← Back to search

mcp-prometheus

GitHub Actions Scanned 26d ago

Model Context Protocol (MCP) server for Prometheus monitoring

npm ↗
B
82.3 / 100

Versions

2.1.1latest
Feb 3, 2026
2.1.0
Feb 3, 2026
2.0.9
Feb 3, 2026
2.0.8
Feb 3, 2026
2.0.7
Feb 3, 2026
+ show 18 moreshow less
2.0.6
Feb 3, 2026
2.0.5
Feb 3, 2026
2.0.4
Feb 3, 2026
2.0.3
Feb 3, 2026
2.0.2
Feb 3, 2026
2.0.1
Feb 3, 2026
2.0.0
Feb 3, 2026
1.0.8
Feb 1, 2026
1.0.9
Feb 1, 2026
1.0.11
Feb 1, 2026
1.0.10
Feb 1, 2026
1.0.7
Dec 10, 2025
1.0.6
Dec 9, 2025
1.0.5
Dec 9, 2025
1.0.4
Dec 9, 2025
1.0.3
Dec 9, 2025
1.0.2
Dec 3, 2025
1.0.1
Dec 3, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 11

getPrometheusStatus
annotations: verified low

Get Prometheus server status: version, build info, and runtime information.

readOnlyHint true
query
annotations: verified low

Execute a PromQL instant query against Prometheus. Returns current metric values.

readOnlyHint true
queryRange
annotations: verified low

Execute a PromQL range query. Returns metric values over a time period.

readOnlyHint true
getRules
annotations: verified low

Get Prometheus alerting and recording rules.

readOnlyHint true
getTargets
annotations: verified low

Get Prometheus scrape targets status. Shows health, errors, last scrape time.

readOnlyHint true
diagnoseNamespace
annotations: verified low

Diagnose a namespace's health: pod status, resource consumption, restarts, storage, network.

readOnlyHint true
diagnoseNode
annotations: verified low

Diagnose a specific node's health: CPU, memory, disk, network, pods running, conditions.

readOnlyHint true
getClusterHealthOverview
annotations: verified low

Get comprehensive cluster health overview. Combines node status, pod health, resource usage, and active alerts. Use as first step for troubleshooting.

readOnlyHint true
compareTimeRanges
annotations: verified low

Compare metric values between two time periods. Useful for before/after analysis (e.g., after deployment).

readOnlyHint true
investigatePod
annotations: verified low

Deep investigation of a specific pod: status, resources, restarts, OOM events, container details.

readOnlyHint true
getTopResourceConsumers
annotations: verified low

Get top resource consumers in the cluster. Identifies pods using most CPU, memory, or network.

readOnlyHint true

Permissions 1

shell high
Server uses shell capabilities via: child_process, spawn()

Scan Findings 49

info
Tool 'getPrometheusStatus' annotations are consistent annotation_checker · 80%
info
Tool 'query' annotations are consistent annotation_checker · 80%
info
Tool 'queryRange' annotations are consistent annotation_checker · 80%
info
Tool 'getRules' annotations are consistent annotation_checker · 80%
info
Tool 'getTargets' annotations are consistent annotation_checker · 80%
info
Tool 'diagnoseNamespace' annotations are consistent annotation_checker · 80%
info
Tool 'diagnoseNode' annotations are consistent annotation_checker · 80%
info
Tool 'getClusterHealthOverview' annotations are consistent annotation_checker · 80%
info
Tool 'compareTimeRanges' annotations are consistent annotation_checker · 80%
info
Tool 'investigatePod' annotations are consistent annotation_checker · 80%
info
Tool 'getTopResourceConsumers' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-89xv-2j6f-qhc8) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-q382-vc8q-7jhj) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-wvj2-96wp-fq3f) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-xw59-hvm2-8pj6) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-4569) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-4770) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-4773) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-5771) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.38.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.31.0 (GO-2026-5970) dependency_analyzer · 95%
info
Tool: getPrometheusStatus manifest_parser · 85%
info
Tool: query manifest_parser · 85%
info
Tool: queryRange manifest_parser · 85%
info
Tool: getRules manifest_parser · 85%
info
Tool: getTargets manifest_parser · 85%
info
Tool: diagnoseNamespace manifest_parser · 85%
info
Tool: diagnoseNode manifest_parser · 85%
info
Tool: getClusterHealthOverview manifest_parser · 85%
info
Tool: compareTimeRanges manifest_parser · 85%
info
Tool: investigatePod manifest_parser · 85%
info
Tool: getTopResourceConsumers manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
info
SBOM generated: 31 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package 'mcp-prometheus' matches no manifest in the repo identity_guard · 70%