MCP Sumo Logic

A Model Context Protocol (MCP) server that integrates with Sumo Logic's API to perform log searches.

Features

• Search Sumo Logic logs using custom queries

• Configurable time ranges for searches

• Error handling and detailed logging

• stdio transport by default (works with MCP clients and docker run -i)

• Optional Streamable HTTP transport for remote deployments

Related MCP server: SolarWinds Logs MCP Server

Environment Variables

SUMO_API_ID=your_api_id   # Required
SUMO_API_KEY=your_api_key # Required
ENDPOINT=https://api.us2.sumologic.com/api/v1  # Optional (defaults to gifthealth US2)
PORT=3006                  # Optional (HTTP mode only)

Quick Start (stdio)

Pull and run the published image from GHCR:

docker run --pull=always -i --rm \
  -e SUMO_API_ID=... \
  -e SUMO_API_KEY=... \
  ghcr.io/gifthealth/mcp-sumologic

MCP Client Configuration

{
  "mcpServers": {
    "sumologic": {
      "command": "docker run --pull=always -i --rm -e SUMO_API_ID -e SUMO_API_KEY ghcr.io/gifthealth/mcp-sumologic",
      "env": {
        "SUMO_API_ID": "...",
        "SUMO_API_KEY": "..."
      }
    }
  }
}

Transports

The server supports two transports, selected by CLI argument:

Setup

1. Clone the repository

2. Install dependencies:

   npm install

3. Create a .env file with SUMO_API_ID and SUMO_API_KEY

4. Build the project:

   npm run build

5. Start the server:

   npm start          # stdio (default)
   npm run start:http # HTTP on port 3006

Docker Setup

stdio (default)

docker build -t ghcr.io/gifthealth/mcp-sumologic .
docker run --pull=always -i --rm \
  -e SUMO_API_ID=... \
  -e SUMO_API_KEY=... \
  ghcr.io/gifthealth/mcp-sumologic

HTTP (opt-in)

docker run --pull=always -p 3006:3006 --env-file .env \
  ghcr.io/gifthealth/mcp-sumologic \
  node dist/index.js http

Or use Docker Compose (runs HTTP mode on port 3006):

docker-compose up --build -d

Usage

All tools are read-only. Search tools accept optional from/to ISO timestamps and limit (default 100).

Search

Example — list source categories:

query: _sourceCategory=* | count by _sourceCategory | sort by _count desc

Use search_aggregate for the above; use search_logs for raw log lines.

Data discovery

Metrics

Monitoring

Content

Error Handling

The server includes comprehensive error handling and logging:

• API errors are caught and logged with details

• Search job status is monitored and logged

• Network and authentication issues are properly handled

Development

To run in development mode:

npm run dev          # stdio (default)
npm run dev:http     # HTTP on port 3006

For testing:

npm test              # run Vitest suite once
npm run test:watch    # watch mode

Makefile

Common tasks are available via make: