get_datasource_by_uid

What get_datasource_by_uid does on Grafana MCP Server

AI agents call get_datasource_by_uid to retrieve information from Grafana MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_datasource_by_uid is rated Low

This tool queries and returns datasource metadata without creating, modifying, deleting, or executing any operations. It has no side effects and poses minimal security risk—datasource information is typically non-sensitive configuration data in monitoring systems. The blast radius of misuse is limited to information disclosure.

From the tool's definition Tool name and description indicate a retrieval operation: 'Retrieves detailed information about a specific datasource using its UID.' The verb 'retrieves' and the absence of any modification, deletion, or execution language confirm this is a read-only query.

The rule that runs get_datasource_by_uid safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Grafana MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_datasource_by_uid, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_datasource_by_uid": {}
  }
}

Questions about get_datasource_by_uid