Log inSubmit server
Log10x MCP logo

Log10x MCP

Analyzes log volume, cost, incidents, savings, and mitigation options through MCP tools backed by Log10x metrics.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Log10x MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "log10x-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "log10x-mcp"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Automated check passed— started and listed 58 tools correctly (12d ago).

Overview

Log10x MCP MCP server connects MCP-compatible assistants to the 10x platform for log-cost analysis, pattern discovery, incident investigation, savings estimates, and mitigation planning. It groups repeated log lines into message types, ranks them by volume and cost, and returns structured answers using per-pattern metrics. Account access requires a Log10x API key, while an unkeyed installation runs read-only against a public demo dataset. Use it to investigate cost changes, plan compaction or offload actions, estimate savings from local data, or configure fetch-back workflows.

Use cases

  • Rank log patterns by volume and cost
  • Investigate service cost spikes and incidents
  • Estimate savings from local files or SIEM data
  • Plan pattern compaction, tiering, or offload
  • Retrieve offloaded events from S3

Key features

  • Per-pattern volume and cost analysis
  • Incident timelines with confidence signals
  • Savings estimation and commitment reporting
  • Pattern mitigation recommendations
  • S3 Retriever event queries
  • Source and binary symbol compilation

Tools58

What Log10x MCP lets your agent do. Expand a tool for its parameters.

Verified live~53.1k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

9/9 checks healthy over the last 37d

What it can do

From the 58 tools this server returned when we ran it; 58 declare their own safety hints.

Runs commands · 4Can delete or modify data · 2Handles credentials · 14Makes network requests · 40Read-only tools · 52
Network at startup5 connections
Files written at startup1
Install scriptsNone
npm provenanceSigned build
Package age201 days
Maintainers1

Observed 2026-10-30 in an isolated sandbox. A description of reach, not a security audit.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 13d ago via OSV.dev · log10x-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars1Stargazers on the source repository.
npm downloads10kPackage downloads in the last 30 days.
Last commit3d agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed58Callable tools this server registers over MCP.

How Log10x MCP works

What Log10x MCP MCP server does

Log10x MCP MCP server exposes the 10x platform through MCP tools for assistants such as Claude, Cursor, and Windsurf. It works with 10x's grouped log data, where repeated lines are represented as message types and ranked by volume and cost. Names are derived from compiled symbols, allowing the same message type to be identified across nodes using the same engine, library, and configuration.

The server supports questions about cost increases, high-volume services, incidents, savings, and individual log patterns. It can also provide installation guidance for a pipeline, recommend actions for services, and help configure retrieval of events that were offloaded to the user's storage.

How it works

With a Log10x API key, account-scoped tools use the environments available to the connected account. GitHub sign-in can create and store a key, while LOG10X_API_KEY allows direct configuration. Without a key, the server starts in read-only demo mode against a public dataset. Mutating operations are disabled in that mode.

The analysis tools expose per-pattern metrics and can compare changes over time. Investigation calls return timelines, related patterns, temporal evidence, and confidence information rather than presenting correlation as confirmed causation. Mitigation tools can examine examples and trends before choosing actions such as sampling, dropping, compacting, tiering down, or offloading a message type.

Setting LOG10X_DEMO_FALLBACK=off changes an unkeyed startup to POC mode. In that mode, local-file and SIEM-based savings estimates remain available, while account analysis, savings, and Retriever tools are omitted. The selected mode is fixed until the process is restarted.

Setup and configuration

Install the package as a stdio MCP server with npx -y log10x-mcp. Claude Code uses claude mcp add --transport stdio, and Claude Desktop, Cursor, Windsurf, and other MCP clients use an mcpServers entry with the npx command and package argument. The API key is optional for demo mode.

Useful configuration includes LOG10X_ENV_ID to select an environment, LOG10X_API_BASE to override the API endpoint, and LOG10X_MCP_READ_ONLY=true or 1 to prevent mutations. Bring-your-own-metrics setups can point to Prometheus, Grafana Cloud, Mimir, Thanos, or Amazon Managed Service for Prometheus through the documented customer-metrics variables. Datadog and Prometheus credentials are available for backfilling per-pattern metrics.

Chart output is optional. chart.js and chartjs-node-canvas must be installed separately; otherwise chart requests render as text. Elasticsearch, Azure Monitor, GCP Cloud Logging, Azure App Configuration, and GCP Secret Manager support also depends on optional SDK packages.

Tools and capabilities

The Log10x MCP MCP server includes tools for:

  • Guided entry points, release information, and change summaries.
  • GitHub sign-in, login status, and environment creation.
  • Installation advice, retriever setup, engine configuration, and recurring Lambda setup.
  • Local-file and SIEM proof-of-concept savings reports.
  • Projected savings, realized savings, and commitment reporting.
  • Top patterns, service-level cost drivers, moved metrics, and incident investigation.
  • Pattern examples, trends, and mitigation actions.
  • Retriever registration and event queries against user-managed S3 storage.
  • Compiling source code, binaries, and container images into a symbol library, with link and status operations.

For AWS Lambda estates, the installation guidance describes a Lambda extension paired with the function's OpenTelemetry collector, a CDK construct, and an AWS-native recurring process using an S3 configuration plane.

Limitations and notes

The server does not prove incident causality; investigation results include confidence and temporal evidence. Account-scoped features need a Log10x API key, and the public demo dataset is read-only. POC mode is limited to savings estimates and does not provide the account analysis or Retriever tools.

Retriever fetch-back requires the relevant endpoint and bucket configuration. Offload-related tools use configured S3 buckets, and exact events are retrieved from the user's own S3. Optional connectors and chart dependencies are not installed by the default package command. The repository is MIT licensed, while access to Log10x product functionality is controlled by a separate product license or API key.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Log10x MCP

Log10x MCP is an MCP server that connects AI assistants to the Log10x 10x platform. Its main tools analyze log costs, rank repeated message patterns, investigate incidents, estimate savings, recommend mitigation actions, configure installation, and retrieve offloaded events from S3. It can run with an API key or read-only demo data.

Install it as a stdio server with `npx -y log10x-mcp`. Claude Code can add it with `claude mcp add --transport stdio`; Claude Desktop, Cursor, Windsurf, and other MCP clients use an `mcpServers` entry with the command and package argument. Add `LOG10X_API_KEY` for account access, or omit it for demo mode.

Yes, it starts in read-only mode against a public Log10x demo dataset when no key is supplied. Account-scoped and mutating tools are unavailable in that mode. Set `LOG10X_DEMO_FALLBACK=off` instead to use POC mode for savings estimates from local files or SIEM data.

Use the POC tools `log10x_poc_from_local`, `log10x_poc_from_siem_submit`, and `log10x_poc_from_siem_status`. They produce a no-install savings report from a local log file or an existing log platform. These tools run locally and are also available during keyless startup.

Yes, the Retriever tools can fetch exact offloaded events from the user's S3 storage. Configure the Retriever endpoint and bucket, or use `log10x_retriever_register`, and set any required target or authentication variables. The setup also supports a CloudWatch log group for diagnosing zero-result queries.

Related MCP servers

All in Monitoring All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewLog10x MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/log10x-mcp?style=directory)](https://allmcps.com/mcp/log10x-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/log10x-mcp"><img src="https://allmcps.com/api/badge/log10x-mcp?style=directory" alt="Log10x MCP on AllMCPs" /></a>