Skip to main content
Glama
Prometheus Safe MCP

Prometheus Safe MCP

by bgauger

Prometheus Safe MCP

A focused, read-only MCP server for bounded Prometheus instant queries, active alerts, and target health. Alpha: tests use synthetic HTTP responses; compatibility with a live Prometheus release is not certified.

Install and run

Requires Python 3.11+ and uv.

uv sync --extra test
export PROMETHEUS_SAFE_URL=https://prometheus.example.invalid
uv run prometheus-safe-mcp

The process speaks MCP over stdio. It does not load .env; .env.example is documentation only. Configure the URL of a read-only, network-restricted Prometheus endpoint.

Related MCP server: Prometheus MCP Server

Safety

All tools use HTTP GET. Query length, HTTP duration/bytes, and returned target count are bounded. Configuration rejects URL credentials, queries, fragments, and non-HTTP schemes. Audit records contain operation categories rather than PromQL text or response bodies. This does not replace upstream authentication, authorization, or egress policy. See security design.

Verify

uv run --extra test pytest
uv run python -m compileall -q src tests
uv build

MIT © 2026 Ben Gauger.

Available Tools

3 tools
active_alertsD

Inputs: no named parameters. Returns: object

prometheus_queryD

Inputs: query (required). Returns: object

target_healthD

Inputs: no named parameters. Returns: object

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    C2/5.0

    Scored across 3 tools

    Disambiguation5/5

    Each tool targets a clearly distinct aspect of Prometheus: querying metrics, listing active alerts, and checking target health. There is no functional overlap between them, making tool selection unambiguous.

    Naming Consistency5/5

    All three tool names follow a consistent snake_case convention with a noun-like pattern (prometheus_query, active_alerts, target_health). The names are predictable and reflect their purpose without mixing conventions.

    Tool Count4/5

    Three tools is a lean but reasonable count for a minimal Prometheus integration, covering the most common read-only operations. It feels slightly thin for a full-featured server but is appropriate for a focused purpose.

    Completeness3/5

    The surface covers core operations (query, alerts, health) but lacks obvious complementary features like range queries, alert rule management, or metric metadata retrieval. Agents may need to work around these gaps for more complex workflows.

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI assistants to query Prometheus metrics, monitor alerts, and analyze system health through read-only access to your Prometheus server with built-in query safety and optional AI-powered metric analysis.
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI assistants to execute PromQL queries and discover metrics across multiple Prometheus tenants using the Model Context Protocol. It supports single and multi-tenant configurations with secure authentication for instant and range query analysis.
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables MCP-compatible agents to run governed, read-only analytics queries against Postgres using predefined metrics and dimensions, with safety checks and provenance on every result.
      39 npm
      Apache 2.0
    • A
      license
      A
      quality
      B
      maintenance
      Enables agents to query and explore Prometheus through PromQL, metric and label discovery, alerts, rules, scrape health, and cardinality, while keeping admin writes disabled unless explicitly enabled.
      12
      519 npm
      MIT