New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice

Logicmonitor

306 tools. 133 can modify or destroy data without limits.

34 destructive tools with no built-in limits. Policy required.

Last updated:

133 can modify or destroy data
173 read-only
306 tools total

Community server · catalogue entry checked 30/08/2026

How to control Logicmonitor ↓

What Logicmonitor exposes to your agents

Read (173) Write / Execute (99) Destructive / Financial (34)
Critical Risk

The most dangerous Logicmonitor tools

133 of Logicmonitor's 306 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Logicmonitor

PolicyLayer is an MCP gateway — it sits between your AI agents and Logicmonitor, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "bulk_delete_devices": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "acknowledge_alert": {
    "limits": [
      {
        "counter": "acknowledge_alert_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "analyze_blast_radius": {
    "limits": [
      {
        "counter": "analyze_blast_radius_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Logicmonitor — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON LOGICMONITOR →

Instant setup, no code required.

All 306 Logicmonitor tools

DESTRUCTIVE 34 tools
Destructive bulk_delete_devices Delete multiple devices/resources in one operation Destructive bulk_delete_sdt Delete multiple SDTs at once (max 100, requires write permission) Destructive cancel_job Cancel a running job. Requires write permission. Destructive clear_session_context Clear all session context (last results, variables, and history) Destructive delete_action_chain Delete an action chain (requires write permission). Action rules Destructive delete_action_rule Delete an action rule (requires write permission) Destructive delete_alert_rule Delete an alert rule from LogicMonitor (requires write permission) Destructive delete_collector Delete a collector (requires write permission). Destructive delete_collector_group Delete a collector group (requires write permission). Destructive delete_configsource Delete a ConfigSource definition Destructive delete_dashboard Delete a dashboard (requires write permission) Destructive delete_dashboard_group Delete a dashboard group from LogicMonitor (requires write permission) Destructive delete_datasource Delete a DataSource definition Destructive delete_device Delete a device/resource (requires write permission). Soft delete by default. Destructive delete_device_group Delete a device/resource group (requires write permission). Shows impact. Destructive delete_device_instance Delete a monitored instance from a datasource Destructive delete_diagnosticsource Delete a DiagnosticSource definition (requires write permission). Destructive delete_escalation_chain Delete an escalation chain (requires write permission) Destructive delete_eventsource Delete an EventSource definition Destructive delete_integration Delete an integration by ID. Works for any integration Destructive delete_logsource Delete a LogSource definition Destructive delete_ops_note Delete an ops note (requires write permission) Destructive delete_propertysource Delete a PropertySource definition Destructive delete_recipient_group Delete a recipient group (requires write permission) Destructive delete_remediationsource Delete a RemediationSource definition (requires write permission). Destructive delete_report Delete a report (requires write permission) Destructive delete_sdt Delete a scheduled downtime (requires write permission) Destructive delete_session_variable Delete a user-defined session variable Destructive delete_topologysource Delete a TopologySource definition Destructive delete_user Delete a user from LogicMonitor (requires write permission) Destructive delete_website Delete a website check from LogicMonitor (requires write permission) Destructive delete_website_group Delete a website group from LogicMonitor (requires write permission) Destructive delete_widget Delete a widget from a dashboard (requires write permission) Destructive terraform_destroy Destroy all Terraform-managed infrastructure in a workspace.
WRITE 91 tools
Write acknowledge_alert Acknowledge an alert (requires write permission) Write add_alert_note Add a note to an alert without acknowledging (requires write permission) Write add_device_instance Add a monitored instance to a datasource on a device Write add_ops_note Add an ops note (requires write permission) Write add_widget Add a widget to a dashboard (requires write permission). Write bulk_acknowledge_alerts Acknowledge multiple alerts at once (max 100, requires write permission) Write bulk_create_device_sdt Create SDT for multiple devices/resources (max 100, requires write permission) Write capacity_plan Composite capacity planning: forecasts metric breach dates, Write create_action_chain Create an action chain from ordered diagnostic/remediation stages Write create_action_rule Create an action rule binding an action chain to alert conditions Write create_alert_rule Create an alert rule in LogicMonitor (requires write permission) Write create_collector_group Create a collector group (requires write permission) Write create_configsource Create a ConfigSource via REST API from a full definition dict Write create_dashboard Create a dashboard, optionally from template (requires write permission) Write create_dashboard_group Create a dashboard group in LogicMonitor (requires write permission) Write create_datasource Create a DataSource via REST API from a full definition dict Write create_device Create a new device/resource (requires write permission) Write create_device_group Create a new device/resource group (requires write permission) Write create_diagnosticsource Create a DiagnosticSource via REST API from a full definition dict Write create_escalation_chain Create an escalation chain (requires write permission) Write create_eventsource Create an EventSource via REST API from a full definition dict Write create_http_integration Create a Custom HTTP Delivery integration (type=http). Write create_logsource Create a LogSource via REST API from a full definition dict Write create_propertysource Create a PropertySource via REST API from a full definition dict Write create_recipient_group Create a recipient group (requires write permission) Write create_remediationsource Create a RemediationSource via REST API from a full definition dict Write create_report Create a new report (requires write permission) Write create_sdt Create a scheduled downtime (requires write permission) Write create_topologysource Create a TopologySource via REST API from a full definition dict Write create_user Create a user in LogicMonitor (requires write permission) Write create_website Create a website check in LogicMonitor (requires write permission) Write create_website_group Create a website group in LogicMonitor (requires write permission) Write export_alert_rule Export an alert rule definition Write export_configsource Export a ConfigSource definition (REST API format). Write export_dashboard Export a dashboard definition Write export_datasource Export a datasource definition (REST API format). Write export_diagnosticsource Export a DiagnosticSource definition (REST API format). Write export_escalation_chain Export an escalation chain definition Write export_eventsource Export an EventSource definition (REST API format). Write export_logsource Export a LogSource definition (REST API format). Write export_propertysource Export a PropertySource definition (REST API format). Write export_remediationsource Export a RemediationSource definition (REST API format). Write import_appliesto_function Import an AppliesTo function from JSON (requires write permission) Write import_configsource Import a ConfigSource from LM Exchange JSON format via multipart Write import_datasource Import a DataSource from LM Exchange JSON format via Write import_diagnosticsource Import a DiagnosticSource from LM Exchange JSON format via Write import_eventsource Import an EventSource from LM Exchange JSON format via multipart Write import_jobmonitor Import a JobMonitor from JSON (requires write permission) Write import_logsource Import a LogSource from LM Exchange JSON format via multipart Write import_propertysource Import a PropertySource from LM Exchange JSON format via multipart Write import_topologysource Import a TopologySource from LM Exchange JSON format via multipart Write push_metrics Push custom metrics into LogicMonitor (requires LMv1 auth) Write recover_device Recover a soft-deleted device/resource (requires write permission). Write save_baseline Save a metric baseline from historical data. Write set_action_rule_status Enable or disable an action rule without touching its matchers Write set_session_variable Set a user-defined session variable for use across tool calls Write terraform_apply Apply Terraform configuration changes. Creates, updates, or destroys Write terraform_generate Export an existing LogicMonitor resource as Terraform HCL configuration Write terraform_import Import an existing resource into Terraform state. Maps a real-world Write terraform_plan Preview Terraform changes without applying. Shows what resources Write terraform_write_config Write HCL configuration content to a file in a Terraform workspace. Write update_action_chain Update an action chain via PATCH; only provided fields are sent Write update_action_rule Update an action rule via PATCH; only provided fields are sent Write update_alert_rule Update an alert rule in LogicMonitor (requires write permission) Write update_collector Update a collector (requires write permission). Write update_collector_group Update a collector group (requires write permission) Write update_configsource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_dashboard Update an existing dashboard (requires write permission) Write update_dashboard_group Update a dashboard group (requires write permission) Write update_datasource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_device Update an existing device/resource (requires write permission). Write update_device_eventsource Update a device-level EventSource association Write update_device_group Update a device/resource group (requires write permission). Write update_device_instance Update a monitored instance on a device (requires write permission) Write update_device_property Update or create a device/resource property (requires write permission) Write update_diagnosticsource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_escalation_chain Update an escalation chain (requires write permission) Write update_eventsource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_http_integration Update a Custom HTTP Delivery integration via PATCH. Only Write update_logicmodule Safe partial update for LogicMonitor source types (configsource, Write update_logsource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_ops_note Update an ops note (requires write permission) Write update_propertysource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_recipient_group Update a recipient group (requires write permission) Write update_remediationsource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_report_schedule Update a report Write update_sdt Update a scheduled downtime (requires write permission). Write update_topologysource RAW UPDATE -- full-replace semantics. Any field omitted from Write update_user Update a user in LogicMonitor (requires write permission) Write update_website Update a website check in LogicMonitor (requires write permission) Write update_widget Update a widget (requires write permission)
READ 173 tools
Read analyze_blast_radius Analyze the blast radius of a device failure using topology Read audit_network_monitoring_coverage Portal audit that counts UPS/PDU devices onboarded, interface Read calculate_availability Calculate availability percentage from alert history. Read calculate_error_budget Calculate SLO error budget consumption and projected Read classify_trend Classify metric trends as stable, increasing, decreasing, Read compare_to_baseline Compare current metrics against a stored baseline. Read correlate_alerts Correlate alerts by device, datasource, and temporal proximity. Read correlate_changes Cross-reference alert spikes with audit/change logs. Read correlate_metrics Compute Pearson correlation between multiple metric series. Read current_portal Show which customer portal is currently active. Read detect_alert_burst Sliding-window detector for mass alert events: N alerts from the same Read detect_change_points Detect regime shifts in metric data using the CUSUM algorithm. Read detect_seasonality Detect periodic patterns in metric data using autocorrelation. Read detect_site_outage Composite workflow for site outage detection. Chains CollectorDown Read diagnose Composite diagnosis: given an alert or device, gathers alert Read forecast_metric Forecast when a metric will breach a threshold using linear Read get_access_group Get details about a specific access group Read get_access_groups List access groups Read get_action_chain Get details about a specific action chain including its stages Read get_action_chains List action chains: ordered DiagnosticSource/RemediationSource Read get_action_rule Get details about a specific action rule Read get_action_rules List action rules: alert conditions (severity, device groups, Read get_active_sdts Get currently active SDTs Read get_alert_details Get detailed information about a specific alert Read get_alert_rule Get details about a specific alert rule Read get_alert_rules List alert rules Read get_alert_statistics Aggregate alert counts by severity, device, datasource, and time bucket. Read get_alerts Get alerts from LogicMonitor with optional filtering Read get_api_token Get details about a specific API token Read get_api_token_audit Get API token usage audit logs Read get_api_tokens List API tokens Read get_audit_logs Get audit logs from LogicMonitor Read get_batchjob Get details about a specific batch job Read get_batchjobs List batch jobs Read get_change_audit Get configuration change audit logs Read get_collector Get detailed information about a specific collector Read get_collector_group Get details about a specific collector group Read get_collector_groups List collector groups Read get_collector_health Enriched collector status with time-since-last-contact, downstream device Read get_collectors List collectors from LogicMonitor Read get_configsource Get details about a specific ConfigSource Read get_configsource_update_reasons Get update history and audit trail for a ConfigSource Read get_configsources List ConfigSources Read get_cost_recommendation Get a specific cost recommendation by ID (v224 API) Read get_cost_recommendation_categories Get cost recommendation categories with counts and savings Read get_cost_recommendations Get cost optimization recommendations. Category filter takes the Read get_credentials List credentials from Ansible Automation Platform (secrets not exposed) Read get_dashboard Get detailed information about a specific dashboard Read get_dashboard_group Get details about a specific dashboard group Read get_dashboard_groups List dashboard groups Read get_dashboard_widgets Get widgets configured on a dashboard Read get_dashboards List dashboards from LogicMonitor Read get_datasource Get details about a specific datasource Read get_datasources List datasources from LogicMonitor Read get_device Get detailed information about a specific device (resource) Read get_device_batchjobs List BatchJob datasources applied to a device (resource); per-run Read get_device_config List config versions collected for a device instance Read get_device_config_version Get a specific config version with full content and diffs Read get_device_connections Get device/resource relationships and connections Read get_device_data Get metric data for a device/resource datasource instance Read get_device_datasources Get datasources applied to a device (resource) Read get_device_eventsources Get EventSources applied to a device (resource). Read get_device_group Get detailed information about a specific device/resource group, Read get_device_groups List device/resource groups from LogicMonitor Read get_device_instances Get instances of a datasource on a device (resource) Read get_device_interfaces Get network interfaces for a device (resource) Read get_device_logsources Get LogSources applied to a device (resource) Read get_device_neighbors Get neighboring devices/resources based on topology Read get_device_properties Get all properties of a device (resource) Read get_device_property Get a specific property of a device (resource) Read get_devices List devices (resources) from LogicMonitor with optional filtering Read get_diagnostic_remediation_assignments List the diagnostic and remediation sources assigned to a specific Read get_diagnostic_remediation_results Get structured execution results for diagnostic and remediation Read get_diagnosticsource Get details about a specific DiagnosticSource including datapoints Read get_diagnosticsources List DiagnosticSources from LogicMonitor Read get_escalation_chain Get details about a specific escalation chain Read get_escalation_chains List escalation chains Read get_eventsource Get details about a specific EventSource Read get_eventsources List EventSources Read get_graph_data Get graph image data for visualization Read get_hosts List hosts from Ansible Automation Platform Read get_idle_resources Get idle/underutilized cloud resources (resolved from idle-type Read get_integration Get a specific integration Read get_integrations List LogicMonitor integrations (Custom HTTP Delivery, Slack, Read get_interface_metrics Pull interface-level metrics (in/out bytes, errors, discards, utilization, Read get_inventories List inventories from Ansible Automation Platform Read get_inventory_hosts List hosts in a specific inventory Read get_job_events Get events from a specific job run Read get_job_output Get the stdout output of a job Read get_job_status Get the status of a running or completed job Read get_job_template Get details of a specific job template Read get_job_templates List job templates from Ansible Automation Platform Read get_link_flaps Identify interfaces with repeated up/down transitions in a time window. Read get_login_audit Get login/authentication audit logs Read get_logsource Get details about a specific LogSource Read get_logsources List LogSources Read get_metric_anomalies Detect metric anomalies using z-score analysis. Read get_netscan Get details about a specific network scan Read get_netscans List network scans Read get_network_flows Get network flow data (NetFlow/sFlow) Read get_oid Get details about a specific OID Read get_oids List OID definitions Read get_ops_note Get details about a specific ops note Read get_ops_notes List ops notes Read get_organizations List organizations from Ansible Automation Platform Read get_otlp_label_values [PREVIEW] List values observed for one native OTLP metric label Read get_otlp_metric_labels [PREVIEW] List label names on native OTLP metrics, optionally Read get_otlp_metric_names [PREVIEW] List metric names ingested via native OpenTelemetry (OTLP). Read get_power_events Filter alerts for UPS/PDU power-event signatures across APC, Liebert, Read get_projects List projects from Ansible Automation Platform Read get_propertysource Get details about a specific PropertySource Read get_propertysources List PropertySources Read get_recipient_group Get details about a specific recipient group Read get_recipient_groups List recipient groups Read get_reference Get LogicMonitor reference content (schemas, enums, filter syntax, guides). Read get_remediationsource Get details about a specific RemediationSource including the Groovy script Read get_remediationsources List RemediationSources from LogicMonitor Read get_report Get detailed information about a specific report Read get_report_execution Poll the status of a report generation task started by run_report Read get_report_groups List report groups Read get_reports List reports from LogicMonitor Read get_role Get details about a specific role Read get_roles List roles Read get_scheduled_downtime_jobs Get batch jobs related to SDT automation Read get_scheduled_reports Get reports with schedules configured Read get_service Get details about a specific Service Insight service Read get_service_groups List Service Insight service groups (BizService device groups) Read get_services List Service Insight business services (deviceType 6 devices, Read get_session_context Get current session context (last results, variables, history) Read get_session_variable Get a user-defined session variable Read get_top_talkers Rank NetFlow flows on an exporter by bandwidth, packets, or flow count. Read get_topology_map Get network topology map data Read get_topologysource Get details about a specific TopologySource Read get_topologysources List TopologySources Read get_trace_operation_metrics Get per-operation RED metrics (Duration, ErrorOperationCount, OperationCount) Read get_trace_operations List operations (endpoints/routes) for an APM service datasource Read get_trace_service Get detailed information about a specific APM trace service Read get_trace_service_alerts Get alerts for an APM trace service Read get_trace_service_datasources List datasources applied to an APM service Read get_trace_service_metrics Get APM service-level RED metrics (Duration, ErrorOperationCount, OperationCount) Read get_trace_service_properties Get properties for an APM service (OTel attributes, namespace, metadata) Read get_trace_services List APM trace services (deviceType:6). Read get_upcoming_sdts Get SDTs scheduled to start within a time window Read get_user Get details about a specific user Read get_users List users from LogicMonitor Read get_website Get detailed information about a specific website Read get_website_data Get synthetic check data for a website Read get_website_groups List website groups Read get_websites List websites from LogicMonitor Read get_widget Get details about a specific widget Read get_workflow Get LogicMonitor workflow guidance text (incident_triage, rca_workflow, Read get_workflow_status Get the status of a workflow job Read get_workflow_templates List workflow job templates from Ansible Automation Platform Read health_check Composite health check: resolves a device, scores health across Read ingest_logs Ingest log entries into LogicMonitor (requires LMv1 auth) Read list_portals List the customer portals available in this multi-portal server. Read list_sdts List scheduled downtimes from LogicMonitor Read list_session_history List recent tool call history Read portal_overview Composite portal overview: aggregates alert statistics, collector Read query_otlp_metrics [PREVIEW] Run a PromQL range query against native OTLP metrics. Read reload_portals Re-read the vault so portals added or removed since startup take Read score_alert_noise Score alert noise level using Shannon entropy and flap detection. Read score_device_health Score health of a specific device-datasource instance using Read search_tools Search available MCP tools by keyword or category. Read terraform_init Initialize a Terraform workspace and download required providers. Read terraform_output Show Terraform output values defined in the configuration. Read terraform_state_list List all resources currently tracked in Terraform state for a workspace. Read terraform_state_show Show detailed Terraform state for a specific resource, Read terraform_validate Validate Terraform configuration syntax in a workspace. Read test_awx_connection Test connectivity to Ansible Automation Platform controller Read triage Composite triage: correlates alerts, clusters by device/time, Read use_portal Switch the active customer portal for subsequent tool calls. Read watsonx_summarize Generate a plain-English summary of structured data using IBM

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Logicmonitor

Can an AI agent delete data through the Logicmonitor MCP server? +

Yes. The Logicmonitor server exposes 34 destructive tools including bulk_delete_devices, bulk_delete_sdt, cancel_job. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Logicmonitor? +

The Logicmonitor server has 91 write tools including acknowledge_alert, add_alert_note, add_device_instance. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Logicmonitor.

How many tools does the Logicmonitor MCP server expose? +

306 tools across 4 categories: Destructive, Execute, Read, Write. 173 are read-only. 133 can modify, create, or delete data.

How do I enforce a policy on Logicmonitor? +

Register the Logicmonitor MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Logicmonitor tool call.

Deterministic rules across all 306 Logicmonitor tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

306 Logicmonitor tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Logicmonitor's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.