// SCAN REPORT

Mcp Grafana

43 tools. 4 can modify or destroy data without limits.

4 write tools that can modify data. Rate limits recommended.

Last updated:

4 can modify or destroy data
39 read-only
43 tools total

Community server · catalogue entry verified 29/06/2026

How to control Mcp Grafana ↓

TOOL MAP

What Mcp Grafana exposes to your agents

Read (39) Write / Execute (4) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
High Risk

The most dangerous Mcp Grafana tools

Execute · Medium query_loki_logs The tool explicitly 'executes' a query, which is an active operation against an external datasource. Write · Medium add_activity_to_incident This tool creates or appends new data (a note activity) to an existing incident, which is a reversible modification. Write · High create_incident This tool creates a new incident record in Grafana, which is a reversible write operation. Write · High update_dashboard This tool modifies dashboard configurations in Grafana, which is reversible (dashboards can be edited or reverted).

4 of Mcp Grafana's 43 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mcp Grafana

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Grafana, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations
{
  "add_activity_to_incident": {
    "limits": [
      {
        "counter": "add_activity_to_incident_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "fetch_pyroscope_profile": {
    "limits": [
      {
        "counter": "fetch_pyroscope_profile_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Mcp Grafana — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON MCP GRAFANA →

Instant setup, no code required.

FULL CATALOGUE

All 43 Mcp Grafana tools

EXECUTE 1 tools
Execute query_loki_logs Executes a LogQL query against a Loki datasource to retrieve log entries or metric values
WRITE 3 tools
Write add_activity_to_incident Add a note (userNote activity) to an existing incident\ Write create_incident Create a new Grafana incident. Requires title, severity, and room prefix Write update_dashboard Create or update a dashboard using either full JSON or efficient patch operations
READ 39 tools
Read fetch_pyroscope_profile Fetches a profile from a Pyroscope data source for a given time range Read find_error_pattern_logs Searches Loki logs for elevated error patterns compared to the last day\ Read find_slow_requests Searches relevant Tempo datasources for slow requests and returns the results Read generate_deeplink Generate deeplink URLs for Grafana resources. Supports dashboards, panels, and Explore queries Read get_alert_rule_by_uid Retrieves the full configuration and detailed status of a specific Grafana alert rule Read get_assertions Get assertion summary for a given entity with its type, name, env, site, namespace, and time range Read get_current_oncall_users Get the list of users currently on-call for a specific Grafana OnCall schedule Read get_dashboard_by_uid Retrieves the complete dashboard, including panels, variables, and settings, for a specific dashboard identifi Read get_dashboard_panel_queries Retrieve panel queries and information from a Grafana dashboard Read get_dashboard_property Get specific parts of a dashboard using JSONPath expressions to minimize context window usage Read get_dashboard_summary Get a compact summary of a dashboard including title, panel count, panel types, variables, and other metadata Read get_datasource_by_name Retrieves detailed information about a specific datasource using its name. Read get_datasource_by_uid Retrieves detailed information about a specific datasource using its UID. Read get_incident Get a single incident by ID. Returns the full incident details Read get_oncall_shift Get detailed information for a specific Grafana OnCall shift Read get_sift_analysis Retrieves a specific analysis from an investigation by its UUID Read get_sift_investigation Retrieves an existing Sift investigation by its UUID Read list_alert_rules Lists Grafana alert rules, returning a summary including UID, title, current state, and labels Read list_contact_points Lists Grafana notification contact points, returning a summary including UID, name, and type Read list_datasources List available Grafana datasources. Optionally filter by datasource type. Read list_incidents List Grafana incidents. Allows filtering by status and optionally including drill incidents Read list_loki_label_names Lists all available label names (keys) found in logs within a specified Loki datasource and time range Read list_loki_label_values Retrieves all unique values associated with a specific labelName within a Loki datasource and time range Read list_oncall_schedules List Grafana OnCall schedules, optionally filtering by team ID Read list_oncall_teams List teams configured in Grafana OnCall Read list_oncall_users List users from Grafana OnCall. Can retrieve all users, a specific user, or filter by username Read list_prometheus_label_names List label names in a Prometheus datasource. Allows filtering by series selectors and time range. Read list_prometheus_label_values Get the values for a specific label name in Prometheus. Allows filtering by series selectors and time range. Read list_prometheus_metric_metadata List Prometheus metric metadata. Returns metadata about metrics currently scraped from targets. Read list_prometheus_metric_names List metric names in a Prometheus datasource. Retrieves all metric names and filters them using regex. Read list_pyroscope_label_names Lists all available label names found in profiles within a Pyroscope datasource Read list_pyroscope_label_values Lists all available label values for a particular label name in profiles Read list_pyroscope_profile_types Lists all available profile types in a Pyroscope datasource Read list_sift_investigations Retrieves a list of Sift investigations with an optional limit Read list_teams Search for Grafana teams by a query string. Returns a list of matching teams with details Read list_users_by_org List users by organization. Returns a list of users with details like userid, email, role etc Read query_loki_stats Retrieves statistics about log streams matching a given LogQL selector within a Loki datasource Read query_prometheus Query Prometheus using a PromQL expression. Supports both instant and range queries. Read search_dashboards Search for Grafana dashboards by a query string. Returns a list of matching dashboards with details like title
FAQ

Questions about Mcp Grafana

How do I prevent bulk modifications through Mcp Grafana? +

The Mcp Grafana server has 3 write tools including add_activity_to_incident, create_incident, update_dashboard. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mcp Grafana.

How many tools does the Mcp Grafana MCP server expose? +

43 tools across 2 categories: Read, Write. 39 are read-only. 4 can modify, create, or delete data.

How do I enforce a policy on Mcp Grafana? +

Register the Mcp Grafana MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mcp Grafana tool call.

Deterministic rules across all 43 Mcp Grafana tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP GRAFANA →

Instant setup, no code required.

43 Mcp Grafana tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.