andrewbabu/loggly-mcp

Overview

Read-only Model Context Protocol (MCP) server for Loggly /apiv2/ APIs, plus IP intelligence lookups via RDAP, GreyNoise, and AbuseIPDB. Exposes tools for Loggly search, analytics, fields, aggregation-first traffic analysis, and IP context. Write endpoints are blocked.

Best for

Best for
Developers using Loggly who want MCP-based log analysis and IP enrichment

Use cases

• Query Loggly logs through an MCP client
• Enrich IP addresses with threat intelligence data
• Run aggregation queries for traffic analysis

How to use

Install

LOGGLY_SUBDOMAIN=your-subdomain LOGGLY_TOKEN=your-token npx -y @andrewbabu/loggly-mcp

Tested with

Claude Code

Notes

Read-only Model Context Protocol (MCP) server for Loggly /apiv2/ APIs, plus IP intelligence lookups via RDAP, GreyNoise, and AbuseIPDB. Exposes tools for Loggly search, analytics, fields, aggregation-first traffic analysis, and IP context. Write endpoints are blocked.

0 stars on GitHub. Last updated 2026-10-05. Licensed MIT.

Use cases

• Query Loggly logs through an MCP client
• Enrich IP addresses with threat intelligence data
• Run aggregation queries for traffic analysis

Pros

• Read-only design reduces risk of accidental writes
• Combines Loggly search and IP context in one tool
• Built on the standard MCP protocol for easy integration

Cons

• Zero stars indicates limited community validation
• Requires separate API keys for GreyNoise and AbuseIPDB
• Covers only Loggly /apiv2/ endpoints, not all Loggly features

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.