Coralogix MCP Server

Coralogix is a modern observability platform providing log analytics, metrics, traces, and security monitoring with index-free architecture and in-stream analysis.

Tools

Last Updated

Apr 15, 2026

What is the Coralogix MCP Server?

The Coralogix MCP server gives AI agents structured, permission-aware access to Coralogix through the Model Context Protocol. With 35 pre-built actions, agents can read, create, and update Coralogix data on behalf of authorized users.

Willow ships the Coralogix MCP server as part of an enterprise control plane. Every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to a full audit trail, and integrates with Splunk and Loki for SIEM visibility. Connect from Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, or any custom agent. Install once, distribute org-wide, and see exactly how Coralogix is being used by every AI agent in your stack.

Tools

List Alerts

List all alert definitions in your Coralogix account with optional filtering by name, type, or severity. Returns alert configurations including query, notification settings, and status. Use this to discover existing alerts or find alerts matching specific criteria.

Get Alert

Retrieve detailed information about a specific alert definition by ID. Returns the complete alert configuration including query, thresholds, notification settings, scheduling, and metadata. Use this when you have an alert ID and need its full details.

Search Alerts

Search for alert definitions using advanced filters including name, labels, severity, and status. Returns matching alert configurations with their metadata. Use this for finding specific alerts when you need more complex filtering than the basic list operation.

Get Alert Events

Retrieve triggered events for a specific alert. Returns a list of alert event occurrences with timestamps, values, and details about what triggered the alert. Use this to investigate when and why an alert has fired recently.

Get Alert Event Statistics

Get statistical information about alert events including count, frequency, and trends over a time period. Returns aggregated statistics to understand alert behavior patterns. Use this to analyze alert noise, frequency, and identify patterns in alert triggering.

Download Alerts

Export all alert definitions in your account to a downloadable format. Returns a complete dump of alert configurations for backup, documentation, or migration purposes. Use this to backup your alert configurations or migrate them to another environment.

List Dashboards

Get a catalog of all dashboards in your Coralogix account with their metadata. Returns dashboard names, IDs, folders, creation dates, and other organizational information. Use this to discover available dashboards, understand your dashboard structure, or find a specific dashboard by name.

Get Dashboard

Retrieve the complete configuration of a specific dashboard by ID. Returns the full dashboard definition including all widgets, layouts, queries, variables, and settings. Use this to inspect a dashboard's configuration, extract queries, or understand how a dashboard is built.

Get Dashboard by Slug

Retrieve a dashboard using its URL slug instead of ID. Returns the full dashboard configuration. Use this when you have a dashboard URL or slug and want to get its configuration without knowing the internal ID.

List Dashboard Folders

Get all dashboard folders in your Coralogix account. Returns folder names, IDs, and hierarchy information. Use this to understand your dashboard organization structure, find folders by name, or get folder IDs for filtering dashboards.

1 2 3 4

1–10 of 35 tools

Customize Tools

Edit descriptions, modify arguments, select tools, or add new ones

Set Up Your Coralogix MCP Server in Minutes

Add the following configuration to your MCP client. Authentication is handled via OAuth. Compatible with Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, and any MCP-compatible agent.

Claude Desktop

claude_desktop_config.json

{
  "mcpServers": {
    "willow-coralogix": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/coralogix"
    }
  }
}

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "willow-coralogix": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/coralogix"
    }
  }
}

Claude Code

CLI

claude mcp add willow-coralogix --transport http https://<org>.mcp-s.com/mcp/mcp/coralogix

n8n

HTTP Request Node

{
  "url": "https://<org>.mcp-s.com/mcp/mcp/coralogix",
  "method": "POST"
}

Or click "Install with Willow" above to set up automatically with SSO and RBAC preconfigured.

Enterprise Governance for Coralogix

Willow adds the layer Coralogix and every other SaaS doesn't ship out of the box: every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to full audit logs, and detects shadow AI usage across your stack. One MCP gateway. Any agent. Every tool.

Coralogix MCP Server FAQ

What is the Coralogix MCP server?

The Coralogix MCP server is a Model Context Protocol implementation that lets AI agents like Claude, Cursor, and ChatGPT read and write Coralogix data through a standardized interface. Willow hosts and governs this server so enterprises can roll it out without a security review backlog.

How is Willow's Coralogix MCP server different from the official one?

The official Coralogix MCP server is scoped to a single user's account and does not include enterprise governance. Willow's version adds SSO, RBAC, audit logging, shadow AI detection, and centralized control over which actions agents can take across the entire org.

Which AI clients work with the Coralogix MCP server?

Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code with MCP support, n8n, and any custom agent built with OpenAI Agents SDK, LangChain, Vercel AI SDK, or Anthropic SDK.

Is the Coralogix MCP server secure? How does Willow handle authentication?

Every call runs behind your existing SSO (Okta, Azure AD). Per-user OAuth scopes the agent to exactly what that user can do in Coralogix, nothing more. No credentials reach the LLM. Every action writes to an audit trail.

Can I limit which Coralogix actions agents can take?

Yes. Willow lets you scope agents to specific actions, specific projects, or specific environments. Toggle actions on or off in the dashboard, or enforce policy via infrastructure-as-code through GitHub.

How do I detect shadow Coralogix MCP servers in my org?

Willow's browser extension and discovery service surface unmanaged MCP servers, skills, and AI agents across the org. If a developer installed an unapproved Coralogix MCP locally, you'll see it.

What does the Coralogix MCP server cost?

Pricing depends on org size and deployment model (SaaS, dedicated cloud, self-host). See withwillow.ai/pricing or contact sales for a quote.

How do I install the Coralogix MCP server with Willow?

Install via the Willow Connect Panel in one click, or paste the JSON snippet above into your Claude Desktop, Cursor, or Claude Code config. SSO and RBAC inherit from your existing Willow setup.