Seq MCP Server (@abhishekkumar00019/seq-mcp)

A Model Context Protocol (MCP) server and TypeScript library for Datalust Seq structured logging.

Enable AI assistants (Claude, Cursor, Copilot, ChatGPT, etc.) to query structured events, search logs by date ranges and signal filters, convert natural language filters into strict Seq syntax, execute analytical SQL queries, and monitor live log streams.

🚀 Quick Start

Run instantly without installation using npx:

npx @abhishekkumar00019/seq-mcp

Or install globally:

npm install -g @abhishekkumar00019/seq-mcp
seq-mcp --help

Related MCP server: MCP Graylog Server

🛠️ MCP Client Configuration

Claude Desktop

Add seq to your Claude Desktop configuration (claude_desktop_config.json):

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

• Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "seq": {
      "command": "npx",
      "args": ["-y", "--silent", "@abhishekkumar00019/seq-mcp"],
      "env": {
        "SEQ_SERVER_URL": "http://localhost:5341",
        "SEQ_API_KEY": "your-seq-api-key"
      }
    }
  }
}

Note: The --silent flag prevents npm/npx from printing command banner headers to stdout, ensuring clean JSON-RPC protocol communication over stdio.

Cursor IDE

In Cursor Settings → Features → MCP Servers → Add New MCP Server:

• Name: seq

• Type: command

• Command: npx -y --silent @abhishekkumar00019/seq-mcp

Or configure via .cursor/mcp.json:

{
  "mcpServers": {
    "seq": {
      "command": "npx",
      "args": ["-y", "--silent", "@abhishekkumar00019/seq-mcp"],
      "env": {
        "SEQ_SERVER_URL": "http://localhost:5341",
        "SEQ_API_KEY": "your-seq-api-key"
      }
    }
  }
}

⚙️ Configuration & Environment Variables

Multi-Tenant Workspaces (secrets.json)

For multi-tenant environments with different API keys per workspace, place a secrets.json file in your workspace or specify --secrets /path/to/secrets.json:

{
  "default": "API_KEY_DEFAULT",
  "production": "API_KEY_PRODUCTION",
  "staging": "API_KEY_STAGING"
}

🧰 Available MCP Tools

1. seq_search

Search historical events with filters, ISO 8601 date ranges, signals, and pagination.

• Parameters:

  • filter (string, optional): Seq filter expression (e.g. @Level = 'Error', Application = 'BillingService' and StatusCode >= 500). Defaults to "" or * (all events).

  • count (integer, optional, default: 100, max: 1000): Maximum number of events to return.

  • fromDateUtc (string, optional): Earliest date/time in ISO 8601 format (e.g., 2024-01-01T00:00:00Z).

  • toDateUtc (string, optional): Latest date/time in ISO 8601 format (e.g., 2024-01-31T23:59:59Z).

  • signalId (string, optional): Signal ID to filter events.

  • afterId (string, optional): Event ID to search after (exclusive) for pagination.

  • workspace (string, optional): Workspace identifier.

• Example prompts for AI:

  • "Show me all Error events from the last 2 hours"

  • "Search for payment failure logs in Seq between 2026-10-15T00:00:00Z and 2026-10-16T00:00:00Z"

2. seq_query

Execute analytical SQL-like queries against Seq log data.

• Parameters:

  • query (string, required): Seq SQL query (e.g., select count(*) from stream group by time(5m), select @Timestamp, @Message, @Level from stream where @Level = 'Error' limit 50).

  • fromDateUtc (string, optional): Start time boundary in ISO 8601 format.

  • toDateUtc (string, optional): End time boundary in ISO 8601 format.

  • signalId (string, optional): Optional signal ID.

  • timeoutSeconds (integer, optional, default: 30): Query timeout in seconds.

  • workspace (string, optional): Workspace identifier.

• Example prompts for AI:

  • "Run a query in Seq to count errors grouped by HTTP status code"

  • "Find the top 10 slowest requests in Seq from the stream"

3. seq_list_signals

List all saved signals (predefined filters and searches) available in Seq.

• Parameters:

  • sharedOnly (boolean, optional, default: true): List only shared signals.

  • workspace (string, optional): Workspace identifier.

4. seq_get_signal

Get full configuration, column definitions, and filter expressions of a specific signal.

• Parameters:

  • signalId (string, required): The signal ID (e.g., signal-123).

  • workspace (string, optional): Workspace identifier.

5. seq_convert_filter

Convert relaxed/fuzzy user search syntax (e.g., free text or shorthand comparisons) into strict Seq filter expressions.

• Parameters:

  • fuzzyFilter (string, required): The loose or natural search string (e.g., error, status:500, user==alice).

  • workspace (string, optional): Workspace identifier.

6. seq_tail_events

Wait for and capture recent or live stream events within a timeout window.

• Parameters:

  • filter (string, optional): Filter expression applied to incoming events.

  • count (integer, optional, default: 10, max: 100): Maximum events to capture.

  • timeoutSeconds (integer, optional, default: 5, max: 30): Wait window in seconds.

  • workspace (string, optional): Workspace identifier.

📦 Programmatic Library Usage

You can also use this package as a standalone library in your own Node.js / TypeScript applications:

import { SeqClient, createSeqMcpServer } from "@abhishekkumar00019/seq-mcp";

// 1. Using the SeqClient directly
const client = new SeqClient({
  serverUrl: "http://localhost:5341",
  apiKey: "your-api-key"
});

// Search events
const events = await client.searchEvents({
  filter: "@Level = 'Error'",
  count: 50,
  fromDateUtc: "2026-10-01T00:00:00Z"
});

// Run SQL query
const queryResult = await client.executeQuery({
  query: "select count(*) from stream group by time(1m)"
});

// 2. Creating an in-process MCP Server
const { server } = createSeqMcpServer({ client });

📊 Dumping Dummy Test Data to Seq

You can dump a rich set of realistic dummy test logs (covering multiple microservices, all standard log levels from Verbose to Fatal, HTTP requests, DB deadlocks, timeouts, stack traces, and date ranges) directly into Seq:

# Provide API key via command-line option:
npm run dump-testdata -- --api-key YOUR_SEQ_API_KEY

# Or set SEQ_API_KEY and run:
SEQ_API_KEY=YOUR_SEQ_API_KEY npm run dump-testdata

# Custom event count and lookback window:
npm run dump-testdata -- -k YOUR_KEY -n 250 -d 7

If no API key is specified in arguments or environment, the script will interactively prompt for it in the terminal.

🧪 Development & Testing

# Clone the repository
git clone https://github.com/itachiuchihadev/seq-mcp.git
cd seq-mcp

# Install dependencies
npm install

# Run unit and integration tests
npm test

# Build for distribution
npm run build

📄 License

MIT © Abhishek Kumar