v1.1.0

Added

• Optional bearer-token caller authentication for the SSE and streamable-http transports via --server-auth-token / MCP_GRAFANA_SERVER_TOKEN. When set, callers must present Authorization: Bearer <token> and unauthenticated requests are rejected with 401 before any tool runs. Caller authentication is enforced only when a token is configured; when it isn't, a non-loopback bind still starts but logs a security error at startup (#1059, #1060)
• ask_assistant tool (opt-in, write-gated) for asking Grafana Assistant open-ended questions and getting a full text reply (#1026)
• Agent Observability tool agento11y_manage_agents, in the opt-in agento11y category. Read-only: list for the agent catalog, get for one agent version in full (system prompt, tools, models), list_versions for an agent's version history, and list_version_scores for evaluation score aggregates per version. Needs grafana-agento11y-app.data:read and is registered whether or not write tools are enabled (#1036)
• Agent Observability tool agento11y_manage_eval_collections, in the opt-in agento11y category. Reads cover saved conversations, the collections that group them, and the membership in both directions. The write operations (bookmark and delete a saved conversation; create, update, and delete a collection; add and remove collection members) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#1035)
• Agent Observability eval control-plane tools agento11y_manage_evaluators and agento11y_manage_eval_rules, in the opt-in agento11y category. Reads cover evaluators, evaluator templates, template versions, the judge provider and model catalog, eval rules, and guards. The write operations (evaluator upsert, fork, test, and delete; rule and guard create, update, preview, and delete) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#1028)
• CLI flags to include tool arguments in OpenTelemetry spans and to configure the Grafana client request timeout (#1023)

Fixed

• Declare readOnly/destructive/openWorld hints on every tool (#1051)
• Proxied-tools memory scaling with session count and unbounded per-session tool-store growth (#1001)
• Restrict the Prometheus backend to known Prometheus-compatible datasource types (#1006)
• Respect OTEL_LOGS_EXPORTER=none to disable OTLP log export (#1012)

Changed

• Enrich telemetry to include more tool dimensions (#1016)
• query_pyroscope now returns a per-function table (pprof -top style: flat/cum per fully-qualified function name) by default instead of a line-level DOT call graph. The DOT call graph remains available via format="dot" and no longer deletes the other truncation node (#1025)

Removed

• Support for the undocumented X-Grafana-URL header (#1052)

v1.0.0

Added

• Agent Observability tools: agento11y_manage_conversations and agento11y_manage_generations in a new agento11y category, excluded from the default tool set (#944)
• Inline panel viewer for get_panel_image on MCP Apps-aware hosts, with a dashboard deeplink fallback for other hosts. The deeplink text content is tagged with _meta.ui.kind = "deeplink" so viewers can locate it structurally instead of by string matching (#882)

Fixed

• Enable OTLP trace export with the signal-specific OTEL_EXPORTER_OTLP_TRACES_ENDPOINT environment variable, so operators can ship traces without also exporting logs; the generic OTEL_EXPORTER_OTLP_ENDPOINT still enables both signals (#1004)

Changed

• Tool calls with unknown argument keys are now rejected with an error naming the unknown keys and listing the valid ones, instead of silently ignoring them and answering from default values (#997)

v0.17.2

Security

• Bind environment-configured credentials to the configured Grafana URL. A URL supplied in the X-Grafana-URL request header no longer causes the environment service-account token, deprecated API key, basic auth, or extra headers to be sent to a caller-specified host (#XXX)

v0.17.1

Fixed

• Send the relative path (rather than an absolute URL) to the short-urls API when generating navigation deeplinks (#976)

Security

• Block DNS rebinding attacks on the HTTP and SSE transports (#957)

v0.17.0

Added

• Datasource management tools for creating and updating datasources via the MCP server, gated behind write tools, with schema-guided configuration that follows each datasource type's JSON schema and excludes sensitive credential fields (#939)

Fixed

• Recognize the Athena plugin's rawSQL query field when extracting dashboard panel queries (#956)

v0.16.0

Added

• Snapshot tools (list_snapshots, get_snapshot, create_snapshot, delete_snapshot) for managing Grafana dashboard snapshots (#949)
• Native dashboard schema v2 support in the dashboard tools (#937)
• Quickwit datasource support (#941)
• BigQuery datasource support in run_panel_query (#930)
• Elasticsearch and OpenSearch tools now honor the datasource-configured timeField (#909)
• Relative time syntax (e.g. now-1h) for time range parameters across tools (#942)
• GRAFANA_SERVICE_ACCOUNT_TOKEN_FILE environment variable to read the service account token from a file, supporting rotated tokens (#935)
• Optional startRfc3339/endRfc3339 time range parameters for list_prometheus_metric_names to restrict results to metrics active within a window (#927)
• query_prometheus now surfaces datasource warnings (e.g. partial responses from Thanos) in its result (#946)

Fixed

• Elasticsearch client now refuses HTTP redirects that would drop the request body, preventing malformed queries against redirecting endpoints (#951)
• Propagate forwarded headers to downstream Loki calls by using the configured HTTP transport (#945)

v0.15.2

Fixed

• Docker images are again published to docker.io/grafana/mcp-grafana. v0.15.0 and v0.15.1 Docker images were never published because the shared Docker Hub credential was restricted to read-only. The release workflow now publishes via Grafana's GAR-based Docker Hub mirror pipeline (#925)

v0.15.1

Added

• shorten_url tool for creating Grafana short links from long dashboard or explore URLs (#899)
• Provisioning workflow tools: list_provisioning_repositories for discovering connected repositories, validate_provisioning_file for dry-run validation of provisioning files, and provisioning preview support in get_panel_image and generate_deeplink for rendering dashboards from PR branches before merge (#900)

Changed

• Rendering tools now use a shared transport chain with BaseTransport support for consistent HTTP middleware (#918)

Security

• Redact credentials from debug transport logs to prevent accidental exposure (#920)
• Update Go to 1.26.3 to fix CVE-2026-33810 and bump litellm dependency (#916)

v0.15.0

Added

• Snowflake datasource tools for querying Snowflake through Grafana's /api/ds/query endpoint with macro substitution and template variables (#845)
• Amazon Athena datasource support with schema discovery tools and SQL query execution, including macro substitution and result reuse (#799)
• VictoriaLogs support through existing Loki tools, routing LogsQL queries via the VictoriaLogs HTTP API without adding new tools (#850)
• Loki label-strategy analyzer tools for evaluating label cardinality and optimization opportunities (#885)
• Plugin install and search tools for discovering, inspecting, and installing Grafana plugins (#835)

Fixed

• Scope datasource fallback cache by request path to prevent incorrect cache hits across different API endpoints (#897)
• Release builds now report the correct version via ldflags injection (#895)
• Improved Loki and dashboard tool descriptions for better agent accuracy (#880)
• Add readResponseBody helper to limit and detect oversized responses, preventing excessive memory use (#884)
• Improved timeout error messages for proxied tools with context-aware logging (#881)
• Cap error response body reads to 1KB across all HTTP clients to prevent excessive memory allocation from misbehaving servers (#876)

Changed

• Consolidated duplicated /api/ds/query implementations into a shared helper (#877)

Security

• Update golang.org/x/net to v0.55.0 to address security vulnerability (#901)

v0.14.0

Added

• Generic API request tool for making arbitrary HTTP requests to the Grafana API (#841)
• OpenSearch datasource support (#669)
• Tool to retrieve Grafana plugin information (#826)
• Export logs via OTLP when OTEL_EXPORTER_OTLP_ENDPOINT or OTEL_EXPORTER_OTLP_LOGS_ENDPOINT is set, consistent with existing OTLP trace export (#839)
• Configurable slow-request-threshold logging for identifying long-running tool calls (#756)
• Server instructions now dynamically reflect only the enabled tool categories, preventing agents from attempting to use disabled tools (#829)

Fixed

• Route OnCall tools through IRM plugin proxy for correct on-behalf-of authentication (#842)
• Propagate context to jq operations and return clear errors on non-JSON input (#847)
• Prevent panic in Sift tool when pattern type assertion fails (#834)