Connect Grafana to your AI client. For your whole team.
The official Grafana MCP runs with one service account token, org-wide, and its README recommends the Editor role. Pick the client your team uses:
Free for your own server · Team from €99 · EU-hosted
Who may do what
One matrix for Grafana, whichever client asks.
| Tool | SRE | Developers | Management |
|---|---|---|---|
| Dashboards | SRE may use Dashboards | Developers may use Dashboards | Management may use Dashboards |
| Data source queries | SRE may use Data source queries | Developers may use Data source queries | Management may not use Data source queries |
| Alerts & incidents | SRE may use Alerts & incidents | Developers may use Alerts & incidents | Management may use Alerts & incidents |
| Logs (Loki) | SRE may use Logs (Loki) | Developers may use Logs (Loki) | Management may not use Logs (Loki) |
| OnCall schedule | SRE may use OnCall schedule | Developers may not use OnCall schedule | Management may not use OnCall schedule |
| Write actions off by default | SRE may not use Write actions | Developers may not use Write actions | Management may not use Write actions |
Masked for every role: IP addresses in log lines, user emails in annotations, contact point addresses.
You set this once. Every user in your team, in every client, gets exactly this.
