From be6106c0f55998c5e996daaeedc2e31dc682f5a3 Mon Sep 17 00:00:00 2001
From: Matei <matei.martin@flare.io>
Date: Thu, 23 Jul 2026 10:21:00 -0400
Subject: [PATCH 1/2] add new properties to MCP search tools

---
 docs/sdk/api-mcp.mdx | 29 +++++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/docs/sdk/api-mcp.mdx b/docs/sdk/api-mcp.mdx
index 86a83ff..eca5945 100644
--- a/docs/sdk/api-mcp.mdx
+++ b/docs/sdk/api-mcp.mdx
@@ -34,8 +34,8 @@ themselves), see the
 
 ### Search Parameters
 
-The `search_global` and `search_tenant` tools accept the
-same parameters:
+The `search_global` and `search_tenant` tools share the following
+parameters:
 
 <ParamField body="query" type="string" required>
   Lucene query.
@@ -50,6 +50,12 @@ same parameters:
   List of event types to scope the search. Defaults to all event types.
 </ParamField>
 
+<ParamField body="severity" type="array of string">
+  Filter results by event severity. Passing an array returns only events whose
+  severity exactly matches one of the listed values. Allowed values: `info`,
+  `low`, `medium`, `high`, `critical`.
+</ParamField>
+
 <ParamField body="size" type="integer" default="10">
   Number of results to return. Between `1` and `10`.
 </ParamField>
@@ -58,6 +64,25 @@ same parameters:
   Opaque pagination cursor from a previous response.
 </ParamField>
 
+#### Tenant Search Parameters
+
+In addition to the shared parameters above, `search_tenant` accepts the
+following tenant-scoped filters:
+
+<ParamField body="tags" type="array of string">
+  Filter results to events that carry at least one of the given tenant tags.
+</ParamField>
+
+<ParamField body="is_ignored" type="boolean">
+  If `true`, only return events that have been marked as ignored. `false` has no
+  effect and behaves the same as omitting it.
+</ParamField>
+
+<ParamField body="is_remediated" type="boolean">
+  If `true`, only return events that have been marked as remediated. `false` has
+  no effect and behaves the same as omitting it.
+</ParamField>
+
 ### Prompt Examples
 
 - `What has Flare picked up on our monitored domain scatterholt.com in the last 24 hours?`

From 2b9c6e981559f85a039d8e0cc78e6a565f09f3c0 Mon Sep 17 00:00:00 2001
From: Matei <matei.martin@flare.io>
Date: Thu, 23 Jul 2026 10:32:34 -0400
Subject: [PATCH 2/2] Rework new search params phrasing

---
 docs/sdk/api-mcp.mdx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/sdk/api-mcp.mdx b/docs/sdk/api-mcp.mdx
index eca5945..b80faf3 100644
--- a/docs/sdk/api-mcp.mdx
+++ b/docs/sdk/api-mcp.mdx
@@ -34,7 +34,7 @@ themselves), see the
 
 ### Search Parameters
 
-The `search_global` and `search_tenant` tools share the following
+The `search_global` and `search_tenant` tools accept the following
 parameters:
 
 <ParamField body="query" type="string" required>