SigNoz MCP Server
A Model Context Protocol (MCP) server that provides seamless access to SigNoz observability data through AI assistants and LLMs. Query metrics, traces, logs, alerts, dashboards, and services using natural language.
Table of Contents
- Connect to SigNoz Cloud
- Self-Hosted Installation
- Connect to Self-Hosted SigNoz
- What Can You Do With It?
- Available Tools
- Environment Variables
- Claude Desktop Extension
- Architecture
- Contributing
Connect to SigNoz Cloud
Connect your AI tool to SigNoz Cloud's hosted MCP server. No installation is required; just add the hosted MCP URL and authenticate.
https://mcp.<region>.signoz.cloud/mcp
Make sure you select the correct region that matches your SigNoz Cloud account. Using the wrong region will result in authentication failures.
Find your region under Settings โ Ingestion in SigNoz, or see the SigNoz Cloud region reference.
One-Click Install Links
GitHub does not reliably make custom-protocol links like cursor:// and vscode: clickable in README rendering.
Use the documentation page for one-click install buttons:
If you prefer, use the manual configuration examples below in this README.
Cursor
Manual Configuration
Add this configuration to .cursor/mcp.json:
{
"mcpServers": {
"signoz": {
"url": "https://mcp.<region>.signoz.cloud/mcp"
}
}
}
Need help? See the Cursor MCP docs.
VS Code / GitHub Copilot
Manual Configuration
Add this configuration to .vscode/mcp.json:
{
"servers": {
"signoz": {
"type": "http",
"url": "https://mcp.<region>.signoz.cloud/mcp"
}
}
}
Need help? See the VS Code MCP docs.
Claude Desktop
Add SigNoz Cloud as a custom connector in Claude Desktop:
- Open Claude Desktop.
- Go to Settings โ Developer (or Features, depending on your version).
- Click Add Custom Connector or Add Remote MCP Server.
- Enter your SigNoz MCP URL:
https://mcp.<region>.signoz.cloud/mcp
When prompted, complete the authentication flow.
Claude Code
Run this command to add the hosted SigNoz MCP server:
claude mcp add --scope user --transport http signoz https://mcp.<region>.signoz.cloud/mcp
After configuring the MCP server, authenticate in a terminal:
claude /mcp
Select the signoz server and complete the authentication flow.
OpenAI Codex
Run this command to add the hosted SigNoz MCP server:
codex mcp add signoz --url https://mcp.<region>.signoz.cloud/mcp
Or add this configuration to config.toml:
[mcp_servers.signoz]
url = "https://mcp.<region>.signoz.cloud/mcp"
After adding the server, authenticate:
codex mcp login signoz
Then run /mcp inside Codex to verify the connection.
SigNoz Cloud Authentication
When you add the hosted MCP URL to your client, the client initiates an authentication flow. You will be prompted to enter:
- Your SigNoz instance URL (for example,
your-instance.signoz.cloud). Protocol-less URLs are accepted; paths, query parameters, and fragments are ignored. - Your API key
Create an API key in Settings โ API Keys in SigNoz. Only Admin users can create API keys.
Self-Hosted Installation
Download Binary (Recommended)
Download the latest binary from GitHub Releases:
# macOS (Apple Silicon)
curl -L https://github.com/SigNoz/signoz-mcp-server/releases/latest/download/signoz-mcp-server_darwin_arm64.tar.gz | tar xz
# macOS (Intel)
curl -L https://github.com/SigNoz/signoz-mcp-server/releases/latest/download/signoz-mcp-server_darwin_amd64.tar.gz | tar xz
# Linux (amd64)
curl -L https://github.com/SigNoz/signoz-mcp-server/releases/latest/download/signoz-mcp-server_linux_amd64.tar.gz | tar xz
This extracts a signoz-mcp-server binary in the current directory. Move it somewhere on your PATH or note the absolute path for the config below.
Go Install
go install github.com/SigNoz/signoz-mcp-server/cmd/server@latest
The binary is installed as server to $GOPATH/bin/ (default: $HOME/go/bin/server). You may want to rename it:
mv "$(go env GOPATH)/bin/server" "$(go env GOPATH)/bin/signoz-mcp-server"
Docker
Docker images are available on Docker Hub:
docker pull signoz/signoz-mcp-server:latest
Run in HTTP mode:
docker run -p 8000:8000 \
-e TRANSPORT_MODE=http \
-e MCP_SERVER_PORT=8000 \
-e SIGNOZ_URL=https://your-signoz-instance.com \
-e SIGNOZ_API_KEY=your-api-key \
signoz/signoz-mcp-server:latest
Use a specific version tag (e.g. v0.1.0) instead of latest for pinned deployments.
Build from Source
git clone https://github.com/SigNoz/signoz-mcp-server.git
cd signoz-mcp-server
make build
The binary is at ./bin/signoz-mcp-server.
Connect to Self-Hosted SigNoz
Prerequisites
- A running SigNoz instance
- SigNoz v0.131.0 or newer for
signoz_check_metric_usage - SigNoz v0.120.0 or newer for alert rule tools that use the
/api/v2/rulesAPIs - A SigNoz API key (Settings โ API Keys in the SigNoz UI)
- The
signoz-mcp-serverbinary (see Self-Hosted Installation)
Stdio Mode (Claude Desktop / Cursor / Any MCP Client)
Add this to your MCP client config (claude_desktop_config.json, .cursor/mcp.json, etc.). Replace the command path with the absolute path to your signoz-mcp-server binary:
{
"mcpServers": {
"signoz": {
"command": "/absolute/path/to/signoz-mcp-server",
"args": [],
"env": {
"SIGNOZ_URL": "https://your-signoz-instance.com",
"SIGNOZ_API_KEY": "your-api-key-here",
"LOG_LEVEL": "info"
}
}
}
}
HTTP Mode
With OAuth (Multi-Tenant / Cloud)
Start the server:
TRANSPORT_MODE=http \
MCP_SERVER_PORT=8000 \
OAUTH_ENABLED=true \
OAUTH_TOKEN_SECRET=$(openssl rand -base64 32) \
OAUTH_ISSUER_URL=https://your-public-mcp-url.com \
./signoz-mcp-server
Client config โ just the URL, no keys needed:
{
"mcpServers": {
"signoz": {
"url": "https://your-public-mcp-url.com/mcp"
}
}
}
The client discovers OAuth endpoints automatically, opens a browser for credentials, and handles token exchange.
Without OAuth (Simple Setup)
The API key and SigNoz URL only need to be provided in one place โ either on the server or on the client.
Option A โ Credentials on the server (simpler client config):
SIGNOZ_URL=https://your-signoz-instance.com \
SIGNOZ_API_KEY=your-api-key \
TRANSPORT_MODE=http \
MCP_SERVER_PORT=8000 \
./signoz-mcp-server
{
"mcpServers": {
"signoz": {
"url": "http://localhost:8000/mcp"
}
}
}
Option B โ API key on the client (server holds the URL, client sends the key):
SIGNOZ_URL=https://your-signoz-instance.com \
TRANSPORT_MODE=http \
MCP_SERVER_PORT=8000 \
./signoz-mcp-server
{
"mcpServers": {
"signoz": {
"url": "http://localhost:8000/mcp",
"headers": {
"SIGNOZ-API-KEY": "your-api-key-here"
}
}
}
}
HTTP Probe Endpoints
HTTP mode exposes unauthenticated probe endpoints. New Kubernetes deployments should use /livez for livenessProbe and /readyz for readinessProbe.
| Endpoint | Purpose |
|---|---|
/livez | Shallow liveness probe. Returns 200 OK when the server process can answer HTTP requests. It does not check dependencies. |
/readyz | Readiness probe. Returns 200 OK only after the pod is ready to receive traffic; currently this requires the docs index to be ready. Otherwise returns 503. |
/healthz | Legacy/generic health check kept for backward compatibility. It follows the same strict status as /readyz; use /livez for shallow liveness. |
What Can You Do With It?
"Show me all available metrics"
"What's the p99 latency for http_request_duration_seconds?"
"List all active alerts"
"Show me error logs for the paymentservice from the last hour"
"How many errors per service in the last hour?"
"Search traces for the checkout service from the last hour"
"Get details for trace ID abc123"
"Create a dashboard with CPU and memory widgets"
"How do I send Docker logs to SigNoz?"
Available Tools
SigNoz compatibility:
signoz_check_metric_usagetargets/api/v2/metrics/dashboards?metricName=...and/api/v2/metrics/alerts?metricName=..., available in SigNoz v0.131.0 and newer. Alert-rule tools target/api/v2/rules/*, which is available in SigNoz v0.120.0 and newer. Self-hosted deployments on older SigNoz versions will see HTTP 404 from the affected tools. Notification-channel tools target the render-envelope/api/v1/channels/*routes introduced by SigNoz/signoz#10941, #10957, #10995, and #10997.
Tool metadata: every tool accepts
searchContext, the user's original question/search text. It is used for MCP observability and is not forwarded to SigNoz APIs.
| Tool | Description |
|---|---|
signoz_list_metrics | Search and list available metrics |
signoz_query_metrics | Query metrics with smart aggregation defaults |
signoz_get_top_metrics | Return top 100 metrics ranked by ingested sample volume with pre-computed percentages for cost and volume analysis |
signoz_check_metric_usage | Given a list of metric names (up to 50 per call), return which dashboards and alerts reference each one |
signoz_get_field_keys | Discover available field keys for metrics, traces, or logs |
signoz_get_field_values | Get possible values for a field key |
signoz_list_alerts | List firing/silenced/inhibited Alertmanager alert instances (not rule definitions) |
signoz_list_alert_rules | List configured alert rules, including inactive/OK and disabled rules |
signoz_get_alert | Get an alert rule definition by id via GET /api/v2/rules/{id} |
signoz_get_alert_history | Get alert state history timeline for a rule (id) |
signoz_create_alert | Create an alert rule via POST /api/v2/rules; v2alpha1 for threshold/promql, v1 for anomaly |
signoz_update_alert | Update an alert rule by UUIDv7 id via PUT /api/v2/rules/{id} |
signoz_delete_alert | Delete an alert rule by UUIDv7 id via DELETE /api/v2/rules/{id} |
signoz_list_dashboards | List all dashboards with summaries |
signoz_get_dashboard | Get full dashboard configuration by id |
signoz_create_dashboard | Create a new dashboard |
signoz_update_dashboard | Update an existing dashboard by id |
signoz_delete_dashboard | Delete a dashboard by id |
signoz_import_dashboard | Create a dashboard from a curated SigNoz/dashboards template by path |
signoz_list_dashboard_templates | List the bundled curated SigNoz dashboard template catalog so the model can pick a template |
signoz_list_services | List services within a time range |
signoz_get_service_top_operations | Get top operations for a service |
signoz_list_views | List saved Explorer views for a sourcePage (traces/logs/metrics/meter) |
signoz_get_view | Get a saved view by id |
signoz_search_docs | Search official SigNoz docs for product, setup, instrumentation, config, API, deployment, or troubleshooting questions |
signoz_fetch_doc | Fetch full markdown for one official SigNoz docs page or heading |
signoz_create_view | Create a new saved Explorer view |
signoz_update_view | Replace an existing saved view (full-body PUT; id) |
signoz_delete_view | Delete a saved view by id |
signoz_aggregate_logs | Aggregate logs (count, avg, p99, etc.) with grouping |
signoz_search_logs | Search logs with flexible filtering |
signoz_aggregate_traces | Aggregate trace statistics with grouping |
signoz_search_traces | Search traces with flexible filtering |
signoz_get_trace_details | Get full trace with all spans |
signoz_execute_builder_query | Execute a raw Query Builder v5 query |
signoz_list_notification_channels | List notification channels |
signoz_get_notification_channel | Get a single notification channel by ID |
signoz_create_notification_channel | Create a notification channel and send a test notification |
signoz_update_notification_channel | Update a notification channel and send a test notification |
signoz_delete_notification_channel | Delete a notification channel by ID |
For detailed usage and examples, see the full documentation.
Resource deep links: the resource read tools (
signoz_list_dashboards,signoz_get_dashboard,signoz_list_alerts,signoz_list_alert_rules,signoz_get_alert,signoz_list_services,signoz_search_traces,signoz_get_trace_details) include awebUrlfield โ an absolute deep link to the resource in the SigNoz web UI (per result row forsignoz_search_traces) โ when the request carries a SigNoz instance URL.
Agent Routing Guidance
Use signoz_search_docs for any SigNoz product question: how-to, feature usage, setup, configuration, API behavior, deployment, instrumentation, OpenTelemetry integration with SigNoz, and troubleshooting. Use live data tools for actual telemetry, alert state, dashboard contents, saved views, and tenant-specific resources. When a docs search result needs exact commands or a specific section, call signoz_fetch_doc.
Docs tools use the same authentication path as other MCP tools.
<details> <summary><strong>Parameter Reference</strong></summary>signoz_list_metrics
Search and list available metrics from SigNoz. Supports filtering by name substring, time range, and source.
- Parameters:
searchText(optional) - Filter metrics by name substring (e.g., 'cpu', 'memory')limit(optional) - Maximum number of metrics to return (default: 50)timeRange(optional) - Relative range: 30m, 1h, 6h, 24h, 7d (default: 1h; ignored when bothstartandendare provided)start/end(optional) - Unix ms timestamps. When both are provided, they overridetimeRange.source(optional) - Data-source filter. Use"meter"to list Cost Meter metrics โ the usage/billing metrics SigNoz meters on (currently telemetry ingestion volume); omit for the default metrics store- Completeness note: the response appends a note reporting
hasMore(inferred fromreturnedRows == limit) so alimit-truncated list is never mistaken for the full set; narrow withsearchTextfor more specificity
signoz_query_metrics
Query metrics with smart aggregation defaults and validation. Automatically applies the right timeAggregation and spaceAggregation based on metric type (gauge, counter, histogram). Auto-fetches metric metadata if not provided.
- Parameters:
metricName(required) - Metric name to querymetricType(optional) - gauge, sum, histogram, exponential_histogram (auto-fetched if absent)isMonotonic(optional) - Boolean (or the strings"true"/"false"); auto-fetched if absent. An invalid value is rejected rather than silently treated as falsetemporality(optional) - cumulative, delta, unspecified (auto-fetched if absent)timeAggregation(optional) - Aggregation over time (auto-defaulted by type)spaceAggregation(optional) - Aggregation across dimensions (auto-defaulted by type)groupBy(optional) - Comma-separated field namesfilter(optional) - Filter expressiontimeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '7d'; default: '1h'; ignored when bothstartandendare provided)start/end(optional) - Unix ms timestamps. When both are provided, they overridetimeRange.stepInterval(optional) - Step in seconds (auto-calculated if omitted)requestType(optional) - Response format. Enum:time_series(default),scalar. Unknown values are rejected.reduceTo(optional) - For scalar: sum, count, avg, min, max, last, medianformula(optional) - Expression over named queries (e.g., "A / B * 100")formulaQueries(optional) - JSON array of additional named metric queries for formulasource(optional) - Data-source filter. Use"meter"to query Cost Meter data; omit for the default metrics store
signoz_get_top_metrics
Return top 100 metrics ranked by ingested sample volume with pre-computed percentages. Use this to identify which metrics are driving the most ingestion volume and cost. Wraps POST /api/v2/metrics/treemap. Response fields: metricName, percentage (share of total sample volume), totalValue (absolute sample count).
- Parameters:
timeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '1h', '24h', '3d', '7d', '30d'; default: '7d'; ignored when bothstartandendare provided). Start with 7d; if the query times out, retry with 3d, then 24hstart/end(optional) - Unix ms timestamps. When both are provided, they overridetimeRange- Completeness note: returns a fixed top 100 by ingested sample volume; the response appends a note flagging whether the list was truncated at that cap (
hasMore)
signoz_check_metric_usage
Given a list of metric names, return which dashboards and alerts reference each one. Wraps /api/v2/metrics/dashboards?metricName=... and /api/v2/metrics/alerts?metricName=... per metric. Requires SigNoz v0.131.0+.
- Parameters:
metricNames(required) - Array of metric name strings to check (max 50 per call). Example:["system.disk.io", "k8s.node.condition"]. For larger lists, split into batches of 50 and merge results.
- Response: Per metric โ
dashboards(list of dashboard names that reference the metric),alerts(list of alert names that reference the metric),error(non-empty when the lookup failed โ do not treat the metric as unused in that case) - Limits: Maximum 50 metrics per call; 30-second overall timeout (partial results returned on expiry)
signoz_list_alerts
Lists currently firing/silenced/inhibited alert instances from Alertmanager โ not rule definitions. Use signoz_list_alert_rules for configured rules, signoz_get_alert with an id for one full rule definition, or signoz_get_alert_history for the state timeline.
- Parameters:
limit(optional) - Maximum number of alerts per page (default: 50)offset(optional) - Number of results to skip for pagination (default: 0)active/silenced/inhibited(optional) - Tri-state filters. Boolean (or the strings"true"/"false"). Omit to defer to the backend default (all states included). An invalid value is rejected rather than silently droppedfilter(optional) - Comma-separated Prometheus matcher expressions (e.g.,alertname="HighCPU",severity="critical")receiver(optional) - Regex to filter alerts by receiver name
signoz_list_alert_rules
Lists configured alert rules from GET /api/v2/rules, including inactive/OK and disabled rules. Returns compact summaries with ruleId, alert, alertType, ruleType, state, disabled, severity, labels, createdAt, and updatedAt.
- Parameters:
limit(optional) - Maximum number of rules to return per page (default: 50, max: 1000; higher values are clamped)offset(optional) - Number of rules to skip for pagination (default: 0)
signoz_get_alert
Gets the rule definition for an alert (GET /api/v2/rules/{id}).
- Parameters:
id(required) - Alert rule ID (UUIDv7 on v2-capable servers). - Note: Response shape depends on the SigNoz server version. Post-#10997 servers return the canonical
Ruletype withcreatedAt/updatedAt/createdBy/updatedBy; older servers returnGettableRulewithcreateAt/updateAt/createBy/updateBy(no 'd').
signoz_list_dashboards
Lists all dashboards with summaries (name, UUID, description, tags).
signoz_get_dashboard
Gets complete dashboard configuration.
- Parameters:
id(required) - Dashboard UUID
signoz_create_dashboard
Creates a dashboard.
- Parameters:
title(required) โ Dashboard namedescription(optional) โ Short summary of what the dashboard showstags(optional) โ List of tagslayout(required) โ Widget positioning gridvariables(optional) โ Map of variables available for use in querieswidgets(required) โ List of widgets added to the dashboard
signoz_import_dashboard
Creates a dashboard from a curated template hosted in the SigNoz/dashboards repo (main branch). The server fetches the template JSON, validates it, and creates the dashboard in one call.
To discover available paths, call signoz_list_dashboard_templates first and let the model pick the best match.
- Parameters:
path(required) โ Template path within the SigNoz/dashboards repo, e.g.hostmetrics/hostmetrics.json
signoz_list_dashboard_templates
Returns the full bundled catalog of curated SigNoz dashboard templates (id, title, path, description, category, keywords) as a JSON array. Pair with signoz_import_dashboard: have the model read the catalog, choose the entry that best matches the user's intent, then import it by its path.
- Parameters: none
signoz_update_dashboard
Updates an existing dashboard.
- Parameters:
id(required) โ Unique identifier of the dashboard to updatedashboard(required) โ Complete dashboard object representing the post-update statetitle(required) โ Dashboard namedescription(optional) โ Short summary of what the dashboard showstags(optional) โ List of tags applied to the dashboardlayout(required) โ Full widget positioning gridvariables(optional) โ Map of variables available for use in querieswidgets(required) โ Complete set of widgets defining the updated dashboard
signoz_list_services
Lists all services within a time range.
- Parameters:
timeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '7d'; defaults to last 6 hours; ignored when bothstartandendare provided)start(optional) - Start time in unix milliseconds (defaults to 6 hours ago).end(optional) - End time in unix milliseconds (defaults to now)limit(optional) - Maximum services per page (default: 50, max: 1000; higher values are clamped)offset(optional) - Number of results to skip for pagination (default: 0)
signoz_get_service_top_operations
Gets top operations for a specific service.
- Parameters:
service(required) - Service nametimeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '7d'; defaults to last 6 hours; ignored when bothstartandendare provided)start(optional) - Start time in unix milliseconds (defaults to 6 hours ago).end(optional) - End time in unix milliseconds (defaults to now)tags(optional) - Raw JSON array of tag filters, passed through to the SigNoz API as-is (advanced; the backend expects structured tag-filter objects)
signoz_get_alert_history
Gets alert history timeline for a specific rule.
- Parameters:
id(required) - Alert rule IDtimeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '7d'; defaults to last 6 hours; ignored when bothstartandendare provided)start(optional) - Start timestamp in unix milliseconds (defaults to 6 hours ago).end(optional) - End timestamp in unix milliseconds (defaults to now)state(optional) - Filter by alert state. Enum:firing,inactive(omit for all transitions)offset(optional) - Offset for pagination (default: 0)limit(optional) - Limit number of results (default: 20, max: 10000; higher values are clamped โ paginate withoffset)order(optional) - Sort order. Enum:asc,desc(default: 'asc')- Completeness note: the response appends a note reporting
hasMore(inferred fromreturnedRows == limit) and thenextOffsetto fetch
signoz_list_views
List SigNoz saved Explorer views for a given sourcePage. Supports pagination; response includes a pagination block with total, hasMore, and nextOffset.
- Parameters:
sourcePage(required) - One of:traces,logs,metrics,meter. Cost Meter views are filed undermeter(a distinct Explorer page), notmetricsname(optional) - Partial-match filter on view name (server-side)category(optional) - Partial-match filter on view category (server-side)limit(optional) - Page size (default: 50, max: 1000; higher values are clamped)offset(optional) - Number of results to skip (default: 0)
signoz_get_view
Get a single saved view by UUID.
- Parameters:
id(required) - Saved view UUID
signoz_search_docs
Search official SigNoz documentation with BM25 over indexed markdown content.
- Parameters:
searchText(required) - Natural-language or keyword query to search official SigNoz docslimit(optional) - Maximum results to return as a string (default: 10, max: 25; a numeric value is also accepted). The 25 ceiling is deliberate โ each result hydrates document text out of the in-process docs index, so a larger limit inflates this server's resident memory.section_slug(optional) - Exact top-level docs section filter, such assetup,logs-management,apm-distributed-tracing,metrics,alerts,dashboards,signoz-apis,querying, orcollection-agentssearchContext- User's original question
signoz_fetch_doc
Fetch full markdown for one official SigNoz docs page from the local index. Accepts only https://signoz.io/docs/... URLs or /docs/... paths.
- Parameters:
url(required) - Docs page URL or pathheading(optional) - Heading anchor ID or heading textsearchContext- User's original question
signoz://docs/sitemap
Read-only MCP resource containing the indexed docs sitemap used by the docs search and fetch tools.
signoz://logs/query-builder-guide
Read-only MCP resource with logs Query Builder v5 filter syntax, field contexts, body text search, body JSON-path search, timestamp format, and complete raw/aggregation/time-series examples.
signoz://traces/query-builder-guide
Read-only MCP resource with traces Query Builder v5 filter syntax, field contexts, built-in span columns, timestamp format, and complete raw/aggregation/time-series examples.
signoz_create_view
Create a new saved Explorer view.
- Parameters: JSON payload matching the
SavedViewschema. - Tip: Read MCP resources
signoz://view/instructionsandsignoz://view/examplesbefore composing payloads.
signoz_update_view
Replace an existing saved view (full-body PUT).
- Parameters:
id(required) - UUID of the view to replaceview(required) - FullSavedViewobject (name,sourcePage,compositeQuery, plus any ofcategory,tags,extraData)
- Tip: Read MCP resources
signoz://view/instructionsandsignoz://view/examplesbefore composing payloads. Callsignoz_get_viewfirst, pass itsdataobject underviewwith whichever fields changed. Partial bodies wipe unspecified fields.
signoz_delete_view
Delete a saved view by UUID.
- Parameters:
id(required) - Saved view UUID
signoz_aggregate_logs
Aggregate logs with count, average, sum, min, max, or percentiles, optionally grouped by fields.
- Parameters:
aggregation(required) - Aggregation function: count, count_distinct, avg, sum, min, max, p50, p75, p90, p95, p99, rateaggregateOn(optional) - Field to aggregate on (required for all except count and rate)groupBy(optional) - Comma-separated fields to group by (e.g., 'service.name, severity_text')filter(optional) - Filter expression using SigNoz search syntax. Combine conditions with AND, OR, and parentheses. Unknown keys hard-error; ambiguous keys default to resource context. Seesignoz://logs/query-builder-guideservice(optional) - Shortcut filter for service nameseverity(optional) - Shortcut filter for severity (DEBUG, INFO, WARN, ERROR, FATAL)orderBy(optional) - Order expression and direction (e.g., 'count() desc')limit(optional) - Maximum number of groups to return (default: 10, max: 10000; higher values are clamped to bound server memory)timeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '24h', '7d'; default: '1h'; ignored when bothstartandendare provided)start/end(optional) - Start/end time in unix milliseconds. When both are provided, they overridetimeRange.requestType(optional) -scalar(default โ one aggregate value over the whole range) ortime_series(one value per time bucket). Unknown values are rejected.stepInterval(optional) - Time bucket size in seconds fortime_seriesmode. Accepts a number or numeric string (backend auto-selects when omitted)
signoz_search_logs
Search logs with flexible filtering across all services.
- Parameters:
filter(optional) - Filter expression using SigNoz search syntax. Combine conditions with AND, OR, and parentheses (e.g., "(severity_text = 'ERROR' OR body CONTAINS 'panic') AND service.name = 'payment-svc'"). Legacyqueryis still accepted for backward compatibility, butfilteris canonical. Seesignoz://logs/query-builder-guideservice(optional) - Service name to filter byseverity(optional) - Severity filter (DEBUG, INFO, WARN, ERROR, FATAL)searchText(optional) - Text to search for in log body (uses CONTAINS matching)timeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '24h', '7d'; default: '1h'; ignored when bothstartandendare provided)start/end(optional) - Start/end time in unix milliseconds. When both are provided, they overridetimeRange.limit(optional) - Maximum number of logs to return (default: 100, max: 10000; higher values are clamped โ paginate withoffset)offset(optional) - Offset for pagination (default: 0)- Completeness note: the response appends a note reporting
hasMore(inferred fromreturnedRows == limit) and thenextOffsetto fetch, so a truncated page is never mistaken for the full result set
signoz_get_field_keys
Get available field keys for a given signal (metrics, traces, or logs).
- Parameters:
signal(required) - Signal type. Enum:metrics,traces,logssearchText(optional) - Filter field keys by name substringmetricName(optional) - Filter by metric name (relevant for metrics signal)fieldContext(optional) - Restrict to a field context:resource,attribute(aliastag),scope,log/span/metric(intrinsic/built-in columns), orbody(JSON log body). Distinguishes intrinsic columns from user attributes.fieldDataType(optional) - Restrict to a data type:string,bool,int64,float64,number, or array forms like[]stringsource(optional) - Filter by source
signoz_get_field_values
Get possible values for a specific field key for a given signal.
- Parameters:
signal(required) - Signal type. Enum:metrics,traces,logsname(required) - Field key name to get values for (e.g.,service.name,http.method)searchText(optional) - Filter values by substringmetricName(optional) - Filter by metric name (relevant for metrics signal)fieldContext(optional) - Restrict the lookup to a field context (resource,attribute/tag,scope,log/span/metric,body) when the same key name exists in more than onesource(optional) - Filter by source
signoz_search_traces
Search traces/spans with flexible filtering.
- Parameters:
filter(optional) - Filter expression using SigNoz search syntax. Combine conditions with AND, OR, and parentheses (e.g., "service.name = 'payment-svc' AND (has_error = true OR attribute.http.response.status_code >= 500)"). Legacyqueryis still accepted for backward compatibility, butfilteris canonical. Seesignoz://traces/query-builder-guideservice(optional) - Service name to filter byoperation(optional) - Operation/span name to filter byerror(optional) - Filter by error status. Boolean (or the strings"true"/"false"). An invalid value is rejected rather than silently droppedminDuration/maxDuration(optional) - Min/max span duration in nanoseconds (e.g., '500000000' for 500ms)timeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '24h', '7d'; default: '1h'; ignored when bothstartandendare provided)start/end(optional) - Start/end time in unix milliseconds. When both are provided, they overridetimeRange.limit(optional) - Maximum number of traces to return (default: 100, max: 10000; higher values are clamped โ paginate withoffset)offset(optional) - Offset for pagination (default: 0)- Completeness note: the response appends a note reporting
hasMore(inferred fromreturnedRows == limit) and thenextOffsetto fetch, so a truncated page is never mistaken for the full result set - Output note: raw result row keys follow canonical Query Builder field names (for example
trace_id,span_id,duration_nano,has_error). Legacy caller-provided filters such ashasErrorstill pass through to the backend alias layer, but new response parsers should read the canonical snake_case keys.
signoz_aggregate_traces
Aggregate trace statistics like count, average, sum, min, max, or percentiles over spans, optionally grouped by fields.
- Parameters:
aggregation(required) - Aggregation function: count, count_distinct, avg, sum, min, max, p50, p75, p90, p95, p99, rateaggregateOn(optional) - Field to aggregate on (e.g., 'duration_nano'). Required for all except count and rategroupBy(optional) - Comma-separated fields to group by (e.g., 'service.name, name')filter(optional) - Filter expression using SigNoz search syntax. Combine conditions with AND, OR, and parentheses. Unknown keys hard-error; ambiguous keys default to resource context. Seesignoz://traces/query-builder-guideservice(optional) - Shortcut filter for service nameoperation(optional) - Shortcut filter for span/operation nameerror(optional) - Shortcut filter for error spans. Boolean (or the strings"true"/"false"). An invalid value is rejected rather than silently droppedorderBy(optional) - Order expression and direction (e.g., 'avg(duration_nano) desc')limit(optional) - Maximum number of groups to return (default: 10, max: 10000; higher values are clamped to bound server memory)timeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '24h', '7d'; default: '1h'; ignored when bothstartandendare provided)start/end(optional) - Start/end time in unix milliseconds. When both are provided, they overridetimeRange.requestType(optional) -scalar(default โ one aggregate value over the whole range) ortime_series(one value per time bucket). Unknown values are rejected.stepInterval(optional) - Time bucket size in seconds fortime_seriesmode. Accepts a number or numeric string (backend auto-selects when omitted)
signoz_get_trace_details
Gets trace information including all spans and metadata.
- Parameters:
traceId(required) - Trace ID to get details fortimeRange(optional) - Relative time range<number><unit>where unit ism/h/d(e.g. '30m', '1h', '6h', '7d'; defaults to last 6 hours; ignored when bothstartandendare provided)start(optional) - Start time in unix milliseconds (defaults to 6 hours ago).end(optional) - End time in unix milliseconds (defaults to now)includeSpans(optional) - Include detailed span information. Boolean (or the strings"true"/"false"), default: true
signoz_create_alert
Create a new alert rule in SigNoz via POST /api/v2/rules.
- Parameters: JSON payload matching the SigNoz alert rule schema.
- Schema varies by
ruleType:threshold_rule/promql_ruleโ v2alpha1 (structuredcondition.thresholds,evaluation,notificationSettings).anomaly_ruleโ v1 schema: top-levelevalWindowandfrequency;condition.op/matchType/target/algorithm/seasonality; anomaly function insidecompositeQuery.queries[].spec.functions. Omitthresholds,evaluation,schemaVersion.
- Tip: Read MCP resources
signoz://alert/instructionsandsignoz://alert/examples(the ten canonical SigNoz PR #11023 payloads plus a Cost Meter cumulative-budget example) before composing payloads. Forpromql_rule, also readsignoz://promql/instructionsโ OTel dotted metric names require the Prometheus 3.x UTF-8 quoted-selector form.
signoz_update_alert
Update an existing alert rule via PUT /api/v2/rules/{id}. Replaces the full rule configuration โ fetch the current rule with signoz_get_alert first and merge changes on top of it.
- Parameters:
id(required) - UUIDv7 of the rule to update (obtain fromsignoz_list_alert_rules/signoz_get_alert).- Plus all fields of the alert rule schema (same shape as
signoz_create_alert).
signoz_delete_alert
Delete an alert rule via DELETE /api/v2/rules/{id}. Irreversible โ confirm with the user first.
- Parameters:
id(required) - UUIDv7 of the rule to delete. The server rejects non-UUIDv7 values withinvalid_input.
signoz_delete_dashboard
Delete a dashboard by ID.
- Parameters:
id(required) - Dashboard UUID to delete
signoz_list_notification_channels
List notification channels configured in SigNoz.
- Parameters:
limit(optional) - Maximum number of channels to return per page (default: 50, max: 1000; higher values are clamped)offset(optional) - Offset for pagination (default: 0)
signoz_create_notification_channel
Create a notification channel and send a test notification.
- Parameters:
type(required) - Channel type: slack, webhook, pagerduty, email, opsgenie, msteamsname(required) - Channel namesend_resolved(optional) - Send notifications when alerts resolve. Boolean (or the strings"true"/"false"), default: true- Type-specific fields (required by channel type), such as
slack_api_url,webhook_url,pagerduty_routing_key,email_to,opsgenie_api_key, ormsteams_webhook_url
- Test-send behavior: the channel is created first, then a test notification is sent. If the test fails, the tool still returns success (the channel WAS created) but appends a prominent warning note so the failure is not buried โ verify the configuration and re-test.
signoz_update_notification_channel
Update an existing notification channel and send a test notification.
- Parameters:
id(required) - Notification channel UUIDtype(required) - Channel typename(required) - Channel namesend_resolved(optional) - Send notifications when alerts resolve. Boolean (or the strings"true"/"false"), default: true- Full channel configuration fields for the selected channel type
- Test-send behavior: same as create โ a failed verification test-send surfaces a prominent warning note instead of flipping the result to an error.
signoz_get_notification_channel
Get a single notification channel by ID (GET /api/v1/channels/{id}).
- Parameters:
id(required) - Notification channel UUID
signoz_delete_notification_channel
Delete a notification channel by ID (DELETE /api/v1/channels/{id}). Irreversible โ warn if alert rules still reference this channel.
- Parameters:
id(required) - Notification channel UUID
signoz_execute_builder_query
Executes a SigNoz Query Builder v5 query.
- Parameters:
query(required) - Complete SigNoz Query Builder v5 JSON object - Query types: the per-envelope
compositeQuery.queries[i].typeselects the spec shape:builder_queryโ signal-specific spec (logs/traces/metrics) with filter, aggregations, groupBy, etc.builder_formulaโ formula expression referencing other query names (e.g.A / B * 100).promqlโ{name, query, disabled, step?, legend?}. PromQL for OTel metrics requires the Prometheus 3.x UTF-8 quoted-selector form{"metric.name.with.dots"}; read thesignoz://promql/instructionsresource for details.clickhouse_sqlโ{name, query, disabled, legend?}.
- Backend warnings: non-fatal warnings the backend returns (e.g. ambiguous-key resolution) are surfaced as a note alongside the raw response and WARN-logged, matching the search/aggregate/query_metrics tools (previously the body was returned verbatim and warnings were dropped).
- Documentation: See SigNoz Query Builder v5 docs
Environment Variables
| Variable | Description | Required |
|---|---|---|
SIGNOZ_URL | SigNoz instance URL | Yes (stdio); Optional (http with OAuth) |
SIGNOZ_API_KEY | SigNoz API key (get from Settings โ API Keys in the SigNoz UI) | Yes (stdio); Optional (http with OAuth) |
LOG_LEVEL | Logging level: info(default), debug, warn, error | No |
TRANSPORT_MODE | MCP transport mode: stdio(default) or http | No |
MCP_SERVER_PORT | Port for HTTP transport mode | Yes only when TRANSPORT_MODE=http |
MCP_MAX_REQUEST_BYTES | Max inbound MCP HTTP request body size in bytes (default: 4194304 / 4 MiB). Bounds memory from a single oversized request. | No |
SIGNOZ_DOCS_REFRESH_INTERVAL | Runtime docs sitemap refresh interval (Go duration, default: 6h) | No |
SIGNOZ_DOCS_FULL_REFRESH_INTERVAL | Runtime full docs refresh interval (Go duration, default: 24h) | No |
OAUTH_ENABLED | Enable OAuth 2.1 authentication flow (true/false) | No (default: false) |
OAUTH_TOKEN_SECRET | Encryption key for OAuth tokens (min 32 bytes, e.g. openssl rand -base64 32) | Yes when OAUTH_ENABLED=true |
OAUTH_ISSUER_URL | Public URL of this MCP server (used in OAuth metadata discovery) | Yes when OAUTH_ENABLED=true |
OAUTH_ACCESS_TOKEN_TTL_MINUTES | Access token lifetime in minutes (default: 60) | No |
OAUTH_REFRESH_TOKEN_TTL_MINUTES | Refresh token lifetime in minutes (default: 1440 / 24h) | No |
OAUTH_AUTH_CODE_TTL_SECONDS | Authorization code lifetime in seconds (default: 600 / 10min) | No |
SIGNOZ_CUSTOM_HEADERS | Extra HTTP headers added to every API request, useful when SigNoz is behind a reverse proxy requiring auth (e.g. CF-Access-Client-Id:id.access,CF-Access-Client-Secret:secret). Format: Key1:Value1,Key2:Value2 | No |
SIGNOZ_INSTANCE_URL_ALLOWLIST | Multi-tenant (http) only: comma-separated allowlist of SigNoz backend hosts the server will proxy to. Entries are exact hosts (signoz.example.com) or wildcards (*.us.signoz.cloud, which matches any subdomain ending in .us.signoz.cloud); a scheme/port/path accidentally included in an entry is tolerated and reduced to the bare host. When set, SigNoz instance URLs that do not match are refused at every ingress: the OAuth setup form and X-SigNoz-URL header return HTTP 403, the OAuth token endpoint (incl. existing refresh tokens) returns invalid_grant, and /mcp requests via an OAuth token return 403. All increment a disallowed_signoz_url-tagged failure metric for alerting (not logged per-request, to avoid noise from misconfigured/looping clients), and the rejection message points SigNoz Cloud users to their region's MCP URL (mcp.<region>.signoz.cloud) with a docs link. Empty/unset allows any host. The operator's own SIGNOZ_URL is exempt. | No |
OTEL_EXPORTER_OTLP_ENDPOINT | OTLP gRPC endpoint for the MCP server's own traces and metrics. Internal telemetry export is disabled when no OTLP endpoint/exporter is configured. For plaintext collectors, use an http:// endpoint such as http://localhost:4317. | No |
OTEL_EXPORTER_OTLP_TRACES_ENDPOINT | Trace-specific OTLP gRPC endpoint; overrides OTEL_EXPORTER_OTLP_ENDPOINT for traces. | No |
OTEL_EXPORTER_OTLP_METRICS_ENDPOINT | Metrics-specific OTLP gRPC endpoint; overrides OTEL_EXPORTER_OTLP_ENDPOINT for metrics. | No |
OTEL_TRACES_EXPORTER | Set to none to disable internal trace export even when an OTLP endpoint is configured. | No |
OTEL_METRICS_EXPORTER | Set to none to disable internal metrics export and runtime metrics even when an OTLP endpoint is configured. | No |
The MCP server does not run an OTLP log exporter; logs are emitted as JSON to stderr. OTEL_LOGS_EXPORTER is therefore not used.
Claude Desktop Extension
Building the Bundle
Requires Node.js. See Anthropic MCPB for details.
make bundle
Installing
- Open Claude Desktop โ Settings โ Developer โ Edit Config โ Add bundle.mcpb
- Select
./bundle/bundle.mcpb - Enter your
SIGNOZ_URL,SIGNOZ_API_KEY, and optionallyLOG_LEVEL - Restart Claude Desktop
Architecture
For a detailed overview of request flow, component interactions, and design decisions, see docs/architecture.md.
Contributing
See CONTRIBUTING.md for development workflow, required docs/manifest sync for MCP changes, and PR checklist.
Made with โค๏ธ for the observability community