When MCP Gateway processes traffic, it emits events to SkopeIT. You can view MCP events alongside existing AI Gateway events.
MCP Gateway adds MCP-specific fields to the AIG event table. You can use these fields to audit agent tool-use activity, investigate policy violations, and troubleshoot connectivity issues.
Viewing MCP Events in SkopeIT
- Log in to the Netskope tenant UI.
- Go to SkopeIT > AI Gateway Events.
- Use the filter bar to filter events by MCP-specific fields, such as
x_rs_mcp_server_nameorx_cs_activity. - Select an event to view detailed fields in the event details panel.
MCP-Specific Event Fields
The following fields are added to the Data Search > AIG event table in v1.5:
| Field | Description |
|---|---|
x_cs_mcp_session_id | Session ID from the MCP client (request side). |
x_rs_mcp_session_id | Session ID from the MCP server (response side). |
x_cs_activity | MCP activity type from the client request. |
x_rs_activity | MCP activity type from the server response. |
x_cs_mcp_client_name | Name of the MCP client (AI agent) that originated the request. |
x_rs_mcp_server_name | Name of the registered MCP server. |
x_cs_mcp_protocol_version | MCP protocol version reported by the client. |
x_rs_mcp_protocol_version | MCP protocol version reported by the server. |
x_rs_mcp_tool_list | List of tools registered for the MCP server. |
x_mcp_direction | Direction of the MCP traffic: client-to-server or server-to-client. |
x_mcp_initiator | The party that initiated the MCP request. |
MCP Activity Types
Each MCP activity type maps to a JSON-RPC method. Use these values in access control policies and log filters.
| Category | Activity types |
|---|---|
| Lifecycle | Initialize |
| Tools | ListTools, CallTool |
| Resources | ListResources, ReadResource, ListResourceTemplates, Subscribe, Unsubscribe |
| Prompts | ListPrompts, GetPrompt |
| Completion | Complete |
| Sampling | CreateMessage |
| Elicitation | Elicit |
| Roots | ListRoots |
| Tasks | Cancel |