Grafana grafana
Query dashboards, panels, datasources, alerts and incidents on a Grafana instance. Reaches Grafana with a service account token you supply as a named secret.
- Homepage
- https://github.com/grafana/mcp-grafana
- License
- Apache-2.0
- Runtime
native, transportstdio- Categories
- observability
Versions
| Version | Published | Runtime | Blobs |
|---|---|---|---|
| 1.5.1 | 2026-10-06T14:04:59Z | native |
linux/amd64
c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177 16.7 MiB
curl -fsSLO https://library.pellum.ai/blobs/sha256/c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177 |
Parameters
| Name | Type | Environment | Required | Secret | Description |
|---|---|---|---|---|---|
grafana_url | string | GRAFANA_URL | yes | no | Base URL of the Grafana instance, including the scheme. |
service_account_token | string | GRAFANA_SERVICE_ACCOUNT_TOKEN | yes | yes | Grafana service account token with the scopes you want exposed. |
org_id | string | GRAFANA_ORG_ID | no | no | Numeric Grafana organization id, when the token spans more than one organization. |
Credentials
The server verifies no caller token. The executor's sandbox and listener are the controls on who may call it.
Egress
| Destination | Port | Reason |
|---|---|---|
${grafana_url.host} | default web ports | the Grafana instance this server queries |
A host of the form ${param.host} is the host of a URL the operator supplies, resolved by the gateway at claim time. The library never knows it.
Resource defaults
memory.max 256Mi, pids.max 128, cpu.max 100000 100000.
Verify a download
Against the library key, which is what a gateway checks:
curl -fsSLO https://library.pellum.ai/blobs/sha256/c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177 curl -fsSLO https://library.pellum.ai/blobs/sha256/c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177.sig curl -fsSLO https://library.pellum.ai/keys/library-v1.pub echo "c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177 c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177" | sha256sum -c - cosign verify-blob --insecure-ignore-tlog --key library-v1.pub --signature c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177.sig c639464f56c23543bd698aa28a51d1bf480ad1f408d9f2e080fa0ef984368177