Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got an A
Grafana Labs' own open-source server (Apache-2.0, Go), run locally or in your own infrastructure with a service-account token you create in Grafana; the token's role and scopes decide what it can touch. Very active, with a release two days before this check and no advisories on record, so it earns full marks. Main caution: write tools are on by default (create and update dashboards, alert rules and incidents, delete alert rules), and the README's easy setup suggests the Editor role, so give it a Viewer-level token or start it with --disable-write unless you want changes made. On HTTP, set a caller token and keep it off public addresses. It can send anonymous usage statistics to Grafana Labs, which a flag or DO_NOT_TRACK turns off. This listing covers the self-hosted server only; Grafana Cloud also offers a separate hosted MCP endpoint with OAuth sign-in.
How to connect
{
"mcpServers": {
"grafana": {
"command": "uvx",
"args": ["mcp-grafana"],
"env": {
"GRAFANA_URL": "http://localhost:3000",
"GRAFANA_SERVICE_ACCOUNT_TOKEN": "<your service account token>"
}
}
}
}{
"mcpServers": {
"grafana": {
"command": "uvx",
"args": ["mcp-grafana"],
"env": {
"GRAFANA_URL": "http://localhost:3000",
"GRAFANA_SERVICE_ACCOUNT_TOKEN": "<your service account token>"
}
}
}
}Is Grafana MCP Server safe?
Is Grafana MCP Server safe to use?
Grafana MCP Server grades A: all four checks are at full marks. Strong public trust signals. It is still not a full audit, so give it the narrowest access that works.
Does Grafana MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Grafana MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Developer Tools
- A Appwrite MCP ServerOfficial Appwrite server that exposes databases, users, functions, teams and storage as tools, hosted with OAuth or run locally with a project API key.
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
Embed this badge
[](https://trustedmcp.io/servers/grafana-mcp)<a href="https://trustedmcp.io/servers/grafana-mcp"><img src="https://trustedmcp.io/badge/grafana-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.