Permissions

To query data through the MCP server, the user’s role must include the relevant permissions. For details about configuring roles and permissions, see Roles and Permissions.

Permission	Resource	Action	Description
Query Monitoring & Compliance logs	logs.data-api#low	ReadData	Read compliance and monitoring logs
Query metrics	metrics.data-api#high	ReadData	Read metrics
Query Monitoring & Compliance spans	spans.data-api#low	ReadData	Read compliance and monitoring traces

The MCP server inherits the permissions associated with the user’s personal API key.

Management tool permissions

To create, update, or delete alerts and parsing rules through the MCP server, the user’s role must include the relevant write permissions.

Permission	Resource	Action	Description
Alerts read	alerts:ReadConfig	ReadConfig	Retrieve and list alerts
Alerts write	alerts:UpdateConfig	UpdateConfig	Create, update, and delete alerts
Parsing rules read	PARSING-RULES:READCONFIG	ReadConfig	Retrieve and list parsing rules
Parsing rules write	PARSING-RULES:UPDATECONFIG	UpdateConfig	Create, update, and delete parsing rules