Graylog MCP Server

Query logs from Graylog: get streams, search messages, aggregate, and get full data.

Local serverstdio

What is the Graylog MCP Server?

Graylog MCP Server is an MCP integration. Query logs from Graylog: get streams, search messages, aggregate, and get full data.

Packages and local setup

The published npm package is @jperelli/graylog-mcp, version 1.3.0. Its declared MCP transport is stdio.

The package declares GRAYLOG_BASE_URL_INSTANCE_1 (required): Base URL of the first Graylog instance, e.g. http://graylog.example.com:9000; GRAYLOG_API_TOKEN_INSTANCE_1 (required): API token for the first Graylog instance (used as the HTTP Basic username).; GRAYLOG_LABEL_INSTANCE_1: Optional human-readable label for the first instance (default: instance_1)..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 1.3.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
GRAYLOG_BASE_URL_INSTANCE_1Base URL of the first Graylog instance, e.g. http://graylog.example.com:9000Yes
GRAYLOG_API_TOKEN_INSTANCE_1API token for the first Graylog instance (used as the HTTP Basic username).Yes
GRAYLOG_LABEL_INSTANCE_1Optional human-readable label for the first instance (default: instance_1).Optional