Connectors · Observability & analytics
Coralogix MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Coralogix and the rest of your systems. It gives your agent 329 Coralogix actions (157 reads, 125 writes and 47 that wait for a confirmation) and holds the Coralogix credential itself, so the agent never does. It paces Coralogix's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "coralogix.groups_mgmt.get_team_groups", intent: "check which Coralogix account is connected"}# Get Team Groups · read · 1 upstream call- 329actionsin one signed file
- 157readlook, never change
- 125writecreate and update
- 47wait for a yesdestructive, confirmed first
Set up
Connect Coralogix in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Coralogix.
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
api_keyCoralogix API key (Settings > API Keys) with the permissions for the resources you will managehostWhere your Coralogix lives: your host
account { op: "connections.requirements", service: "coralogix" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "coralogix.groups_mgmt.get_team_groups" }# get team groups · read · 1 upstream callcheck { action: "coralogix.slos.create_slo", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Coralogix at a glance
- Sign-in
- Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
api_key- Setup fields
host- Limits we pace to
- 10 calls a second, per connection
- API covered
- Coralogix Management API v5 (OpenAPI 3.1.0, info.version 1.0.0), at your Coralogix instance's API base URL, which you enter when connecting
- Built from
- Coralogix's documentation, read 23 October 2026api.eu2.coralogix.comdocs.coralogix.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 153 of 157 reads, for up to 2 minutes; a write clears what it affects
- Shared entities
- 3, so ask can line Coralogix up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Coralogix.
329 actions in 51 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 157readlook, never change
- 125writecreate and update
- 47destructivewait for a confirmation
Cases
226 read · 11 write · 5 destructive
Get case by indicator · Get available filter values · List cases with filters · Acknowledge a case
Incidents
1710 read · 6 write · 1 destructive
Get available filter values · Get incident events · Get incident aggregations · List incident events with filters
AI evaluations
135 read · 5 write · 3 destructive
Create AI evaluation · Create custom evaluation · List custom evaluations · List AI evaluations
Integration
139 read · 3 write · 1 destructive
Get all integrations · List managed integration keys · Save integration registration metadata · Test integration
Policies
135 read · 7 write · 1 destructive
Bulk Test Log Policies · Create Policy · Forecast Policy Usage · Get Company Policies
Alert defs
115 read · 4 write · 2 destructive
Bulk create alert definitions · Create an alert · Get a list of all accessible alert definitions · Bulk replace alert definitions
Outgoing webhooks
117 read · 3 write · 1 destructive
Create an outgoing webhook · List all outgoing webhooks · List outbound webhooks summary · Get outgoing webhook types
Dashboards
103 read · 5 write · 2 destructive
Validate a dashboard and return issues · Create a new dashboard · Assign a dashboard to a folder · Get a dashboard
43 more areas · 219 actions
- Presets 10
- Slos 10
- Connectors 9
- Events2 metric 8
- Rule groups 8
- Actions 7
- Alert scheduler rule 7
- Contextual data integration 7
- Enrichment 7
- Global routers 7
- Groups MGMT 7
- Testing 7
- AI applications 6
- API keys 6
- Case events 6
- Case settings 6
- Custom enrichment 6
- Events 6
- Metrics configurator public 6
- Role management 6
- Dashboard folders 5
- Rule group sets 5
- Scopes 5
- Team 5
- Users MGMT 5
- Views 5
- Views folders 5
- Configuration group 4
- Extension deployment 4
- Ip access 4
- Quota allocation rule set 4
- Retentions 4
- Saml configuration 4
- API keys admin 3
- Entities 3
- Alert event 2
- Data usage query 2
- Extension 2
- S3 target 2
- Cases notification 1
- Connector schema 1
- Dashboard catalog 1
- Identity 1
Top actions
The Coralogix API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
coralogix.users_mgmt.search_usersSearch Users | Searches for team members by query. | read | this connector |
coralogix.groups_mgmt.get_team_groupsGet Team Groups | Returns all team groups. | read | this connector |
coralogix.role_management.list_custom_rolesList Custom Roles | Returns all custom roles for the authenticated team. | read | this connector |
coralogix.slos.list_slosList Slos | Returns SLOs matching the given criteria. | read | this connector |
coralogix.slos.create_sloCreate Slo | Creates a new SLO. | write | this connector |
coralogix.team.list_teamsList teams | Deprecated. Returns every team in the calling user's organization, together with the organization's default team. | read | this connector |
coralogix.cases.list_casesList cases with filters | List cases using filters, pagination and custom ordering. Requires the following permissions: - `case:Read`. | read | this connector |
coralogix.views.list_viewsList views service | Lists all company public views. | read | this connector |
coralogix.views.create_viewCreate a view service | Creates a new view. | write | this connector |
coralogix.events.list_eventsList Events | Returns a list of alert events matching the specified filters. | read | this connector |
coralogix.scopes.create_scopeCreate Scope | Creates a new data access scope. | write | this connector |
coralogix.slos.delete_sloDelete Slo | Deletes the SLO with the specified ID. | destructive | this connector |
Try it
Prompts to paste into Claude.
Each one names the Coralogix actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in Coralogix? List every user and their role.
calls
coralogix.users_mgmt.search_users - Writewrite
Create Slo in Coralogix. Show me exactly what you will send before you save it.
calls
coralogix.slos.create_slo
Governance for Coralogix
Destructive actions wait for a yes.
47 Coralogix actions are destructive. The first 10:
- Delete Slo
coralogix.slos.delete_slo - Delete team
coralogix.team.delete_team - Delete view service
coralogix.views.delete_view - Remove assignment from multiple cases
coralogix.cases.bulk_unassign - Remove case assignment
coralogix.cases.unassign_case - Delete Scope
coralogix.scopes.delete_scope - Delete Action
coralogix.actions.delete_action - Delete Policy
coralogix.policies.delete_policy - Delete Recording Rules
coralogix.rule_group_sets.delete - Delete API Key
coralogix.api_keys.delete_api_key
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete Slo?
intent: the user asked me to delete Slo
account { op: "keys.create", name: "coralogix-agent", allowed_actions: ["coralogix.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "coralogix.slos.delete_slo", approver: "[email protected]" }, { match: "coralogix.team.delete_team", approver: "[email protected]" }, { match: "coralogix.views.delete_view", approver: "[email protected]" } ]}Cost
What Coralogix costs on actionlake.
Every Coralogix action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Coralogix refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 329 Coralogix actions
- 57actions pageeach page of a long list is one call
- 153reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Coralogix action.
329 actions by area: the id your agent calls, what it does, and its effect.
Cases22
coralogix.cases.acknowledge_caseAcknowledge a casewritecoralogix.cases.assign_caseAssign a case to a userwritecoralogix.cases.bulk_acknowledgeAcknowledge multiple caseswritecoralogix.cases.bulk_assignAssign multiple cases to a userwritecoralogix.cases.bulk_clear_priority_overrideRemove priority override from multiple casesdestructivecoralogix.cases.bulk_closeClose multiple caseswritecoralogix.cases.bulk_resolveResolve multiple caseswritecoralogix.cases.bulk_set_priority_overrideOverride priority for multiple caseswritecoralogix.cases.bulk_unassignRemove assignment from multiple casesdestructivecoralogix.cases.clear_priority_overrideRemove priority overridedestructivecoralogix.cases.close_caseClose a casewritecoralogix.cases.get_caseGet case by IDreadcoralogix.cases.get_case_by_indicatorGet case by indicatorreadcoralogix.cases.get_case_deep_linksGet case deep linksreadcoralogix.cases.get_filter_valuesGet available filter valuesreadcoralogix.cases.get_grouping_keysGet available grouping keysreadcoralogix.cases.list_casesList cases with filtersreadcoralogix.cases.resolve_caseResolve a casewritecoralogix.cases.set_priority_overrideSet priority overridewritecoralogix.cases.unacknowledge_caseUnacknowledge a casedestructivecoralogix.cases.unassign_caseRemove case assignmentdestructivecoralogix.cases.update_caseUpdate case fieldswrite
Incidents17
coralogix.incidents.acknowledge_incident_by_event_idAcknowledge incident by event idwritecoralogix.incidents.acknowledge_incidentsAcknowledge incidentswritecoralogix.incidents.assign_incidentsAssign incidents to a userwritecoralogix.incidents.batch_get_incidentGet multiple incidents by IDsreadcoralogix.incidents.close_incidentsClose incidentswritecoralogix.incidents.get_filter_valuesGet available filter valuesreadcoralogix.incidents.get_incidentGet incident by IDreadcoralogix.incidents.get_incident_by_event_idGet incident by event IDreadcoralogix.incidents.get_incident_eventsGet incident eventsreadcoralogix.incidents.list_incident_aggregationsGet incident aggregationsreadcoralogix.incidents.list_incident_eventsList incident events with filtersreadcoralogix.incidents.list_incident_events_filter_valuesGet available incident event filter valuesreadcoralogix.incidents.list_incident_events_total_countGet total count of incident eventsreadcoralogix.incidents.list_incidentsList incidents with filtersreadcoralogix.incidents.resolve_incident_by_event_idResolve incident by event idwritecoralogix.incidents.resolve_incidentsResolve incidentswritecoralogix.incidents.unassign_incidentsRemove incident user assignmentsdestructive
AI evaluations13
coralogix.ai_evaluations.count_ai_apps_per_eval_typeCount applications per evaluation typereadcoralogix.ai_evaluations.create_ai_evaluationCreate AI evaluationwritecoralogix.ai_evaluations.create_custom_evaluationCreate custom evaluationwritecoralogix.ai_evaluations.delete_ai_evaluationDelete AI evaluationdestructivecoralogix.ai_evaluations.delete_custom_evaluationDelete custom evaluationdestructivecoralogix.ai_evaluations.get_ai_evaluationGet AI evaluationreadcoralogix.ai_evaluations.get_custom_evaluationsList custom evaluationsreadcoralogix.ai_evaluations.link_custom_evaluationLink custom evaluation to applicationwritecoralogix.ai_evaluations.list_ai_evaluationsList AI evaluationsreadcoralogix.ai_evaluations.list_custom_evaluations_for_applicationList custom evaluations for applicationreadcoralogix.ai_evaluations.unlink_custom_evaluation_from_appUnlink custom evaluation from applicationdestructivecoralogix.ai_evaluations.update_ai_evaluationUpdate AI evaluationwritecoralogix.ai_evaluations.update_custom_evaluationUpdate custom evaluationwrite
Integration13
coralogix.integration.delete_integrationDelete integrationdestructivecoralogix.integration.get_deployed_integrationGet deployed integrationreadcoralogix.integration.get_integration_definitionGet integration definitionreadcoralogix.integration.get_integration_detailsGet integration detailsreadcoralogix.integration.get_integrationsGet all integrationsreadcoralogix.integration.get_managed_integration_statusGet managed integration statusreadcoralogix.integration.get_rum_application_version_dataGet RUM integration versions datareadcoralogix.integration.get_templateGet integration templatereadcoralogix.integration.list_managed_integration_keysList managed integration keysreadcoralogix.integration.save_integrationSave integration registration metadatawritecoralogix.integration.sync_rum_dataTrigger sync of RUM integration datawritecoralogix.integration.test_integrationTest integrationreadcoralogix.integration.update_integrationUpdate integrationwrite
Policies13
coralogix.policies.atomic_overwrite_log_policiesAtomic Overwrite Log Policieswritecoralogix.policies.atomic_overwrite_rum_policiesAtomic Overwrite Rum Policieswritecoralogix.policies.atomic_overwrite_span_policiesAtomic Overwrite Span Policieswritecoralogix.policies.bulk_test_log_policiesBulk Test Log Policiesreadcoralogix.policies.create_policyCreate Policywritecoralogix.policies.delete_policyDelete Policydestructivecoralogix.policies.forecast_policy_usageForecast Policy Usagereadcoralogix.policies.get_company_policiesGet Company Policiesreadcoralogix.policies.get_policyGet Policy by IDreadcoralogix.policies.get_policy_settingsGet Policy Priority Settingsreadcoralogix.policies.reorder_policiesReorder Policieswritecoralogix.policies.replace_policy_settingsReplace Policy Settingswritecoralogix.policies.update_policyUpdate Policywrite
Alert defs11
coralogix.alert_defs.bulk_create_alert_defsBulk create alert definitionswritecoralogix.alert_defs.bulk_delete_alert_defsBulk delete alert definitionsdestructivecoralogix.alert_defs.bulk_replace_alert_defsBulk replace alert definitionswritecoralogix.alert_defs.create_alert_defCreate an alertwritecoralogix.alert_defs.delete_alert_defDeleteAlertDefdestructivecoralogix.alert_defs.download_alertsDownload alertsreadcoralogix.alert_defs.filter_option_countsGet counts for filter optionsreadcoralogix.alert_defs.get_alert_defGet alert definition by IDreadcoralogix.alert_defs.get_alert_def_by_version_idGet alert definition by alert version IDreadcoralogix.alert_defs.list_alert_defsGet a list of all accessible alert definitionsreadcoralogix.alert_defs.replace_alert_defReplace an alert definitionwrite
Outgoing webhooks11
coralogix.outgoing_webhooks.create_outgoing_webhookCreate an outgoing webhookwritecoralogix.outgoing_webhooks.delete_outgoing_webhookDelete an outgoing webhookdestructivecoralogix.outgoing_webhooks.get_outgoing_webhookGet outgoing webhookreadcoralogix.outgoing_webhooks.get_outgoing_webhook_type_detailsGet outgoing webhook type detailsreadcoralogix.outgoing_webhooks.list_all_outgoing_webhooksList all outgoing webhooksreadcoralogix.outgoing_webhooks.list_outbound_webhooks_summaryList outbound webhooks summaryreadcoralogix.outgoing_webhooks.list_outgoing_webhook_typesGet outgoing webhook typesreadcoralogix.outgoing_webhooks.list_outgoing_webhooksList outgoing webhooksreadcoralogix.outgoing_webhooks.test_existing_outgoing_webhookTest an existing outgoing webhookreadcoralogix.outgoing_webhooks.test_outgoing_webhookTest an outgoing webhookwritecoralogix.outgoing_webhooks.update_outgoing_webhookUpdate an outgoing webhookwrite
Dashboards10
coralogix.dashboards.assign_dashboard_folderAssign a dashboard to a folderwritecoralogix.dashboards.check_dashboardValidate a dashboard and return issuesreadcoralogix.dashboards.create_dashboardCreate a new dashboardwritecoralogix.dashboards.delete_dashboardDelete a dashboarddestructivecoralogix.dashboards.get_dashboardGet a dashboardreadcoralogix.dashboards.get_dashboard_by_slugGet a dashboard by URL slugreadcoralogix.dashboards.pin_dashboardAdd dashboard to favoriteswritecoralogix.dashboards.replace_dashboardReplace a dashboardwritecoralogix.dashboards.replace_default_dashboardReplace the default dashboardwritecoralogix.dashboards.unpin_dashboardRemove dashboard from favoritesdestructive
Presets10
coralogix.presets.batch_get_presetsBatch Get Presetsreadcoralogix.presets.create_custom_presetCreate Custom Presetwritecoralogix.presets.delete_custom_presetDelete Custom Presetdestructivecoralogix.presets.get_default_preset_summaryGet Default Preset Summaryreadcoralogix.presets.get_presetGet Presetreadcoralogix.presets.get_system_default_preset_summaryGet System Default Preset Summaryreadcoralogix.presets.list_preset_summariesList Preset Summariesreadcoralogix.presets.replace_custom_presetReplace Custom Presetwritecoralogix.presets.set_custom_preset_as_defaultSet Custom Preset As Defaultwritecoralogix.presets.set_preset_as_defaultSet Preset As Defaultwrite
Slos10
coralogix.slos.batch_execute_sloBatch Execute Slowritecoralogix.slos.batch_get_slosBatch Get Sloreadcoralogix.slos.create_sloCreate Slowritecoralogix.slos.delete_sloDelete Slodestructivecoralogix.slos.get_sloGet Sloreadcoralogix.slos.get_slo_statusGet Slo Statusreadcoralogix.slos.get_zero_stateGet Slo Zero Statereadcoralogix.slos.list_slosList Slosreadcoralogix.slos.replace_sloReplace Slowritecoralogix.slos.validate_replace_slo_alertsReplace Slo Pre-Validate Alertswrite
Connectors9
coralogix.connectors.batch_get_connector_summariesBatch Get Connectors Summariesreadcoralogix.connectors.batch_get_connectorsBatch Get Connectorsreadcoralogix.connectors.create_connectorCreate a Connectorwritecoralogix.connectors.delete_connectorDelete a Connectordestructivecoralogix.connectors.get_connectorGet a Connectorreadcoralogix.connectors.get_connector_type_summariesGet Connector Type Summariesreadcoralogix.connectors.list_connector_summariesList Connector Summariesreadcoralogix.connectors.list_connectorsList Connectorsreadcoralogix.connectors.replace_connectorReplace a Connectorwrite
Events2 metric8
coralogix.events2_metric.atomic_batch_execute_e2_mAtomic Batch Execute E2Mwritecoralogix.events2_metric.create_e2_mCreate a new E2Mwritecoralogix.events2_metric.delete_e2_mDelete an E2Mdestructivecoralogix.events2_metric.get_e2_mGet an E2Mreadcoralogix.events2_metric.get_limitsGet E2M Limitsreadcoralogix.events2_metric.list_e2_mList E2Msreadcoralogix.events2_metric.list_labels_cardinalityList E2M Labels Cardinalityreadcoralogix.events2_metric.replace_e2_mReplace an E2Mwrite
Rule groups8
coralogix.rule_groups.bulk_delete_rule_groupBulk Delete Rule Groupdestructivecoralogix.rule_groups.create_rule_groupCreate Rule Groupwritecoralogix.rule_groups.delete_rule_groupDelete Rule Groupdestructivecoralogix.rule_groups.get_company_usage_limitsGet Company Usage Limitsreadcoralogix.rule_groups.get_rule_groupGet Rule Groupreadcoralogix.rule_groups.get_rule_group_model_mappingGet Rule Group Model Mappingreadcoralogix.rule_groups.list_rule_groupsList Rule Groupsreadcoralogix.rule_groups.update_rule_groupUpdate Rule Groupwrite
Actions7
coralogix.actions.atomic_batch_execute_actionsAtomic Batch Execute Actionswritecoralogix.actions.create_actionCreate Actionwritecoralogix.actions.delete_actionDelete Actiondestructivecoralogix.actions.get_actionGet Actionreadcoralogix.actions.list_actionsList Actionsreadcoralogix.actions.order_actionsOrder Actionswritecoralogix.actions.replace_actionReplace Actionwrite
Alert scheduler rule7
coralogix.alert_scheduler_rule.create_alert_scheduler_ruleCreate an alert scheduler rulewritecoralogix.alert_scheduler_rule.create_bulk_alert_scheduler_ruleCreate multiple alert scheduler ruleswritecoralogix.alert_scheduler_rule.delete_alert_scheduler_ruleDelete an alert scheduler ruledestructivecoralogix.alert_scheduler_rule.get_alert_scheduler_ruleGet an alert scheduler rulereadcoralogix.alert_scheduler_rule.get_bulk_alert_scheduler_ruleGet multiple alert scheduler rulesreadcoralogix.alert_scheduler_rule.update_alert_scheduler_ruleUpdate an alert scheduler rulewritecoralogix.alert_scheduler_rule.update_bulk_alert_scheduler_ruleUpdate multiple alert scheduler ruleswrite
Contextual data integration7
coralogix.contextual_data_integration.delete_contextual_data_integrationDelete contextual data integrationdestructivecoralogix.contextual_data_integration.get_contextual_data_integration_definitionGet contextual data integration definitionreadcoralogix.contextual_data_integration.get_contextual_data_integration_detailsGet contextual data integration detailsreadcoralogix.contextual_data_integration.get_contextual_data_integrationsGet all contextual data integrations accessiblereadcoralogix.contextual_data_integration.save_contextual_data_integrationSave contextual data integrationwritecoralogix.contextual_data_integration.test_contextual_data_integrationTest contextual data integrationreadcoralogix.contextual_data_integration.update_contextual_data_integrationUpdate contextual data integrationwrite
Enrichment7
coralogix.enrichment.add_enrichmentsAdd Enrichmentswritecoralogix.enrichment.atomic_overwrite_all_enrichmentsAtomic Overwrite for ALL types of enrichmentswritecoralogix.enrichment.atomic_overwrite_enrichmentsAtomic Overwrite for CustomEnrichments onlywritecoralogix.enrichment.get_company_enrichment_settingsGet Company Enrichment Settingsreadcoralogix.enrichment.get_enrichment_limitGet Enrichment Limitreadcoralogix.enrichment.get_enrichmentsGet Enrichmentsreadcoralogix.enrichment.remove_enrichmentsDelete Enrichmentsdestructive
Global routers7
coralogix.global_routers.batch_get_global_routersBatch Get Global Routersreadcoralogix.global_routers.create_global_routerCreate Global Routerwritecoralogix.global_routers.delete_global_routerDelete Global Routerdestructivecoralogix.global_routers.get_global_routerGet Global Routerreadcoralogix.global_routers.list_global_routersList Global Routersreadcoralogix.global_routers.replace_global_routerReplace Global Routerwritecoralogix.global_routers.validate_entity_label_matcherValidate Entity Label Matcherread
Groups MGMT7
coralogix.groups_mgmt.create_team_groupCreate Team Groupwritecoralogix.groups_mgmt.delete_team_groupDelete Team Groupdestructivecoralogix.groups_mgmt.get_group_usersGet Group Usersreadcoralogix.groups_mgmt.get_team_groupGet Team Groupreadcoralogix.groups_mgmt.get_team_group_by_nameGet Team Group By Namereadcoralogix.groups_mgmt.get_team_groupsGet Team Groupsreadcoralogix.groups_mgmt.update_team_groupUpdate Team Groupwrite
Testing7
coralogix.testing.test_connector_configTest Connector Configwritecoralogix.testing.test_destinationTest Destinationwritecoralogix.testing.test_existing_connectorTest Existing Connectorwritecoralogix.testing.test_existing_presetTest Existing Presetwritecoralogix.testing.test_preset_configTest Preset Configwritecoralogix.testing.test_routing_condition_validTest Routing Condition Validreadcoralogix.testing.test_template_renderTest Template Renderread
AI applications6
coralogix.ai_applications.delete_ai_applicationDelete AI applicationdestructivecoralogix.ai_applications.delete_company_model_pricingDelete company model pricingdestructivecoralogix.ai_applications.get_ai_application_by_idGet AI applicationreadcoralogix.ai_applications.get_company_model_pricingGet company model pricingreadcoralogix.ai_applications.list_ai_applicationsList AI applicationsreadcoralogix.ai_applications.set_company_model_pricingSet company model pricingwrite
API keys6
coralogix.api_keys.create_api_keyCreate API Keywritecoralogix.api_keys.delete_api_keyDelete API Keydestructivecoralogix.api_keys.get_api_keyGet API Keyreadcoralogix.api_keys.get_api_keysGet API Keysreadcoralogix.api_keys.get_send_data_api_keysGet "Send Data" API Keysreadcoralogix.api_keys.update_api_keyUpdate API Keywrite
Case events6
coralogix.case_events.create_commentCreate a comment eventwritecoralogix.case_events.delete_commentDelete a comment eventdestructivecoralogix.case_events.get_eventGet an event by IDreadcoralogix.case_events.list_eventsList events for a casereadcoralogix.case_events.sync_external_case_eventsSync external Case eventswritecoralogix.case_events.update_commentUpdate a comment eventwrite
Case settings6
coralogix.case_settings.create_case_settingsCreate a case settings team configurationwritecoralogix.case_settings.delete_case_settingsDelete a case settings team configurationdestructivecoralogix.case_settings.get_active_case_settingsGet the active case settings team configurationreadcoralogix.case_settings.get_case_settingsGet a case settings team configurationreadcoralogix.case_settings.get_system_default_case_settingsGet system default case settings team configuration settingsreadcoralogix.case_settings.update_case_settingsUpdate a case settings team configurationwrite
Custom enrichment6
coralogix.custom_enrichment.create_custom_enrichmentCreate Custom Enrichmentswritecoralogix.custom_enrichment.delete_custom_enrichmentDelete Custom Enrichmentsdestructivecoralogix.custom_enrichment.get_custom_enrichmentGet Custom Enrichmentreadcoralogix.custom_enrichment.get_custom_enrichmentsGet Custom Enrichmentsreadcoralogix.custom_enrichment.search_custom_enrichment_dataSearch Custom Enrichment Datareadcoralogix.custom_enrichment.update_custom_enrichmentUpdate Custom Enrichmentwrite
Events6
coralogix.events.batch_get_eventBatch Get Eventreadcoralogix.events.get_eventGet Eventreadcoralogix.events.get_events_statisticsGet Events Statisticsreadcoralogix.events.list_alert_eventsList Alert Eventsreadcoralogix.events.list_eventsList Eventsreadcoralogix.events.list_events_countList Events Countread
Metrics configurator public6
coralogix.metrics_configurator_public.configure_tenantConfigure Tenantwritecoralogix.metrics_configurator_public.disable_archiveDisable Metrics Archivedestructivecoralogix.metrics_configurator_public.enable_archiveEnable Metrics Archivewritecoralogix.metrics_configurator_public.get_tenant_configGet Metrics Storage Configurationreadcoralogix.metrics_configurator_public.updateUpdate Metrics Storage Configurationwritecoralogix.metrics_configurator_public.validate_bucketValidate Metrics Storage Bucketread
Role management6
coralogix.role_management.create_roleCreate Rolewritecoralogix.role_management.delete_roleDelete Roledestructivecoralogix.role_management.get_custom_roleGet Custom Rolereadcoralogix.role_management.list_custom_rolesList Custom Rolesreadcoralogix.role_management.list_system_rolesList System Rolesreadcoralogix.role_management.update_roleUpdate Rolewrite
Dashboard folders5
coralogix.dashboard_folders.create_dashboard_folderCreate a dashboard folderwritecoralogix.dashboard_folders.delete_dashboard_folderDelete a dashboard folderdestructivecoralogix.dashboard_folders.get_dashboard_folderGet a dashboard folderreadcoralogix.dashboard_folders.list_dashboard_foldersList dashboard foldersreadcoralogix.dashboard_folders.replace_dashboard_folderReplace a dashboard folderwrite
Rule group sets5
coralogix.rule_group_sets.createCreate Recording Ruleswritecoralogix.rule_group_sets.deleteDelete Recording Rulesdestructivecoralogix.rule_group_sets.fetchGet Recording Rulesreadcoralogix.rule_group_sets.listList Recording Rulesreadcoralogix.rule_group_sets.updateUpdate Recording Ruleswrite
Scopes5
coralogix.scopes.create_scopeCreate Scopewritecoralogix.scopes.delete_scopeDelete Scopedestructivecoralogix.scopes.get_team_scopesGet Team Scopesreadcoralogix.scopes.get_team_scopes_by_idsGet Team Scopes By Idsreadcoralogix.scopes.update_scopeUpdate Scopewrite
Team5
coralogix.team.create_team_in_orgCreate teamwritecoralogix.team.delete_teamDelete teamdestructivecoralogix.team.get_teamGet teamreadcoralogix.team.list_teamsList teamsreadcoralogix.team.update_teamUpdate teamwrite
Users MGMT5
coralogix.users_mgmt.create_usersCreate Userswritecoralogix.users_mgmt.get_userGet Userreadcoralogix.users_mgmt.search_usersSearch Usersreadcoralogix.users_mgmt.update_usersUpdate Userswritecoralogix.users_mgmt.update_users_statusesActivate/Revoke Userswrite
Views5
coralogix.views.create_viewCreate a view servicewritecoralogix.views.delete_viewDelete view servicedestructivecoralogix.views.get_viewGet view servicereadcoralogix.views.list_viewsList views servicereadcoralogix.views.replace_viewReplace a view servicewrite
Views folders5
coralogix.views_folders.create_view_folderCreate View Folder servicewritecoralogix.views_folders.delete_view_folderDelete View Folder servicedestructivecoralogix.views_folders.get_view_folderGet View Folder servicereadcoralogix.views_folders.list_view_foldersList view folders servicereadcoralogix.views_folders.replace_view_folderReplace View Folder servicewrite
Configuration group4
coralogix.configuration_group.archive_configuration_groupArchive configuration groupdestructivecoralogix.configuration_group.create_configuration_groupCreate configuration groupwritecoralogix.configuration_group.get_configuration_groupGet configuration groupreadcoralogix.configuration_group.update_configuration_groupUpdate configuration groupwrite
Extension deployment4
coralogix.extension_deployment.deploy_extensionDeploy extensionwritecoralogix.extension_deployment.get_deployed_extensionsGet deployed extensionsreadcoralogix.extension_deployment.undeploy_extensionRevert deployment of extensiondestructivecoralogix.extension_deployment.update_extensionUpdate extensionwrite
Ip access4
coralogix.ip_access.create_company_ip_access_settingsCreate company IP access settingswritecoralogix.ip_access.delete_company_ip_access_settingsDelete company IP access settingsdestructivecoralogix.ip_access.get_company_ip_access_settingsGet company IP access settingsreadcoralogix.ip_access.replace_company_ip_access_settingsReplace company IP access settingswrite
Quota allocation rule set4
coralogix.quota_allocation_rule_set.create_quota_allocation_rule_setCreate quota allocation rule setwritecoralogix.quota_allocation_rule_set.delete_quota_allocation_rule_setDelete quota allocation rule setdestructivecoralogix.quota_allocation_rule_set.get_quota_allocation_rule_setGet quota allocation rule setreadcoralogix.quota_allocation_rule_set.replace_quota_allocation_rule_setReplace quota allocation rule setwrite
Retentions4
coralogix.retentions.activate_retentionsActivate Retentionswritecoralogix.retentions.get_retentionsGet Retentionsreadcoralogix.retentions.get_retentions_enabledGet Retentions Enabledreadcoralogix.retentions.update_retentionsUpdate Retentionswrite
Saml configuration4
coralogix.saml_configuration.get_configurationGet SAML Configurationreadcoralogix.saml_configuration.get_sp_parametersGet SP Parametersreadcoralogix.saml_configuration.set_activeActivate/Deactivate SAMLwritecoralogix.saml_configuration.set_idp_parametersSet IDP Parameterswrite
API keys admin3
coralogix.api_keys_admin.delete_api_keysDelete API Keysdestructivecoralogix.api_keys_admin.get_team_members_api_keysGet Team Members API Keysreadcoralogix.api_keys_admin.update_api_keys_statusUpdate API Keys Statuswrite
Entities3
coralogix.entities.list_entity_sub_typesList Entity Subtypesreadcoralogix.entities.list_entity_type_attachment_typesList Entity Type Attachment Typesreadcoralogix.entities.list_entity_typesList Entity Typesread
Alert event2
coralogix.alert_event.get_alert_eventGet alert event by IDreadcoralogix.alert_event.get_alert_events_statsGet alert events statisticsread
Data usage query2
coralogix.data_usage_query.data_usageQuery data usagereadcoralogix.data_usage_query.get_data_usage_capabilitiesGet data usage capabilitiesread
Extension2
coralogix.extension.get_all_extensionsGet all extensionsreadcoralogix.extension.get_extensionGet extension by IDread
S3 target2
coralogix.s3_target.get_targetGet targetreadcoralogix.s3_target.set_targetSet targetwrite
Cases notification1
coralogix.cases_notification.list_notification_deliveriesList notification deliveries for casesread
Connector schema1
coralogix.connector_schema.get_connector_schemaGet Connector Schemaread
Dashboard catalog1
coralogix.dashboard_catalog.get_dashboard_catalogGet dashboard catalogread
Identity1
coralogix.identity.who_am_iWho am Iread
Questions
The Coralogix MCP server, answered.
Is there a Coralogix MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 329 Coralogix actions across cases, incidents, AI evaluations and integration, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Coralogix.
What do I need to connect Coralogix?
Coralogix API key (Settings > API Keys) with the permissions for the resources you will manage. Plus your host. The free call account { op: "connections.requirements", service: "coralogix" } lists exactly what to paste.
Can an AI agent delete or change things in Coralogix?
Only if its key allows it, and only with an explicit confirmation. 47 Coralogix actions are destructive, including delete Slo, delete team and delete view service. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Coralogix API limit?
actionlake paces every call to the limits in the Coralogix service file: 10 calls a second per connection. Repeated reads are answered from cache (153 Coralogix actions can be), which never reaches Coralogix.
What does a Coralogix action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (57 Coralogix actions page). Cache hits, searches, dry runs and calls Coralogix refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Coralogix API does it cover?
The Coralogix Management API v5 (OpenAPI 3.1.0, info.version 1.0.0) at your Coralogix instance's API base URL, which you enter when connecting. It is built from Coralogix's documentation as read on 23 October 2026. 329 actions in 51 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Coralogix data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 2 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Coralogix credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Coralogix today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.