--- title: "Coralogix MCP server for AI agents - actionlake" description: "Give Claude 329 Coralogix actions through one MCP server: cases, incidents, AI evaluations. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/coralogix updated: 2026-10-23 --- Connectors · Observability & analytics # Coralogix MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Coralogix and the rest of your systems. It gives your agent 329 Coralogix actions (157 reads, 125 writes and 47 that wait for a confirmation) and holds the Coralogix credential itself, so the agent never does. It paces Coralogix's limits and records every call. [Connect Coralogix free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "coralogix.groups_mgmt.get_team_groups", intent: "check which Coralogix account is connected" } # Get Team Groups · read · 1 upstream call ``` - 329 actions in one signed file - 157 read look, never change - 125 write create and update - 47 wait for a yes destructive, confirmed first Set up ## Connect Coralogix in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Coralogix. Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` Coralogix API key (Settings > API Keys) with the permissions for the resources you will manage - `host` Where your Coralogix lives: your host ``` account { op: "connections.requirements", service: "coralogix" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "coralogix.groups_mgmt.get_team_groups" } # get team groups · read · 1 upstream call check { action: "coralogix.slos.create_slo", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Coralogix at a glance **Sign-in** Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key` **Setup fields** `host` **Limits we pace to** 10 calls a second, per connection **API covered** Coralogix Management API v5 (OpenAPI 3.1.0, info.version 1.0.0), at your Coralogix instance's API base URL, which you enter when connecting **Built from** Coralogix's documentation, read 23 October 2026[api.eu2.coralogix.com](https://api.eu2.coralogix.com/mgmt/openapi/5/openapi.yaml) [docs.coralogix.com](https://docs.coralogix.com/api-reference) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 153 of 157 reads, for up to 2 minutes; a write clears what it affects **Shared entities** 3, so ask can line Coralogix up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Coralogix. 329 actions in 51 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **157** read look, never change - **125** write create and update - **47** destructive wait for a confirmation 1. ### Cases 22 6 read · 11 write · 5 destructive Get case by indicator · Get available filter values · List cases with filters · Acknowledge a case 2. ### Incidents 17 10 read · 6 write · 1 destructive Get available filter values · Get incident events · Get incident aggregations · List incident events with filters 3. ### AI evaluations 13 5 read · 5 write · 3 destructive Create AI evaluation · Create custom evaluation · List custom evaluations · List AI evaluations 4. ### Integration 13 9 read · 3 write · 1 destructive Get all integrations · List managed integration keys · Save integration registration metadata · Test integration 5. ### Policies 13 5 read · 7 write · 1 destructive Bulk Test Log Policies · Create Policy · Forecast Policy Usage · Get Company Policies 6. ### Alert defs 11 5 read · 4 write · 2 destructive Bulk create alert definitions · Create an alert · Get a list of all accessible alert definitions · Bulk replace alert definitions 7. ### Outgoing webhooks 11 7 read · 3 write · 1 destructive Create an outgoing webhook · List all outgoing webhooks · List outbound webhooks summary · Get outgoing webhook types 8. ### Dashboards 10 3 read · 5 write · 2 destructive Validate a dashboard and return issues · Create a new dashboard · Assign a dashboard to a folder · Get a dashboard **43 more areas · 219 actions** - Presets **10** - Slos **10** - Connectors **9** - Events2 metric **8** - Rule groups **8** - Actions **7** - Alert scheduler rule **7** - Contextual data integration **7** - Enrichment **7** - Global routers **7** - Groups MGMT **7** - Testing **7** - AI applications **6** - API keys **6** - Case events **6** - Case settings **6** - Custom enrichment **6** - Events **6** - Metrics configurator public **6** - Role management **6** - Dashboard folders **5** - Rule group sets **5** - Scopes **5** - Team **5** - Users MGMT **5** - Views **5** - Views folders **5** - Configuration group **4** - Extension deployment **4** - Ip access **4** - Quota allocation rule set **4** - Retentions **4** - Saml configuration **4** - API keys admin **3** - Entities **3** - Alert event **2** - Data usage query **2** - Extension **2** - S3 target **2** - Cases notification **1** - Connector schema **1** - Dashboard catalog **1** - Identity **1** Top actions ## The Coralogix API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `coralogix.users_mgmt.search_users` Search Users | Searches for team members by query. | read | this connector | | `coralogix.groups_mgmt.get_team_groups` Get Team Groups | Returns all team groups. | read | this connector | | `coralogix.role_management.list_custom_roles` List Custom Roles | Returns all custom roles for the authenticated team. | read | this connector | | `coralogix.slos.list_slos` List Slos | Returns SLOs matching the given criteria. | read | this connector | | `coralogix.slos.create_slo` Create Slo | Creates a new SLO. | write | this connector | | `coralogix.team.list_teams` List teams | Deprecated. Returns every team in the calling user's organization, together with the organization's default team. | read | this connector | | `coralogix.cases.list_cases` List cases with filters | List cases using filters, pagination and custom ordering. Requires the following permissions: - `case:Read`. | read | this connector | | `coralogix.views.list_views` List views service | Lists all company public views. | read | this connector | | `coralogix.views.create_view` Create a view service | Creates a new view. | write | this connector | | `coralogix.events.list_events` List Events | Returns a list of alert events matching the specified filters. | read | this connector | | `coralogix.scopes.create_scope` Create Scope | Creates a new data access scope. | write | this connector | | `coralogix.slos.delete_slo` Delete Slo | Deletes the SLO with the specified ID. | destructive | this connector | Try it ## Prompts to paste into Claude. Each one names the Coralogix actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Coralogix? List every user and their role. calls `coralogix.users_mgmt.search_users` 2. Write write Create Slo in Coralogix. Show me exactly what you will send before you save it. calls `coralogix.slos.create_slo` Governance for Coralogix ## Destructive actions wait for a yes. 47 Coralogix actions are destructive. The first 10: - Delete Slo `coralogix.slos.delete_slo` - Delete team `coralogix.team.delete_team` - Delete view service `coralogix.views.delete_view` - Remove assignment from multiple cases `coralogix.cases.bulk_unassign` - Remove case assignment `coralogix.cases.unassign_case` - Delete Scope `coralogix.scopes.delete_scope` - Delete Action `coralogix.actions.delete_action` - Delete Policy `coralogix.policies.delete_policy` - Delete Recording Rules `coralogix.rule_group_sets.delete` - Delete API Key `coralogix.api_keys.delete_api_key` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do coralogix.slos.delete_slo confirm_policy: **human** Delete Slo? **intent:** the user asked me to delete Slo run suspended · waiting for a named person · key _coralogix-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "coralogix-agent", allowed_actions: ["coralogix.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "coralogix.slos.delete_slo", approver: "lead@example.com" }, { match: "coralogix.team.delete_team", approver: "lead@example.com" }, { match: "coralogix.views.delete_view", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Coralogix only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Coralogix costs on actionlake. Every Coralogix action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Coralogix refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 329 Coralogix actions - 57 actions page each page of a long list is one call - 153 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Coralogix action. 329 actions by area: the id your agent calls, what it does, and its effect. **Cases 22** - `coralogix.cases.acknowledge_case` Acknowledge a case write - `coralogix.cases.assign_case` Assign a case to a user write - `coralogix.cases.bulk_acknowledge` Acknowledge multiple cases write - `coralogix.cases.bulk_assign` Assign multiple cases to a user write - `coralogix.cases.bulk_clear_priority_override` Remove priority override from multiple cases destructive - `coralogix.cases.bulk_close` Close multiple cases write - `coralogix.cases.bulk_resolve` Resolve multiple cases write - `coralogix.cases.bulk_set_priority_override` Override priority for multiple cases write - `coralogix.cases.bulk_unassign` Remove assignment from multiple cases destructive - `coralogix.cases.clear_priority_override` Remove priority override destructive - `coralogix.cases.close_case` Close a case write - `coralogix.cases.get_case` Get case by ID read - `coralogix.cases.get_case_by_indicator` Get case by indicator read - `coralogix.cases.get_case_deep_links` Get case deep links read - `coralogix.cases.get_filter_values` Get available filter values read - `coralogix.cases.get_grouping_keys` Get available grouping keys read - `coralogix.cases.list_cases` List cases with filters read - `coralogix.cases.resolve_case` Resolve a case write - `coralogix.cases.set_priority_override` Set priority override write - `coralogix.cases.unacknowledge_case` Unacknowledge a case destructive - `coralogix.cases.unassign_case` Remove case assignment destructive - `coralogix.cases.update_case` Update case fields write **Incidents 17** - `coralogix.incidents.acknowledge_incident_by_event_id` Acknowledge incident by event id write - `coralogix.incidents.acknowledge_incidents` Acknowledge incidents write - `coralogix.incidents.assign_incidents` Assign incidents to a user write - `coralogix.incidents.batch_get_incident` Get multiple incidents by IDs read - `coralogix.incidents.close_incidents` Close incidents write - `coralogix.incidents.get_filter_values` Get available filter values read - `coralogix.incidents.get_incident` Get incident by ID read - `coralogix.incidents.get_incident_by_event_id` Get incident by event ID read - `coralogix.incidents.get_incident_events` Get incident events read - `coralogix.incidents.list_incident_aggregations` Get incident aggregations read - `coralogix.incidents.list_incident_events` List incident events with filters read - `coralogix.incidents.list_incident_events_filter_values` Get available incident event filter values read - `coralogix.incidents.list_incident_events_total_count` Get total count of incident events read - `coralogix.incidents.list_incidents` List incidents with filters read - `coralogix.incidents.resolve_incident_by_event_id` Resolve incident by event id write - `coralogix.incidents.resolve_incidents` Resolve incidents write - `coralogix.incidents.unassign_incidents` Remove incident user assignments destructive **AI evaluations 13** - `coralogix.ai_evaluations.count_ai_apps_per_eval_type` Count applications per evaluation type read - `coralogix.ai_evaluations.create_ai_evaluation` Create AI evaluation write - `coralogix.ai_evaluations.create_custom_evaluation` Create custom evaluation write - `coralogix.ai_evaluations.delete_ai_evaluation` Delete AI evaluation destructive - `coralogix.ai_evaluations.delete_custom_evaluation` Delete custom evaluation destructive - `coralogix.ai_evaluations.get_ai_evaluation` Get AI evaluation read - `coralogix.ai_evaluations.get_custom_evaluations` List custom evaluations read - `coralogix.ai_evaluations.link_custom_evaluation` Link custom evaluation to application write - `coralogix.ai_evaluations.list_ai_evaluations` List AI evaluations read - `coralogix.ai_evaluations.list_custom_evaluations_for_application` List custom evaluations for application read - `coralogix.ai_evaluations.unlink_custom_evaluation_from_app` Unlink custom evaluation from application destructive - `coralogix.ai_evaluations.update_ai_evaluation` Update AI evaluation write - `coralogix.ai_evaluations.update_custom_evaluation` Update custom evaluation write **Integration 13** - `coralogix.integration.delete_integration` Delete integration destructive - `coralogix.integration.get_deployed_integration` Get deployed integration read - `coralogix.integration.get_integration_definition` Get integration definition read - `coralogix.integration.get_integration_details` Get integration details read - `coralogix.integration.get_integrations` Get all integrations read - `coralogix.integration.get_managed_integration_status` Get managed integration status read - `coralogix.integration.get_rum_application_version_data` Get RUM integration versions data read - `coralogix.integration.get_template` Get integration template read - `coralogix.integration.list_managed_integration_keys` List managed integration keys read - `coralogix.integration.save_integration` Save integration registration metadata write - `coralogix.integration.sync_rum_data` Trigger sync of RUM integration data write - `coralogix.integration.test_integration` Test integration read - `coralogix.integration.update_integration` Update integration write **Policies 13** - `coralogix.policies.atomic_overwrite_log_policies` Atomic Overwrite Log Policies write - `coralogix.policies.atomic_overwrite_rum_policies` Atomic Overwrite Rum Policies write - `coralogix.policies.atomic_overwrite_span_policies` Atomic Overwrite Span Policies write - `coralogix.policies.bulk_test_log_policies` Bulk Test Log Policies read - `coralogix.policies.create_policy` Create Policy write - `coralogix.policies.delete_policy` Delete Policy destructive - `coralogix.policies.forecast_policy_usage` Forecast Policy Usage read - `coralogix.policies.get_company_policies` Get Company Policies read - `coralogix.policies.get_policy` Get Policy by ID read - `coralogix.policies.get_policy_settings` Get Policy Priority Settings read - `coralogix.policies.reorder_policies` Reorder Policies write - `coralogix.policies.replace_policy_settings` Replace Policy Settings write - `coralogix.policies.update_policy` Update Policy write **Alert defs 11** - `coralogix.alert_defs.bulk_create_alert_defs` Bulk create alert definitions write - `coralogix.alert_defs.bulk_delete_alert_defs` Bulk delete alert definitions destructive - `coralogix.alert_defs.bulk_replace_alert_defs` Bulk replace alert definitions write - `coralogix.alert_defs.create_alert_def` Create an alert write - `coralogix.alert_defs.delete_alert_def` DeleteAlertDef destructive - `coralogix.alert_defs.download_alerts` Download alerts read - `coralogix.alert_defs.filter_option_counts` Get counts for filter options read - `coralogix.alert_defs.get_alert_def` Get alert definition by ID read - `coralogix.alert_defs.get_alert_def_by_version_id` Get alert definition by alert version ID read - `coralogix.alert_defs.list_alert_defs` Get a list of all accessible alert definitions read - `coralogix.alert_defs.replace_alert_def` Replace an alert definition write **Outgoing webhooks 11** - `coralogix.outgoing_webhooks.create_outgoing_webhook` Create an outgoing webhook write - `coralogix.outgoing_webhooks.delete_outgoing_webhook` Delete an outgoing webhook destructive - `coralogix.outgoing_webhooks.get_outgoing_webhook` Get outgoing webhook read - `coralogix.outgoing_webhooks.get_outgoing_webhook_type_details` Get outgoing webhook type details read - `coralogix.outgoing_webhooks.list_all_outgoing_webhooks` List all outgoing webhooks read - `coralogix.outgoing_webhooks.list_outbound_webhooks_summary` List outbound webhooks summary read - `coralogix.outgoing_webhooks.list_outgoing_webhook_types` Get outgoing webhook types read - `coralogix.outgoing_webhooks.list_outgoing_webhooks` List outgoing webhooks read - `coralogix.outgoing_webhooks.test_existing_outgoing_webhook` Test an existing outgoing webhook read - `coralogix.outgoing_webhooks.test_outgoing_webhook` Test an outgoing webhook write - `coralogix.outgoing_webhooks.update_outgoing_webhook` Update an outgoing webhook write **Dashboards 10** - `coralogix.dashboards.assign_dashboard_folder` Assign a dashboard to a folder write - `coralogix.dashboards.check_dashboard` Validate a dashboard and return issues read - `coralogix.dashboards.create_dashboard` Create a new dashboard write - `coralogix.dashboards.delete_dashboard` Delete a dashboard destructive - `coralogix.dashboards.get_dashboard` Get a dashboard read - `coralogix.dashboards.get_dashboard_by_slug` Get a dashboard by URL slug read - `coralogix.dashboards.pin_dashboard` Add dashboard to favorites write - `coralogix.dashboards.replace_dashboard` Replace a dashboard write - `coralogix.dashboards.replace_default_dashboard` Replace the default dashboard write - `coralogix.dashboards.unpin_dashboard` Remove dashboard from favorites destructive **Presets 10** - `coralogix.presets.batch_get_presets` Batch Get Presets read - `coralogix.presets.create_custom_preset` Create Custom Preset write - `coralogix.presets.delete_custom_preset` Delete Custom Preset destructive - `coralogix.presets.get_default_preset_summary` Get Default Preset Summary read - `coralogix.presets.get_preset` Get Preset read - `coralogix.presets.get_system_default_preset_summary` Get System Default Preset Summary read - `coralogix.presets.list_preset_summaries` List Preset Summaries read - `coralogix.presets.replace_custom_preset` Replace Custom Preset write - `coralogix.presets.set_custom_preset_as_default` Set Custom Preset As Default write - `coralogix.presets.set_preset_as_default` Set Preset As Default write **Slos 10** - `coralogix.slos.batch_execute_slo` Batch Execute Slo write - `coralogix.slos.batch_get_slos` Batch Get Slo read - `coralogix.slos.create_slo` Create Slo write - `coralogix.slos.delete_slo` Delete Slo destructive - `coralogix.slos.get_slo` Get Slo read - `coralogix.slos.get_slo_status` Get Slo Status read - `coralogix.slos.get_zero_state` Get Slo Zero State read - `coralogix.slos.list_slos` List Slos read - `coralogix.slos.replace_slo` Replace Slo write - `coralogix.slos.validate_replace_slo_alerts` Replace Slo Pre-Validate Alerts write **Connectors 9** - `coralogix.connectors.batch_get_connector_summaries` Batch Get Connectors Summaries read - `coralogix.connectors.batch_get_connectors` Batch Get Connectors read - `coralogix.connectors.create_connector` Create a Connector write - `coralogix.connectors.delete_connector` Delete a Connector destructive - `coralogix.connectors.get_connector` Get a Connector read - `coralogix.connectors.get_connector_type_summaries` Get Connector Type Summaries read - `coralogix.connectors.list_connector_summaries` List Connector Summaries read - `coralogix.connectors.list_connectors` List Connectors read - `coralogix.connectors.replace_connector` Replace a Connector write **Events2 metric 8** - `coralogix.events2_metric.atomic_batch_execute_e2_m` Atomic Batch Execute E2M write - `coralogix.events2_metric.create_e2_m` Create a new E2M write - `coralogix.events2_metric.delete_e2_m` Delete an E2M destructive - `coralogix.events2_metric.get_e2_m` Get an E2M read - `coralogix.events2_metric.get_limits` Get E2M Limits read - `coralogix.events2_metric.list_e2_m` List E2Ms read - `coralogix.events2_metric.list_labels_cardinality` List E2M Labels Cardinality read - `coralogix.events2_metric.replace_e2_m` Replace an E2M write **Rule groups 8** - `coralogix.rule_groups.bulk_delete_rule_group` Bulk Delete Rule Group destructive - `coralogix.rule_groups.create_rule_group` Create Rule Group write - `coralogix.rule_groups.delete_rule_group` Delete Rule Group destructive - `coralogix.rule_groups.get_company_usage_limits` Get Company Usage Limits read - `coralogix.rule_groups.get_rule_group` Get Rule Group read - `coralogix.rule_groups.get_rule_group_model_mapping` Get Rule Group Model Mapping read - `coralogix.rule_groups.list_rule_groups` List Rule Groups read - `coralogix.rule_groups.update_rule_group` Update Rule Group write **Actions 7** - `coralogix.actions.atomic_batch_execute_actions` Atomic Batch Execute Actions write - `coralogix.actions.create_action` Create Action write - `coralogix.actions.delete_action` Delete Action destructive - `coralogix.actions.get_action` Get Action read - `coralogix.actions.list_actions` List Actions read - `coralogix.actions.order_actions` Order Actions write - `coralogix.actions.replace_action` Replace Action write **Alert scheduler rule 7** - `coralogix.alert_scheduler_rule.create_alert_scheduler_rule` Create an alert scheduler rule write - `coralogix.alert_scheduler_rule.create_bulk_alert_scheduler_rule` Create multiple alert scheduler rules write - `coralogix.alert_scheduler_rule.delete_alert_scheduler_rule` Delete an alert scheduler rule destructive - `coralogix.alert_scheduler_rule.get_alert_scheduler_rule` Get an alert scheduler rule read - `coralogix.alert_scheduler_rule.get_bulk_alert_scheduler_rule` Get multiple alert scheduler rules read - `coralogix.alert_scheduler_rule.update_alert_scheduler_rule` Update an alert scheduler rule write - `coralogix.alert_scheduler_rule.update_bulk_alert_scheduler_rule` Update multiple alert scheduler rules write **Contextual data integration 7** - `coralogix.contextual_data_integration.delete_contextual_data_integration` Delete contextual data integration destructive - `coralogix.contextual_data_integration.get_contextual_data_integration_definition` Get contextual data integration definition read - `coralogix.contextual_data_integration.get_contextual_data_integration_details` Get contextual data integration details read - `coralogix.contextual_data_integration.get_contextual_data_integrations` Get all contextual data integrations accessible read - `coralogix.contextual_data_integration.save_contextual_data_integration` Save contextual data integration write - `coralogix.contextual_data_integration.test_contextual_data_integration` Test contextual data integration read - `coralogix.contextual_data_integration.update_contextual_data_integration` Update contextual data integration write **Enrichment 7** - `coralogix.enrichment.add_enrichments` Add Enrichments write - `coralogix.enrichment.atomic_overwrite_all_enrichments` Atomic Overwrite for ALL types of enrichments write - `coralogix.enrichment.atomic_overwrite_enrichments` Atomic Overwrite for CustomEnrichments only write - `coralogix.enrichment.get_company_enrichment_settings` Get Company Enrichment Settings read - `coralogix.enrichment.get_enrichment_limit` Get Enrichment Limit read - `coralogix.enrichment.get_enrichments` Get Enrichments read - `coralogix.enrichment.remove_enrichments` Delete Enrichments destructive **Global routers 7** - `coralogix.global_routers.batch_get_global_routers` Batch Get Global Routers read - `coralogix.global_routers.create_global_router` Create Global Router write - `coralogix.global_routers.delete_global_router` Delete Global Router destructive - `coralogix.global_routers.get_global_router` Get Global Router read - `coralogix.global_routers.list_global_routers` List Global Routers read - `coralogix.global_routers.replace_global_router` Replace Global Router write - `coralogix.global_routers.validate_entity_label_matcher` Validate Entity Label Matcher read **Groups MGMT 7** - `coralogix.groups_mgmt.create_team_group` Create Team Group write - `coralogix.groups_mgmt.delete_team_group` Delete Team Group destructive - `coralogix.groups_mgmt.get_group_users` Get Group Users read - `coralogix.groups_mgmt.get_team_group` Get Team Group read - `coralogix.groups_mgmt.get_team_group_by_name` Get Team Group By Name read - `coralogix.groups_mgmt.get_team_groups` Get Team Groups read - `coralogix.groups_mgmt.update_team_group` Update Team Group write **Testing 7** - `coralogix.testing.test_connector_config` Test Connector Config write - `coralogix.testing.test_destination` Test Destination write - `coralogix.testing.test_existing_connector` Test Existing Connector write - `coralogix.testing.test_existing_preset` Test Existing Preset write - `coralogix.testing.test_preset_config` Test Preset Config write - `coralogix.testing.test_routing_condition_valid` Test Routing Condition Valid read - `coralogix.testing.test_template_render` Test Template Render read **AI applications 6** - `coralogix.ai_applications.delete_ai_application` Delete AI application destructive - `coralogix.ai_applications.delete_company_model_pricing` Delete company model pricing destructive - `coralogix.ai_applications.get_ai_application_by_id` Get AI application read - `coralogix.ai_applications.get_company_model_pricing` Get company model pricing read - `coralogix.ai_applications.list_ai_applications` List AI applications read - `coralogix.ai_applications.set_company_model_pricing` Set company model pricing write **API keys 6** - `coralogix.api_keys.create_api_key` Create API Key write - `coralogix.api_keys.delete_api_key` Delete API Key destructive - `coralogix.api_keys.get_api_key` Get API Key read - `coralogix.api_keys.get_api_keys` Get API Keys read - `coralogix.api_keys.get_send_data_api_keys` Get "Send Data" API Keys read - `coralogix.api_keys.update_api_key` Update API Key write **Case events 6** - `coralogix.case_events.create_comment` Create a comment event write - `coralogix.case_events.delete_comment` Delete a comment event destructive - `coralogix.case_events.get_event` Get an event by ID read - `coralogix.case_events.list_events` List events for a case read - `coralogix.case_events.sync_external_case_events` Sync external Case events write - `coralogix.case_events.update_comment` Update a comment event write **Case settings 6** - `coralogix.case_settings.create_case_settings` Create a case settings team configuration write - `coralogix.case_settings.delete_case_settings` Delete a case settings team configuration destructive - `coralogix.case_settings.get_active_case_settings` Get the active case settings team configuration read - `coralogix.case_settings.get_case_settings` Get a case settings team configuration read - `coralogix.case_settings.get_system_default_case_settings` Get system default case settings team configuration settings read - `coralogix.case_settings.update_case_settings` Update a case settings team configuration write **Custom enrichment 6** - `coralogix.custom_enrichment.create_custom_enrichment` Create Custom Enrichments write - `coralogix.custom_enrichment.delete_custom_enrichment` Delete Custom Enrichments destructive - `coralogix.custom_enrichment.get_custom_enrichment` Get Custom Enrichment read - `coralogix.custom_enrichment.get_custom_enrichments` Get Custom Enrichments read - `coralogix.custom_enrichment.search_custom_enrichment_data` Search Custom Enrichment Data read - `coralogix.custom_enrichment.update_custom_enrichment` Update Custom Enrichment write **Events 6** - `coralogix.events.batch_get_event` Batch Get Event read - `coralogix.events.get_event` Get Event read - `coralogix.events.get_events_statistics` Get Events Statistics read - `coralogix.events.list_alert_events` List Alert Events read - `coralogix.events.list_events` List Events read - `coralogix.events.list_events_count` List Events Count read **Metrics configurator public 6** - `coralogix.metrics_configurator_public.configure_tenant` Configure Tenant write - `coralogix.metrics_configurator_public.disable_archive` Disable Metrics Archive destructive - `coralogix.metrics_configurator_public.enable_archive` Enable Metrics Archive write - `coralogix.metrics_configurator_public.get_tenant_config` Get Metrics Storage Configuration read - `coralogix.metrics_configurator_public.update` Update Metrics Storage Configuration write - `coralogix.metrics_configurator_public.validate_bucket` Validate Metrics Storage Bucket read **Role management 6** - `coralogix.role_management.create_role` Create Role write - `coralogix.role_management.delete_role` Delete Role destructive - `coralogix.role_management.get_custom_role` Get Custom Role read - `coralogix.role_management.list_custom_roles` List Custom Roles read - `coralogix.role_management.list_system_roles` List System Roles read - `coralogix.role_management.update_role` Update Role write **Dashboard folders 5** - `coralogix.dashboard_folders.create_dashboard_folder` Create a dashboard folder write - `coralogix.dashboard_folders.delete_dashboard_folder` Delete a dashboard folder destructive - `coralogix.dashboard_folders.get_dashboard_folder` Get a dashboard folder read - `coralogix.dashboard_folders.list_dashboard_folders` List dashboard folders read - `coralogix.dashboard_folders.replace_dashboard_folder` Replace a dashboard folder write **Rule group sets 5** - `coralogix.rule_group_sets.create` Create Recording Rules write - `coralogix.rule_group_sets.delete` Delete Recording Rules destructive - `coralogix.rule_group_sets.fetch` Get Recording Rules read - `coralogix.rule_group_sets.list` List Recording Rules read - `coralogix.rule_group_sets.update` Update Recording Rules write **Scopes 5** - `coralogix.scopes.create_scope` Create Scope write - `coralogix.scopes.delete_scope` Delete Scope destructive - `coralogix.scopes.get_team_scopes` Get Team Scopes read - `coralogix.scopes.get_team_scopes_by_ids` Get Team Scopes By Ids read - `coralogix.scopes.update_scope` Update Scope write **Team 5** - `coralogix.team.create_team_in_org` Create team write - `coralogix.team.delete_team` Delete team destructive - `coralogix.team.get_team` Get team read - `coralogix.team.list_teams` List teams read - `coralogix.team.update_team` Update team write **Users MGMT 5** - `coralogix.users_mgmt.create_users` Create Users write - `coralogix.users_mgmt.get_user` Get User read - `coralogix.users_mgmt.search_users` Search Users read - `coralogix.users_mgmt.update_users` Update Users write - `coralogix.users_mgmt.update_users_statuses` Activate/Revoke Users write **Views 5** - `coralogix.views.create_view` Create a view service write - `coralogix.views.delete_view` Delete view service destructive - `coralogix.views.get_view` Get view service read - `coralogix.views.list_views` List views service read - `coralogix.views.replace_view` Replace a view service write **Views folders 5** - `coralogix.views_folders.create_view_folder` Create View Folder service write - `coralogix.views_folders.delete_view_folder` Delete View Folder service destructive - `coralogix.views_folders.get_view_folder` Get View Folder service read - `coralogix.views_folders.list_view_folders` List view folders service read - `coralogix.views_folders.replace_view_folder` Replace View Folder service write **Configuration group 4** - `coralogix.configuration_group.archive_configuration_group` Archive configuration group destructive - `coralogix.configuration_group.create_configuration_group` Create configuration group write - `coralogix.configuration_group.get_configuration_group` Get configuration group read - `coralogix.configuration_group.update_configuration_group` Update configuration group write **Extension deployment 4** - `coralogix.extension_deployment.deploy_extension` Deploy extension write - `coralogix.extension_deployment.get_deployed_extensions` Get deployed extensions read - `coralogix.extension_deployment.undeploy_extension` Revert deployment of extension destructive - `coralogix.extension_deployment.update_extension` Update extension write **Ip access 4** - `coralogix.ip_access.create_company_ip_access_settings` Create company IP access settings write - `coralogix.ip_access.delete_company_ip_access_settings` Delete company IP access settings destructive - `coralogix.ip_access.get_company_ip_access_settings` Get company IP access settings read - `coralogix.ip_access.replace_company_ip_access_settings` Replace company IP access settings write **Quota allocation rule set 4** - `coralogix.quota_allocation_rule_set.create_quota_allocation_rule_set` Create quota allocation rule set write - `coralogix.quota_allocation_rule_set.delete_quota_allocation_rule_set` Delete quota allocation rule set destructive - `coralogix.quota_allocation_rule_set.get_quota_allocation_rule_set` Get quota allocation rule set read - `coralogix.quota_allocation_rule_set.replace_quota_allocation_rule_set` Replace quota allocation rule set write **Retentions 4** - `coralogix.retentions.activate_retentions` Activate Retentions write - `coralogix.retentions.get_retentions` Get Retentions read - `coralogix.retentions.get_retentions_enabled` Get Retentions Enabled read - `coralogix.retentions.update_retentions` Update Retentions write **Saml configuration 4** - `coralogix.saml_configuration.get_configuration` Get SAML Configuration read - `coralogix.saml_configuration.get_sp_parameters` Get SP Parameters read - `coralogix.saml_configuration.set_active` Activate/Deactivate SAML write - `coralogix.saml_configuration.set_idp_parameters` Set IDP Parameters write **API keys admin 3** - `coralogix.api_keys_admin.delete_api_keys` Delete API Keys destructive - `coralogix.api_keys_admin.get_team_members_api_keys` Get Team Members API Keys read - `coralogix.api_keys_admin.update_api_keys_status` Update API Keys Status write **Entities 3** - `coralogix.entities.list_entity_sub_types` List Entity Subtypes read - `coralogix.entities.list_entity_type_attachment_types` List Entity Type Attachment Types read - `coralogix.entities.list_entity_types` List Entity Types read **Alert event 2** - `coralogix.alert_event.get_alert_event` Get alert event by ID read - `coralogix.alert_event.get_alert_events_stats` Get alert events statistics read **Data usage query 2** - `coralogix.data_usage_query.data_usage` Query data usage read - `coralogix.data_usage_query.get_data_usage_capabilities` Get data usage capabilities read **Extension 2** - `coralogix.extension.get_all_extensions` Get all extensions read - `coralogix.extension.get_extension` Get extension by ID read **S3 target 2** - `coralogix.s3_target.get_target` Get target read - `coralogix.s3_target.set_target` Set target write **Cases notification 1** - `coralogix.cases_notification.list_notification_deliveries` List notification deliveries for cases read **Connector schema 1** - `coralogix.connector_schema.get_connector_schema` Get Connector Schema read **Dashboard catalog 1** - `coralogix.dashboard_catalog.get_dashboard_catalog` Get dashboard catalog read **Identity 1** - `coralogix.identity.who_am_i` Who am I read Questions ## The Coralogix MCP server, answered. **Is there a Coralogix MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 329 Coralogix actions across cases, incidents, AI evaluations and integration, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Coralogix. **What do I need to connect Coralogix?** Coralogix API key (Settings > API Keys) with the permissions for the resources you will manage. Plus your host. The free call account { op: "connections.requirements", service: "coralogix" } lists exactly what to paste. **Can an AI agent delete or change things in Coralogix?** Only if its key allows it, and only with an explicit confirmation. 47 Coralogix actions are destructive, including delete Slo, delete team and delete view service. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Coralogix API limit?** actionlake paces every call to the limits in the Coralogix service file: 10 calls a second per connection. Repeated reads are answered from cache (153 Coralogix actions can be), which never reaches Coralogix. **What does a Coralogix action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (57 Coralogix actions page). Cache hits, searches, dry runs and calls Coralogix refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Coralogix API does it cover?** The Coralogix Management API v5 (OpenAPI 3.1.0, info.version 1.0.0) at your Coralogix instance's API base URL, which you enter when connecting. It is built from Coralogix's documentation as read on 23 October 2026. 329 actions in 51 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Coralogix data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 2 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Coralogix credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Coralogix Joins with, on shared entities - [HaloPSA 3](https://actionlake.com/connectors/halopsa) - [Microsoft 365 Users 3](https://actionlake.com/connectors/microsoft-365-users) - [Fortinet FortiGate 3](https://actionlake.com/connectors/fortinet-fortigate) - [Genesys Cloud CX 3](https://actionlake.com/connectors/genesys-cloud-cx) - [Rubrik Security Cloud 3](https://actionlake.com/connectors/rubrik-security-cloud) - [Commvault Cloud 3](https://actionlake.com/connectors/commvault-cloud) Browse - [All Observability & analytics connectors](https://actionlake.com/connectors/category/observability-and-analytics) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Coralogix; the name is the vendor's own. Counts are from the Coralogix service file, version 1.0.0. ## Give your agent Coralogix today. [Connect Coralogix free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/coralogix More: https://actionlake.com/llms.txt