NestDaddy

Graylog MCP Server

io.github.jperelli/graylog-mcp · v1.3.0

Query logs from Graylog: get streams, search messages, aggregate, and get full data.

Connect Runs on your machine

Terminal
claude mcp add graylog-mcp -e GRAYLOG_BASE_URL_INSTANCE_1=<GRAYLOG_BASE_URL_INSTANCE_1> -e GRAYLOG_API_TOKEN_INSTANCE_1=<GRAYLOG_API_TOKEN_INSTANCE_1> -e GRAYLOG_LABEL_INSTANCE_1=<GRAYLOG_LABEL_INSTANCE_1> -- npx -y @jperelli/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "graylog-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@jperelli/[email protected]"
      ],
      "env": {
        "GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
        "GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>",
        "GRAYLOG_LABEL_INSTANCE_1": "<GRAYLOG_LABEL_INSTANCE_1>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "graylog-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@jperelli/[email protected]"
      ],
      "env": {
        "GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
        "GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>",
        "GRAYLOG_LABEL_INSTANCE_1": "<GRAYLOG_LABEL_INSTANCE_1>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "graylog-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@jperelli/[email protected]"
      ],
      "env": {
        "GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
        "GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>",
        "GRAYLOG_LABEL_INSTANCE_1": "<GRAYLOG_LABEL_INSTANCE_1>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
GRAYLOG_BASE_URL_INSTANCE_1
Required
Base URL of the first Graylog instance, e.g. http://graylog.example.com:9000
GRAYLOG_API_TOKEN_INSTANCE_1
Required, secret
API token for the first Graylog instance (used as the HTTP Basic username).
GRAYLOG_LABEL_INSTANCE_1
Optional
Optional human-readable label for the first instance (default: instance_1).

Details

Package@jperelli/[email protected] (NPM, stdio)
First published17 Jul 2026
Last updated17 Jul 2026
Registry nameio.github.jperelli/graylog-mcp

More search and web servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.