{
  "entry": {
    "kind": "mcp",
    "slug": "grafana-mcp-server",
    "name": "Grafana MCP Server",
    "vendor": "Grafana Labs",
    "description": "Grafana's official server lets an agent query dashboards, datasources, alert rules, and incidents, so an assistant investigating an outage can pull the actual metrics rather than a screenshot of them.\n\nDeclared capabilities are outbound network access, credential access, and database reads through the connected datasources. That last one is the sharp edge: Grafana is a window onto whatever it is wired to, so the effective reach of this server is the union of every datasource in the organisation, which is usually broader than the person connecting it expects. Scope by folder and datasource, and prefer viewer-level credentials for assistants.",
    "website": "https://grafana.com/docs/grafana/latest/observability-as-code/mcp-server/",
    "repository": null,
    "documentationUrl": "https://grafana.com/docs/grafana/latest/observability-as-code/mcp-server/",
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "network:outbound",
      "credentials:access",
      "database:read"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 35,
      "band": "medium",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: credentials:access",
          "contribution": 10
        },
        {
          "id": "database-exfiltration-risk",
          "kind": "combination",
          "label": "Database exfiltration risk (high)",
          "description": "Database read combined with outbound network can exfiltrate production data.",
          "contribution": 15
        }
      ],
      "dangerousCombos": [
        {
          "id": "database-exfiltration-risk",
          "name": "Database exfiltration risk",
          "description": "Database read combined with outbound network can exfiltrate production data.",
          "capabilities": [
            "database:read",
            "network:outbound"
          ],
          "severity": "high"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "database-exfiltration-risk",
        "name": "Database exfiltration risk",
        "description": "Database read combined with outbound network can exfiltrate production data.",
        "capabilities": [
          "database:read",
          "network:outbound"
        ],
        "severity": "high"
      }
    ]
  }
}