com.mcparmory/grafana
OCI · GHCR.IO/MCPARMORY/GRAFANA:1.0.3 · 2 COMPONENTS · SCANNED SEP 20
Manage dashboards, users, teams, alerts, data sources, and access control
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- Malware scan not yet available for this package.Unverified
- Known CVEs could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.Unverified
Provenance & Transparency32
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: no license is declared. See how to fix → Fail
- Actively maintained (last published 130 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability79
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 20635 tokens (~94/item across 218 items; 218 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
- Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety97
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 37 of 42 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "query_metrics" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Partial
- An AI judge read all 218 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
How do I install the com.mcparmory/grafana MCP server?
com.mcparmory/grafana runs locally as a container image, launched with docker run --rm -i ghcr.io/mcparmory/grafana:1.0.3. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.
oci · ghcr.io/mcparmory/grafana:1.0.3
claude mcp add com-mcparmory-grafana -- docker run --rm -i ghcr.io/mcparmory/grafana:1.0.3
{
"mcpServers": {
"com-mcparmory-grafana": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/mcparmory/grafana:1.0.3"
]
}
}
} {
"servers": {
"com-mcparmory-grafana": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/mcparmory/grafana:1.0.3"
]
}
}
} codex mcp add com-mcparmory-grafana -- docker run --rm -i ghcr.io/mcparmory/grafana:1.0.3
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-mcparmory-grafana": {
"type": "local",
"command": [
"docker",
"run",
"--rm",
"-i",
"ghcr.io/mcparmory/grafana:1.0.3"
],
"enabled": true
}
}
} mcp_servers:
com-mcparmory-grafana:
command: "docker"
args: ["run", "--rm", "-i", "ghcr.io/mcparmory/grafana:1.0.3"] {
"McpServers": {
"com-mcparmory-grafana": {
"Transport": "stdio",
"Command": "docker",
"Arguments": [
"run",
"--rm",
"-i",
"ghcr.io/mcparmory/grafana:1.0.3"
]
}
}
} {
"mcpServers": {
"com-mcparmory-grafana": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/mcparmory/grafana:1.0.3"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 −2
- Stability: pass → 0.80 functional
- 19 Sept 26 0
- Stability: 0.97 → pass security
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 −3
- Stability: pass → 0.77 functional
- 11 Sept 26 0
- Stability: 0.97 → pass security
- 10 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed oci/ghcr.io/mcparmory/grafana:1.0.3
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | oci |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
list_user_quotas List User Quotas ~28
Retrieve the current quota limits and usage for the authenticated user across all resources and services.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_user_roles List User Roles ~137
Retrieve all directly assigned roles for a specific user. This returns only explicitly assigned roles and excludes built-in roles (Viewer, Editor, Admin, Grafana Admin) and roles inherited from team membership.
| Name | Type | Req | Description |
|---|---|---|---|
| includeHidden | boolean | – | Whether to include hidden roles in the response. When enabled, returns roles that are normally hidden from the user interface. |
| targetOrgId | string | – | The organization ID to scope the role query to. When specified, returns roles within that organization context. Must be a positive integer. |
| userId | string | yes | The unique identifier of the user whose roles should be listed. Must be a positive integer. |
No output schema declared.
No examples provided.
list_user_teams List User Teams ~36
Retrieve all teams that the currently authenticated user is a member of. This returns the complete list of teams associated with the user's account.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_user_teams_by_id List User Teams ~54
Retrieve all teams that a user is a member of. Returns a list of teams associated with the specified user.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | The unique identifier of the user. Must be a positive integer. |
No output schema declared.
No examples provided.
list_users List Users ~53
Retrieve all users that the authenticated user has permission to view. Requires admin permission to access this operation.
| Name | Type | Req | Description |
|---|---|---|---|
| perpage | string | – | Maximum number of users to return per page. Defaults to 1000 if not specified. |
No output schema declared.
No examples provided.
list_users_paginated List Users with Pagination ~37
Retrieve a paginated list of users from the system. Use this operation to browse users with built-in pagination support for efficient data retrieval.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
lookup_ldap_user Lookup LDAP User ~88
Retrieves LDAP user details by username to preview how the user will be mapped and synchronized in Grafana. Requires the `ldap.user:read` permission when Fine-grained access control is enabled in Grafana Enterprise.
| Name | Type | Req | Description |
|---|---|---|---|
| user_name | string | yes | The LDAP username to look up. This is the unique identifier used in your LDAP directory to retrieve the user's attributes and preview their Grafana mapping. |
No output schema declared.
No examples provided.
lookup_user Lookup User ~62
Retrieve a user account by their login name or email address. Use this to find user details when you have either identifier available.
| Name | Type | Req | Description |
|---|---|---|---|
| loginOrEmail | string | yes | The user's login name or email address to search for. Accepts either format to locate the user account. |
No output schema declared.
No examples provided.
query_dashboard_panel Query Dashboard Panel ~109
Execute a query against a specific panel on a public dashboard and retrieve the results. Use the dashboard's access token and panel identifier to fetch panel data.
| Name | Type | Req | Description |
|---|---|---|---|
| accessToken | string | yes | The access token that grants permission to query this public dashboard. This token authenticates your request and determines which dashboard you can access. |
| panelId | string | yes | The unique identifier of the panel within the dashboard whose data you want to query. This is a numeric ID that specifies which panel's results to retrieve. |
No output schema declared.
No examples provided.
query_metrics Query Metrics ~219
Execute metric queries against a data source with support for expressions and custom time ranges. Requires datasources:query permission in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | yes | Start time for the query range as an epoch timestamp in milliseconds or a relative Grafana time unit (e.g., 'now-1h', 'now-24h'). Relative units are calculated from the current time. |
| queries | array | yes | Array of query objects to execute. Each query must specify a unique datasourceId and can optionally include a refId identifier (defaults to 'A'), maxDataPoints for rendering limits (defaults to 100),… |
| to | string | yes | End time for the query range as an epoch timestamp in milliseconds or a relative Grafana time unit (e.g., 'now'). Relative units are calculated from the current time. |
No output schema declared.
No examples provided.
remove_dashboard_star Remove Dashboard Star ~61
Remove a dashboard from the current user's starred list. This action deletes the star marking for the specified dashboard.
| Name | Type | Req | Description |
|---|---|---|---|
| dashboard_uid | string | yes | The unique identifier of the dashboard to unstar. This is the dashboard's UID that was previously starred by the user. |
No output schema declared.
No examples provided.
remove_license_token Remove License Token ~69
Remove the license token from the Grafana database. This operation permanently deletes the stored license and requires the `licensing:delete` permission. Available in Grafana Enterprise v7.4+.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | The Grafana instance identifier or URL where the license token should be removed. |
No output schema declared.
No examples provided.
remove_organization_user Remove Organization User ~70
Remove a user from the current organization. Requires the `org.users:remove` permission with `users:*` scope in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | The unique identifier of the user to remove from the organization. Must be a positive integer. |
No output schema declared.
No examples provided.
remove_organization_user_by_id Remove Organization User ~100
Remove a user from the current organization. Requires the `org.users:remove` permission with `users:*` scope in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| org_id | string | yes | The unique identifier of the organization from which the user will be removed. Must be a positive integer. |
| user_id | string | yes | The unique identifier of the user to be removed from the organization. Must be a positive integer. |
No output schema declared.
No examples provided.
remove_query_star Remove Query Star ~60
Remove a star from a saved query in your query history. This operation unmarks a previously starred query, making it easier to manage your frequently used queries.
| Name | Type | Req | Description |
|---|---|---|---|
| query_history_uid | string | yes | The unique identifier of the query history entry to unstar. |
No output schema declared.
No examples provided.
remove_team_group Remove Team Group ~71
Remove an external group from a team. This operation deletes the association between a specific group and the team.
| Name | Type | Req | Description |
|---|---|---|---|
| groupId | string | – | The unique identifier of the external group to remove from the team. |
| teamId | string | yes | The unique identifier of the team from which the group will be removed. |
No output schema declared.
No examples provided.
remove_team_member Remove Team Member ~89
Remove a user from a team, revoking their access and team membership. The user will no longer have permissions to view or interact with team resources.
| Name | Type | Req | Description |
|---|---|---|---|
| team_id | string | yes | The unique identifier of the team from which the member will be removed. |
| user_id | string | yes | The unique identifier of the user to be removed from the team. Must be a valid 64-bit integer. |
No output schema declared.
No examples provided.
remove_team_role Remove Team Role ~71
Remove a role assignment from a team. Requires permission to delegate team roles.
| Name | Type | Req | Description |
|---|---|---|---|
| roleUID | string | yes | The unique identifier of the role to remove from the team. |
| teamId | string | yes | The unique identifier of the team from which the role will be removed. Must be a valid positive integer. |
No output schema declared.
No examples provided.
render_report_pdfs Render Report PDFs ~183
Generate a PDF report rendering multiple dashboards with customizable layout, orientation, and styling options. Available to all licensed users.
| Name | Type | Req | Description |
|---|---|---|---|
| dashboards | string | – | Comma-separated list of dashboard identifiers to include in the report. Specifies which dashboards will be rendered into the PDF output. |
| includeTables | string | – | Flag to include or exclude data tables associated with the dashboards in the PDF report. |
| layout | string | – | Layout configuration for dashboard arrangement. Determines how multiple dashboards are positioned and sized within the PDF pages. |
| orientation | string | – | Page orientation for the PDF output. Controls whether the report renders in portrait or landscape format. |
| scaleFactor | string | – | Scaling factor to adjust the size of rendered content. Controls zoom level of dashboards in the final PDF output. |
| title | string | – | Custom title text to display at the top of the generated PDF report. |
No output schema declared.
No examples provided.
retrieve_branding_image Retrieve Branding Image ~41
Retrieve a custom branding report image for your organization. Requires admin access and a valid or expired license.
| Name | Type | Req | Description |
|---|---|---|---|
| image | string | yes | Image filename to retrieve |
No output schema declared.
No examples provided.
revoke_cloud_migration_token Revoke Cloud Migration Token ~54
Revokes and removes a cloud migration token, preventing further use for cloud migration operations. This action is permanent and cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| uid | string | yes | The unique identifier of the cloud migration token to revoke. |
No output schema declared.
No examples provided.
revoke_invitation Revoke Invitation ~58
Revoke a pending organization invitation, preventing the recipient from accepting it. This operation invalidates the invitation code immediately.
| Name | Type | Req | Description |
|---|---|---|---|
| invitation_code | string | yes | The unique code identifying the invitation to revoke. This code was provided when the invitation was created. |
No output schema declared.
No examples provided.
revoke_service_account_token Revoke Service Account Token ~90
Revoke and delete a specific token for a service account. Requires Grafana Admin privileges and the serviceaccounts:write permission for the target service account.
| Name | Type | Req | Description |
|---|---|---|---|
| serviceAccountId | string | yes | The unique identifier of the service account that owns the token. Must be a positive integer. |
| tokenId | string | yes | The unique identifier of the service account token to revoke. Must be a positive integer. |
No output schema declared.
No examples provided.
revoke_user_auth_token Revoke User Auth Token ~114
Revoke an authentication token for a user, forcing them to re-authenticate on their next activity. This invalidates the specified device session and logs out the user from that device.
| Name | Type | Req | Description |
|---|---|---|---|
| authTokenId | string | – | The unique identifier of the specific authentication token (device session) to revoke. If not provided, a default token may be revoked. Must be a positive integer if specified. |
| user_id | string | yes | The unique identifier of the user whose authentication token should be revoked. Must be a positive integer. |
No output schema declared.
No examples provided.
revoke_user_role Revoke User Role ~127
Revoke a role assignment from a user. Requires permission to remove user roles with delegate scope to prevent privilege escalation. For bulk role updates, use the set user role assignments operation instead.
| Name | Type | Req | Description |
|---|---|---|---|
| global | boolean | – | Whether the role assignment is global or organization-scoped. When false, the authenticated user's default organization will be used for the removal. |
| roleUID | string | yes | The unique identifier of the role to revoke from the user. |
| userId | string | yes | The numeric identifier of the user from whom the role will be removed. Must be a valid 64-bit integer. |
No output schema declared.
No examples provided.
revoke_user_sessions Revoke User Sessions ~91
Revokes all active authentication tokens and sessions for a user across all devices. The user will be logged out immediately and must re-authenticate on next access. Requires the `users.logout` permission with `global.users:*` scope in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | The unique identifier of the user whose sessions should be revoked. Must be a positive integer. |
No output schema declared.
No examples provided.
save_query Save Query ~114
Save one or more queries to the query history for a specified data source. This allows you to persist and track queries for later retrieval and analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| datasourceUid | string | – | The unique identifier of the data source where queries will be stored. Use the data source UID (e.g., PE1C5CBDA0504A6A3) to target a specific data source. |
| queries | object | yes | One or more query objects to add to the history. Each query object contains the query details to be persisted. |
No output schema declared.
No examples provided.
search_dashboards Search Dashboards ~243
Search for dashboards and folders by tags, UIDs, starred status, and other criteria. Returns matching dashboards with optional filtering by permissions and deletion status.
| Name | Type | Req | Description |
|---|---|---|---|
| dashboardUIDs | array | – | Filter results to specific dashboards by their unique identifiers (UIDs). |
| deleted | boolean | – | When enabled, return only dashboards that have been soft deleted (not permanently removed). |
| folderUIDs | array | – | Limit search scope to dashboards within specific folders by their UIDs. Use an empty string to search only top-level folders. |
| limit | string | – | Maximum number of results to return, up to 5000 results per request. |
| permission | string | – | Filter by user permissions: 'View' returns dashboards the user can view, 'Edit' returns only dashboards the user can edit. Defaults to 'View'. |
| sort | string | – | Sort results by dashboard name in ascending or descending alphabetical order. Defaults to ascending alphabetical order. |
| starred | boolean | – | When enabled, return only dashboards that have been marked as starred by the user. |
| tag | array | – | Filter results by one or more tags. Only dashboards matching all specified tags will be returned. |
No output schema declared.
No examples provided.
search_groups Search Groups ~87
Search for groups within a team with optional filtering and pagination support. Returns matching groups based on search criteria with configurable result limits.
| Name | Type | Req | Description |
|---|---|---|---|
| perpage | string | – | Maximum number of results to return per page. Defaults to 1000 items if not specified. |
| teamId | string | yes | The unique identifier of the team to search groups within. Required to scope the search to a specific team. |
No output schema declared.
No examples provided.
search_organization_users Search Organization Users ~69
Search for users within a specific organization. Requires the `org.users:read` permission with `users:*` scope in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| org_id | string | yes | The unique identifier of the organization to search users in. Must be a positive integer. |
No output schema declared.
No examples provided.
search_user_roles Search User Roles ~152
Search for roles directly assigned to specified users. Returns custom roles only, excluding built-in roles (Viewer, Editor, Admin, Grafana Admin) and team-inherited roles. Requires `users.roles:read` permission with `users:id:*` scope.
| Name | Type | Req | Description |
|---|---|---|---|
| includeHidden | boolean | – | Include hidden roles in the search results. When enabled, returns roles that are marked as hidden in addition to visible roles. |
| teamIds | array | – | Filter results by team identifiers. Specify as an array of team IDs to limit role search to users belonging to these teams. |
| userIds | array | – | Filter results by user identifiers. Specify as an array of user IDs to search for roles assigned to these specific users. |
No output schema declared.
No examples provided.
send_report Send Report ~93
Generate and send a report via email. This operation waits for report generation to complete before returning, so allow at least 60 seconds for the request to finish. Requires Grafana Enterprise v7.0+ with admin privileges and a valid license.
| Name | Type | Req | Description |
|---|---|---|---|
| emails | string | – | Comma-separated list of email addresses to receive the report. If not provided, the report will be sent to default recipients based on your organization settings. |
No output schema declared.
No examples provided.
send_test_report_email Send Test Report Email ~441
Send a test report via email to verify configuration before scheduling. Requires organization admin privileges and a valid license with the `reports:send` permission.
| Name | Type | Req | Description |
|---|---|---|---|
| dashboards | array | – | List of dashboard IDs to include in the report. |
| dayOfMonth | string | – | Day of month for recurring reports (1-31). |
| enableCsv | boolean | – | Include CSV format export in the email. |
| enableDashboardUrl | boolean | – | Include a direct URL link to the dashboard in the email. |
| endDate | string | – | End date for the report schedule in ISO 8601 format. |
| formats | array | – | Array of output formats for the report (e.g., PDF, PNG, CSV). |
| frequency | string | – | Frequency of report delivery (e.g., daily, weekly, monthly). |
| intervalAmount | string | – | Number of intervals between report deliveries. |
| intervalFrequency | string | – | Unit of time for the interval (e.g., days, weeks, months). |
| layout | string | – | Page layout for rendered reports (e.g., portrait, landscape). |
| message | string | – | Custom message body to include in the email. |
| orientation | string | – | Page orientation for PDF output (portrait or landscape). |
| pdfCombineOneFile | boolean | – | Combine multiple pages into a single PDF file. |
| pdfShowTemplateVariables | boolean | – | Include template variable definitions in the PDF output. |
| recipients | string | – | Email address or comma-separated list of recipient email addresses. |
| replyTo | string | – | Reply-to email address for responses. |
| scaleFactor | string | – | Scale factor for rendering, specified as an integer value. |
| startDate | string | – | Start date for the report schedule in ISO 8601 format. |
| state | string | – | Current state of the report schedule (e.g., active, paused, draft). |
| subject | string | – | Email subject line for the report. |
| timeZone | string | – | Timezone for scheduling report delivery (e.g., UTC, America/New_York). |
| workdaysOnly | boolean | – | Deliver reports only on business days (Monday-Friday). |
No output schema declared.
No examples provided.
set_folder_permissions Set Folder Permissions ~93
Sets permissions for a folder by replacing all existing permissions with the ones specified in the request. Any permissions not included will be removed.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_uid | string | yes | The unique identifier of the folder whose permissions should be updated. |
| items | array | – | An array of permission objects defining who has access to the folder and what level of access they have. Permissions not included in this list will be removed from the folder. |
No output schema declared.
No examples provided.
set_user_password Set User Password ~94
Set or reset a user's password. Requires the `users.password:update` permission with `global.users:*` scope in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| password | string | – | The new password to set for the user. If not provided, the password will not be changed. |
| user_id | string | yes | The unique identifier of the user whose password will be updated. Must be a positive integer. |
No output schema declared.
No examples provided.
star_dashboard Star Dashboard ~46
Add a dashboard to the current user's starred dashboards. Starred dashboards appear in the user's favorites for quick access.
| Name | Type | Req | Description |
|---|---|---|---|
| dashboard_uid | string | yes | The unique identifier of the dashboard to star. |
No output schema declared.
No examples provided.
star_query_history Star Query History ~54
Mark a query in your history as starred for quick access and organization. This helps you keep track of frequently used or important queries.
| Name | Type | Req | Description |
|---|---|---|---|
| query_history_uid | string | yes | The unique identifier of the query history entry to star. |
No output schema declared.
No examples provided.
switch_organization Switch Organization ~71
Switch the authenticated user's active organization context to the specified organization. This changes which organization's data and resources the user will access in subsequent operations.
| Name | Type | Req | Description |
|---|---|---|---|
| org_id | string | yes | The unique identifier of the organization to switch to. Must be a valid 64-bit integer representing an existing organization the user has access to. |
No output schema declared.
No examples provided.
sync_ldap_user Sync LDAP User ~71
Synchronize a single Grafana user's account with LDAP directory. Requires the `ldap.user:sync` permission in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | The unique identifier of the Grafana user to synchronize with LDAP, specified as a 64-bit integer. |
No output schema declared.
No examples provided.
test_recording_rule Test Recording Rule ~242
Validate a recording rule configuration by testing it against the specified data source and queries. This operation allows you to verify the rule's behavior before applying it to production.
| Name | Type | Req | Description |
|---|---|---|---|
| active | boolean | – | Whether the recording rule is enabled and should be actively processed. |
| count | boolean | – | Whether to return the count of matching results instead of the full dataset. |
| description | string | – | A human-readable description of the recording rule's purpose and behavior. |
| dest_data_source_uid | string | – | The unique identifier of the destination data source where recorded metrics will be stored. |
| interval | string | – | The evaluation interval in milliseconds at which the recording rule will be executed. |
| prom_name | string | – | The name of the metric as it will be recorded in the destination data source. |
| queries | array | – | An array of query objects that define the data to be recorded. Order matters as queries are evaluated sequentially. |
| range | string | – | The time range in milliseconds over which the recording rule will evaluate data during the test. |
| target_ref_id | string | – | The reference identifier of the target query or data source to use as the recording source. |
No output schema declared.
No examples provided.
update_annotation Update Annotation ~127
Update all properties of an annotation by its ID. Use this operation to replace the entire annotation; for partial updates, use the patch annotation operation instead.
| Name | Type | Req | Description |
|---|---|---|---|
| annotation_id | string | yes | The unique identifier of the annotation to update. |
| tags | array | – | An array of tags to associate with the annotation for categorization and filtering. |
| text | string | – | The text content of the annotation. |
| time | string | – | The start time of the annotation as a Unix timestamp in milliseconds. |
| timeEnd | string | – | The end time of the annotation as a Unix timestamp in milliseconds. |
No output schema declared.
No examples provided.
update_annotation_partial Update Annotation ~145
Update one or more properties of an annotation by its ID. Supports modifying text content, tags, start time, and end time. Available in Grafana 6.0.0-beta2 and later.
| Name | Type | Req | Description |
|---|---|---|---|
| annotation_id | string | yes | The unique identifier of the annotation to update. |
| tags | array | – | Array of tag strings to associate with the annotation. Tags are used for organizing and filtering annotations. |
| text | string | – | The text content or description of the annotation. |
| time | string | – | The start time of the annotation as a Unix timestamp in milliseconds. |
| timeEnd | string | – | The end time of the annotation as a Unix timestamp in milliseconds. |
No output schema declared.
No examples provided.
update_contact_point Update Contact Point ~174
Update an existing contact point configuration with new settings and notification type. Allows modification of contact point details such as notification channel type and delivery preferences.
| Name | Type | Req | Description |
|---|---|---|---|
| UID | string | yes | The unique identifier of the contact point to update. |
| disableResolveMessage | boolean | – | Whether to disable message resolution notifications. Defaults to false, meaning resolution messages are sent by default. |
| name | string | – | Name is used as grouping key in the UI. Contact points with the same name will be grouped in the UI. |
| settings | object | yes | Configuration settings specific to the contact point type. Structure and required fields vary based on the notification channel type selected. |
| type | string | yes | The notification channel type for this contact point. Supported types include webhook, email, Slack, PagerDuty, Telegram, Discord, and other integration platforms. |
No output schema declared.
No examples provided.
update_correlation Update Correlation ~219
Updates an existing correlation configuration for a data source, allowing you to modify the field attachment point, data transformations, description, and label.
| Name | Type | Req | Description |
|---|---|---|---|
| correlationUID | string | yes | The unique identifier of the correlation to update. |
| description | string | – | An optional human-readable description explaining the purpose or context of this correlation (e.g., 'Logs to Traces'). |
| field | string | – | The field name where the correlation link will be attached (e.g., 'message'). This determines which field in the source data carries the correlation reference. |
| label | string | – | An optional label to identify and organize the correlation within your data source. |
| sourceUID | string | yes | The unique identifier of the data source containing the correlation to update. |
| transformations | array | – | An ordered array of transformation operations to apply to source data before correlation. Each transformation is an object specifying a type (such as 'logfmt' for log format parsing or 'regex' for pa… |
No output schema declared.
No examples provided.
update_datasource Update Data Source ~247
Update an existing data source configuration. Sensitive credentials like passwords should be provided in secureJsonData to ensure they are encrypted and stored securely in the database.
| Name | Type | Req | Description |
|---|---|---|---|
| access | string | – | The access mode for the data source, determining how Grafana communicates with it (e.g., direct or proxy). |
| database | string | – | The default database name to use for queries against this data source. |
| isDefault | boolean | – | Whether this data source should be the default for its type in Grafana. |
| jsonData | object | – | Additional JSON configuration data specific to the data source type, such as authentication details or connection parameters. |
| secureJsonData | object | – | Sensitive configuration data that will be encrypted before storage, such as passwords and basic authentication credentials. These fields should not be included in jsonData. |
| uid | string | yes | The unique identifier of the data source to update. |
| url | string | – | The URL endpoint or connection string for the data source. |
| user | string | – | The username for authenticating with the data source. |
| withCredentials | boolean | – | Whether to send credentials (cookies, authorization headers) when making cross-origin requests to the data source. |
No output schema declared.
No examples provided.
update_library_element Update Library Element ~106
Update an existing library element by modifying its properties, folder location, or model configuration. Specify the library element by its unique identifier and provide the fields you want to change.
| Name | Type | Req | Description |
|---|---|---|---|
| folderUid | string | – | The unique identifier of the folder where the library element should be stored or moved to. |
| library_element_uid | string | yes | The unique identifier of the library element to update. |
| model | object | – | The JSON model containing the library element's properties and configuration to be updated. |
No output schema declared.
No examples provided.
update_mute_timing Update Mute Timing ~104
Replace an existing mute timing configuration with new time intervals. This operation completely overwrites the mute timing identified by name with the provided settings.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The unique identifier of the mute timing to replace. Must match an existing mute timing name in the system. |
| time_intervals | array | – | Array of time intervals during which alerts should be muted. Each interval defines a period when muting is active. The order of intervals may affect evaluation logic. |
No output schema declared.
No examples provided.
update_notification_template Update Notification Template ~88
Updates an existing notification template group with new configuration. Allows modification of template settings for the specified template group name.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The unique identifier of the notification template group to update. Used to locate and modify the specific template configuration. |
| template | string | – | The updated template content or configuration for the notification template group. Defines the structure and content of notifications sent through this template. |
No output schema declared.
No examples provided.
update_org_quota Update Organization Quota ~132
Update the quota limit for a specific target within an organization. Requires the `orgs.quotas:write` permission in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The new quota limit as a 64-bit integer. Specifies the maximum number of resources allowed for the quota target. |
| org_id | string | yes | The organization ID as a 64-bit integer. Identifies which organization's quota to update. |
| quota_target | string | yes | The quota target type to update (e.g., users, dashboards, data sources). Identifies which resource quota to modify. |
No output schema declared.
No examples provided.
update_org_user_role Update Organization User Role ~99
Updates a user's role within the current organization. Requires the `org.users.role:update` permission with `users:*` scope in Grafana Enterprise with Fine-grained access control enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| role | string | – | The new role to assign to the user. Must be one of: None, Viewer, Editor, or Admin. |
| user_id | string | yes | The unique identifier of the user to update, specified as a 64-bit integer. |
No output schema declared.
No examples provided.
What is the com.mcparmory/grafana MCP server?
com.mcparmory/grafana is an MCP server listed in the public MCP registry as com.mcparmory/grafana. Manage dashboards, users, teams, alerts, data sources, and access control. This page covers its container image (ghcr.io/mcparmory/grafana:1.0.3).
Is the com.mcparmory/grafana MCP server safe to use?
com.mcparmory/grafana scores 50 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.mcparmory/grafana MCP server expose?
com.mcparmory/grafana exposes 218 tools: list_roles, get_role, list_role_assignments, list_team_roles_search, list_team_roles, and 213 more. Their descriptions and schemas cost roughly 20,635 tokens of context every time the server is loaded.
Is the com.mcparmory/grafana MCP server still maintained?
com.mcparmory/grafana is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.