--- title: "Logz.io MCP server for AI agents - actionlake" description: "Give Claude 225 Logz.io actions through one MCP server: notification endpoints, lookup lists. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/logz-io updated: 2026-10-23 --- Connectors · MSP & PSA # Logz.io MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Logz.io and the rest of your systems. It gives your agent 225 Logz.io actions (103 reads, 89 writes and 33 that wait for a confirmation) and holds the Logz.io credential itself, so the agent never does. It paces Logz.io's limits and records every call. [Connect Logz.io free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "logzio.users.list_users", intent: "check which Logz.io account is connected" } # Retrieve all users · read · 1 upstream call ``` - 225 actions in one signed file - 103 read look, never change - 89 write create and update - 33 wait for a yes destructive, confirmed first Set up ## Connect Logz.io in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Logz.io. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_token` Logz.io API token: in Logz.io open Settings > Tools > Manage tokens > API tokens… - `host` Where your Logz.io lives: your host ``` account { op: "connections.requirements", service: "logzio" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "logzio.users.list_users" } # retrieve all users · read · 1 upstream call check { action: "logzio.users.create_user", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Logz.io at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_token` **Setup fields** `host` **Limits we pace to** 100 calls a minute, per connection **API covered** Logz.io public API (Swagger 2.0, None), at your Logz.io instance's API base URL, which you enter when connecting **Built from** Logz.io's documentation, read 23 October 2026[OpenAPI spec (GitHub)](https://raw.githubusercontent.com/logzio/logz-api/master/examples/logzio-public-api.yml) [api-docs.logz.io](https://api-docs.logz.io/docs/logz/logz-io-api) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 95 of 103 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line Logz.io up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Logz.io. 225 actions in 46 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **103** read look, never change - **89** write create and update - **33** destructive wait for a confirmation 1. ### Notification endpoints 21 2 read · 18 write · 1 destructive Create a BigPanda endpoint · Create a custom notification endpoint · Create a Datadog endpoint · Create an Microsoft Teams endpoint 2. ### Lookup lists 11 4 read · 5 write · 2 destructive Add elements in bulk · Create lookup list · Add element to a lookup list · Get all/Search lookup elements 3. ### Users 11 3 read · 4 write · 4 destructive Retrieve all users · Create a user · Retrieve a user by ID · Update a user 4. ### Dashboards 9 5 read · 3 write · 1 destructive Create a new dashboard · Get all dashboards · Get dashboard creators · Get dashboards in a folder 5. ### Grafana dashboards 9 6 read · 2 write · 1 destructive Compare dashboards · Create/update a dashboard · Get all tags of dashboards · Get all dashboard versions 6. ### Security rules 9 2 read · 5 write · 2 destructive Create a security rule · Retrieve security rules · Bulk update security rules · Disable a rule 7. ### Shared tokens 9 4 read · 3 write · 2 destructive Create a shared token filter · Create a shared token · Retrieve all shared token filters · Retrieve all shared tokens 8. ### Alerts 8 3 read · 4 write · 1 destructive Retrieve all alerts · Create an alert · Retrieve alert by ID · Update an alert **38 more areas · 138 actions** - Time based accounts **8** - Dashboard folders **7** - Grafana annotations **7** - Grafana contact points **7** - Metrics accounts **7** - Tracing accounts **7** - Archive logs **6** - Log shipping tokens **6** - S3 buckets **6** - Cloudtrails **5** - Drop filters **5** - Grafana alert rules **5** - Grafana folders **5** - Grafana snapshots **5** - Labels **4** - Query **4** - Range query **4** - Restore logs **4** - Time series **4** - Grafana silence management **3** - Parsing **3** - Security events **3** - Audit trail **2** - Authentication groups **2** - Grafana data source **2** - Kibana objects **2** - Label values **2** - Search logs **2** - Snapshots **2** - API tokens **1** - Associated accounts **1** - Deployments **1** - Grafana dashboard search **1** - Insights **1** - Metric metadata **1** - Saved objects **1** - Security account **1** - Who am i **1** Top actions ## The Logz.io API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 12 of Logz.io's 12 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `logzio.users.list_users` Retrieve all users | Retrieve all users. | read | `identity.user.list` 474 connectors | | `logzio.alerts.get_all_alerts` Retrieve all alerts | Retrieve all alerts. | read | `monitoring.monitor.list` 32 connectors | | `logzio.users.create_user` Create a user | Create a user. | write | `identity.user.create` 262 connectors | | `logzio.alerts.create_alert` Create an alert | Create an alert. | write | `monitoring.monitor.create` 27 connectors | | `logzio.users.delete_user` Delete a user | Delete a user. | destructive | `identity.user.delete` 253 connectors | | `logzio.search_logs.scroll` Scroll logs | Scroll logs. | read | this connector | | `logzio.search_logs.search` Search logs | Search logs. | read | this connector | | `logzio.parsing.get_log_types` Get all log types | Get all log types. | read | this connector | | `logzio.labels.post_label_names` Returns a list of label names using POST | Returns a list of label names using POST. | read | this connector | | `logzio.query.post_instant_query` Evaluates an instant query at a single point in time using POST | Evaluates an instant query at a single point in time using POST. | read | this connector | | `logzio.s3_buckets.create_buckets` Create a new S3 bucket connector | Create a new S3 bucket connector. | write | this connector | | `logzio.snapshots.create_snapshot` Create a snapshot | Create a snapshot. | write | this connector | Try it ## Prompts to paste into Claude. Each one names the Logz.io actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Logz.io? List every user and their role. calls `logzio.users.list_users` 2. Write write Create a user in Logz.io. Show me exactly what you will send before you save it. calls `logzio.users.create_user` Governance for Logz.io ## Destructive actions wait for a yes. 33 Logz.io actions are destructive. The first 10: - Delete a user `logzio.users.delete_user` - Delete an alert `logzio.alerts.delete_alert` - Delete an S3 connector `logzio.s3_buckets.delete_bucket` - Delete a shared token `logzio.shared_tokens.delete_token` - Delete a shared token filter `logzio.shared_tokens.delete_filter` - Delete archive settings `logzio.archive_logs.delete_settings` - Delete a dashboard `logzio.dashboards.delete_a_dashboard` - Delete a user from all accounts `logzio.users.delete_user_recursively` - Delete a CloudTrail connector `logzio.cloudtrails.delete_cloud_trail` - Delete a drop filter `logzio.drop_filters.delete_drop_filter` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do logzio.users.delete_user confirm_policy: **human** Delete a user? **intent:** the user asked me to delete a user run suspended · waiting for a named person · key _logzio-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "logzio-agent", allowed_actions: ["logzio.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "logzio.users.delete_user", approver: "lead@example.com" }, { match: "logzio.alerts.delete_alert", approver: "lead@example.com" }, { match: "logzio.s3_buckets.delete_bucket", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Logz.io only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Logz.io costs on actionlake. Every Logz.io action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Logz.io refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 225 Logz.io actions - 225 actions page each page of a long list is one call - 95 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Logz.io action. 225 actions by area: the id your agent calls, what it does, and its effect. **Notification endpoints 21** - `logzio.notification_endpoints.create_big_panda` Create a BigPanda endpoint write - `logzio.notification_endpoints.create_custom` Create a custom notification endpoint write - `logzio.notification_endpoints.create_data_dog` Create a Datadog endpoint write - `logzio.notification_endpoints.create_microsoft_teams` Create an Microsoft Teams endpoint write - `logzio.notification_endpoints.create_ops_genie` Create an OpsGenie endpoint write - `logzio.notification_endpoints.create_pager_duty` Create a PagerDuty endpoint write - `logzio.notification_endpoints.create_service_now` Create an ServiceNow endpoint write - `logzio.notification_endpoints.create_slack` Create a Slack endpoint write - `logzio.notification_endpoints.create_victorops` Create a VictorOps endpoint write - `logzio.notification_endpoints.delete_endpoint` Delete an endpoint destructive - `logzio.notification_endpoints.get_all_endpoints` Retrieve all notification endpoints read - `logzio.notification_endpoints.get_endpoint_by_id` Retrieve an endpoint by ID read - `logzio.notification_endpoints.update_big_panda` Update a BigPanda endpoint write - `logzio.notification_endpoints.update_custom` Update a custom notification endpoint write - `logzio.notification_endpoints.update_data_dog` Update a Datadog endpoint write - `logzio.notification_endpoints.update_microsoft_teams` Update an Microsoft Teams endpoint write - `logzio.notification_endpoints.update_ops_genie` Update an OpsGenie endpoint write - `logzio.notification_endpoints.update_pager_duty` Update a PagerDuty endpoint write - `logzio.notification_endpoints.update_service_now` Update an ServiceNow endpoint write - `logzio.notification_endpoints.update_slack` Update Slack endpoint write - `logzio.notification_endpoints.update_victorops` Update a VictorOps endpoint write **Lookup lists 11** - `logzio.lookup_lists.add_lookup_list_elements` Add elements in bulk write - `logzio.lookup_lists.create_lookup_list` Create lookup list write - `logzio.lookup_lists.create_lookup_list_element` Add element to a lookup list write - `logzio.lookup_lists.delete_lookup_list` Delete lookup list destructive - `logzio.lookup_lists.delete_lookup_list_element` Delete element destructive - `logzio.lookup_lists.get_lookup_list` Get lookup by ID read - `logzio.lookup_lists.get_lookup_list_element` Get element read - `logzio.lookup_lists.search_lookup_list_elements` Get all/Search lookup elements read - `logzio.lookup_lists.search_lookup_lists` Get all/Search lookup lists read - `logzio.lookup_lists.update_lookup_list` Update lookup list write - `logzio.lookup_lists.update_lookup_list_element` Update element write **Users 11** - `logzio.users.create_user` Create a user write - `logzio.users.delete_user` Delete a user destructive - `logzio.users.delete_user_recursively` Delete a user from all accounts destructive - `logzio.users.get_user` Retrieve a user by ID read - `logzio.users.list_all_account_users` Retrieve users in all associated accounts read - `logzio.users.list_users` Retrieve all users read - `logzio.users.suspend_user` Suspend a user destructive - `logzio.users.suspend_user_recursively` Suspend a user from all accounts destructive - `logzio.users.unsuspend_user` Unsuspend a user write - `logzio.users.unsuspend_user_recursively` Unsuspend a user from all accounts write - `logzio.users.update_user` Update a user write **Dashboards 9** - `logzio.dashboards.create_a_new_dashboard` Create a new dashboard write - `logzio.dashboards.delete_a_dashboard` Delete a dashboard destructive - `logzio.dashboards.get_all_dashboards` Get all dashboards read - `logzio.dashboards.get_dashboard_by_id` Get dashboard by ID read - `logzio.dashboards.get_dashboard_creators` Get dashboard creators read - `logzio.dashboards.get_folder_dashboards` Get dashboards in a folder read - `logzio.dashboards.move_a_dashboard_to_a_different_folder` Move a dashboard to a different folder write - `logzio.dashboards.search_dashboards` Search dashboards read - `logzio.dashboards.update_an_existing_dashboard` Update an existing dashboard write **Grafana dashboards 9** - `logzio.grafana_dashboards.compare_dashboard` Compare dashboards read - `logzio.grafana_dashboards.create_dashboard` Create/update a dashboard write - `logzio.grafana_dashboards.delete_dashboard_by_uid` Delete dashboard by uid destructive - `logzio.grafana_dashboards.get_all_dashboard_versions` Get all dashboard versions read - `logzio.grafana_dashboards.get_dashboard_by_uid` Get dashboard by uid read - `logzio.grafana_dashboards.get_dashboard_tags` Get all tags of dashboards read - `logzio.grafana_dashboards.get_dashboard_version` Get dashboard version read - `logzio.grafana_dashboards.get_home_dashboard` Get home dashboard read - `logzio.grafana_dashboards.restore_dashboard` Restore a dashboard write **Security rules 9** - `logzio.security_rules.bulk_delete_security_rule` Bulk delete security rules destructive - `logzio.security_rules.bulk_update_security_rule` Bulk update security rules write - `logzio.security_rules.create_security_rule` Create a security rule write - `logzio.security_rules.delete_security_rule` Delete a security rule destructive - `logzio.security_rules.disable_security_rule` Disable a rule write - `logzio.security_rules.enable_security_rule` Enable a rule write - `logzio.security_rules.get_security_rule` Retrieve a security rule read - `logzio.security_rules.search_account_security_rules` Retrieve security rules read - `logzio.security_rules.update_security_rule` Update a security rule write **Shared tokens 9** - `logzio.shared_tokens.create_filter` Create a shared token filter write - `logzio.shared_tokens.create_token` Create a shared token write - `logzio.shared_tokens.delete_filter` Delete a shared token filter destructive - `logzio.shared_tokens.delete_token` Delete a shared token destructive - `logzio.shared_tokens.get_all_filters` Retrieve all shared token filters read - `logzio.shared_tokens.get_all_tokens` Retrieve all shared tokens read - `logzio.shared_tokens.get_filter` Retrieve a shared token filter by ID read - `logzio.shared_tokens.get_token` Retrieve a shared token by ID read - `logzio.shared_tokens.update_token` Update a shared token write **Alerts 8** - `logzio.alerts.create_alert` Create an alert write - `logzio.alerts.delete_alert` Delete an alert destructive - `logzio.alerts.disable_alert` Disable alert by ID write - `logzio.alerts.enable_alert` Enable alert by ID write - `logzio.alerts.get_alert` Retrieve alert by ID read - `logzio.alerts.get_all_alerts` Retrieve all alerts read - `logzio.alerts.search_triggered_alerts` Retrieve triggered alerts read - `logzio.alerts.update_alert` Update an alert write **Time based accounts 8** - `logzio.time_based_accounts.create_time_based_account` Create a sub account write - `logzio.time_based_accounts.delete_time_based_account` Delete a sub account destructive - `logzio.time_based_accounts.get_all_detailed_time_based_account` Retrieve detailed information for all accounts read - `logzio.time_based_accounts.get_detailed_time_based_account` Retrieve detailed account information by account ID read - `logzio.time_based_accounts.get_time_based_account` Retrieve account settings by ID read - `logzio.time_based_accounts.list_time_based_accounts` Retrieve settings for all accounts read - `logzio.time_based_accounts.update_time_based_account` Update an account write - `logzio.time_based_accounts.update_warm_tier_retention` Update warm tier retention write **Dashboard folders 7** - `logzio.dashboard_folders.create_dashboards_folder` Create dashboards folder write - `logzio.dashboard_folders.delete_dashboard_folder` Delete dashboard folder destructive - `logzio.dashboard_folders.get_all_dashboards_folders` Get all dashboards folders read - `logzio.dashboard_folders.get_dashboard_folder_by_id` Get dashboard folder by ID read - `logzio.dashboard_folders.rename_dashboard_folder` Rename dashboard folder write - `logzio.dashboard_folders.search_dashboard_folders` Search dashboard folders read - `logzio.dashboard_folders.update_dashboard_folder` Update dashboard folder write **Grafana annotations 7** - `logzio.grafana_annotations.create_annotations` Create annotations write - `logzio.grafana_annotations.create_annotations_graphite` Create annotations in Graphite format write - `logzio.grafana_annotations.delete_annotations` Delete annotation by id destructive - `logzio.grafana_annotations.get_annotations` Find annotations read - `logzio.grafana_annotations.get_annotations_tags` Get event tags created in annotations read - `logzio.grafana_annotations.patch_annotations` Patch annotations write - `logzio.grafana_annotations.update_annotations` Update annotations write **Grafana contact points 7** - `logzio.grafana_contact_points.create_contact_point` Create a contact point write - `logzio.grafana_contact_points.delete_contact_point` Delete a contact point destructive - `logzio.grafana_contact_points.get_notification_policy_tree` Get notification policy tree read - `logzio.grafana_contact_points.list_contact_points` Get all contact points read - `logzio.grafana_contact_points.reset_notification_policy_tree` Clears the notification policy tree destructive - `logzio.grafana_contact_points.set_notification_policy_tree` Set notification policy tree write - `logzio.grafana_contact_points.update_contact_point` Update a contact point write **Metrics accounts 7** - `logzio.metrics_accounts.create_metrics_account` Create a new metrics account write - `logzio.metrics_accounts.delete_metrics_account` Delete a metrics account destructive - `logzio.metrics_accounts.get_metrics_account` Get a specific metrics account read - `logzio.metrics_accounts.get_metrics_account_soft_limit` Get a metrics account soft limit read - `logzio.metrics_accounts.list_metrics_accounts` Get a list of all metrics accounts read - `logzio.metrics_accounts.update_metrics_account` Update a metrics account write - `logzio.metrics_accounts.update_metrics_account_soft_limit` Update a metrics account soft limit write **Tracing accounts 7** - `logzio.tracing_accounts.create_tracing_account` Create a tracing account write - `logzio.tracing_accounts.delete_tracing_account` Delete a tracing account destructive - `logzio.tracing_accounts.get_tracing_account` Get a specific tracing account read - `logzio.tracing_accounts.get_tracing_account_soft_limit` Get a tracing account soft limit read - `logzio.tracing_accounts.list_tracing_accounts` Get a list of all tracing accounts read - `logzio.tracing_accounts.update_tracing_account` Update a tracing account write - `logzio.tracing_accounts.update_tracing_account_soft_limit` Update a tracing account soft limit write **Archive logs 6** - `logzio.archive_logs.create_settings` Set up archiving write - `logzio.archive_logs.delete_settings` Delete archive settings destructive - `logzio.archive_logs.get_settings` Retrieve archive settings read - `logzio.archive_logs.get_settings_for_account` Retrieve archiving settings read - `logzio.archive_logs.test_settings` Test archive settings write - `logzio.archive_logs.update_settings` Update archive settings write **Log shipping tokens 6** - `logzio.log_shipping_tokens.create_new_log_shipping_token` Create a log shipping token write - `logzio.log_shipping_tokens.delete_log_shipping_token` Delete a log shipping token destructive - `logzio.log_shipping_tokens.get_log_shipping_token_by_id` Retrieve a log shipping token by ID read - `logzio.log_shipping_tokens.get_log_shipping_tokens_limits` Get number of available tokens read - `logzio.log_shipping_tokens.search_log_shipping_tokens` Retrieve log shipping tokens read - `logzio.log_shipping_tokens.update_log_shipping_token` Update a log shipping token write **S3 buckets 6** - `logzio.s3_buckets.create_buckets` Create a new S3 bucket connector write - `logzio.s3_buckets.delete_bucket` Delete an S3 connector destructive - `logzio.s3_buckets.get_aws_assume_role_details` Get account information for IAM Role read - `logzio.s3_buckets.get_s3_bucket` Retrieve an S3 bucket connector by ID read - `logzio.s3_buckets.get_s3_buckets` Retrieve all connected S3 buckets read - `logzio.s3_buckets.update_bucket` Update an S3 bucket connector write **Cloudtrails 5** - `logzio.cloudtrails.create_cloud_trail` Create a new CloudTrail connector write - `logzio.cloudtrails.delete_cloud_trail` Delete a CloudTrail connector destructive - `logzio.cloudtrails.get_account_cloud_trails` Retrieve all connected CloudTrail resources read - `logzio.cloudtrails.get_cloud_trail` Retrieve CloudTrail connector by ID read - `logzio.cloudtrails.update_cloud_trail` Update a CloudTrail connector write **Drop filters 5** - `logzio.drop_filters.activate_drop_filter` Activate a drop filter write - `logzio.drop_filters.create_drop_filter` Create drop filter write - `logzio.drop_filters.deactivate_drop_filter` Deactivate a drop filter write - `logzio.drop_filters.delete_drop_filter` Delete a drop filter destructive - `logzio.drop_filters.search_drop_filters` Retrieve drop filters read **Grafana alert rules 5** - `logzio.grafana_alert_rules.create_alert_rule` Create a new alert rule write - `logzio.grafana_alert_rules.delete_alert_rule_by_uid` Delete alert rule by UID destructive - `logzio.grafana_alert_rules.get_alert_rules` Return a list of all alerts read - `logzio.grafana_alert_rules.get_alert_rules_by_uid` Return a list of all alerts by UID read - `logzio.grafana_alert_rules.put_alert_rules_by_uid` Amend an alert by UID write **Grafana folders 5** - `logzio.grafana_folders.create_new_grafana_folder` Create a new Grafana folder write - `logzio.grafana_folders.delete_grafana_folder_by_uid` Delete a Grafana folder by UID destructive - `logzio.grafana_folders.get_all_folders` Get all folders read - `logzio.grafana_folders.get_grafana_folder_by_uid` Get Grafana folder by UID read - `logzio.grafana_folders.update_grafana_folder_by_uid` Update a Grafana folder by UID write **Grafana snapshots 5** - `logzio.grafana_snapshots.delete_grafana_snapshotby_delete_key` Delete snapshot by deleteKey. destructive - `logzio.grafana_snapshots.delete_grafana_snapshotby_key` Delete Snapshot by Key. destructive - `logzio.grafana_snapshots.get_grafana_snapshot` Get list of Snapshots read - `logzio.grafana_snapshots.get_grafana_snapshotby_key` Get Snapshot by Key. read - `logzio.grafana_snapshots.post_grafana_snapshot` Create a snapshot write **Labels 4** - `logzio.labels.get_label_names` Returns a list of label names read - `logzio.labels.get_label_names_for_metrics_account` Returns the label names of a metrics account by ID read - `logzio.labels.post_label_names` Returns a list of label names using POST read - `logzio.labels.post_label_names_for_metrics_account` Returns the label names of a metrics account by ID using POST read **Query 4** - `logzio.query.get_instant_query` Evaluates an instant query at a single point in time read - `logzio.query.get_instant_query_for_metrics_account` Evaluates an instant query in a metrics account by ID read - `logzio.query.post_instant_query` Evaluates an instant query at a single point in time using POST read - `logzio.query.post_instant_query_for_metrics_account` Evaluates an instant query in a metrics account by ID using POST read **Range query 4** - `logzio.range_query.get_range_query` Evaluates an expression query over a range of time read - `logzio.range_query.get_range_query_for_metrics_account` Evaluates a range query in a metrics account by ID read - `logzio.range_query.post_range_query` Evaluates an expression query over a range of time using POST read - `logzio.range_query.post_range_query_for_metrics_account` Evaluates a range query in a metrics account by ID using POST read **Restore logs 4** - `logzio.restore_logs.abort_restore_request_api` Delete a restore operation destructive - `logzio.restore_logs.create_restore` Initiate restore operation write - `logzio.restore_logs.get_restore_request_by_id_api` Get an update on a restore operation read - `logzio.restore_logs.get_restore_requests_for_account_api` Retrieve all restore operations read **Time series 4** - `logzio.time_series.get_series_by_labels` Returns the list of time series that match a certain label set. read - `logzio.time_series.get_series_by_labels_for_metrics_account` Returns the time series that match a label set in a metrics account by ID read - `logzio.time_series.post_series_by_labels` Returns the list of time series that match a certain label set using POST. read - `logzio.time_series.post_series_by_labels_for_metrics_account` Returns the time series that match a label set in a metrics account by ID using POST read **Grafana silence management 3** - `logzio.grafana_silence_management.create_new_silence` Create new silence write - `logzio.grafana_silence_management.delete_silence` Delete a silence destructive - `logzio.grafana_silence_management.get_all_silences` Retrieve all silences read **Parsing 3** - `logzio.parsing.get_log_type` Get pipeline definition for a log type read - `logzio.parsing.get_log_types` Get all log types read - `logzio.parsing.test_log_type_pipeline` Parse sample logs with a Sawmill pipeline read **Security events 3** - `logzio.security_events.edit_security_rules_events` Edit security events write - `logzio.security_events.search_security_rule_event_logs` Fetch the logs that triggered a security event read - `logzio.security_events.search_security_rules_events` Fetch security events read **Audit trail 2** - `logzio.audit_trail.list_audit_trail_event_types` Retrieve all event types in the audit trail read - `logzio.audit_trail.search_audit_trail` Retrieve a filtered list of audit trail events read **Authentication groups 2** - `logzio.authentication_groups.get_auth_groups` Get authentication groups read - `logzio.authentication_groups.set_auth_groups` Create/update authentication groups write **Grafana data source 2** - `logzio.grafana_data_source.get_all_datasources` Return a list of data sources read - `logzio.grafana_data_source.get_datasource_by_account` Get a data source for a given account read **Kibana objects 2** - `logzio.kibana_objects.export_saved_objects` Export Kibana objects read - `logzio.kibana_objects.import_saved_objects` Import Kibana objects write **Label values 2** - `logzio.label_values.get_label_values` Returns a list of label values for a provided label name read - `logzio.label_values.get_label_values_for_metrics_account` Returns the values of a label in a metrics account by ID read **Search logs 2** - `logzio.search_logs.scroll` Scroll logs read - `logzio.search_logs.search` Search logs read **Snapshots 2** - `logzio.snapshots.create_snapshot` Create a snapshot write - `logzio.snapshots.get_snapshot` Retrieve a snapshot by ID read **API tokens 1** - `logzio.api_tokens.create_sub_account_api_token` Create a sub account API token. write **Associated accounts 1** - `logzio.associated_accounts.get_related_accounts` Get a list of all accounts derived from the accountId read **Deployments 1** - `logzio.deployments.create_markers` Add deployment markers to Exception graphs write **Grafana dashboard search 1** - `logzio.grafana_dashboard_search.search_dashboard` Search folders and dashboards read **Insights 1** - `logzio.insights.get_public_insights` Get the list of Insights read **Metric metadata 1** - `logzio.metric_metadata.get_metric_metadata_for_metrics_account` Returns the metric metadata of a metrics account by ID read **Saved objects 1** - `logzio.saved_objects.delete_saved_object` Remove a saved object destructive **Security account 1** - `logzio.security_account.post_siem` Create SIEM account write **Who am i 1** - `logzio.who_am_i.who_am_i` Retrieve account information read Questions ## The Logz.io MCP server, answered. **Is there a Logz.io MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 225 Logz.io actions across notification endpoints, lookup lists, users and dashboards, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Logz.io. **What do I need to connect Logz.io?** Logz.io API token: in Logz.io open Settings > Tools > Manage tokens > API tokens…. Plus your host. The free call account { op: "connections.requirements", service: "logzio" } lists exactly what to paste. **Can an AI agent delete or change things in Logz.io?** Only if its key allows it, and only with an explicit confirmation. 33 Logz.io actions are destructive, including delete a user, delete an alert and delete an S3 connector. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Logz.io API limit?** actionlake paces every call to the limits in the Logz.io service file: 100 calls a minute per connection. Repeated reads are answered from cache (95 Logz.io actions can be), which never reaches Logz.io. **What does a Logz.io action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (225 Logz.io actions page). Cache hits, searches, dry runs and calls Logz.io refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Logz.io API does it cover?** The Logz.io public API (Swagger 2.0, None) at your Logz.io instance's API base URL, which you enter when connecting. It is built from Logz.io's documentation as read on 23 October 2026. 225 actions in 46 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Logz.io data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Logz.io credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Logz.io Shares the most action names with - [Site24x7 8](https://actionlake.com/connectors/site24x7) - [ThreatDown Nebula 5](https://actionlake.com/connectors/threatdown-nebula) - [ExtremeCloud IQ 5](https://actionlake.com/connectors/extremecloud-iq) - [ThreatDown OneView 5](https://actionlake.com/connectors/threatdown-oneview) - [UptimeRobot 5](https://actionlake.com/connectors/uptimerobot) - [MSP360 Managed Backup 5](https://actionlake.com/connectors/msp360-managed-backup) Joins with, on shared entities - [Sumo Logic 2](https://actionlake.com/connectors/sumo-logic) - [Grafana 2](https://actionlake.com/connectors/grafana) - [ilert 2](https://actionlake.com/connectors/ilert) - [Sentry 2](https://actionlake.com/connectors/sentry) - [Uptrends 2](https://actionlake.com/connectors/uptrends) - [Checkly 2](https://actionlake.com/connectors/checkly) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Logz.io; the name is the vendor's own. Counts are from the Logz.io service file, version 1.0.0. ## Give your agent Logz.io today. [Connect Logz.io free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/logz-io More: https://actionlake.com/llms.txt