list_prometheus_metric_names

What list_prometheus_metric_names does on Grafana MCP Server

AI agents call list_prometheus_metric_names to retrieve information from Grafana MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_prometheus_metric_names is rated Low

This tool only queries and lists metric metadata from Prometheus without executing arbitrary queries, modifying data, or triggering external operations. It is a straightforward data retrieval operation with minimal blast radius if misused—an attacker could learn what metrics exist in the system but cannot access actual metric values, modify infrastructure, or execute code.

From the tool's definition Tool description states it 'Retrieves all metric names' and 'filters them using regex'. The verb 'Retrieves' and the read-only nature of listing metric names (no datasource modification or query execution) clearly indicate a retrieval operation.

The rule that runs list_prometheus_metric_names safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Grafana MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_prometheus_metric_names, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_prometheus_metric_names": {}
  }
}

Questions about list_prometheus_metric_names