Grafana MCP Server

Grafana Labs's Grafana MCP server enables AI agents to query Grafana dashboards, inspect real-time Prometheus and Loki telemetry metrics, check active alerting rules, and analyze incident data. It provides agents with deep observability access to diagnose application latency, monitor system health, and assist engineering teams with live incident response.

Start for free

Grafana MCP Server

Benefits with Ory + Grafana MCP Server

Grafana Labs' Grafana MCP server lets your agents search dashboards, query metrics and logs, and look up incidents and on-call schedules, which makes it valuable during an outage. The same server can also change dashboards, alerting, and incident records. Ory Agent Security lets incident responders investigate freely while changes to your observability setup stay with the agents you approve, with every tool call tied to the user who triggered it.

View on GitHub

Use Cases

— 01 use case

Agent IAM

Incident responders query at Read, incident agents get Write and can update OnCall alert groups, alert rules and silences stay at Admin, and Block shuts out everyone else.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Grafana MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for incident response agents, write for incident agents that update dashboards and incident records, admin for observability owners' agents, and no access for agents with no operational role.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied alerting change stops before it reaches Grafana, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows how agents query and change Grafana during real incidents without blocking anything, so you can apply Ory's pre-built policy for the Grafana MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Grafana MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent changed a dashboard or alert during an incident.