29 tools from the Grafana MCP Server, categorised by risk level.
View the Grafana policy →generate_deeplinks Create accurate Grafana resource URLs 2/5 get_dashboard_by_uid Retrieve complete dashboard details by UID 2/5 get_dashboard_panel_queries Extract panel titles, queries, and datasource info 2/5 get_dashboard_property Extract specific dashboard parts using JSONPath 2/5 get_dashboard_summary Get compact dashboard overview without full JSON 2/5 get_datasource Retrieve datasource details by UID or name 2/5 get_panel_image Render a dashboard panel as PNG 2/5 get_query_examples Get sample queries for learning syntax 2/5 get_role_details Inspect role permissions in Grafana 2/5 list_alert_rules View alerting configurations 2/5 list_all_roles List all available roles 2/5 list_annotations Query dashboard annotations 2/5 list_cloudwatch_namespaces List AWS CloudWatch service namespaces 2/5 list_datasources View all configured datasources 2/5 list_incidents Browse Grafana Incident records 2/5 list_loki_label_names Explore log label names in Loki 2/5 list_prometheus_metric_names Discover available Prometheus metrics 2/5 list_teams View Grafana teams 2/5 list_users_by_org List users in an organisation 2/5 query_clickhouse Execute SQL queries on ClickHouse 3/5 query_cloudwatch Run AWS CloudWatch metric queries 2/5 query_elasticsearch Search using Lucene or Query DSL 2/5 query_loki_logs Run LogQL queries for logs and metrics 2/5 query_prometheus Execute PromQL queries against Prometheus 2/5 search_dashboards Search dashboards by title or metadata 2/5 The Grafana MCP server exposes 29 tools across 2 categories: Read, Write.
Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the Grafana server.
Grafana tools are categorised as Read (25), Write (4). Each category has a recommended default policy.
Open source. One binary. Zero dependencies.
npx -y @policylayer/intercept