Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

com.mcparmory/grafana

PYPI · MCPARMORY-GRAFANA · 2 COMPONENTS · SCANNED SEP 20

Manage dashboards, users, teams, alerts, data sources, and access control

−15 this week 62 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security37
  • Malware scan not yet available for this package.Unverified
  • No known CVEs affecting this package version or its production dependencies.Pass
  • Install-script risk not yet assessed.Unverified
  • 2 of 41 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency32
Schema Quality & AI Usability79
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 20635 tokens (~94/item across 218 items; 218 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
  • Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety97
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 37 of 42 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "query_metrics" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Partial
  • An AI judge read all 218 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Install

How do I install the com.mcparmory/grafana MCP server?

com.mcparmory/grafana runs locally as a PyPI package, launched with uvx mcparmory-grafana. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

pypi · mcparmory-grafana

# add to Claude Code
claude mcp add com-mcparmory-grafana -- uvx mcparmory-grafana
// .cursor/mcp.json
{
  "mcpServers": {
    "com-mcparmory-grafana": {
      "command": "uvx",
      "args": [
        "mcparmory-grafana"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "com-mcparmory-grafana": {
      "command": "uvx",
      "args": [
        "mcparmory-grafana"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add com-mcparmory-grafana -- uvx mcparmory-grafana
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-mcparmory-grafana": {
      "type": "local",
      "command": [
        "uvx",
        "mcparmory-grafana"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-mcparmory-grafana --command uvx --arg mcparmory-grafana
# ~/.hermes/config.yaml
mcp_servers:
  com-mcparmory-grafana:
    command: "uvx"
    args: ["mcparmory-grafana"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "com-mcparmory-grafana": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "mcparmory-grafana"
      ]
    }
  }
}
# add to Vellum
assistant mcp add com-mcparmory-grafana -t stdio -c uvx -a mcparmory-grafana
// mcp.json
{
  "mcpServers": {
    "com-mcparmory-grafana": {
      "command": "uvx",
      "args": [
        "mcparmory-grafana"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 18 Sept 26 −3
    • Stability: pass → 0.80 functional
  • 17 Sept 26 +1
    • Stability: 0.97 → pass security
  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 −15
    • Malware scan: pass → unverified security
  • 13 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Sept 26 +15
    • Malware scan: unverified → pass security
  • 11 Sept 26 −3
    • Stability: pass → 0.80 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed pypi/mcparmory-grafana@1.0.3

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem pypi

Background: How many MCP packages publish verified provenance →

Dependencies 41 packages
Packages resolved 41
Stale 1
No linked repository 1
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 218 exposed · ~20,635 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
update_organization ~52

Update an existing organization's details and configuration. Requires the organization ID to identify which organization to modify.

NameTypeReqDescription
org_idstringyesThe unique identifier of the organization to update, specified as a 64-bit integer.

No output schema declared.

No examples provided.

update_organization_address ~141

Update the address information for the current organization. Provide any address fields that need to be changed; omitted fields will remain unchanged.

NameTypeReqDescription
address1stringThe primary street address line for the organization's location.
address2stringThe secondary street address line (e.g., suite, apartment, or unit number) for the organization's location.
citystringThe city where the organization is located.
countrystringThe country where the organization is located.
statestringThe state or province where the organization is located.
zipcodestringThe postal or ZIP code for the organization's location.

No output schema declared.

No examples provided.

update_organization_address_by_id ~167

Update the physical address information for an organization. Provide any combination of address fields to update the organization's location details.

NameTypeReqDescription
address1stringThe primary street address line (e.g., street number and name).
address2stringThe secondary street address line for additional address details (e.g., suite, apartment, or unit number).
citystringThe city or municipality name.
countrystringThe country name or code.
org_idstringyesThe unique identifier of the organization whose address will be updated. Must be a valid 64-bit integer.
statestringThe state, province, or region name or code.
zipcodestringThe postal or ZIP code for the address.

No output schema declared.

No examples provided.

update_organization_current ~30

Update the settings and details of the current organization. This operation modifies the organization's profile information and configuration.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

update_organization_user_role ~130

Update a user's role within an organization. Requires the `org.users.role:update` permission with `users:*` scope in Grafana Enterprise with Fine-grained access control enabled.

NameTypeReqDescription
org_idstringyesThe unique identifier of the organization containing the user. Must be a positive integer.
rolestringThe new role to assign to the user. Valid options are: None, Viewer, Editor, or Admin. If not specified, the user's current role remains unchanged.
user_idstringyesThe unique identifier of the user to update. Must be a positive integer.

No output schema declared.

No examples provided.

update_public_dashboard ~176

Update the configuration and sharing settings of a public dashboard, including visibility, annotation display, time selection controls, and access permissions.

NameTypeReqDescription
annotationsEnabledbooleanEnable or disable annotations display on the public dashboard.
dashboardUidstringyesThe unique identifier of the dashboard that contains the public dashboard configuration to be updated.
isEnabledbooleanEnable or disable the public dashboard, controlling whether it is accessible to viewers.
sharestringThe sharing access level or mode for the public dashboard (e.g., public, restricted, or specific user/team access).
timeSelectionEnabledbooleanEnable or disable the time range selection controls, allowing viewers to modify the dashboard's time window.
uidstringThe unique identifier for the public dashboard (optional override if different from the path parameter).

No output schema declared.

No examples provided.

update_query_comment ~86

Updates the comment associated with a specific query in the query history. Use this to add, modify, or replace notes for a previously executed query.

NameTypeReqDescription
commentstringThe new comment text to associate with the query. Provide the complete comment as it should appear in the query history.
query_history_uidstringyesThe unique identifier of the query history record to update.

No output schema declared.

No examples provided.

update_recording_rule ~290

Update an existing recording rule's configuration, including its active status, query parameters, and data source settings. This operation allows modification of rule behavior such as evaluation interval, range, and target data source.

NameTypeReqDescription
activebooleanEnable or disable the recording rule. When active, the rule will be evaluated according to its schedule; when inactive, evaluations are skipped.
countbooleanWhether to count results from the recording rule evaluation. When enabled, the rule tracks the number of matching records.
descriptionstringA human-readable description of the recording rule's purpose and behavior.
dest_data_source_uidstringThe unique identifier of the destination data source where recorded metrics will be stored.
intervalstringThe evaluation interval in milliseconds. Defines how frequently the recording rule is executed.
prom_namestringThe Prometheus metric name for the recorded data. This is the name used to reference the recorded metric in queries.
queriesarrayAn array of query objects that define what data to record. Each query specifies the metrics or logs to capture.
rangestringThe time range in milliseconds for each evaluation. Defines the lookback window of data considered during rule execution.
target_ref_idstringThe reference identifier for the target query or panel. Used to link the recording rule to a specific query definition.

No output schema declared.

No examples provided.

update_service_account ~120

Modify an existing service account's configuration, including its enabled status and role assignment. Requires serviceaccounts:write permission for the specific service account.

NameTypeReqDescription
isDisabledbooleanWhether the service account is disabled. Set to true to deactivate the account or false to enable it.
rolestringThe role to assign to the service account. Must be one of: None, Viewer, Editor, or Admin.
serviceAccountIdstringyesThe unique identifier of the service account to update. Must be a valid 64-bit integer.

No output schema declared.

No examples provided.

update_team ~64

Update an existing team's information, such as the associated email address. Provide the team ID and any fields you want to modify.

NameTypeReqDescription
emailstringThe email address to associate with the team.
team_idstringyesThe unique identifier of the team to update.

No output schema declared.

No examples provided.

update_team_member ~124

Update a team member's information and permissions within a specific team. Modify the member's role or access level by specifying their permission level.

NameTypeReqDescription
permissionstringThe permission level to assign to the team member, specified as a 64-bit integer. This determines the member's access rights and capabilities within the team.
team_idstringyesThe unique identifier of the team containing the member to be updated.
user_idstringyesThe unique identifier of the user whose team membership and permissions should be updated. This is a 64-bit integer value.

No output schema declared.

No examples provided.

update_team_members ~134

Update team membership by replacing the current members and admins with the provided lists. Any existing members or admins not included in the new lists will be removed from the team.

NameTypeReqDescription
adminsarrayList of user email addresses to set as team admins. Users should be specified by their email addresses. Omit or provide an empty list to remove all admins.
membersarrayList of user email addresses to set as team members. Users should be specified by their email addresses. Omit or provide an empty list to remove all members.
team_idstringyesThe unique identifier of the team to update.

No output schema declared.

No examples provided.

update_team_roles ~134

Update the roles assigned to a team. Requires permissions to both add and remove team roles with delegation scope.

NameTypeReqDescription
includeHiddenbooleanWhether to include hidden roles in the operation. Optional boolean flag.
roleUidsarrayArray of role unique identifiers to assign to the team. Order may be significant for role precedence or application sequence.
targetOrgIdstringThe organization ID to scope the role update to. Optional; if provided, must be a positive integer.
teamIdstringyesThe unique identifier of the team whose roles are being updated. Must be a positive integer.

No output schema declared.

No examples provided.

update_user ~117

Update user account details including email, login credentials, and display preferences. Modifies the user record identified by the provided user ID.

NameTypeReqDescription
emailstringThe user's email address. Optional field for updating contact information.
loginstringThe user's login username or identifier. Optional field for updating authentication credentials.
themestringThe user's preferred display theme or UI preference. Optional field for customizing the user experience.
user_idstringyesThe unique identifier of the user to update. Must be a positive integer.

No output schema declared.

No examples provided.

update_user_preferences_partial ~190

Update user preferences for dashboard, display, and localization settings. Allows customization of theme, timezone, language, and other UI preferences.

NameTypeReqDescription
homeDashboardUIDstringThe unique identifier of the dashboard to set as the user's home dashboard.
languagestringThe user's preferred language for the interface.
regionalFormatstringThe user's preferred regional format for displaying dates, numbers, and currency.
themestringThe user's preferred color theme. Choose between light mode or dark mode.
timezonestringThe user's timezone for displaying times and scheduling. Accepts any IANA timezone identifier (e.g., America/New_York), 'utc' for UTC, 'browser' to use the browser's timezone, or an empty string for…
weekStartstringThe day of the week to display as the first day in calendar views.

No output schema declared.

No examples provided.

update_user_profile ~100

Update the profile information for the currently signed-in user, including email address, login username, and display theme preference.

NameTypeReqDescription
emailstringThe new email address for the user account. Must be a valid email format.
loginstringThe new login username for the user account. Used for authentication and account identification.
themestringThe preferred display theme for the user interface (e.g., light, dark, auto).

No output schema declared.

No examples provided.

update_user_quota ~136

Update a user's quota limit for a specific quota target. Requires the `users.quotas:update` permission with global user scope in Grafana Enterprise with Fine-grained access control enabled.

NameTypeReqDescription
limitstringThe new quota limit value as a positive integer. Specifies the maximum allowed usage for the quota target.
quota_targetstringyesThe quota target type to update (e.g., 'dashboard', 'api_calls', 'storage'). Identifies which quota category to modify for the user.
user_idstringyesThe unique identifier of the user whose quota is being updated. Must be a positive integer.

No output schema declared.

No examples provided.

upload_snapshot ~74

Upload a snapshot to the Grafana Migration Service for processing. This operation ingests snapshot data associated with a migration session for analysis and migration preparation.

NameTypeReqDescription
snapshotUidstringyesThe unique identifier of the snapshot being uploaded for processing.
uidstringyesThe unique identifier of the migration session to which this snapshot belongs.

No output schema declared.

No examples provided.

Common questions

What is the com.mcparmory/grafana MCP server?

com.mcparmory/grafana is an MCP server listed in the public MCP registry as com.mcparmory/grafana. Manage dashboards, users, teams, alerts, data sources, and access control. This page covers its PyPI package (mcparmory-grafana).

Is the com.mcparmory/grafana MCP server safe to use?

com.mcparmory/grafana scores 62 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the com.mcparmory/grafana MCP server expose?

com.mcparmory/grafana exposes 218 tools: list_roles, get_role, list_role_assignments, list_team_roles_search, list_team_roles, and 213 more. Their descriptions and schemas cost roughly 20,635 tokens of context every time the server is loaded.

Is the com.mcparmory/grafana MCP server still maintained?

com.mcparmory/grafana is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.