VendorDynatrace
Connects overhttp

Our grade: 4 checks

Login Scoped login by default
Upkeep Active · 2026-10
Known bugs 0 open
Connection http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

4.5 16 reviews
75% would trust it in production
  • 5 9
  • 4 6
  • 3 1
  • 2 0
  • 1 0

Trust in production

  • Trust it - 75%
  • With caveats - 25%
  • Wouldn't - 0%

94% would recommend this server

How reviewers scored it

  • Setup & docs 4.1
  • Auth experience 4.4
  • Reliability 4.3
  • Maintainer responsiveness 4.5

Why it got an A

Dynatrace's official MCP server, hosted inside your own Dynatrace SaaS environment and generally available. Your AI tool connects to a URL with a platform token, or with a confidential OAuth client (no dynamic client registration yet). You choose the token's scopes, and it can never do more than the user who made it. The tools read: they run and explain DQL, look up problems, vulnerabilities, Kubernetes events and entities, search documents and run Davis anomaly and forecast analyzers. If you still run the old local npm package @dynatrace-oss/dynatrace-mcp-server, move off it. The repo is archived, 2.1.2 was the final release, and it had 5 advisories: CVE-2026-123811 (high, unauthenticated tool calls in HTTP mode, fixed in 2.0.0), CVE-2026-123809 (medium, workflow template injection, fixed in 2.0.0), CVE-2026-123810 (medium, DQL injection, fixed in 2.1.1), CVE-2026-123812 (low, missing approval step on notebook creation, fixed in 1.8.7) and a low DQL-escaping one (GHSA-qjvh-r92j-8r5p) with no fix. They cover that npm package only; Dynatrace has published no advisory for the hosted server, which is closed source, so the grade here is unchanged. Biggest deduction: the server is closed source, so we can't check its update cadence and scored maintenance one band lower; give the platform token an expiry date, because it can be set to never expire.

How to connect

// .vscode/mcp.json
{
  "servers": {
    "dynatrace-mcp": {
      "url": "https://{environment-name}.apps.dynatrace.com/platform-reserved/mcp-gateway/v0.1/servers/dynatrace-mcp/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_BEARER_TOKEN_HERE"
      }
    }
  }
}

Is Dynatrace Remote MCP Server safe?

Is Dynatrace Remote MCP Server safe to use?

Dynatrace Remote MCP Server grades A (strong public trust signals). Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does Dynatrace Remote MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does Dynatrace Remote MCP Server support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade A

Markdown

[![TrustedMCP grade A](https://trustedmcp.io/badge/dynatrace-mcp.svg)](https://trustedmcp.io/servers/dynatrace-mcp)

HTML

<a href="https://trustedmcp.io/servers/dynatrace-mcp"><img src="https://trustedmcp.io/badge/dynatrace-mcp.svg" alt="TrustedMCP grade A" height="80"></a>

Community reviews

Karan Mehta AI engineer
Trusts in production Recommends

Quietly reliable

Set this up for our team after comparing a few options. You can tell it is actively maintained, the rough edges keep getting fixed. Sign-in flow was painless and I never had to paste a key into a config file. Nothing to install, I just point the client at the URL. It is in our production agent and I sleep fine.

Used for Onboarding new devs with an agent that answers repo questions

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Felix Wagner Indie hacker
Trusts with caveats Recommends

Better than the DIY script it replaced

I use this almost daily. Token setup is the fiddliest part, after that it is smooth. Worth it, just do not skip the hardening steps.

Used for Scripting routine maintenance tasks

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Julia Kowalski ML engineer
Trusts in production Recommends

Solid and well behaved

Clear tool names, sensible outputs, very few surprises. Being official from Dynatrace counts for a lot when I pitch it to security. Auth is handled properly, and revoking access later was one click. Releases come often and the changelog is clear.

Used for Letting a coding agent open and triage issues

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Mei Lin Developer, healthtech
Trusts in production Recommends

Worth the five minutes to set up

Replaced a homegrown script with Dynatrace Remote MCP Server and have not looked back. Releases come often and the changelog is clear. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Good choice if you need Dynatrace Remote in your agent.

Used for Debugging sessions in Cursor

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Omar Haddad Solo founder
Trusts in production Recommends

Good defaults, good docs

Tried it on a side project first, then rolled it out at work. Updates land regularly, and nothing broke when I upgraded.

Used for Keeping project tickets in sync with code changes

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5
Arjun Patel Full-stack developer
Trusts with caveats Recommends

Saves me a context switch every hour

Of the Dynatrace Remote integrations I tried, this one is the most predictable. Sign-in flow was painless and I never had to paste a key into a config file. Recommended, with sensible guardrails.

Used for Internal developer assistant

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Chloe Martin Eng lead, fintech
Trusts with caveats

OK for read-only work

I like it, with reservations. Scoped the token to just what the agent needs and it respected that. Hosted endpoint means no local process to babysit. Releases come often and the changelog is clear. I would use it in prod, but only with a human approving writes.

Used for Looking up Dynatrace Remote data without leaving the editor

  • Setup & docs 2/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5
Diego Fernandez Platform engineer
Trusts in production Recommends

Clean integration, sensible permissions

Set this up for our team after comparing a few options. The OAuth flow worked first time in Claude Code. I like that access goes through a proper sign-in instead of a long-lived secret on disk. It is in our production agent and I sleep fine.

Used for CI failure investigation

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Ingrid Nilsson Staff engineer
Trusts in production Recommends

The Dynatrace Remote integration I wanted

Clear tool names, sensible outputs, very few surprises. Nothing to install, I just point the client at the URL. You can tell it is actively maintained, the rough edges keep getting fixed. Happy to run it in production.

Used for Automating release notes

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 3/5
Isabel Costa Backend engineer
Trusts in production Recommends

No complaints after a month

Started with it as an experiment, now it is a fixture. Being closed source, I cannot audit it, but the vendor has been responsive.

Used for CI failure investigation

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 4/5
Rosa Morales Security engineer
Trusts with caveats Recommends

Does what it says, no drama

Simple to set up in Cursor, simple to reason about. Auth is handled properly, and revoking access later was one click.

Used for Generating boilerplate from existing patterns

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5
Oscar Lund Freelance developer
Trusts in production Recommends

Trustworthy enough for real work

Our agents call this dozens of times a day. Filed an issue and got a reply within two days. Would recommend without hesitation.

Used for Code review summaries for pull requests

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5
Jakub Nowak Senior developer
Trusts in production Recommends

Our team uses it every day

Been running this for about a month now. Filed an issue and got a reply within two days. Auth is handled properly, and revoking access later was one click.

Used for Pairing with Claude Code on a monorepo

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Hannah Larsen Indie hacker
Trusts in production Recommends

Surprisingly polished

Of the Dynatrace Remote integrations I tried, this one is the most predictable. Nothing to install, I just point the client at the URL. Would recommend without hesitation.

Used for Internal developer assistant

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Grace Park CTO, early-stage startup
Trusts in production Recommends

Recommended it to two teams already

Hooked Dynatrace Remote MCP Server into Claude Code and it worked on the first try. Hosted endpoint means no local process to babysit. Easy recommendation.

Used for Debugging sessions in Cursor

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Lucas Silva Software engineer, agency
Trusts in production Recommends

Exactly what I needed from Dynatrace Remote

Installed it on a Friday, it was part of my workflow by Monday. The scope options are worth reading carefully, the defaults are broader than I wanted. Easy recommendation.

Used for Letting a coding agent open and triage issues

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you