Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.CloudCorpRecords/dashmetrics

OCI · GHCR.IO/CLOUDCORPRECORDS/DASHMETRICS · 2 COMPONENTS

Grafana dashboards, datasources, Prometheus, Loki, and alerts from your MCP client.

42 Trust /100

Last scanned (9 hours ago)

Scores higher than 53% of OCI servers

Category Monitoring and Observability

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency45
Schema Quality & AI Usability75
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 952 tokens (~68/item across 14 items; 14 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 14 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 1 Nov 26 41

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed oci/ghcr.io/cloudcorprecords/dashmetrics@0.1.0

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem oci
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 14 exposed · ~952 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
get_alert_rule_by_uid ~42

Get one provisioned alert rule by its uid.

NameTypeReqDescription
uidstringyesThe unique identifier (uid) of the provisioned alert rule to retrieve.

No output schema declared.

No examples provided.

get_dashboard_by_uid ~41

Get one dashboard by its uid, including panels and templating.

NameTypeReqDescription
uidstringyesThe unique identifier (uid) of the dashboard to retrieve.

No output schema declared.

No examples provided.

get_datasource_by_uid ~36

Get one datasource by its uid.

NameTypeReqDescription
uidstringyesThe unique identifier (uid) of the datasource to retrieve.

No output schema declared.

No examples provided.

list_alert_rules ~43

List provisioned Grafana alert rules.

NameTypeReqDescription
limitnumber–Optional maximum number of alert rules to return; when omitted, all provisioned alert rules are returned.

No output schema declared.

No examples provided.

list_contact_points ~47

List provisioned Grafana contact points (alert notification receivers).

NameTypeReqDescription
limitnumber–Optional maximum number of contact points to return; when omitted, all provisioned contact points are returned.

No output schema declared.

No examples provided.

list_datasources ~18

List all datasources configured in Grafana.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_loki_label_names ~38

List Loki label names for a datasource.

NameTypeReqDescription
datasourceUidstringyesThe uid of the Loki datasource to list label names from.

No output schema declared.

No examples provided.

list_loki_label_values ~55

List the values of one Loki label.

NameTypeReqDescription
datasourceUidstringyesThe uid of the Loki datasource to list label values from.
labelstringyesThe name of the Loki label whose values are listed.

No output schema declared.

No examples provided.

list_prometheus_label_names ~74

List Prometheus label names, optionally for one metric.

NameTypeReqDescription
datasourceUidstringyesThe uid of the Prometheus datasource to list label names from.
metricstring–Optional metric name; when given, only labels on series for that metric are listed (sent as the Prometheus match[] selector).

No output schema declared.

No examples provided.

list_prometheus_label_values ~89

List the values of one Prometheus label.

NameTypeReqDescription
datasourceUidstringyesThe uid of the Prometheus datasource to list label values from.
labelstringyesThe name of the Prometheus label whose values are listed.
metricstring–Optional metric name; when given, values are restricted to series for that metric (sent as the Prometheus match[] selector).

No output schema declared.

No examples provided.

list_prometheus_metric_names ~71

List Prometheus metric names from a datasource, optionally filtered by a regex.

NameTypeReqDescription
datasourceUidstringyesThe uid of the Prometheus datasource to list metric names from.
regexstring–Optional regular expression; only metric names matching it are returned (the filter is applied client-side).

No output schema declared.

No examples provided.

query_loki_logs ~134

Query Loki logs with a LogQL expression over a time range.

NameTypeReqDescription
datasourceUidstringyesThe uid of the Loki datasource to query through.
endstring–Optional end of the query time range, as accepted by the Loki query_range API.
limitnumber–Optional maximum number of log lines to return (default 100, clamped to 1-5000).
querystringyesThe LogQL query expression selecting the log streams and lines to return.
startstring–Optional start of the query time range, as accepted by the Loki query_range API.

No output schema declared.

No examples provided.

query_prometheus ~164

Run a Prometheus range query through a datasource, returning the result matrix.

NameTypeReqDescription
datasourceUidstringyesThe uid of the Prometheus datasource to query through.
endstring–Optional end of the query time range, as accepted by the Prometheus query_range API; defaults to 'now' when omitted.
exprstringyesThe PromQL expression to evaluate over the time range.
startstring–Optional start of the query time range, as accepted by the Prometheus query_range API; defaults to 'now-1h' when omitted.
stepstring–Optional query resolution step width, as a Prometheus duration string such as '15s' or '1m'; defaults to '15s' when omitted.

No output schema declared.

No examples provided.

search_dashboards ~100

Search Grafana dashboards and folders by title text.

NameTypeReqDescription
limitnumber–Optional maximum number of search results to return (default 100, clamped to 1-5000).
querystring–Optional title text to search for; dashboards and folders with a matching title are returned.
typestring–Optional Grafana search result type filter, such as 'dash-db' for dashboards or 'dash-folder' for folders.

No output schema declared.

No examples provided.

Install

How do I install the io.github.CloudCorpRecords/dashmetrics MCP server?

io.github.CloudCorpRecords/dashmetrics runs locally as a container image, launched with docker run --rm -i ghcr.io/cloudcorprecords/dashmetrics:0.1.0. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/cloudcorprecords/dashmetrics

# add to Claude Code
claude mcp add cloudcorprecords-dashmetrics -- docker run --rm -i ghcr.io/cloudcorprecords/dashmetrics:0.1.0
Common questions

What is the io.github.CloudCorpRecords/dashmetrics MCP server?

io.github.CloudCorpRecords/dashmetrics is an MCP server listed in the public MCP registry as io.github.CloudCorpRecords/dashmetrics. Grafana dashboards, datasources, Prometheus, Loki, and alerts from your MCP client. This page covers its container image (ghcr.io/cloudcorprecords/dashmetrics).

Is the io.github.CloudCorpRecords/dashmetrics MCP server safe to use?

io.github.CloudCorpRecords/dashmetrics scores 42 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.CloudCorpRecords/dashmetrics MCP server expose?

io.github.CloudCorpRecords/dashmetrics exposes 14 tools: search_dashboards, get_dashboard_by_uid, list_datasources, get_datasource_by_uid, query_prometheus, and 9 more. Their descriptions and schemas cost roughly 952 tokens of context every time the server is loaded.

Is the io.github.CloudCorpRecords/dashmetrics MCP server still maintained?

io.github.CloudCorpRecords/dashmetrics is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.CloudCorpRecords/dashmetrics MCP server under?

io.github.CloudCorpRecords/dashmetrics declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.