Skip to main content
Glama
initMAX

Zabbix MCP Server

host_status_get

Read-only

Retrieves a Zabbix host's status in one call—identity, interfaces, monitoring state, active Warning+ problems, and recent item values—so operators can see what is wrong without follow-up calls.

Instructions

Single-call host status: identity + interfaces + monitored-state + active problems (severity Warning+, with disabled-trigger/host filtered out) + last 8 item values, in one self-contained JSON payload.

Use this whenever an operator asks 'what is the status of ?' or 'what is wrong on ?'. Replaces the typical 3-4 tool chain (host_get + hostinterface_get + problem_get + item_get) so a one-shot LLM prompt can answer without follow-up tool calls.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
hostNoZabbix host name. Tried as exact match first, falls back to substring search.
serverNoTarget Zabbix server. Available: default. Defaults to 'default' if omitted.
host_idNoZabbix host ID. Either host_id or host (the name) must be provided.
raw_jsonNoStrips the security disclaimer preamble from the response so it is pure JSON. Default: false. Requires the bearer token to have 'allow_raw_json' explicitly enabled by an operator in the admin portal - tokens without that policy receive a PolicyError instead. WARNING: setting true bypasses the prompt-injection mitigation marker that wraps untrusted Zabbix data (host names, item descriptions, problem text). LLM clients (Claude, GPT, Cursor, ...) should leave this false; only programmatic non-LLM consumers (Python scripts, n8n workflows that json.loads the result) should set true.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.41.0

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and openWorldHint, so safety is covered. The description adds real behavioral detail beyond the annotations: the severity threshold (Warning+), that disabled-trigger/host items are filtered out, and that the payload is self-contained JSON. It stops short of describing auth or rate-limit behavior, so a 4 rather than 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and contents are front-loaded in the first sentence, with usage and the sibling replacement rationale following. Each sentence carries weight, though the opening enumeration is dense enough that it could be marginally tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and annotations cover the safety profile. The description supplies the aggregation scope, filter semantics, and usage framing an agent needs to call it correctly in one shot.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema fully documents host, server, host_id, and the nuanced raw_json flag (policy gating, prompt-injection warning). The description adds nothing parameter-specific and instead describes output composition, so baseline 3 is correct.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (status get) and resource (host) and enumerates exactly what the payload contains: identity, interfaces, monitored-state, active problems, and last 8 item values. It explicitly distinguishes itself from the sibling tools it replaces (host_get, hostinterface_get, problem_get, item_get), so an agent can tell it apart without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It names the exact triggering utterances ('what is the status of <hostname>?' / 'what is wrong on <hostname>?') and states the condition that selects it over the alternative multi-tool chain. The routing logic is explicit rather than inferred.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.