Skip to content

Connectors · MSP & PSA

Logz.io MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Logz.io and the rest of your systems. It gives your agent 225 Logz.io actions (103 reads, 89 writes and 33 that wait for a confirmation) and holds the Logz.io credential itself, so the agent never does. It paces Logz.io's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "logzio.users.list_users",  intent: "check which Logz.io account is connected"}# Retrieve all users · read · 1 upstream call
  • 225actionsin one signed file
  • 103readlook, never change
  • 89writecreate and update
  • 33wait for a yesdestructive, confirmed first

Set up

Connect Logz.io in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Logz.io.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_tokenLogz.io API token: in Logz.io open Settings > Tools > Manage tokens > API tokens…
    • hostWhere your Logz.io lives: your host
    account { op: "connections.requirements", service: "logzio" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "logzio.users.list_users" }# retrieve all users · read · 1 upstream callcheck { action: "logzio.users.create_user", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Logz.io at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_token
Setup fields
host
Limits we pace to
100 calls a minute, per connection
API covered
Logz.io public API (Swagger 2.0, None), at your Logz.io instance's API base URL, which you enter when connecting
Built from
Logz.io's documentation, read 23 October 2026OpenAPI spec (GitHub)api-docs.logz.io
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
95 of 103 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line Logz.io up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Logz.io.

225 actions in 46 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 103readlook, never change
  • 89writecreate and update
  • 33destructivewait for a confirmation
  1. Notification endpoints

    21

    2 read · 18 write · 1 destructive

    Create a BigPanda endpoint · Create a custom notification endpoint · Create a Datadog endpoint · Create an Microsoft Teams endpoint

  2. Lookup lists

    11

    4 read · 5 write · 2 destructive

    Add elements in bulk · Create lookup list · Add element to a lookup list · Get all/Search lookup elements

  3. Users

    11

    3 read · 4 write · 4 destructive

    Retrieve all users · Create a user · Retrieve a user by ID · Update a user

  4. Dashboards

    9

    5 read · 3 write · 1 destructive

    Create a new dashboard · Get all dashboards · Get dashboard creators · Get dashboards in a folder

  5. Grafana dashboards

    9

    6 read · 2 write · 1 destructive

    Compare dashboards · Create/update a dashboard · Get all tags of dashboards · Get all dashboard versions

  6. Security rules

    9

    2 read · 5 write · 2 destructive

    Create a security rule · Retrieve security rules · Bulk update security rules · Disable a rule

  7. Shared tokens

    9

    4 read · 3 write · 2 destructive

    Create a shared token filter · Create a shared token · Retrieve all shared token filters · Retrieve all shared tokens

  8. Alerts

    8

    3 read · 4 write · 1 destructive

    Retrieve all alerts · Create an alert · Retrieve alert by ID · Update an alert

38 more areas · 138 actions
  • Time based accounts 8
  • Dashboard folders 7
  • Grafana annotations 7
  • Grafana contact points 7
  • Metrics accounts 7
  • Tracing accounts 7
  • Archive logs 6
  • Log shipping tokens 6
  • S3 buckets 6
  • Cloudtrails 5
  • Drop filters 5
  • Grafana alert rules 5
  • Grafana folders 5
  • Grafana snapshots 5
  • Labels 4
  • Query 4
  • Range query 4
  • Restore logs 4
  • Time series 4
  • Grafana silence management 3
  • Parsing 3
  • Security events 3
  • Audit trail 2
  • Authentication groups 2
  • Grafana data source 2
  • Kibana objects 2
  • Label values 2
  • Search logs 2
  • Snapshots 2
  • API tokens 1
  • Associated accounts 1
  • Deployments 1
  • Grafana dashboard search 1
  • Insights 1
  • Metric metadata 1
  • Saved objects 1
  • Security account 1
  • Who am i 1

Top actions

The Logz.io API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 12 of Logz.io's 12 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
logzio.users.list_usersRetrieve all usersRetrieve all users.readidentity.user.list474 connectors
logzio.alerts.get_all_alertsRetrieve all alertsRetrieve all alerts.readmonitoring.monitor.list32 connectors
logzio.users.create_userCreate a userCreate a user.writeidentity.user.create262 connectors
logzio.alerts.create_alertCreate an alertCreate an alert.writemonitoring.monitor.create27 connectors
logzio.users.delete_userDelete a userDelete a user.destructiveidentity.user.delete253 connectors
logzio.search_logs.scrollScroll logsScroll logs.readthis connector
logzio.search_logs.searchSearch logsSearch logs.readthis connector
logzio.parsing.get_log_typesGet all log typesGet all log types.readthis connector
logzio.labels.post_label_namesReturns a list of label names using POSTReturns a list of label names using POST.readthis connector
logzio.query.post_instant_queryEvaluates an instant query at a single point in time using POSTEvaluates an instant query at a single point in time using POST.readthis connector
logzio.s3_buckets.create_bucketsCreate a new S3 bucket connectorCreate a new S3 bucket connector.writethis connector
logzio.snapshots.create_snapshotCreate a snapshotCreate a snapshot.writethis connector

Try it

Prompts to paste into Claude.

Each one names the Logz.io actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Logz.io? List every user and their role.

    callslogzio.users.list_users

  2. Writewrite

    Create a user in Logz.io. Show me exactly what you will send before you save it.

    callslogzio.users.create_user

Governance for Logz.io

Destructive actions wait for a yes.

33 Logz.io actions are destructive. The first 10:

  • Delete a userlogzio.users.delete_user
  • Delete an alertlogzio.alerts.delete_alert
  • Delete an S3 connectorlogzio.s3_buckets.delete_bucket
  • Delete a shared tokenlogzio.shared_tokens.delete_token
  • Delete a shared token filterlogzio.shared_tokens.delete_filter
  • Delete archive settingslogzio.archive_logs.delete_settings
  • Delete a dashboardlogzio.dashboards.delete_a_dashboard
  • Delete a user from all accountslogzio.users.delete_user_recursively
  • Delete a CloudTrail connectorlogzio.cloudtrails.delete_cloud_trail
  • Delete a drop filterlogzio.drop_filters.delete_drop_filter

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dologzio.users.delete_userconfirm_policy: human

Delete a user?

intent: the user asked me to delete a user

run suspended · waiting for a named person · key logzio-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "logzio-agent",  allowed_actions: ["logzio.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "logzio.users.delete_user", approver: "[email protected]" },    { match: "logzio.alerts.delete_alert", approver: "[email protected]" },    { match: "logzio.s3_buckets.delete_bucket", approver: "[email protected]" }  ]}
Illustrative. Scoped to Logz.io only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Logz.io costs on actionlake.

Every Logz.io action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Logz.io refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 225 Logz.io actions
  • 225actions pageeach page of a long list is one call
  • 95reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Logz.io action.

225 actions by area: the id your agent calls, what it does, and its effect.

Notification endpoints21
  • logzio.notification_endpoints.create_big_pandaCreate a BigPanda endpointwrite
  • logzio.notification_endpoints.create_customCreate a custom notification endpointwrite
  • logzio.notification_endpoints.create_data_dogCreate a Datadog endpointwrite
  • logzio.notification_endpoints.create_microsoft_teamsCreate an Microsoft Teams endpointwrite
  • logzio.notification_endpoints.create_ops_genieCreate an OpsGenie endpointwrite
  • logzio.notification_endpoints.create_pager_dutyCreate a PagerDuty endpointwrite
  • logzio.notification_endpoints.create_service_nowCreate an ServiceNow endpointwrite
  • logzio.notification_endpoints.create_slackCreate a Slack endpointwrite
  • logzio.notification_endpoints.create_victoropsCreate a VictorOps endpointwrite
  • logzio.notification_endpoints.delete_endpointDelete an endpointdestructive
  • logzio.notification_endpoints.get_all_endpointsRetrieve all notification endpointsread
  • logzio.notification_endpoints.get_endpoint_by_idRetrieve an endpoint by IDread
  • logzio.notification_endpoints.update_big_pandaUpdate a BigPanda endpointwrite
  • logzio.notification_endpoints.update_customUpdate a custom notification endpointwrite
  • logzio.notification_endpoints.update_data_dogUpdate a Datadog endpointwrite
  • logzio.notification_endpoints.update_microsoft_teamsUpdate an Microsoft Teams endpointwrite
  • logzio.notification_endpoints.update_ops_genieUpdate an OpsGenie endpointwrite
  • logzio.notification_endpoints.update_pager_dutyUpdate a PagerDuty endpointwrite
  • logzio.notification_endpoints.update_service_nowUpdate an ServiceNow endpointwrite
  • logzio.notification_endpoints.update_slackUpdate Slack endpointwrite
  • logzio.notification_endpoints.update_victoropsUpdate a VictorOps endpointwrite
Lookup lists11
  • logzio.lookup_lists.add_lookup_list_elementsAdd elements in bulkwrite
  • logzio.lookup_lists.create_lookup_listCreate lookup listwrite
  • logzio.lookup_lists.create_lookup_list_elementAdd element to a lookup listwrite
  • logzio.lookup_lists.delete_lookup_listDelete lookup listdestructive
  • logzio.lookup_lists.delete_lookup_list_elementDelete elementdestructive
  • logzio.lookup_lists.get_lookup_listGet lookup by IDread
  • logzio.lookup_lists.get_lookup_list_elementGet elementread
  • logzio.lookup_lists.search_lookup_list_elementsGet all/Search lookup elementsread
  • logzio.lookup_lists.search_lookup_listsGet all/Search lookup listsread
  • logzio.lookup_lists.update_lookup_listUpdate lookup listwrite
  • logzio.lookup_lists.update_lookup_list_elementUpdate elementwrite
Users11
  • logzio.users.create_userCreate a userwrite
  • logzio.users.delete_userDelete a userdestructive
  • logzio.users.delete_user_recursivelyDelete a user from all accountsdestructive
  • logzio.users.get_userRetrieve a user by IDread
  • logzio.users.list_all_account_usersRetrieve users in all associated accountsread
  • logzio.users.list_usersRetrieve all usersread
  • logzio.users.suspend_userSuspend a userdestructive
  • logzio.users.suspend_user_recursivelySuspend a user from all accountsdestructive
  • logzio.users.unsuspend_userUnsuspend a userwrite
  • logzio.users.unsuspend_user_recursivelyUnsuspend a user from all accountswrite
  • logzio.users.update_userUpdate a userwrite
Dashboards9
  • logzio.dashboards.create_a_new_dashboardCreate a new dashboardwrite
  • logzio.dashboards.delete_a_dashboardDelete a dashboarddestructive
  • logzio.dashboards.get_all_dashboardsGet all dashboardsread
  • logzio.dashboards.get_dashboard_by_idGet dashboard by IDread
  • logzio.dashboards.get_dashboard_creatorsGet dashboard creatorsread
  • logzio.dashboards.get_folder_dashboardsGet dashboards in a folderread
  • logzio.dashboards.move_a_dashboard_to_a_different_folderMove a dashboard to a different folderwrite
  • logzio.dashboards.search_dashboardsSearch dashboardsread
  • logzio.dashboards.update_an_existing_dashboardUpdate an existing dashboardwrite
Grafana dashboards9
  • logzio.grafana_dashboards.compare_dashboardCompare dashboardsread
  • logzio.grafana_dashboards.create_dashboardCreate/update a dashboardwrite
  • logzio.grafana_dashboards.delete_dashboard_by_uidDelete dashboard by uiddestructive
  • logzio.grafana_dashboards.get_all_dashboard_versionsGet all dashboard versionsread
  • logzio.grafana_dashboards.get_dashboard_by_uidGet dashboard by uidread
  • logzio.grafana_dashboards.get_dashboard_tagsGet all tags of dashboardsread
  • logzio.grafana_dashboards.get_dashboard_versionGet dashboard versionread
  • logzio.grafana_dashboards.get_home_dashboardGet home dashboardread
  • logzio.grafana_dashboards.restore_dashboardRestore a dashboardwrite
Security rules9
  • logzio.security_rules.bulk_delete_security_ruleBulk delete security rulesdestructive
  • logzio.security_rules.bulk_update_security_ruleBulk update security ruleswrite
  • logzio.security_rules.create_security_ruleCreate a security rulewrite
  • logzio.security_rules.delete_security_ruleDelete a security ruledestructive
  • logzio.security_rules.disable_security_ruleDisable a rulewrite
  • logzio.security_rules.enable_security_ruleEnable a rulewrite
  • logzio.security_rules.get_security_ruleRetrieve a security ruleread
  • logzio.security_rules.search_account_security_rulesRetrieve security rulesread
  • logzio.security_rules.update_security_ruleUpdate a security rulewrite
Shared tokens9
  • logzio.shared_tokens.create_filterCreate a shared token filterwrite
  • logzio.shared_tokens.create_tokenCreate a shared tokenwrite
  • logzio.shared_tokens.delete_filterDelete a shared token filterdestructive
  • logzio.shared_tokens.delete_tokenDelete a shared tokendestructive
  • logzio.shared_tokens.get_all_filtersRetrieve all shared token filtersread
  • logzio.shared_tokens.get_all_tokensRetrieve all shared tokensread
  • logzio.shared_tokens.get_filterRetrieve a shared token filter by IDread
  • logzio.shared_tokens.get_tokenRetrieve a shared token by IDread
  • logzio.shared_tokens.update_tokenUpdate a shared tokenwrite
Alerts8
  • logzio.alerts.create_alertCreate an alertwrite
  • logzio.alerts.delete_alertDelete an alertdestructive
  • logzio.alerts.disable_alertDisable alert by IDwrite
  • logzio.alerts.enable_alertEnable alert by IDwrite
  • logzio.alerts.get_alertRetrieve alert by IDread
  • logzio.alerts.get_all_alertsRetrieve all alertsread
  • logzio.alerts.search_triggered_alertsRetrieve triggered alertsread
  • logzio.alerts.update_alertUpdate an alertwrite
Time based accounts8
  • logzio.time_based_accounts.create_time_based_accountCreate a sub accountwrite
  • logzio.time_based_accounts.delete_time_based_accountDelete a sub accountdestructive
  • logzio.time_based_accounts.get_all_detailed_time_based_accountRetrieve detailed information for all accountsread
  • logzio.time_based_accounts.get_detailed_time_based_accountRetrieve detailed account information by account IDread
  • logzio.time_based_accounts.get_time_based_accountRetrieve account settings by IDread
  • logzio.time_based_accounts.list_time_based_accountsRetrieve settings for all accountsread
  • logzio.time_based_accounts.update_time_based_accountUpdate an accountwrite
  • logzio.time_based_accounts.update_warm_tier_retentionUpdate warm tier retentionwrite
Dashboard folders7
  • logzio.dashboard_folders.create_dashboards_folderCreate dashboards folderwrite
  • logzio.dashboard_folders.delete_dashboard_folderDelete dashboard folderdestructive
  • logzio.dashboard_folders.get_all_dashboards_foldersGet all dashboards foldersread
  • logzio.dashboard_folders.get_dashboard_folder_by_idGet dashboard folder by IDread
  • logzio.dashboard_folders.rename_dashboard_folderRename dashboard folderwrite
  • logzio.dashboard_folders.search_dashboard_foldersSearch dashboard foldersread
  • logzio.dashboard_folders.update_dashboard_folderUpdate dashboard folderwrite
Grafana annotations7
  • logzio.grafana_annotations.create_annotationsCreate annotationswrite
  • logzio.grafana_annotations.create_annotations_graphiteCreate annotations in Graphite formatwrite
  • logzio.grafana_annotations.delete_annotationsDelete annotation by iddestructive
  • logzio.grafana_annotations.get_annotationsFind annotationsread
  • logzio.grafana_annotations.get_annotations_tagsGet event tags created in annotationsread
  • logzio.grafana_annotations.patch_annotationsPatch annotationswrite
  • logzio.grafana_annotations.update_annotationsUpdate annotationswrite
Grafana contact points7
  • logzio.grafana_contact_points.create_contact_pointCreate a contact pointwrite
  • logzio.grafana_contact_points.delete_contact_pointDelete a contact pointdestructive
  • logzio.grafana_contact_points.get_notification_policy_treeGet notification policy treeread
  • logzio.grafana_contact_points.list_contact_pointsGet all contact pointsread
  • logzio.grafana_contact_points.reset_notification_policy_treeClears the notification policy treedestructive
  • logzio.grafana_contact_points.set_notification_policy_treeSet notification policy treewrite
  • logzio.grafana_contact_points.update_contact_pointUpdate a contact pointwrite
Metrics accounts7
  • logzio.metrics_accounts.create_metrics_accountCreate a new metrics accountwrite
  • logzio.metrics_accounts.delete_metrics_accountDelete a metrics accountdestructive
  • logzio.metrics_accounts.get_metrics_accountGet a specific metrics accountread
  • logzio.metrics_accounts.get_metrics_account_soft_limitGet a metrics account soft limitread
  • logzio.metrics_accounts.list_metrics_accountsGet a list of all metrics accountsread
  • logzio.metrics_accounts.update_metrics_accountUpdate a metrics accountwrite
  • logzio.metrics_accounts.update_metrics_account_soft_limitUpdate a metrics account soft limitwrite
Tracing accounts7
  • logzio.tracing_accounts.create_tracing_accountCreate a tracing accountwrite
  • logzio.tracing_accounts.delete_tracing_accountDelete a tracing accountdestructive
  • logzio.tracing_accounts.get_tracing_accountGet a specific tracing accountread
  • logzio.tracing_accounts.get_tracing_account_soft_limitGet a tracing account soft limitread
  • logzio.tracing_accounts.list_tracing_accountsGet a list of all tracing accountsread
  • logzio.tracing_accounts.update_tracing_accountUpdate a tracing accountwrite
  • logzio.tracing_accounts.update_tracing_account_soft_limitUpdate a tracing account soft limitwrite
Archive logs6
  • logzio.archive_logs.create_settingsSet up archivingwrite
  • logzio.archive_logs.delete_settingsDelete archive settingsdestructive
  • logzio.archive_logs.get_settingsRetrieve archive settingsread
  • logzio.archive_logs.get_settings_for_accountRetrieve archiving settingsread
  • logzio.archive_logs.test_settingsTest archive settingswrite
  • logzio.archive_logs.update_settingsUpdate archive settingswrite
Log shipping tokens6
  • logzio.log_shipping_tokens.create_new_log_shipping_tokenCreate a log shipping tokenwrite
  • logzio.log_shipping_tokens.delete_log_shipping_tokenDelete a log shipping tokendestructive
  • logzio.log_shipping_tokens.get_log_shipping_token_by_idRetrieve a log shipping token by IDread
  • logzio.log_shipping_tokens.get_log_shipping_tokens_limitsGet number of available tokensread
  • logzio.log_shipping_tokens.search_log_shipping_tokensRetrieve log shipping tokensread
  • logzio.log_shipping_tokens.update_log_shipping_tokenUpdate a log shipping tokenwrite
S3 buckets6
  • logzio.s3_buckets.create_bucketsCreate a new S3 bucket connectorwrite
  • logzio.s3_buckets.delete_bucketDelete an S3 connectordestructive
  • logzio.s3_buckets.get_aws_assume_role_detailsGet account information for IAM Roleread
  • logzio.s3_buckets.get_s3_bucketRetrieve an S3 bucket connector by IDread
  • logzio.s3_buckets.get_s3_bucketsRetrieve all connected S3 bucketsread
  • logzio.s3_buckets.update_bucketUpdate an S3 bucket connectorwrite
Cloudtrails5
  • logzio.cloudtrails.create_cloud_trailCreate a new CloudTrail connectorwrite
  • logzio.cloudtrails.delete_cloud_trailDelete a CloudTrail connectordestructive
  • logzio.cloudtrails.get_account_cloud_trailsRetrieve all connected CloudTrail resourcesread
  • logzio.cloudtrails.get_cloud_trailRetrieve CloudTrail connector by IDread
  • logzio.cloudtrails.update_cloud_trailUpdate a CloudTrail connectorwrite
Drop filters5
  • logzio.drop_filters.activate_drop_filterActivate a drop filterwrite
  • logzio.drop_filters.create_drop_filterCreate drop filterwrite
  • logzio.drop_filters.deactivate_drop_filterDeactivate a drop filterwrite
  • logzio.drop_filters.delete_drop_filterDelete a drop filterdestructive
  • logzio.drop_filters.search_drop_filtersRetrieve drop filtersread
Grafana alert rules5
  • logzio.grafana_alert_rules.create_alert_ruleCreate a new alert rulewrite
  • logzio.grafana_alert_rules.delete_alert_rule_by_uidDelete alert rule by UIDdestructive
  • logzio.grafana_alert_rules.get_alert_rulesReturn a list of all alertsread
  • logzio.grafana_alert_rules.get_alert_rules_by_uidReturn a list of all alerts by UIDread
  • logzio.grafana_alert_rules.put_alert_rules_by_uidAmend an alert by UIDwrite
Grafana folders5
  • logzio.grafana_folders.create_new_grafana_folderCreate a new Grafana folderwrite
  • logzio.grafana_folders.delete_grafana_folder_by_uidDelete a Grafana folder by UIDdestructive
  • logzio.grafana_folders.get_all_foldersGet all foldersread
  • logzio.grafana_folders.get_grafana_folder_by_uidGet Grafana folder by UIDread
  • logzio.grafana_folders.update_grafana_folder_by_uidUpdate a Grafana folder by UIDwrite
Grafana snapshots5
  • logzio.grafana_snapshots.delete_grafana_snapshotby_delete_keyDelete snapshot by deleteKey.destructive
  • logzio.grafana_snapshots.delete_grafana_snapshotby_keyDelete Snapshot by Key.destructive
  • logzio.grafana_snapshots.get_grafana_snapshotGet list of Snapshotsread
  • logzio.grafana_snapshots.get_grafana_snapshotby_keyGet Snapshot by Key.read
  • logzio.grafana_snapshots.post_grafana_snapshotCreate a snapshotwrite
Labels4
  • logzio.labels.get_label_namesReturns a list of label namesread
  • logzio.labels.get_label_names_for_metrics_accountReturns the label names of a metrics account by IDread
  • logzio.labels.post_label_namesReturns a list of label names using POSTread
  • logzio.labels.post_label_names_for_metrics_accountReturns the label names of a metrics account by ID using POSTread
Query4
  • logzio.query.get_instant_queryEvaluates an instant query at a single point in timeread
  • logzio.query.get_instant_query_for_metrics_accountEvaluates an instant query in a metrics account by IDread
  • logzio.query.post_instant_queryEvaluates an instant query at a single point in time using POSTread
  • logzio.query.post_instant_query_for_metrics_accountEvaluates an instant query in a metrics account by ID using POSTread
Range query4
  • logzio.range_query.get_range_queryEvaluates an expression query over a range of timeread
  • logzio.range_query.get_range_query_for_metrics_accountEvaluates a range query in a metrics account by IDread
  • logzio.range_query.post_range_queryEvaluates an expression query over a range of time using POSTread
  • logzio.range_query.post_range_query_for_metrics_accountEvaluates a range query in a metrics account by ID using POSTread
Restore logs4
  • logzio.restore_logs.abort_restore_request_apiDelete a restore operationdestructive
  • logzio.restore_logs.create_restoreInitiate restore operationwrite
  • logzio.restore_logs.get_restore_request_by_id_apiGet an update on a restore operationread
  • logzio.restore_logs.get_restore_requests_for_account_apiRetrieve all restore operationsread
Time series4
  • logzio.time_series.get_series_by_labelsReturns the list of time series that match a certain label set.read
  • logzio.time_series.get_series_by_labels_for_metrics_accountReturns the time series that match a label set in a metrics account by IDread
  • logzio.time_series.post_series_by_labelsReturns the list of time series that match a certain label set using POST.read
  • logzio.time_series.post_series_by_labels_for_metrics_accountReturns the time series that match a label set in a metrics account by ID using POSTread
Grafana silence management3
  • logzio.grafana_silence_management.create_new_silenceCreate new silencewrite
  • logzio.grafana_silence_management.delete_silenceDelete a silencedestructive
  • logzio.grafana_silence_management.get_all_silencesRetrieve all silencesread
Parsing3
  • logzio.parsing.get_log_typeGet pipeline definition for a log typeread
  • logzio.parsing.get_log_typesGet all log typesread
  • logzio.parsing.test_log_type_pipelineParse sample logs with a Sawmill pipelineread
Security events3
  • logzio.security_events.edit_security_rules_eventsEdit security eventswrite
  • logzio.security_events.search_security_rule_event_logsFetch the logs that triggered a security eventread
  • logzio.security_events.search_security_rules_eventsFetch security eventsread
Audit trail2
  • logzio.audit_trail.list_audit_trail_event_typesRetrieve all event types in the audit trailread
  • logzio.audit_trail.search_audit_trailRetrieve a filtered list of audit trail eventsread
Authentication groups2
  • logzio.authentication_groups.get_auth_groupsGet authentication groupsread
  • logzio.authentication_groups.set_auth_groupsCreate/update authentication groupswrite
Grafana data source2
  • logzio.grafana_data_source.get_all_datasourcesReturn a list of data sourcesread
  • logzio.grafana_data_source.get_datasource_by_accountGet a data source for a given accountread
Kibana objects2
  • logzio.kibana_objects.export_saved_objectsExport Kibana objectsread
  • logzio.kibana_objects.import_saved_objectsImport Kibana objectswrite
Label values2
  • logzio.label_values.get_label_valuesReturns a list of label values for a provided label nameread
  • logzio.label_values.get_label_values_for_metrics_accountReturns the values of a label in a metrics account by IDread
Search logs2
  • logzio.search_logs.scrollScroll logsread
  • logzio.search_logs.searchSearch logsread
Snapshots2
  • logzio.snapshots.create_snapshotCreate a snapshotwrite
  • logzio.snapshots.get_snapshotRetrieve a snapshot by IDread
API tokens1
  • logzio.api_tokens.create_sub_account_api_tokenCreate a sub account API token.write
Associated accounts1
  • logzio.associated_accounts.get_related_accountsGet a list of all accounts derived from the accountIdread
Deployments1
  • logzio.deployments.create_markersAdd deployment markers to Exception graphswrite
Grafana dashboard search1
  • logzio.grafana_dashboard_search.search_dashboardSearch folders and dashboardsread
Insights1
  • logzio.insights.get_public_insightsGet the list of Insightsread
Metric metadata1
  • logzio.metric_metadata.get_metric_metadata_for_metrics_accountReturns the metric metadata of a metrics account by IDread
Saved objects1
  • logzio.saved_objects.delete_saved_objectRemove a saved objectdestructive
Security account1
  • logzio.security_account.post_siemCreate SIEM accountwrite
Who am i1
  • logzio.who_am_i.who_am_iRetrieve account informationread

Questions

The Logz.io MCP server, answered.

Is there a Logz.io MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 225 Logz.io actions across notification endpoints, lookup lists, users and dashboards, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Logz.io.

What do I need to connect Logz.io?

Logz.io API token: in Logz.io open Settings > Tools > Manage tokens > API tokens…. Plus your host. The free call account { op: "connections.requirements", service: "logzio" } lists exactly what to paste.

Can an AI agent delete or change things in Logz.io?

Only if its key allows it, and only with an explicit confirmation. 33 Logz.io actions are destructive, including delete a user, delete an alert and delete an S3 connector. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Logz.io API limit?

actionlake paces every call to the limits in the Logz.io service file: 100 calls a minute per connection. Repeated reads are answered from cache (95 Logz.io actions can be), which never reaches Logz.io.

What does a Logz.io action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (225 Logz.io actions page). Cache hits, searches, dry runs and calls Logz.io refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Logz.io API does it cover?

The Logz.io public API (Swagger 2.0, None) at your Logz.io instance's API base URL, which you enter when connecting. It is built from Logz.io's documentation as read on 23 October 2026. 225 actions in 46 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Logz.io data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Logz.io credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Logz.io today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.