Permissions
To query data through the MCP server, the user’s role must include the relevant permissions. For details about configuring roles and permissions, see Roles and Permissions.
| Permission | Resource | Action | Description |
|---|---|---|---|
| Query Monitoring & Compliance logs | logs.data-api#low | ReadData | Read compliance and monitoring logs |
| Query metrics | metrics.data-api#high | ReadData | Read metrics |
| Query Monitoring & Compliance spans | spans.data-api#low | ReadData | Read compliance and monitoring traces |
The MCP server inherits the permissions associated with the user’s personal API key.
Management tool permissions
The unified manage_* tools call the same underlying APIs as the Coralogix UI, so the user’s role must include the read and write permissions for each resource type they want to manage. Without read permissions the tool can’t get, list, or update; without write permissions it can’t create, update, or delete.
| Resource | Tool | Required permissions |
|---|---|---|
| Alerts | manage_alerts | alerts:ReadConfig, alerts:UpdateConfig |
| Alert suppression rules | manage_alerts_scheduler | Alert read and write permissions |
| Outbound webhooks | manage_webhooks | Outbound webhook read and write permissions |
| Parsing rules | manage_parsing_rules | PARSING-RULES:READCONFIG, PARSING-RULES:UPDATECONFIG |
| Recording rules | manage_recording_rules_groups_set | Recording rules read and write permissions |
| Events2Metrics | manage_events2metrics | Events2Metrics read and write permissions |
| SLOs (v2) | manage_slo_v2s | SLO read and write permissions |
| TCO log policies | manage_tco_log_policies | TCO read and write permissions |
| TCO trace policies | manage_tco_trace_policies | TCO read and write permissions |
| Notification Center connectors | manage_connectors | Notification Center read and write permissions |
| Notification Center presets | manage_presets | Notification Center read and write permissions |
| Notification Center routers | manage_global_routers | Notification Center read and write permissions |
| Custom roles | manage_custom_roles | Roles read and write permissions |
For the full catalog of permission strings, see the Permissions list.
Next steps
Review the known Limitations of the MCP server.
Theme
Light