter([#2734](googleapis/mcp-toolbox#2734)) ([bfd7ba6](googleapis/mcp-toolbox@bfd7ba6)) * **server/mcp:** Scope defer span.End inside loop iteration ([#2558](googleapis/mcp-toolbox#2558)) ([c88a62d](googleapis/mcp-toolbox@c88a62d)), closes [#2549](googleapis/mcp-toolbox#2549) * **skill:** Fix env variable propagation ([#2645](googleapis/mcp-toolbox#2645)) ([5271368](googleapis/mcp-toolbox@5271368)) * **sources/looker:** Looker and looker-dev prebuilt tools should share one source definition. ([#2620](googleapis/mcp-toolbox#2620)) ([df7f2fd](googleapis/mcp-toolbox@df7f2fd)) * **telemetry:** Histogram buckets from OTel standard to MCP standards ([#2729](googleapis/mcp-toolbox#2729)) ([87cd4a0](googleapis/mcp-toolbox@87cd4a0)) * **ui:** Remove module from script ([#2703](googleapis/mcp-toolbox#2703)) ([6943ab6](googleapis/mcp-toolbox@6943ab6)) * Update toolset attributes naming ([#2554](googleapis/mcp-toolbox#2554)) ([3d6ae4e](googleapis/mcp-toolbox@3d6ae4e)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>
…is#2566) ## Description This PR updates MCP telemetry to align with [OTel semantic conventions](https://opentelemetry.io/docs/specs/semconv/gen-ai/mcp/#metrics) by removing all existing transport-specific and HTTP-API metrics and introducing a unified, future-proof set. It adds 1. `mcp.server.operation.duration` to capture per-method request rate, latency, and errors across all MCP transports; 2. `mcp.server.session.duration` to track session lifecycles for stdio and SSE; 3. `toolbox.server.mcp.active_sessions` for real-time capacity, saturation, and leak detection. 4. `toolbox.tool.operation.duration` to isolate backend tool execution time from MCP/protocol overhead, enabling clearer attribution of performance bottlenecks between the MCP layer and tool runtime. Together, these changes simplify the metrics surface while significantly improving observability and debuggability with minimal runtime overhead. ## PR Checklist - [x] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [ ] Appropriate docs were updated (if necessary) - [x] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#2222 --------- Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>
🤖 I have created a release *beep* *boop* --- ## [0.29.0](googleapis/mcp-toolbox@v0.28.0...v0.29.0) (2026-03-13) ### ⚠ BREAKING CHANGES * **source/alloydb:** restructure prebuilt toolsets ([googleapis#2639](googleapis#2639)) * **source/spanner:** restructure prebuilt toolsets ([googleapis#2641](googleapis#2641)) * **source/dataplex:** restructure prebuilt toolsets ([googleapis#2640](googleapis#2640)) * **source/oss-db:** restructure prebuilt toolsets ([googleapis#2638](googleapis#2638)) * **source/cloudsql:** restructure prebuilt toolsets ([googleapis#2635](googleapis#2635)) * **source/bigquery:** restructure prebuilt toolsets ([googleapis#2637](googleapis#2637)) * **source/firestore:** restructure prebuilt toolsets ([googleapis#2636](googleapis#2636)) * telemetry metrics updates as per semantic convention ([googleapis#2566](googleapis#2566)) ### Features * Add user agent to embeddings generation ([googleapis#2572](googleapis#2572)) ([287251a](googleapis@287251a)) * **skill:** Attach user agent metadata for generated skill ([googleapis#2697](googleapis#2697)) ([9598a6a](googleapis@9598a6a)) * **skills:** Add additional-notes flag to generate skills command ([googleapis#2696](googleapis#2696)) ([73bf962](googleapis@73bf962)) * **skill:** Update skill generation logic ([googleapis#2646](googleapis#2646)) ([c233eee](googleapis@c233eee)) * **source/alloydb:** Restructure prebuilt toolsets ([googleapis#2639](googleapis#2639)) ([5f3f063](googleapis@5f3f063)) * **source/bigquery:** Restructure prebuilt toolsets ([googleapis#2637](googleapis#2637)) ([dc984ba](googleapis@dc984ba)) * **sources/bigquery:** Support custom oauth header name ([googleapis#2564](googleapis#2564)) ([d3baf77](googleapis@d3baf77)) * **source/cloudsql:** Restructure prebuilt toolsets ([googleapis#2635](googleapis#2635)) ([99613dc](googleapis@99613dc)) * **source/dataplex:** Restructure prebuilt toolsets ([googleapis#2640](googleapis#2640)) ([acb9a80](googleapis@acb9a80)) * **source/firestore:** Restructure prebuilt toolsets ([googleapis#2636](googleapis#2636)) ([22ab7b9](googleapis@22ab7b9)) * **source/oss-db:** Restructure prebuilt toolsets ([googleapis#2638](googleapis#2638)) ([5196c6a](googleapis@5196c6a)) * **source/spanner:** Restructure prebuilt toolsets ([googleapis#2641](googleapis#2641)) ([ea2b698](googleapis@ea2b698)) * Telemetry metrics updates as per semantic convention ([googleapis#2566](googleapis#2566)) ([131d764](googleapis@131d764)) * **tools/mongodb:** Add tool annotations to MongoDB tools for improved LLM understanding ([googleapis#2219](googleapis#2219)) ([b7a5f80](googleapis@b7a5f80)) * **tools/serverless-spark:** Add get_session_template tool ([googleapis#2308](googleapis#2308)) ([a136e16](googleapis@a136e16)) * **tools/serverless-spark:** Add list/get sessions tools ([googleapis#2576](googleapis#2576)) ([a554298](googleapis@a554298)) ### Bug Fixes * Improve list locks integration test for postgres ([googleapis#2279](googleapis#2279)) ([d9ebe5d](googleapis@d9ebe5d)) * **mcp:** Guard nil SSE session lookup and return 400 for missing session ([googleapis#2681](googleapis#2681)) ([f66189f](googleapis@f66189f)) * **oracle:** Update oracle-execute-sql tool interface to match source signature ([googleapis#2627](googleapis#2627)) ([81699a3](googleapis@81699a3)) * Return AllParams for GetParameter() for tools with templateParameter([googleapis#2734](googleapis#2734)) ([bfd7ba6](googleapis@bfd7ba6)) * **server/mcp:** Scope defer span.End inside loop iteration ([googleapis#2558](googleapis#2558)) ([c88a62d](googleapis@c88a62d)), closes [googleapis#2549](googleapis#2549) * **skill:** Fix env variable propagation ([googleapis#2645](googleapis#2645)) ([5271368](googleapis@5271368)) * **sources/looker:** Looker and looker-dev prebuilt tools should share one source definition. ([googleapis#2620](googleapis#2620)) ([df7f2fd](googleapis@df7f2fd)) * **telemetry:** Histogram buckets from OTel standard to MCP standards ([googleapis#2729](googleapis#2729)) ([87cd4a0](googleapis@87cd4a0)) * **ui:** Remove module from script ([googleapis#2703](googleapis#2703)) ([6943ab6](googleapis@6943ab6)) * Update toolset attributes naming ([googleapis#2554](googleapis#2554)) ([3d6ae4e](googleapis@3d6ae4e)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>
Description
This PR updates MCP telemetry to align with OTel semantic conventions by removing all existing transport-specific and HTTP-API metrics and introducing a unified, future-proof set. It adds
mcp.server.operation.durationto capture per-method request rate, latency, and errors across all MCP transports;mcp.server.session.durationto track session lifecycles for stdio and SSE;toolbox.server.mcp.active_sessionsfor real-time capacity, saturation, and leak detection.toolbox.tool.operation.durationto isolate backend tool execution time from MCP/protocol overhead, enabling clearer attribution of performance bottlenecks between the MCP layer and tool runtime.Together, these changes simplify the metrics surface while significantly improving observability and debuggability with minimal runtime overhead.
PR Checklist
CONTRIBUTING.md
bug/issue
before writing your code! That way we can discuss the change, evaluate
designs, and agree on the general idea
!if this involve a breaking change🛠️ Fixes #2222