Permissions
To query data through the MCP server, the user’s role must include the relevant permissions. For details about configuring roles and permissions, see Roles and Permissions.
| Permission | Resource | Action | Description |
|---|---|---|---|
| Query Monitoring & Compliance logs | logs.data-api#low | ReadData | Read compliance and monitoring logs |
| Query metrics | metrics.data-api#high | ReadData | Read metrics |
| Query Monitoring & Compliance spans | spans.data-api#low | ReadData | Read compliance and monitoring traces |
| Search dashboards and saved queries | TEAM-DASHBOARDS:READ | ReadConfig | Find Custom Dashboards and the queries saved in them (search_dashboard, search_queries) |
The MCP server inherits the permissions associated with the user’s personal API key.
Management tool permissions
The unified manage_* tools call the same underlying APIs as the Coralogix UI, so the user’s role must include the read and write permissions for each resource type they want to manage. Without read permissions the tool can’t get, list, or update; without write permissions it can’t create, update, or delete.
| Resource | Tool | Required permissions |
|---|---|---|
| Alerts | manage_alerts | alerts:ReadConfig, alerts:UpdateConfig |
| Alert suppression rules | manage_alerts_scheduler | Alert read and write permissions |
| Outbound webhooks | manage_webhooks | Outbound webhook read and write permissions |
| Parsing rules | manage_parsing_rules | PARSING-RULES:READCONFIG, PARSING-RULES:UPDATECONFIG |
| Recording rules | manage_recording_rules_groups_set | Recording rules read and write permissions |
| Events2Metrics | manage_events2metrics | Events2Metrics read and write permissions |
| SLOs (v2) | manage_slo_v2s | SLO read and write permissions |
| TCO log policies | manage_tco_log_policies | TCO read and write permissions |
| TCO trace policies | manage_tco_trace_policies | TCO read and write permissions |
| Notification Center connectors | manage_connectors | Notification Center read and write permissions |
| Notification Center presets | manage_presets | Notification Center read and write permissions |
| Notification Center routers | manage_global_routers | Notification Center read and write permissions |
| Custom roles | manage_custom_roles | Roles read and write permissions |
For the full catalog of permission strings, see the Permissions list.
AI Center tool permissions
The AI Center tools inherit the user's AI Center permissions. Read tools need any one of AI-OVERVIEW:READ, AI-APP-CATALOG:READ, or AI-APP-EVALUATORS:READ. The evaluation write tools (create, update, delete evaluations) need AI-APP-EVALUATORS:MANAGE; the custom-evaluation and model-pricing tools require AI Center management access. Reading interaction content also requires SPANS.DATA-API#HIGH:READDATA. See AI Center permissions for the full list.
Next steps
Review the known Limitations of the MCP server.