Loki MCP Server
The Loki MCP Server enables AI agents to query and analyze Grafana Loki logs through the Model Context Protocol (MCP) using LogQL.
query_range— Execute LogQL range queries to fetch logs over a time window, with configurable start/end times, result limit (up to 5000), and sort direction (forward/backward)query— Execute LogQL instant queries for point-in-time log evaluation, with configurable timestamp, result limit, and directionlabels— List all available label names in Loki within a given time range, useful for discovering what labels exist before building querieslabel_values— Retrieve all unique values for a specific label name within a time range, enabling dynamic query constructionseries— Find active log stream series matching a stream selector (e.g.{app="nginx"}), helping identify which log streams are currently active
Additional capabilities include support for basic auth, bearer tokens, and multi-tenant deployments; strict input validation (limit caps, direction checks, label format); and seamless integration with Claude Desktop, Claude Code, AI agent frameworks, and DevOps workflows. A local Docker Compose stack with Loki, Grafana, Promtail, and a log generator is included for development and testing.
Enables querying Grafana Loki logs using LogQL, allowing for the discovery of labels, label values, and active series, and the execution of range and instant queries for log retrieval.
Loki MCP Server
Query Grafana Loki logs directly from AI agents using the Model Context Protocol (MCP).
Built in Go. Enables AI-powered log analysis using LogQL.
Supports integration with:
Claude Desktop
AI agent frameworks
automation tools
DevOps workflows
Motivation
The official grafana/loki-mcp exposes a single loki_query tool, which means the LLM must already know valid label names and values before it can build a query. This project takes a different approach by providing 5 granular tools — labels, label_values, and series let the LLM discover what's available in Loki first, then construct precise query_range or query calls. The result is more accurate log retrieval with fewer wasted round-trips.
Additionally, this server enforces strict input validation (limit caps, direction validation, label name format checks, mutually exclusive auth) to surface errors early instead of forwarding bad requests to Loki.
Related MCP server: Overwatch MCP
Features
query_range — Execute LogQL range queries to fetch logs over a time window
query — Execute LogQL instant queries for point-in-time evaluation
labels — List all available label names
label_values — List values for a specific label
series — Find active log stream series matching a selector
Installation
Homebrew
brew install incu6us/tap/loki-mcp-serverGo install
go install github.com/incu6us/loki-mcp-server/cmd/loki-mcp-server@latestOr build from source:
git clone https://github.com/incu6us/loki-mcp-server.git
cd loki-mcp
go build -o loki-mcp-server ./cmd/loki-mcp-serverConfiguration
The server is configured entirely via environment variables, injected by the MCP client.
Variable | Required | Default | Description |
| yes | — | Base URL of the Loki instance |
| no | — | Basic auth username |
| no | — | Basic auth password |
| no | — | Bearer token authentication |
| no |
| Skip TLS certificate verification |
| no | — |
|
| no |
| HTTP request timeout (Go duration, e.g. |
Note: Basic auth (
LOKI_USERNAME/LOKI_PASSWORD) and bearer token (LOKI_BEARER_TOKEN) are mutually exclusive.
Usage with Claude Code
Add to your Claude Code MCP configuration (~/.claude.json):
{
"mcpServers": {
"loki-mcp-server": {
"type": "stdio",
"command": "/path/to/loki-mcp-server",
"args": [],
"env": {
"LOKI_URL": "http://loki:3100",
"LOKI_USERNAME": "admin",
"LOKI_PASSWORD": "secret"
}
}
}
}Usage with Claude Desktop
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"loki-mcp-server": {
"type": "stdio",
"command": "/path/to/loki-mcp-server",
"args": [],
"env": {
"LOKI_URL": "http://loki:3100",
"LOKI_USERNAME": "admin",
"LOKI_PASSWORD": "secret"
}
}
}
}Tools
query_range
Execute a LogQL range query against Loki to fetch logs over a time window.
Parameter | Type | Required | Default | Description |
| string | yes | — | LogQL query expression |
| string | no | 1 hour ago | Start of time range (RFC3339 or Unix nano) |
| string | no | now | End of time range |
| number | no | 100 | Max entries (max 5000) |
| string | no | backward |
|
query
Execute a LogQL instant query for point-in-time evaluation.
Parameter | Type | Required | Default | Description |
| string | yes | — | LogQL query expression |
| number | no | 100 | Max entries (max 5000) |
| string | no | now | Evaluation timestamp |
| string | no | backward |
|
labels
List all available label names in Loki.
Parameter | Type | Required | Default | Description |
| string | no | 6 hours ago | Start of time range |
| string | no | now | End of time range |
label_values
List values for a specific label.
Parameter | Type | Required | Default | Description |
| string | yes | — | Label name |
| string | no | 6 hours ago | Start of time range |
| string | no | now | End of time range |
series
Find active log stream series matching a selector.
Parameter | Type | Required | Default | Description |
| string | yes | — | Stream selector (e.g. |
| string | no | 6 hours ago | Start of time range |
| string | no | now | End of time range |
Local Development Stack
A Docker Compose setup is included under deploy/ to spin up a full Loki environment for testing:
Loki — log storage at
http://localhost:3100Grafana — UI at
http://localhost:3000(anonymous admin, Loki pre-configured as datasource)Promtail — collects container logs and ships them to Loki
Log generator — emits structured JSON logs with randomized apps (
nginx,api,gateway,auth,payments), levels, and messages
# Start the stack
docker compose -f deploy/docker-compose.yml up -d
# Use loki-mcp-server against local Loki
LOKI_URL=http://localhost:3100 loki-mcp-server
# Stop the stack
docker compose -f deploy/docker-compose.yml downDevelopment
# Run tests
go test ./...
# Build
go build -o loki-mcp-server ./cmd/loki-mcp-server
# Vet
go vet ./...⭐ If this project is useful for you, please star the repository.
Maintenance
Tools
Related MCP Servers
- AlicenseDqualityFmaintenanceAn MCP interface that allows AI assistants to query and analyze Grafana Loki logs using LogQL, with support for authentication and various output formats.Last updated3865MIT
- Alicense-qualityCmaintenanceAn MCP server that enables querying logs and metrics from Graylog, Prometheus, and InfluxDB 2.x. It provides tools for executing Lucene log searches, PromQL queries, and Flux queries directly within MCP-compatible clients.Last updatedMIT
- Alicense-qualityDmaintenanceThis MCP server enables natural-language querying of Grafana logs by automatically detecting log sources and service labels. It provides read-only access to log data with intelligent caching for efficient repeat queries.Last updated17MIT
- AlicenseAqualityAmaintenanceUnified observability gateway for AI agents — one MCP server for Prometheus, Loki, and any backend.Last updated126Apache 2.0
Related MCP Connectors
An MCP server giving access to Grafana dashboards, data and more.
An MCP server that let you interact with Cycloid.io Internal Development Portal and Platform
MCP server for Blockscout
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/incu6us/loki-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server