Skip to content

Connectors · Observability & analytics

Coralogix MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Coralogix and the rest of your systems. It gives your agent 329 Coralogix actions (157 reads, 125 writes and 47 that wait for a confirmation) and holds the Coralogix credential itself, so the agent never does. It paces Coralogix's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "coralogix.groups_mgmt.get_team_groups",  intent: "check which Coralogix account is connected"}# Get Team Groups · read · 1 upstream call
  • 329actionsin one signed file
  • 157readlook, never change
  • 125writecreate and update
  • 47wait for a yesdestructive, confirmed first

Set up

Connect Coralogix in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Coralogix.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyCoralogix API key (Settings > API Keys) with the permissions for the resources you will manage
    • hostWhere your Coralogix lives: your host
    account { op: "connections.requirements", service: "coralogix" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "coralogix.groups_mgmt.get_team_groups" }# get team groups · read · 1 upstream callcheck { action: "coralogix.slos.create_slo", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Coralogix at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_key
Setup fields
host
Limits we pace to
10 calls a second, per connection
API covered
Coralogix Management API v5 (OpenAPI 3.1.0, info.version 1.0.0), at your Coralogix instance's API base URL, which you enter when connecting
Built from
Coralogix's documentation, read 23 October 2026api.eu2.coralogix.comdocs.coralogix.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
153 of 157 reads, for up to 2 minutes; a write clears what it affects
Shared entities
3, so ask can line Coralogix up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Coralogix.

329 actions in 51 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 157readlook, never change
  • 125writecreate and update
  • 47destructivewait for a confirmation
  1. Cases

    22

    6 read · 11 write · 5 destructive

    Get case by indicator · Get available filter values · List cases with filters · Acknowledge a case

  2. Incidents

    17

    10 read · 6 write · 1 destructive

    Get available filter values · Get incident events · Get incident aggregations · List incident events with filters

  3. AI evaluations

    13

    5 read · 5 write · 3 destructive

    Create AI evaluation · Create custom evaluation · List custom evaluations · List AI evaluations

  4. Integration

    13

    9 read · 3 write · 1 destructive

    Get all integrations · List managed integration keys · Save integration registration metadata · Test integration

  5. Policies

    13

    5 read · 7 write · 1 destructive

    Bulk Test Log Policies · Create Policy · Forecast Policy Usage · Get Company Policies

  6. Alert defs

    11

    5 read · 4 write · 2 destructive

    Bulk create alert definitions · Create an alert · Get a list of all accessible alert definitions · Bulk replace alert definitions

  7. Outgoing webhooks

    11

    7 read · 3 write · 1 destructive

    Create an outgoing webhook · List all outgoing webhooks · List outbound webhooks summary · Get outgoing webhook types

  8. Dashboards

    10

    3 read · 5 write · 2 destructive

    Validate a dashboard and return issues · Create a new dashboard · Assign a dashboard to a folder · Get a dashboard

43 more areas · 219 actions
  • Presets 10
  • Slos 10
  • Connectors 9
  • Events2 metric 8
  • Rule groups 8
  • Actions 7
  • Alert scheduler rule 7
  • Contextual data integration 7
  • Enrichment 7
  • Global routers 7
  • Groups MGMT 7
  • Testing 7
  • AI applications 6
  • API keys 6
  • Case events 6
  • Case settings 6
  • Custom enrichment 6
  • Events 6
  • Metrics configurator public 6
  • Role management 6
  • Dashboard folders 5
  • Rule group sets 5
  • Scopes 5
  • Team 5
  • Users MGMT 5
  • Views 5
  • Views folders 5
  • Configuration group 4
  • Extension deployment 4
  • Ip access 4
  • Quota allocation rule set 4
  • Retentions 4
  • Saml configuration 4
  • API keys admin 3
  • Entities 3
  • Alert event 2
  • Data usage query 2
  • Extension 2
  • S3 target 2
  • Cases notification 1
  • Connector schema 1
  • Dashboard catalog 1
  • Identity 1

Top actions

The Coralogix API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems.

ActionWhat it doesEffectSame name in
coralogix.users_mgmt.search_usersSearch UsersSearches for team members by query.readthis connector
coralogix.groups_mgmt.get_team_groupsGet Team GroupsReturns all team groups.readthis connector
coralogix.role_management.list_custom_rolesList Custom RolesReturns all custom roles for the authenticated team.readthis connector
coralogix.slos.list_slosList SlosReturns SLOs matching the given criteria.readthis connector
coralogix.slos.create_sloCreate SloCreates a new SLO.writethis connector
coralogix.team.list_teamsList teamsDeprecated. Returns every team in the calling user's organization, together with the organization's default team.readthis connector
coralogix.cases.list_casesList cases with filtersList cases using filters, pagination and custom ordering. Requires the following permissions: - `case:Read`.readthis connector
coralogix.views.list_viewsList views serviceLists all company public views.readthis connector
coralogix.views.create_viewCreate a view serviceCreates a new view.writethis connector
coralogix.events.list_eventsList EventsReturns a list of alert events matching the specified filters.readthis connector
coralogix.scopes.create_scopeCreate ScopeCreates a new data access scope.writethis connector
coralogix.slos.delete_sloDelete SloDeletes the SLO with the specified ID.destructivethis connector

Try it

Prompts to paste into Claude.

Each one names the Coralogix actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Coralogix? List every user and their role.

    callscoralogix.users_mgmt.search_users

  2. Writewrite

    Create Slo in Coralogix. Show me exactly what you will send before you save it.

    callscoralogix.slos.create_slo

Governance for Coralogix

Destructive actions wait for a yes.

47 Coralogix actions are destructive. The first 10:

  • Delete Slocoralogix.slos.delete_slo
  • Delete teamcoralogix.team.delete_team
  • Delete view servicecoralogix.views.delete_view
  • Remove assignment from multiple casescoralogix.cases.bulk_unassign
  • Remove case assignmentcoralogix.cases.unassign_case
  • Delete Scopecoralogix.scopes.delete_scope
  • Delete Actioncoralogix.actions.delete_action
  • Delete Policycoralogix.policies.delete_policy
  • Delete Recording Rulescoralogix.rule_group_sets.delete
  • Delete API Keycoralogix.api_keys.delete_api_key

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

docoralogix.slos.delete_sloconfirm_policy: human

Delete Slo?

intent: the user asked me to delete Slo

run suspended · waiting for a named person · key coralogix-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "coralogix-agent",  allowed_actions: ["coralogix.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "coralogix.slos.delete_slo", approver: "[email protected]" },    { match: "coralogix.team.delete_team", approver: "[email protected]" },    { match: "coralogix.views.delete_view", approver: "[email protected]" }  ]}
Illustrative. Scoped to Coralogix only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Coralogix costs on actionlake.

Every Coralogix action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Coralogix refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 329 Coralogix actions
  • 57actions pageeach page of a long list is one call
  • 153reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Coralogix action.

329 actions by area: the id your agent calls, what it does, and its effect.

Cases22
  • coralogix.cases.acknowledge_caseAcknowledge a casewrite
  • coralogix.cases.assign_caseAssign a case to a userwrite
  • coralogix.cases.bulk_acknowledgeAcknowledge multiple caseswrite
  • coralogix.cases.bulk_assignAssign multiple cases to a userwrite
  • coralogix.cases.bulk_clear_priority_overrideRemove priority override from multiple casesdestructive
  • coralogix.cases.bulk_closeClose multiple caseswrite
  • coralogix.cases.bulk_resolveResolve multiple caseswrite
  • coralogix.cases.bulk_set_priority_overrideOverride priority for multiple caseswrite
  • coralogix.cases.bulk_unassignRemove assignment from multiple casesdestructive
  • coralogix.cases.clear_priority_overrideRemove priority overridedestructive
  • coralogix.cases.close_caseClose a casewrite
  • coralogix.cases.get_caseGet case by IDread
  • coralogix.cases.get_case_by_indicatorGet case by indicatorread
  • coralogix.cases.get_case_deep_linksGet case deep linksread
  • coralogix.cases.get_filter_valuesGet available filter valuesread
  • coralogix.cases.get_grouping_keysGet available grouping keysread
  • coralogix.cases.list_casesList cases with filtersread
  • coralogix.cases.resolve_caseResolve a casewrite
  • coralogix.cases.set_priority_overrideSet priority overridewrite
  • coralogix.cases.unacknowledge_caseUnacknowledge a casedestructive
  • coralogix.cases.unassign_caseRemove case assignmentdestructive
  • coralogix.cases.update_caseUpdate case fieldswrite
Incidents17
  • coralogix.incidents.acknowledge_incident_by_event_idAcknowledge incident by event idwrite
  • coralogix.incidents.acknowledge_incidentsAcknowledge incidentswrite
  • coralogix.incidents.assign_incidentsAssign incidents to a userwrite
  • coralogix.incidents.batch_get_incidentGet multiple incidents by IDsread
  • coralogix.incidents.close_incidentsClose incidentswrite
  • coralogix.incidents.get_filter_valuesGet available filter valuesread
  • coralogix.incidents.get_incidentGet incident by IDread
  • coralogix.incidents.get_incident_by_event_idGet incident by event IDread
  • coralogix.incidents.get_incident_eventsGet incident eventsread
  • coralogix.incidents.list_incident_aggregationsGet incident aggregationsread
  • coralogix.incidents.list_incident_eventsList incident events with filtersread
  • coralogix.incidents.list_incident_events_filter_valuesGet available incident event filter valuesread
  • coralogix.incidents.list_incident_events_total_countGet total count of incident eventsread
  • coralogix.incidents.list_incidentsList incidents with filtersread
  • coralogix.incidents.resolve_incident_by_event_idResolve incident by event idwrite
  • coralogix.incidents.resolve_incidentsResolve incidentswrite
  • coralogix.incidents.unassign_incidentsRemove incident user assignmentsdestructive
AI evaluations13
  • coralogix.ai_evaluations.count_ai_apps_per_eval_typeCount applications per evaluation typeread
  • coralogix.ai_evaluations.create_ai_evaluationCreate AI evaluationwrite
  • coralogix.ai_evaluations.create_custom_evaluationCreate custom evaluationwrite
  • coralogix.ai_evaluations.delete_ai_evaluationDelete AI evaluationdestructive
  • coralogix.ai_evaluations.delete_custom_evaluationDelete custom evaluationdestructive
  • coralogix.ai_evaluations.get_ai_evaluationGet AI evaluationread
  • coralogix.ai_evaluations.get_custom_evaluationsList custom evaluationsread
  • coralogix.ai_evaluations.link_custom_evaluationLink custom evaluation to applicationwrite
  • coralogix.ai_evaluations.list_ai_evaluationsList AI evaluationsread
  • coralogix.ai_evaluations.list_custom_evaluations_for_applicationList custom evaluations for applicationread
  • coralogix.ai_evaluations.unlink_custom_evaluation_from_appUnlink custom evaluation from applicationdestructive
  • coralogix.ai_evaluations.update_ai_evaluationUpdate AI evaluationwrite
  • coralogix.ai_evaluations.update_custom_evaluationUpdate custom evaluationwrite
Integration13
  • coralogix.integration.delete_integrationDelete integrationdestructive
  • coralogix.integration.get_deployed_integrationGet deployed integrationread
  • coralogix.integration.get_integration_definitionGet integration definitionread
  • coralogix.integration.get_integration_detailsGet integration detailsread
  • coralogix.integration.get_integrationsGet all integrationsread
  • coralogix.integration.get_managed_integration_statusGet managed integration statusread
  • coralogix.integration.get_rum_application_version_dataGet RUM integration versions dataread
  • coralogix.integration.get_templateGet integration templateread
  • coralogix.integration.list_managed_integration_keysList managed integration keysread
  • coralogix.integration.save_integrationSave integration registration metadatawrite
  • coralogix.integration.sync_rum_dataTrigger sync of RUM integration datawrite
  • coralogix.integration.test_integrationTest integrationread
  • coralogix.integration.update_integrationUpdate integrationwrite
Policies13
  • coralogix.policies.atomic_overwrite_log_policiesAtomic Overwrite Log Policieswrite
  • coralogix.policies.atomic_overwrite_rum_policiesAtomic Overwrite Rum Policieswrite
  • coralogix.policies.atomic_overwrite_span_policiesAtomic Overwrite Span Policieswrite
  • coralogix.policies.bulk_test_log_policiesBulk Test Log Policiesread
  • coralogix.policies.create_policyCreate Policywrite
  • coralogix.policies.delete_policyDelete Policydestructive
  • coralogix.policies.forecast_policy_usageForecast Policy Usageread
  • coralogix.policies.get_company_policiesGet Company Policiesread
  • coralogix.policies.get_policyGet Policy by IDread
  • coralogix.policies.get_policy_settingsGet Policy Priority Settingsread
  • coralogix.policies.reorder_policiesReorder Policieswrite
  • coralogix.policies.replace_policy_settingsReplace Policy Settingswrite
  • coralogix.policies.update_policyUpdate Policywrite
Alert defs11
  • coralogix.alert_defs.bulk_create_alert_defsBulk create alert definitionswrite
  • coralogix.alert_defs.bulk_delete_alert_defsBulk delete alert definitionsdestructive
  • coralogix.alert_defs.bulk_replace_alert_defsBulk replace alert definitionswrite
  • coralogix.alert_defs.create_alert_defCreate an alertwrite
  • coralogix.alert_defs.delete_alert_defDeleteAlertDefdestructive
  • coralogix.alert_defs.download_alertsDownload alertsread
  • coralogix.alert_defs.filter_option_countsGet counts for filter optionsread
  • coralogix.alert_defs.get_alert_defGet alert definition by IDread
  • coralogix.alert_defs.get_alert_def_by_version_idGet alert definition by alert version IDread
  • coralogix.alert_defs.list_alert_defsGet a list of all accessible alert definitionsread
  • coralogix.alert_defs.replace_alert_defReplace an alert definitionwrite
Outgoing webhooks11
  • coralogix.outgoing_webhooks.create_outgoing_webhookCreate an outgoing webhookwrite
  • coralogix.outgoing_webhooks.delete_outgoing_webhookDelete an outgoing webhookdestructive
  • coralogix.outgoing_webhooks.get_outgoing_webhookGet outgoing webhookread
  • coralogix.outgoing_webhooks.get_outgoing_webhook_type_detailsGet outgoing webhook type detailsread
  • coralogix.outgoing_webhooks.list_all_outgoing_webhooksList all outgoing webhooksread
  • coralogix.outgoing_webhooks.list_outbound_webhooks_summaryList outbound webhooks summaryread
  • coralogix.outgoing_webhooks.list_outgoing_webhook_typesGet outgoing webhook typesread
  • coralogix.outgoing_webhooks.list_outgoing_webhooksList outgoing webhooksread
  • coralogix.outgoing_webhooks.test_existing_outgoing_webhookTest an existing outgoing webhookread
  • coralogix.outgoing_webhooks.test_outgoing_webhookTest an outgoing webhookwrite
  • coralogix.outgoing_webhooks.update_outgoing_webhookUpdate an outgoing webhookwrite
Dashboards10
  • coralogix.dashboards.assign_dashboard_folderAssign a dashboard to a folderwrite
  • coralogix.dashboards.check_dashboardValidate a dashboard and return issuesread
  • coralogix.dashboards.create_dashboardCreate a new dashboardwrite
  • coralogix.dashboards.delete_dashboardDelete a dashboarddestructive
  • coralogix.dashboards.get_dashboardGet a dashboardread
  • coralogix.dashboards.get_dashboard_by_slugGet a dashboard by URL slugread
  • coralogix.dashboards.pin_dashboardAdd dashboard to favoriteswrite
  • coralogix.dashboards.replace_dashboardReplace a dashboardwrite
  • coralogix.dashboards.replace_default_dashboardReplace the default dashboardwrite
  • coralogix.dashboards.unpin_dashboardRemove dashboard from favoritesdestructive
Presets10
  • coralogix.presets.batch_get_presetsBatch Get Presetsread
  • coralogix.presets.create_custom_presetCreate Custom Presetwrite
  • coralogix.presets.delete_custom_presetDelete Custom Presetdestructive
  • coralogix.presets.get_default_preset_summaryGet Default Preset Summaryread
  • coralogix.presets.get_presetGet Presetread
  • coralogix.presets.get_system_default_preset_summaryGet System Default Preset Summaryread
  • coralogix.presets.list_preset_summariesList Preset Summariesread
  • coralogix.presets.replace_custom_presetReplace Custom Presetwrite
  • coralogix.presets.set_custom_preset_as_defaultSet Custom Preset As Defaultwrite
  • coralogix.presets.set_preset_as_defaultSet Preset As Defaultwrite
Slos10
  • coralogix.slos.batch_execute_sloBatch Execute Slowrite
  • coralogix.slos.batch_get_slosBatch Get Sloread
  • coralogix.slos.create_sloCreate Slowrite
  • coralogix.slos.delete_sloDelete Slodestructive
  • coralogix.slos.get_sloGet Sloread
  • coralogix.slos.get_slo_statusGet Slo Statusread
  • coralogix.slos.get_zero_stateGet Slo Zero Stateread
  • coralogix.slos.list_slosList Slosread
  • coralogix.slos.replace_sloReplace Slowrite
  • coralogix.slos.validate_replace_slo_alertsReplace Slo Pre-Validate Alertswrite
Connectors9
  • coralogix.connectors.batch_get_connector_summariesBatch Get Connectors Summariesread
  • coralogix.connectors.batch_get_connectorsBatch Get Connectorsread
  • coralogix.connectors.create_connectorCreate a Connectorwrite
  • coralogix.connectors.delete_connectorDelete a Connectordestructive
  • coralogix.connectors.get_connectorGet a Connectorread
  • coralogix.connectors.get_connector_type_summariesGet Connector Type Summariesread
  • coralogix.connectors.list_connector_summariesList Connector Summariesread
  • coralogix.connectors.list_connectorsList Connectorsread
  • coralogix.connectors.replace_connectorReplace a Connectorwrite
Events2 metric8
  • coralogix.events2_metric.atomic_batch_execute_e2_mAtomic Batch Execute E2Mwrite
  • coralogix.events2_metric.create_e2_mCreate a new E2Mwrite
  • coralogix.events2_metric.delete_e2_mDelete an E2Mdestructive
  • coralogix.events2_metric.get_e2_mGet an E2Mread
  • coralogix.events2_metric.get_limitsGet E2M Limitsread
  • coralogix.events2_metric.list_e2_mList E2Msread
  • coralogix.events2_metric.list_labels_cardinalityList E2M Labels Cardinalityread
  • coralogix.events2_metric.replace_e2_mReplace an E2Mwrite
Rule groups8
  • coralogix.rule_groups.bulk_delete_rule_groupBulk Delete Rule Groupdestructive
  • coralogix.rule_groups.create_rule_groupCreate Rule Groupwrite
  • coralogix.rule_groups.delete_rule_groupDelete Rule Groupdestructive
  • coralogix.rule_groups.get_company_usage_limitsGet Company Usage Limitsread
  • coralogix.rule_groups.get_rule_groupGet Rule Groupread
  • coralogix.rule_groups.get_rule_group_model_mappingGet Rule Group Model Mappingread
  • coralogix.rule_groups.list_rule_groupsList Rule Groupsread
  • coralogix.rule_groups.update_rule_groupUpdate Rule Groupwrite
Actions7
  • coralogix.actions.atomic_batch_execute_actionsAtomic Batch Execute Actionswrite
  • coralogix.actions.create_actionCreate Actionwrite
  • coralogix.actions.delete_actionDelete Actiondestructive
  • coralogix.actions.get_actionGet Actionread
  • coralogix.actions.list_actionsList Actionsread
  • coralogix.actions.order_actionsOrder Actionswrite
  • coralogix.actions.replace_actionReplace Actionwrite
Alert scheduler rule7
  • coralogix.alert_scheduler_rule.create_alert_scheduler_ruleCreate an alert scheduler rulewrite
  • coralogix.alert_scheduler_rule.create_bulk_alert_scheduler_ruleCreate multiple alert scheduler ruleswrite
  • coralogix.alert_scheduler_rule.delete_alert_scheduler_ruleDelete an alert scheduler ruledestructive
  • coralogix.alert_scheduler_rule.get_alert_scheduler_ruleGet an alert scheduler ruleread
  • coralogix.alert_scheduler_rule.get_bulk_alert_scheduler_ruleGet multiple alert scheduler rulesread
  • coralogix.alert_scheduler_rule.update_alert_scheduler_ruleUpdate an alert scheduler rulewrite
  • coralogix.alert_scheduler_rule.update_bulk_alert_scheduler_ruleUpdate multiple alert scheduler ruleswrite
Contextual data integration7
  • coralogix.contextual_data_integration.delete_contextual_data_integrationDelete contextual data integrationdestructive
  • coralogix.contextual_data_integration.get_contextual_data_integration_definitionGet contextual data integration definitionread
  • coralogix.contextual_data_integration.get_contextual_data_integration_detailsGet contextual data integration detailsread
  • coralogix.contextual_data_integration.get_contextual_data_integrationsGet all contextual data integrations accessibleread
  • coralogix.contextual_data_integration.save_contextual_data_integrationSave contextual data integrationwrite
  • coralogix.contextual_data_integration.test_contextual_data_integrationTest contextual data integrationread
  • coralogix.contextual_data_integration.update_contextual_data_integrationUpdate contextual data integrationwrite
Enrichment7
  • coralogix.enrichment.add_enrichmentsAdd Enrichmentswrite
  • coralogix.enrichment.atomic_overwrite_all_enrichmentsAtomic Overwrite for ALL types of enrichmentswrite
  • coralogix.enrichment.atomic_overwrite_enrichmentsAtomic Overwrite for CustomEnrichments onlywrite
  • coralogix.enrichment.get_company_enrichment_settingsGet Company Enrichment Settingsread
  • coralogix.enrichment.get_enrichment_limitGet Enrichment Limitread
  • coralogix.enrichment.get_enrichmentsGet Enrichmentsread
  • coralogix.enrichment.remove_enrichmentsDelete Enrichmentsdestructive
Global routers7
  • coralogix.global_routers.batch_get_global_routersBatch Get Global Routersread
  • coralogix.global_routers.create_global_routerCreate Global Routerwrite
  • coralogix.global_routers.delete_global_routerDelete Global Routerdestructive
  • coralogix.global_routers.get_global_routerGet Global Routerread
  • coralogix.global_routers.list_global_routersList Global Routersread
  • coralogix.global_routers.replace_global_routerReplace Global Routerwrite
  • coralogix.global_routers.validate_entity_label_matcherValidate Entity Label Matcherread
Groups MGMT7
  • coralogix.groups_mgmt.create_team_groupCreate Team Groupwrite
  • coralogix.groups_mgmt.delete_team_groupDelete Team Groupdestructive
  • coralogix.groups_mgmt.get_group_usersGet Group Usersread
  • coralogix.groups_mgmt.get_team_groupGet Team Groupread
  • coralogix.groups_mgmt.get_team_group_by_nameGet Team Group By Nameread
  • coralogix.groups_mgmt.get_team_groupsGet Team Groupsread
  • coralogix.groups_mgmt.update_team_groupUpdate Team Groupwrite
Testing7
  • coralogix.testing.test_connector_configTest Connector Configwrite
  • coralogix.testing.test_destinationTest Destinationwrite
  • coralogix.testing.test_existing_connectorTest Existing Connectorwrite
  • coralogix.testing.test_existing_presetTest Existing Presetwrite
  • coralogix.testing.test_preset_configTest Preset Configwrite
  • coralogix.testing.test_routing_condition_validTest Routing Condition Validread
  • coralogix.testing.test_template_renderTest Template Renderread
AI applications6
  • coralogix.ai_applications.delete_ai_applicationDelete AI applicationdestructive
  • coralogix.ai_applications.delete_company_model_pricingDelete company model pricingdestructive
  • coralogix.ai_applications.get_ai_application_by_idGet AI applicationread
  • coralogix.ai_applications.get_company_model_pricingGet company model pricingread
  • coralogix.ai_applications.list_ai_applicationsList AI applicationsread
  • coralogix.ai_applications.set_company_model_pricingSet company model pricingwrite
API keys6
  • coralogix.api_keys.create_api_keyCreate API Keywrite
  • coralogix.api_keys.delete_api_keyDelete API Keydestructive
  • coralogix.api_keys.get_api_keyGet API Keyread
  • coralogix.api_keys.get_api_keysGet API Keysread
  • coralogix.api_keys.get_send_data_api_keysGet "Send Data" API Keysread
  • coralogix.api_keys.update_api_keyUpdate API Keywrite
Case events6
  • coralogix.case_events.create_commentCreate a comment eventwrite
  • coralogix.case_events.delete_commentDelete a comment eventdestructive
  • coralogix.case_events.get_eventGet an event by IDread
  • coralogix.case_events.list_eventsList events for a caseread
  • coralogix.case_events.sync_external_case_eventsSync external Case eventswrite
  • coralogix.case_events.update_commentUpdate a comment eventwrite
Case settings6
  • coralogix.case_settings.create_case_settingsCreate a case settings team configurationwrite
  • coralogix.case_settings.delete_case_settingsDelete a case settings team configurationdestructive
  • coralogix.case_settings.get_active_case_settingsGet the active case settings team configurationread
  • coralogix.case_settings.get_case_settingsGet a case settings team configurationread
  • coralogix.case_settings.get_system_default_case_settingsGet system default case settings team configuration settingsread
  • coralogix.case_settings.update_case_settingsUpdate a case settings team configurationwrite
Custom enrichment6
  • coralogix.custom_enrichment.create_custom_enrichmentCreate Custom Enrichmentswrite
  • coralogix.custom_enrichment.delete_custom_enrichmentDelete Custom Enrichmentsdestructive
  • coralogix.custom_enrichment.get_custom_enrichmentGet Custom Enrichmentread
  • coralogix.custom_enrichment.get_custom_enrichmentsGet Custom Enrichmentsread
  • coralogix.custom_enrichment.search_custom_enrichment_dataSearch Custom Enrichment Dataread
  • coralogix.custom_enrichment.update_custom_enrichmentUpdate Custom Enrichmentwrite
Events6
  • coralogix.events.batch_get_eventBatch Get Eventread
  • coralogix.events.get_eventGet Eventread
  • coralogix.events.get_events_statisticsGet Events Statisticsread
  • coralogix.events.list_alert_eventsList Alert Eventsread
  • coralogix.events.list_eventsList Eventsread
  • coralogix.events.list_events_countList Events Countread
Metrics configurator public6
  • coralogix.metrics_configurator_public.configure_tenantConfigure Tenantwrite
  • coralogix.metrics_configurator_public.disable_archiveDisable Metrics Archivedestructive
  • coralogix.metrics_configurator_public.enable_archiveEnable Metrics Archivewrite
  • coralogix.metrics_configurator_public.get_tenant_configGet Metrics Storage Configurationread
  • coralogix.metrics_configurator_public.updateUpdate Metrics Storage Configurationwrite
  • coralogix.metrics_configurator_public.validate_bucketValidate Metrics Storage Bucketread
Role management6
  • coralogix.role_management.create_roleCreate Rolewrite
  • coralogix.role_management.delete_roleDelete Roledestructive
  • coralogix.role_management.get_custom_roleGet Custom Roleread
  • coralogix.role_management.list_custom_rolesList Custom Rolesread
  • coralogix.role_management.list_system_rolesList System Rolesread
  • coralogix.role_management.update_roleUpdate Rolewrite
Dashboard folders5
  • coralogix.dashboard_folders.create_dashboard_folderCreate a dashboard folderwrite
  • coralogix.dashboard_folders.delete_dashboard_folderDelete a dashboard folderdestructive
  • coralogix.dashboard_folders.get_dashboard_folderGet a dashboard folderread
  • coralogix.dashboard_folders.list_dashboard_foldersList dashboard foldersread
  • coralogix.dashboard_folders.replace_dashboard_folderReplace a dashboard folderwrite
Rule group sets5
  • coralogix.rule_group_sets.createCreate Recording Ruleswrite
  • coralogix.rule_group_sets.deleteDelete Recording Rulesdestructive
  • coralogix.rule_group_sets.fetchGet Recording Rulesread
  • coralogix.rule_group_sets.listList Recording Rulesread
  • coralogix.rule_group_sets.updateUpdate Recording Ruleswrite
Scopes5
  • coralogix.scopes.create_scopeCreate Scopewrite
  • coralogix.scopes.delete_scopeDelete Scopedestructive
  • coralogix.scopes.get_team_scopesGet Team Scopesread
  • coralogix.scopes.get_team_scopes_by_idsGet Team Scopes By Idsread
  • coralogix.scopes.update_scopeUpdate Scopewrite
Team5
  • coralogix.team.create_team_in_orgCreate teamwrite
  • coralogix.team.delete_teamDelete teamdestructive
  • coralogix.team.get_teamGet teamread
  • coralogix.team.list_teamsList teamsread
  • coralogix.team.update_teamUpdate teamwrite
Users MGMT5
  • coralogix.users_mgmt.create_usersCreate Userswrite
  • coralogix.users_mgmt.get_userGet Userread
  • coralogix.users_mgmt.search_usersSearch Usersread
  • coralogix.users_mgmt.update_usersUpdate Userswrite
  • coralogix.users_mgmt.update_users_statusesActivate/Revoke Userswrite
Views5
  • coralogix.views.create_viewCreate a view servicewrite
  • coralogix.views.delete_viewDelete view servicedestructive
  • coralogix.views.get_viewGet view serviceread
  • coralogix.views.list_viewsList views serviceread
  • coralogix.views.replace_viewReplace a view servicewrite
Views folders5
  • coralogix.views_folders.create_view_folderCreate View Folder servicewrite
  • coralogix.views_folders.delete_view_folderDelete View Folder servicedestructive
  • coralogix.views_folders.get_view_folderGet View Folder serviceread
  • coralogix.views_folders.list_view_foldersList view folders serviceread
  • coralogix.views_folders.replace_view_folderReplace View Folder servicewrite
Configuration group4
  • coralogix.configuration_group.archive_configuration_groupArchive configuration groupdestructive
  • coralogix.configuration_group.create_configuration_groupCreate configuration groupwrite
  • coralogix.configuration_group.get_configuration_groupGet configuration groupread
  • coralogix.configuration_group.update_configuration_groupUpdate configuration groupwrite
Extension deployment4
  • coralogix.extension_deployment.deploy_extensionDeploy extensionwrite
  • coralogix.extension_deployment.get_deployed_extensionsGet deployed extensionsread
  • coralogix.extension_deployment.undeploy_extensionRevert deployment of extensiondestructive
  • coralogix.extension_deployment.update_extensionUpdate extensionwrite
Ip access4
  • coralogix.ip_access.create_company_ip_access_settingsCreate company IP access settingswrite
  • coralogix.ip_access.delete_company_ip_access_settingsDelete company IP access settingsdestructive
  • coralogix.ip_access.get_company_ip_access_settingsGet company IP access settingsread
  • coralogix.ip_access.replace_company_ip_access_settingsReplace company IP access settingswrite
Quota allocation rule set4
  • coralogix.quota_allocation_rule_set.create_quota_allocation_rule_setCreate quota allocation rule setwrite
  • coralogix.quota_allocation_rule_set.delete_quota_allocation_rule_setDelete quota allocation rule setdestructive
  • coralogix.quota_allocation_rule_set.get_quota_allocation_rule_setGet quota allocation rule setread
  • coralogix.quota_allocation_rule_set.replace_quota_allocation_rule_setReplace quota allocation rule setwrite
Retentions4
  • coralogix.retentions.activate_retentionsActivate Retentionswrite
  • coralogix.retentions.get_retentionsGet Retentionsread
  • coralogix.retentions.get_retentions_enabledGet Retentions Enabledread
  • coralogix.retentions.update_retentionsUpdate Retentionswrite
Saml configuration4
  • coralogix.saml_configuration.get_configurationGet SAML Configurationread
  • coralogix.saml_configuration.get_sp_parametersGet SP Parametersread
  • coralogix.saml_configuration.set_activeActivate/Deactivate SAMLwrite
  • coralogix.saml_configuration.set_idp_parametersSet IDP Parameterswrite
API keys admin3
  • coralogix.api_keys_admin.delete_api_keysDelete API Keysdestructive
  • coralogix.api_keys_admin.get_team_members_api_keysGet Team Members API Keysread
  • coralogix.api_keys_admin.update_api_keys_statusUpdate API Keys Statuswrite
Entities3
  • coralogix.entities.list_entity_sub_typesList Entity Subtypesread
  • coralogix.entities.list_entity_type_attachment_typesList Entity Type Attachment Typesread
  • coralogix.entities.list_entity_typesList Entity Typesread
Alert event2
  • coralogix.alert_event.get_alert_eventGet alert event by IDread
  • coralogix.alert_event.get_alert_events_statsGet alert events statisticsread
Data usage query2
  • coralogix.data_usage_query.data_usageQuery data usageread
  • coralogix.data_usage_query.get_data_usage_capabilitiesGet data usage capabilitiesread
Extension2
  • coralogix.extension.get_all_extensionsGet all extensionsread
  • coralogix.extension.get_extensionGet extension by IDread
S3 target2
  • coralogix.s3_target.get_targetGet targetread
  • coralogix.s3_target.set_targetSet targetwrite
Cases notification1
  • coralogix.cases_notification.list_notification_deliveriesList notification deliveries for casesread
Connector schema1
  • coralogix.connector_schema.get_connector_schemaGet Connector Schemaread
Dashboard catalog1
  • coralogix.dashboard_catalog.get_dashboard_catalogGet dashboard catalogread
Identity1
  • coralogix.identity.who_am_iWho am Iread

Questions

The Coralogix MCP server, answered.

Is there a Coralogix MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 329 Coralogix actions across cases, incidents, AI evaluations and integration, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Coralogix.

What do I need to connect Coralogix?

Coralogix API key (Settings > API Keys) with the permissions for the resources you will manage. Plus your host. The free call account { op: "connections.requirements", service: "coralogix" } lists exactly what to paste.

Can an AI agent delete or change things in Coralogix?

Only if its key allows it, and only with an explicit confirmation. 47 Coralogix actions are destructive, including delete Slo, delete team and delete view service. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Coralogix API limit?

actionlake paces every call to the limits in the Coralogix service file: 10 calls a second per connection. Repeated reads are answered from cache (153 Coralogix actions can be), which never reaches Coralogix.

What does a Coralogix action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (57 Coralogix actions page). Cache hits, searches, dry runs and calls Coralogix refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Coralogix API does it cover?

The Coralogix Management API v5 (OpenAPI 3.1.0, info.version 1.0.0) at your Coralogix instance's API base URL, which you enter when connecting. It is built from Coralogix's documentation as read on 23 October 2026. 329 actions in 51 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Coralogix data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 2 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Coralogix credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Coralogix today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.