Back to MCP Directory
Grafana Loki
Model Context Protocol moderate risk

Grafana Loki

Grafana Loki MCP server enables querying and formatting Loki logs via Grafana's API, offering flexible data retrieval and presentation options.

Connections & Capabilities

Connects To

GitHub

Capabilities

read

Quickstart

Install

pip install grafana-loki-mcp

Config

{
  "mcpServers": {
    "loki": {
      "command": "uvx",
      "args": [
        "grafana-loki-mcp",
        "-u",
        "GRAFANA_URL",
        "-k",
        "GRAFANA_API_KEY"
      ]
    }
  }
}

Exposed MCP Tools (4)

safe
query_loki

Queries Loki logs based on a provided query string and time range.

Read-only operation; retrieves log data without modification.

safe
get_loki_labels

Retrieves all label names from Loki.

Read-only operation; retrieves label names without modification.

safe
get_loki_label_values

Retrieves values for a specific label from Loki.

Read-only operation; retrieves label values without modification.

safe
format_loki_results

Formats Loki query results into a more readable format.

Read-only operation; transforms data without modifying the source.

Safety Assessment

This MCP server is relatively safe for querying and formatting Loki logs, provided the Grafana API key is securely managed and access is appropriately controlled. Risks are elevated if the API key is exposed or if log data contains sensitive information without proper redaction.

  • Uses Grafana API for querying, leveraging existing Grafana access controls.
  • Read-only access to logs via `query_loki`, `get_loki_labels`, and `get_loki_label_values`.
  • Formatting tool `format_loki_results` does not modify any data.
  • Supports both stdio and SSE transport protocols for secure communication.
  • Requires a Grafana API key, which if compromised, could expose log data.
  • Exposure of Grafana URL and API key as environment variables or command-line arguments.
  • Potential for information leakage if log data contains sensitive information.
  • No built-in rate limiting, potentially leading to API abuse if not managed externally.