Grafana Cloud for AI agents

Grafana Cloud is the hosted version of Grafana's observability stack, letting agents query metrics, logs, traces, dashboards, and incidents across a monitored environment. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Connect Grafana Cloud See the 118 actions ↓

DevOps and monitoringOAuth 2.0 (MCP)MCP + RESTgrafana.com

AUDIT LOG · GRAFANA CLOUDPOLICY: acme-support

09:41:07 · claude · u_8f2read

grafana_cloud.list_teams

List teams✓ allowed · 212ms

09:41:08 · claude · u_8f2read

grafana_cloud.get_plugin

Get plugin✓ allowed · 164ms

09:41:09 · claude · u_8f2write

grafana_cloud.create_folder

Create folder✓ approved · approved by user

09:41:12 · claude · u_8f2destructive

grafana_cloud.delete_snapshot

Delete snapshot✕ blocked · policy: deny

EVERY GRAFANA CLOUD CALL, ON THE RECORD

01 · USE CASES

What agents do in Grafana Cloud.

Query recent error logs

Run a Loki query for error-level logs in a service over the last hour to help debug an incident.

Check active alerts

List currently firing alert rules to see what is contributing to a reported outage.

Create an incident with approval

Open a new incident record only after an on-call engineer confirms the issue is real.

02 · ACTIONS

118 Grafana Cloud actions, graded by risk.

Every Grafana Cloud action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

Look things up. Allowed by default.

grafana_cloud.get_plugin
Get plugin
grafana_cloud.list_teams
List teams
grafana_cloud.get_incident
Get incident
grafana_cloud.get_snapshot
Get snapshot
grafana_cloud.query_athena
Query athena
grafana_cloud.get_assertions
Get assertions
grafana_cloud.get_datasource
Get datasource
grafana_cloud.list_all_roles
List all roles
grafana_cloud.list_incidents
List incidents
grafana_cloud.list_snapshots
List snapshots
grafana_cloud.query_graphite
Query graphite
grafana_cloud.query_influxdb
Query influxdb
grafana_cloud.query_quickwit
Query quickwit
grafana_cloud.search_folders
Search folders
grafana_cloud.get_alert_group
Get alert group
grafana_cloud.get_annotations
Get annotations

+ 64 MORE

write

Create and change things. Allow, or ask the user first.

grafana_cloud.create_folder
Create folder
grafana_cloud.create_incident
Create incident
grafana_cloud.create_snapshot
Create snapshot
grafana_cloud.update_incident
Update incident
grafana_cloud.update_dashboard
Update dashboard
grafana_cloud.create_annotation
Create annotation
grafana_cloud.create_datasource
Create datasource
grafana_cloud.update_annotation
Update annotation
grafana_cloud.update_datasource
Update datasource
grafana_cloud.update_alert_group
Update alert group
grafana_cloud.create_investigation
Create investigation
grafana_cloud.add_activity_to_incident
Add activity to incident
grafana_cloud.ask_assistant
Ask assistant
grafana_cloud.install_plugin
Install plugin
grafana_cloud.run_panel_query
Run panel query
grafana_cloud.tempo_get_trace
Tempo get-trace

+ 21 MORE

destructive

Delete, cancel or archive. Ask first, or deny outright.

grafana_cloud.delete_snapshot
Delete snapshot

03 · HOW IT WORKS

Grafana Cloud in three steps.

01Your users connect Grafana CloudThey sign in to Grafana Cloud on Arc0 Connect, under your brand, and approve the access you ask for.
02You set the rulesReads run, writes like “create folder” can wait for the user, and “delete snapshot” can be denied outright.
03Any agent can actYour agent calls Grafana Cloud through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.

POLICY.TS

await arc0.policies.set('grafana_cloud', {
  read: 'allow',
  write: 'ask',        // create_folder
  destructive: 'deny',  // delete_snapshot
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2

04 · AUTH AND DATA

How Grafana Cloud connects.

Grafana Cloud runs its own MCP server behind OAuth. Arc0 registers the client, users approve access on Arc0 Connect, and your agent reaches Grafana Cloud through the same endpoint, policies and audit log as every other app.

The same Grafana Cloud connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH: OAuth 2.0 (MCP)
CREDENTIALS: Per-tenant encrypted vault
MODEL SEES: Results only, never credentials
AUDIT LOG: Every call, on every plan

05 · WORKS WITH

Use Grafana Cloud from any agent.

Claude

ChatGPT

Cursor

Codex

VS Code

OpenAI Agents SDK

Claude Agent SDK

Vercel AI SDK

Mastra

LangGraph

06 · RELATED

More devops and monitoring apps.

PagerDuty368 actions

ServiceNow171 actions

New Relic159 actions

Better Stack117 actions

ALL DEVOPS AND MONITORING APPS →

07 · FAQ

Grafana Cloud and Arc0, answered.

Q01

Can I use Grafana Cloud with Claude, ChatGPT or Cursor?

Yes. Connect Grafana Cloud to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Grafana Cloud actions you allow.

Q02

How do users connect Grafana Cloud?

Q03

Which Grafana Cloud actions can my agent take?

118 in total: 80 read, 37 write and 1 destructive, such as “create folder”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Grafana Cloud?

Yes. Actions like “delete snapshot” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Grafana Cloud too?

Yes. The same Grafana Cloud connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Grafana Cloud into your agent.

Your users connect Grafana Cloud once, under your brand. Your agent gets 118 actions behind your policies, with every call on the record.

Connect Grafana Cloud Browse all apps →

Free to build · MCP + REST · Audit log on every plan