Grafana MCP server

Read from the package source without running it. The installed server may list more.

• assign_resource_permissions

  Assign or update permissions for a resource (datasource, team, dashboard, folder, or service account) by specifying the resource type and ID along with the desired permission assignments.

• assign_team_role

  Assign a role to a team. Requires permission to delegate team roles within your organization.

• cancel_snapshotwrite action

  Cancel an in-progress snapshot within a cloud migration session. This operation will halt the snapshot processing at any stage of its execution pipeline.

• check_datasource_health

  Performs a health check on a plugin datasource to verify its connectivity and operational status. Returns the health status of the datasource identified by the provided UID.

• configure_datasource_cache

  Configure caching behavior for a specific data source, including TTL settings for queries and resources. Use this to optimize performance by controlling how long cached data persists.

• convert_prometheus_rule_group

  Converts a Prometheus rule group into a Grafana-compatible rule group and creates or updates it within the specified namespace. Existing groups that were not originally imported from a Prometheus source will not be replaced and will return an error.

• convert_prometheus_rule_group_config

  Converts a Prometheus rule group into a Grafana-compatible rule group and creates or updates it in the specified namespace. Existing groups that were not originally imported from Prometheus sources will not be replaced and will return an error.

• convert_prometheus_rules

  Converts Prometheus rule groups into Grafana-Managed Rules format, enabling centralized rule management within Grafana.

• convert_prometheus_rules_to_grafana

  Converts Prometheus or Cortex rule groups into Grafana-Managed Rules format for use within Grafana's alerting system.

• create_annotationwrite action

  Creates an annotation in Grafana that can be scoped to a specific dashboard and panel, or created as an organization-wide annotation. For region annotations spanning a time period, include both time and timeEnd properties.

• create_correlationwrite action

  Create a correlation link between two data sources, enabling navigation from a field in the source to related data in a target source or query.

• create_datasourcewrite action

  Create a new data source in Grafana. Sensitive credentials like passwords are automatically encrypted and stored securely in the database. Requires `datasources:create` permission in Grafana Enterprise with Fine-grained access control enabled.

• create_graphite_annotationwrite action

  Creates an annotation using Graphite-compatible event format. The annotation timestamp defaults to the current time if not specified, and tags can use either modern or pre-0.10.0 Graphite formats.

• create_library_elementwrite action

  Creates a new library element that can be reused across dashboards and other resources. Optionally specify a folder location and provide the element configuration as a JSON model.

• create_license_tokenwrite action

  Generate a new license token for the specified instance. Requires licensing:write permission to perform this operation.

• create_migration_sessionwrite action

  Initiate a new cloud migration session to begin the migration process. This creates a session that can be used to manage and track migration activities.

• create_migration_snapshotwrite action

  Initiates the creation of an instance snapshot for a cloud migration session. Returns the snapshot UID upon successful initialization.

• create_public_dashboardwrite action

  Create a public dashboard link for an existing dashboard, enabling external sharing with configurable access controls and features.

• create_userwrite action

  Create a new user in Grafana. Requires the `users:create` permission in Grafana Enterprise with Fine-grained access control enabled. Optionally assign the user to a different organization using the OrgId parameter when `auto_assign_org` is enabled.

• delete_annotationwrite action

  Permanently deletes an annotation by its unique identifier. This action cannot be undone.

• delete_annotationswrite action

  Delete one or more annotations from dashboards. Specify either annotation IDs or a dashboard UID to remove annotations in bulk.

• delete_correlationwrite action

  Remove a correlation from a datasource. This permanently deletes the specified correlation relationship.

• delete_datasourcewrite action

  Permanently delete a data source by its unique identifier. Requires datasources:delete permission with appropriate scopes in Grafana Enterprise with Fine-grained access control enabled.

• delete_library_elementwrite action

  Permanently delete a library element by its unique identifier. This action cannot be undone and will fail if the library element is currently connected to other resources.

• delete_migration_sessionwrite action

  Permanently delete a cloud migration session by its unique identifier. This action removes the migration session and its associated data.

• delete_prometheus_rule_groupwrite action

  Deletes a specific rule group from Prometheus-compatible alerting rules. This operation only succeeds if the rule group was originally imported from a Prometheus-compatible source.

• delete_prometheus_rule_group_configwrite action

  Deletes a specific rule group from a Prometheus-compatible source. This operation only succeeds if the rule group was originally imported from Prometheus.

• delete_prometheus_rules_by_namespacewrite action

  Permanently deletes all rule groups that were imported from Prometheus-compatible sources within a specified namespace. This operation removes the entire namespace and its associated rules.

• delete_prometheus_rules_namespacewrite action

  Deletes all rule groups that were imported from Prometheus-compatible sources within a specified namespace. This operation removes the entire namespace and its associated rules.

• delete_public_dashboardwrite action

  Remove a public dashboard link from a dashboard, preventing public access to the dashboard's shared view.

• delete_userwrite action

  Permanently delete a global user from Grafana. Requires the `users:delete` permission with `global.users:*` scope in Grafana Enterprise with Fine-grained access control enabled.

• disable_datasource_cache

  Disable caching for a specific data source to ensure fresh data is fetched on subsequent queries. This operation clears the cache configuration for the specified data source.

• disable_user

  Disable a user account in Grafana. Requires the `users:disable` permission with `global.users:1` scope in Grafana Enterprise with Fine-grained access control enabled.

• enable_datasource_cache

  Enable caching for a data source to improve query performance and reduce load on the underlying data source.

• enable_user

  Activate a disabled user account in Grafana. Requires the `users:enable` permission with `global.users:1` scope in Grafana Enterprise with Fine-grained access control enabled.

• fetch_cloud_migration_token

  Retrieve the cloud migration token if one has been previously generated. This token is required for authenticating cloud migration operations.

• fetch_datasource_resource

  Retrieve data from a specific data source resource by its unique identifier and proxy route. This operation allows you to access data source resources through their configured proxy endpoints.

• get_annotation

  Retrieve a specific annotation by its unique identifier. Returns the full annotation details including metadata and content.

• get_correlation

  Retrieves a specific correlation by its unique identifier from a data source. Use this to fetch detailed information about a correlation relationship between data elements.

• get_datasource

  Retrieve a single data source by its unique identifier. Requires datasources:read permission with appropriate scopes in Grafana Enterprise with Fine-grained access control enabled.

• get_datasource_cache_config

  Retrieve the cache configuration settings for a specific data source. Returns caching policies and parameters that control how data from this source is cached.

• get_library_element

  Retrieve a specific library element by its unique identifier. Returns the complete library element details for the given UID.

• get_library_element_by_name

  Retrieve a library element by its name. Returns the library element matching the specified name.

• get_migration_session

  Retrieve details of a cloud migration session by its unique identifier. Use this to check the status, configuration, and progress of a specific migration.

• get_prometheus_alert_rules

  Retrieves Grafana-managed alert rules that were imported from Prometheus-compatible sources for a specified namespace (folder).

• get_prometheus_rule_group

  Retrieves a single rule group in Prometheus-compatible format from a namespace. This operation is available only for rule groups that were imported from a Prometheus-compatible source.

• get_prometheus_rule_group_config

  Retrieves a single rule group in Prometheus-compatible format from a previously imported Prometheus-compatible source configuration.

• get_public_dashboard

  Retrieve a publicly shared dashboard by its unique identifier. This endpoint allows access to dashboards that have been configured for public sharing.

• get_role

  Retrieve a specific role by its unique identifier. Requires `roles:read` permission with `roles:*` scope.

• get_snapshot

  Retrieve detailed metadata about a migration snapshot, including its processing status and results. Use pagination and filtering options to navigate large result sets.

• get_user_quota

  Retrieve quota information for a specific user. Requires Fine-grained access control with `users.quotas:list` permission and `global.users:1` scope in Grafana Enterprise.

• grant_resource_permission

  Grant or update a user's permissions for a specific resource. Supports datasources, teams, dashboards, folders, and service accounts.

• grant_team_resource_permissions

  Grants or updates permissions for a team to access a specific resource. Supports permissions on datasources, teams, dashboards, folders, and service accounts.

• import_dashboard

  Import a dashboard configuration into Grafana, optionally overwriting existing dashboards and placing them in a specified folder. Supports variable substitution through inputs for dynamic dashboard provisioning.

• list_annotation_tags

  Retrieve all event tags that have been created in annotations, with optional filtering and pagination support.

• list_annotations

  Retrieve annotations from your Grafana instance, optionally filtered by alert rule, dashboard, tags, or other criteria. Annotations can be scoped to specific dashboards or be organization-wide from annotation data sources.

• list_correlations

  Retrieves all correlations across datasources, with optional filtering and pagination. Use this to discover relationships between data sources.

• list_correlations_by_source

  Retrieves all correlations that originate from a specified data source. Use this to discover relationships and dependencies associated with a particular data source.

• list_dashboard_snapshots

  Retrieve a list of dashboard snapshots. Use the limit parameter to control the number of results returned.

• list_dashboards

  Retrieve a list of all publicly accessible dashboards. Use this to discover and display available dashboards that don't require authentication.

• list_data_sources

  Retrieve all configured data sources in Grafana. Requires the `datasources:read` permission with `datasources:*` scope when Fine-grained access control is enabled in Grafana Enterprise.

• list_devices

  Retrieves all devices that have been active or registered within the last 30 days. Use this to get a current inventory of devices in your system.

• list_devices_search

  Retrieves all devices that have been active or registered within the last 30 days. Useful for monitoring recent device activity and inventory.

• list_group_roles

  Retrieve all roles mapped to a specific group. This endpoint is experimental and requires the `groupAttributeSync` feature flag to be enabled.

• list_library_element_connections

  Retrieve all connections associated with a specific library element. Returns a list of dashboards, panels, or other resources that reference the library element.

• list_library_elements

  Retrieve a paginated list of all library elements that the authenticated user has permission to view. Results can be filtered, searched, and sorted to find specific elements.

• list_mapped_groups

  Retrieve all groups that have attribute mappings configured. This endpoint is experimental and requires the groupAttributeSync feature flag to be enabled.

• list_migration_sessions

  Retrieve all cloud migration sessions that have been created, providing an overview of migration projects and their current state.

• list_prometheus_alert_rules

  Retrieves all Grafana-managed alert rules that were imported from Prometheus-compatible sources, organized by namespace for easy navigation and management.

• list_prometheus_alert_rules_by_namespace

  Retrieves Grafana-managed alert rules that were imported from Prometheus-compatible sources for a specified namespace. This operation allows you to view rules organized within a particular folder or namespace.

• list_prometheus_alert_rules_from_config

  Retrieves all Grafana-managed alert rules that were imported from Prometheus-compatible sources, organized by namespace for easy navigation and management.

• list_resource_dependencies

  Retrieve the dependency graph for all resources currently eligible for migration, showing how resources depend on each other.

• list_role_assignments

  Retrieve all user and team assignments for a specific role. This returns direct role assignments only and excludes assignments inherited through group attribute synchronization.

• list_roles

  Retrieve all available roles for the signed-in user's organization, including both global and organization-local roles. Requires the `roles:read` permission with `roles:*` scope.

• list_snapshots

  Retrieve a list of snapshots for a cloud migration session. Results can be paginated and sorted by creation date.

• list_team_roles

  Retrieve all roles assigned to a team. Requires `teams.roles:read` permission scoped to the specified team.

• list_team_roles_search

  Retrieve all roles that have been directly assigned to specified teams. Requires `teams.roles:read` permission with `teams:id:*` scope.

• list_user_auth_tokens

  Retrieve all active authentication tokens (devices) for a specific user. Requires Fine-grained access control permission `users.authtoken:list` with `global.users:*` scope in Grafana Enterprise.

• list_user_roles

  Retrieve all directly assigned roles for a specific user. This returns only explicitly assigned roles and excludes built-in roles (Viewer, Editor, Admin, Grafana Admin) and roles inherited from team membership.

• lookup_ldap_user

  Retrieves LDAP user details by username to preview how the user will be mapped and synchronized in Grafana. Requires the `ldap.user:read` permission when Fine-grained access control is enabled in Grafana Enterprise.

• query_metricswrite action

  Execute metric queries against a data source with support for expressions and custom time ranges. Requires datasources:query permission in Grafana Enterprise with Fine-grained access control enabled.

• remove_license_tokenwrite action

  Remove the license token from the Grafana database. This operation permanently deletes the stored license and requires the `licensing:delete` permission. Available in Grafana Enterprise v7.4+.

• remove_team_rolewrite action

  Remove a role assignment from a team. Requires permission to delegate team roles.

• revoke_cloud_migration_token

  Revokes and removes a cloud migration token, preventing further use for cloud migration operations. This action is permanent and cannot be undone.

• revoke_user_auth_token

  Revoke an authentication token for a user, forcing them to re-authenticate on their next activity. This invalidates the specified device session and logs out the user from that device.

• revoke_user_role

  Revoke a role assignment from a user. Requires permission to remove user roles with delegate scope to prevent privilege escalation. For bulk role updates, use the set user role assignments operation instead.

• revoke_user_sessions

  Revokes all active authentication tokens and sessions for a user across all devices. The user will be logged out immediately and must re-authenticate on next access. Requires the `users.logout` permission with `global.users:*` scope in Grafana Enterprise with Fine-grained access control enabled.

• search_user_roles

  Search for roles directly assigned to specified users. Returns custom roles only, excluding built-in roles (Viewer, Editor, Admin, Grafana Admin) and team-inherited roles. Requires `users.roles:read` permission with `users:id:*` scope.

• set_folder_permissions

  Sets permissions for a folder by replacing all existing permissions with the ones specified in the request. Any permissions not included will be removed.

• set_user_password

  Set or reset a user's password. Requires the `users.password:update` permission with `global.users:*` scope in Grafana Enterprise with Fine-grained access control enabled.

• sync_ldap_user

  Synchronize a single Grafana user's account with LDAP directory. Requires the `ldap.user:sync` permission in Grafana Enterprise with Fine-grained access control enabled.

• update_annotationwrite action

  Update all properties of an annotation by its ID. Use this operation to replace the entire annotation; for partial updates, use the patch annotation operation instead.

• update_annotation_partialwrite action

  Update one or more properties of an annotation by its ID. Supports modifying text content, tags, start time, and end time. Available in Grafana 6.0.0-beta2 and later.

• update_correlationwrite action

  Updates an existing correlation configuration for a data source, allowing you to modify the field attachment point, data transformations, description, and label.

• update_datasourcewrite action

  Update an existing data source configuration. Sensitive credentials like passwords should be provided in secureJsonData to ensure they are encrypted and stored securely in the database.

• update_library_elementwrite action

  Update an existing library element by modifying its properties, folder location, or model configuration. Specify the library element by its unique identifier and provide the fields you want to change.

• update_public_dashboardwrite action

  Update the configuration and sharing settings of a public dashboard, including visibility, annotation display, time selection controls, and access permissions.

• update_team_roleswrite action

  Update the roles assigned to a team. Requires permissions to both add and remove team roles with delegation scope.

• update_user_quotawrite action

  Update a user's quota limit for a specific quota target. Requires the `users.quotas:update` permission with global user scope in Grafana Enterprise with Fine-grained access control enabled.

• upload_snapshotwrite action

  Upload a snapshot to the Grafana Migration Service for processing. This operation ingests snapshot data associated with a migration session for analysis and migration preparation.

• Code scan5 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 138 days ago8/15
• Maintainer identityregistry namespace matches repository owner7/10

Safety score

80/100

higher than 60% of 48,255 servers

Tools

100

the typical server has 7

Tools that change things

35%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

31

more than 92% of 28,688 servers

Downloads a week

155

more than 71% of 12,191 servers with a package

Grafana: common questions

Is Grafana MCP server safe?

Mostly: it is graded B (80/100). Read the Grafana safety report

How do I install Grafana?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Grafana need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Grafana maintained?

The last commit was 176 days ago (2026-05-12). The latest release is v1.0.3.

How does Grafana compare with other MCP servers?

safety score 80/100 (higher than 60% of 48,255 servers); tools 100 (the typical server has 7); tools that change things 35% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.