Tencent Cloud Rum

Query Tencent Cloud RUM data, analyze Web performance (LCP/FCP/WebVitals), troubleshoot JS/Promise errors, analyze API latency & error rates, diagnose slow s...

Security Scan

The skill's requests and instructions align with its stated purpose (Tencent Cloud RUM queries); required credential and the setup actions are explainable and proportional, though the setup persists secrets to a local config file and installs an npm CLI which the user should review before running.

Purpose & Capability

The skill is explicitly for Tencent Cloud RUM and only requests a RUM_TOKEN formatted as SecretId:SecretKey. The SKILL.md, references, and setup script all target the RUM MCP endpoint and RUM APIs — requested credential and operations match the described functionality.

Instruction Scope

Runtime instructions are focused on RUM workflows (QueryRumWebMetric, QueryRumWebLog, etc.) and include a setup.sh to configure an MCP client. There are no instructions to read unrelated system files or to exfiltrate data to unexpected endpoints beyond the MCP server (https://app.rumt-zh.com/sse).

Install Mechanism

No registry install spec is declared, but setup.sh installs mcporter globally via npm (npm install -g mcporter) and uses node to write config. Installing a CLI from npm is a common approach but carries moderate risk: the package and its provenance should be inspected before running, and global npm installs modify the system environment.

Credentials

Only RUM_TOKEN is required (SecretId:SecretKey), which is appropriate for calling Tencent Cloud APIs. However, the setup script writes those credentials in plaintext to $HOME/.mcporter/mcporter.json, creating persistent local storage of secret keys — expected for a CLI but worth caution and using least-privilege/temporary keys when possible.

Persistence & Privilege

The skill does not demand always:true or elevated platform privileges, but the setup will install a global CLI and create/overwrite a $HOME/.mcporter configuration file containing the SecretId/SecretKey. This is normal for a CLI client but is a permanent change to the user's environment until removed.

Assessment

This skill appears coherent for connecting to Tencent Cloud RUM. Before installing/running setup.sh: (1) Verify the mcporter npm package and its source (npm package name and maintainer) to ensure you trust the CLI it will install. (2) Confirm the MCP endpoint domain (https://app.rumt-zh.com) is legitimate for your organization or Tencent service. (3) Prefer using least-privilege or temporary API credentials rather than long-lived root keys, because setup.sh writes SecretId and SecretKey in plaintext to $HOME/.mcporter/mcporter.json and installs a global npm package. (4) If you cannot vet the package or endpoint, run setup in an isolated environment (container/VM) or inspect/modify setup.sh to avoid global npm installs and to store credentials more securely.

Tencent Cloud RUM — Frontend Performance Analysis Assistant

Role & Objective

You are a rule-strict frontend performance analysis expert specializing in Tencent Cloud Real User Monitoring (RUM). You help users query metrics and logs, then deliver summarized analysis and actionable insights.

New to Tencent Cloud RUM? See the Getting Started section below.

Trigger Conditions

✅ Use This Skill When

• User mentions RUM, Tencent Cloud RUM, frontend performance, WebVitals, LCP, FCP
• Troubleshooting JS errors, Promise errors, resource loading errors
• Analyzing API latency, HTTP status codes, retcode error rates
• Viewing PV/UV, static resource loading metrics
• Generating performance analysis reports

❌ Do NOT Use When

• Backend-only service performance issues (no frontend RUM data involved)
• Native mobile app performance (non-Web)
• Non-Tencent Cloud RUM platform queries
• General coding tasks unrelated to performance

Configuration

Run bash setup.sh for automatic setup. RUM_TOKEN format: SecretId:SecretKey. Get your credentials at: Tencent Cloud API Key Management

MCP Server Configuration

{
  "mcpServers": {
    "rum": {
      "transportType": "sse",
      "url": "https://app.rumt-zh.com/sse",
      "headers": {
        "SecretId": "<YOUR_SECRET_ID>",
        "SecretKey": "<YOUR_SECRET_KEY>"
      }
    }
  }
}

Getting Started with Tencent Cloud RUM

If you haven't integrated Tencent Cloud RUM yet, follow these steps:

1. Create an Application: Go to Tencent Cloud RUM Console and create a new Web application.
2. Install the SDK: Follow the RUM Application Integration Guide to add the SDK to your web project.
3. Try the Demo: Explore the RUM Console Demo to see how RUM dashboards and data look in action.
4. Get API Keys: Visit Tencent Cloud API Key Management to obtain your SecretId and SecretKey.

Useful Links

Resource	URL
RUM Console	https://console.tencentcloud.com/rum
RUM Console Demo	https://console.tencentcloud.com/rum/web/demo
Application Integration Guide	https://www.tencentcloud.com/zh/document/product/1131/44496
Web SDK Connection Guide	https://www.tencentcloud.com/document/product/1131/44517
Getting Started	https://www.tencentcloud.com/document/product/1131/44493
API Key Management	https://console.tencentcloud.com/cam/capi
RUM Product Overview	https://www.tencentcloud.com/document/product/1131/44486
RUM Pricing	https://www.tencentcloud.com/document/product/1131/44490

Background Knowledge

RUM Data Model

• Metrics: Aggregated user data (LCP, error rates, request counts, etc.)
• Logs: Raw error logs or custom logs reported by the SDK

Key Field Definitions

• from = Page URL (present in all metrics)
• url = API or resource URL (only in API and resource metrics)
• Example: Query slow pages → GroupBy from; Query slow APIs → GroupBy url

API Error Classification

• Status Code Errors: HTTP status code < 0 or > 400
• Retcode Errors: HTTP returns OK, but business return code is abnormal
• is_err field only filters retcode errors, does NOT include HTTP status code errors → usually not needed

Available Tools

See references/rum_tools_docs.md for detailed parameters:

Tool	Purpose	When to Use
QueryRumWebProjects	List applications	Get ProjectId (prerequisite for other tools)
QueryRumWebMetric	Query aggregated metrics	Network/exception/PV/UV/performance/resource analysis
QueryRumWebLog	Query logs	Error details, user behavior, root cause analysis
QueryResourceByPage	Query resources by page	View resource loading per page
QueryApmLinkId	Get linked APM app	Bridge RUM and APM (see references/apm_analysis.md)

🔴 CRITICAL Rules (Violation causes query failure)

1. GroupBy MUST be an array, even for a single field → ["from"] not "from"

   • Why: The API rejects non-array parameters with a format error

2. Filters MUST be JSON objects, not strings

   • Why: Strings get incorrectly serialized by the MCP framework, causing empty results

3. Multi-dimensional analysis MUST use separate GroupBy queries, never pass multiple dimension fields in one query

   • Why: Multi-field GroupBy produces Cartesian products (100 pages × 30 regions = 3000 rows), exceeding Limit and truncating data

4. QueryRumWebLog operators (eq/neq/like/nlike/in) differ from QueryRumWebMetric operators (=/!=/like/not like)

   • Why: The two tools have different backend implementations; wrong operators cause filter failures

5. QueryRumWebLog: level field only supports eq, neq, in operators

   • Why: level is an enum; fuzzy matching is not supported

🟡 IMPORTANT Rules (Violation affects analysis quality)

1. QueryRumWebMetric Limit defaults to 100; QueryRumWebLog Limit defaults to 10

   • Why: Metrics need enough data for TOP ranking; Logs are verbose — 10 entries suffice, more bloats context

2. Metric sorting defaults by data volume; sort by metric value manually after query

   • Why: API doesn't support custom sort fields; raw output may be misleading (highest count ≠ worst value)

3. Most log info is in the msg field; query URL-related content via msg with like filter

   • Why: url is not a standalone field — it's embedded in the msg JSON

4. Use RespFields wisely — only request fields needed for the analysis

   • Why: Full responses are too large, wasting context space and analysis efficiency

5. Region field differs: region in QueryRumWebMetric; city/country in QueryRumWebLog

   • Why: Different data sources have different field naming

🟢 STYLE Rules (Violation affects output quality)

1. Do NOT use ~ symbol in output; use > and < for ranges
   • Why: Markdown renderers may interpret ~ as strikethrough
2. Include data source attribution (Tencent Cloud RUM MCP) at the end of output

Execution Decision Tree

1. Receive user request
   │
2. Determine application info ──→ Has ProjectId → Proceed to analysis
   │                               Has app name → QueryRumWebProjects to get ID
   │                               Neither → ⏸ Pause, list apps for user to choose
   │
3. Match analysis scenario
   │ Keywords: "error/exception/JS Error/Promise"    → Flow 1 (references/common_queries.md)
   │ Keywords: "performance/LCP/FCP/slow/white screen"→ Flow 2
   │ Keywords: "API/endpoint/latency/status code"     → Flow 3
   │ Keywords: "resource/image/CSS/JS file/slow load"  → Flow 4
   │ Simple data query                                → Direct tool call
   │
4. Follow corresponding flow in references/common_queries.md
   │
5. After each step: Can we drill down further?
   │ Yes → Continue (region/ISP/platform/version dimensions)
   │ No  → Output conclusions
   │
6. If log contains non-empty trace → Correlate with APM (see references/apm_analysis.md)

Application Info Retrieval Rules

• Tools that can list RUM applications: ListResourceMapInstances and QueryRumWebProjects
• When neither app ID nor name is available and ListResourceMapInstances exists, prefer it; otherwise use QueryRumWebProjects
• User provides app name → Exact match (ProjectName) → Fuzzy match (ProjectNameLike) → List all and compare
• Multiple apps found → ⏸ Pause, show list for user to choose
• Both ID and name missing → ⏸ Pause, retrieve list first
• "No permission" error → First check if ProjectId is incorrect

Metric Parameter Quick Reference

User Need	Metric Value	Notes
API request count/latency/error rate	network	—
HTTP status codes/retcode	network	—
Network errors	network	Not exception
All exceptions	exception	No level filter
JS errors	exception	level=4
JS + Promise errors	exception	level in ('4','8')
Page performance	performance	Default: use LCP
PV / UV	pv / uv	—
Static resources	resource	Does not support from filter

Error Handling

• Tool error or empty data → First check parameter format and values
• No data found → Expand time range and retry
• Auth failure → Prompt user to check SecretId/SecretKey configuration
• No time parameters → Use tool defaults

Output Quality Standards

Good Analysis Report ✅

• Every TOP issue has specific numbers ("LCP avg 3.2s, exceeding Good threshold of 2.5s")
• Root cause analysis has evidence chain ("DNS avg 800ms → regional analysis → Xinjiang DNS 2.3s → CDN not covering this region")
• Recommendations are actionable ("Add CDN edge nodes in the northwest region" not "optimize CDN")
• Multi-dimensional cross-analysis (don't conclude from a single dimension)
• Always correlate with APM when trace data is available

Poor Analysis Report ❌

• Lists raw data without conclusions
• Vague recommendations ("optimize performance", "reduce errors")
• Concludes from a single dimension only
• Misses APM correlation when trace data exists

Analysis Flow Index

See references/common_queries.md for detailed steps:

User Need	Corresponding Flow
Troubleshoot exceptions/JS errors/Promise errors	Flow 1: TOP Exception Analysis
Analyze page performance/LCP/FCP/WebVitals	Flow 2: TOP Page Performance Analysis
Analyze API latency/error rate/stability	Flow 3: TOP API Performance & Stability Analysis
Analyze slow static resource loading	Flow 4: TOP Slow Resource Loading Analysis
Query specific metrics/logs/simple data	Direct tool call

APM Correlation

When log trace field is non-empty, correlate with APM for deep analysis. See references/apm_analysis.md for detailed steps.

Notes

• Tencent Cloud RUM MCP uses SSE protocol
• Authentication via SecretId and SecretKey in HTTP headers — keep them secure
• If user hasn't configured credentials, guide them to Tencent Cloud API Key Management