An MCP server to integrate ai agents with for Graylog to help debug any issue. It uses best practices to give the agent an advanced custom use of graylog, not just a clone of the http api access.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add graylog-server-jperelli --env GRAYLOG_BASE_URL_INSTANCE_1='<GRAYLOG_BASE_URL_INSTANCE_1>' --env GRAYLOG_API_TOKEN_INSTANCE_1='<GRAYLOG_API_TOKEN_INSTANCE_1>' -- npx -y @jperelli/graylog-mcp~/.codex/config.toml
[mcp_servers.graylog-server-jperelli]
command = "npx"
args = ["-y", "@jperelli/graylog-mcp"]
env = { GRAYLOG_BASE_URL_INSTANCE_1 = "<GRAYLOG_BASE_URL_INSTANCE_1>", GRAYLOG_API_TOKEN_INSTANCE_1 = "<GRAYLOG_API_TOKEN_INSTANCE_1>" }
# codex mcp add graylog-server-jperelli --env GRAYLOG_BASE_URL_INSTANCE_1='<GRAYLOG_BASE_URL_INSTANCE_1>' --env GRAYLOG_API_TOKEN_INSTANCE_1='<GRAYLOG_API_TOKEN_INSTANCE_1>' -- npx -y @jperelli/graylog-mcp~/.cursor/mcp.json
{
"mcpServers": {
"graylog-server-jperelli": {
"command": "npx",
"args": [
"-y",
"@jperelli/graylog-mcp"
],
"env": {
"GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
"GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"graylog-server-jperelli": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@jperelli/graylog-mcp"
],
"env": {
"GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
"GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"graylog-server-jperelli": {
"command": "npx",
"args": [
"-y",
"@jperelli/graylog-mcp"
],
"env": {
"GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
"GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"graylog-server-jperelli": {
"command": "npx",
"args": [
"-y",
"@jperelli/graylog-mcp"
],
"env": {
"GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
"GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"graylog-server-jperelli": {
"command": "npx",
"args": [
"-y",
"@jperelli/graylog-mcp"
],
"env": {
"GRAYLOG_BASE_URL_INSTANCE_1": "<GRAYLOG_BASE_URL_INSTANCE_1>",
"GRAYLOG_API_TOKEN_INSTANCE_1": "<GRAYLOG_API_TOKEN_INSTANCE_1>"
}
}
}
}Environment variables
GRAYLOG_BASE_URL_INSTANCE_1GRAYLOG_API_TOKEN_INSTANCE_1
Replace the placeholders with your own credentials and keep them out of version control.