Skip to main content
Superlog implements the Model Context Protocol (MCP) over streamable HTTP. Once connected, AI assistants like Claude or Cursor can query your logs, traces, metrics, and incidents in real time — and take actions such as creating dashboards, setting alerts, and tuning investigation filters. MCP endpoint: https://<your-superlog-host>/mcp

Authentication

Two authentication methods are supported.

Personal Access Token

Mint a long-lived token in the dashboard and pass it in the Authorization header. Best for local tools and scripts.

OAuth 2.0

MCP clients that support OAuth can use the standard authorization code flow. Best for multi-user deployments and managed tools.

Personal Access Token (PAT)

PATs are prefixed superlog_pat_... and are created in Settings → API Tokens. Pass one in the Authorization header of every MCP request:

Creating a PAT

1

Open API Tokens

Go to Settings → API Tokens in the Superlog dashboard.
2

Click New Token

Click the New Token button in the top-right corner.
3

Fill in the details

Enter a descriptive name, select the project this token defaults to, and choose an expiry: 30 days, 90 days, or never.
4

Copy the token

Copy the full token value now — it is shown only once and cannot be recovered. If you lose it, revoke it and create a new one.

OAuth 2.0

MCP clients that support OAuth discover Superlog’s authorization server automatically via the protected-resource metadata endpoint:
No manual configuration is required; compatible clients (such as Claude Desktop in OAuth mode) follow the standard authorization code flow.

Configuring Your MCP Client

Claude Desktop

Add a superlog entry to ~/.claude_desktop_config.json:
Restart Claude Desktop after saving the file.

Cursor and Other HTTP MCP Clients

Configure the MCP server in your client’s settings:

Quick Install via Coding Agent

If your AI assistant supports tool-based setup, ask it to run the following prompt — Superlog’s skills package will detect your MCP client and configure everything automatically:

Token Scopes

Use a telemetry-only token when you want an AI assistant to read observability data without the ability to modify dashboards, alerts, or investigation settings.

Managing PATs via the API

You can also manage PATs programmatically using the REST API. All three endpoints require a valid user session (cookie or OAuth token).

List tokens

Returns all tokens for the authenticated user, including their name, associated project, and last-used timestamp. Plaintext values are never returned.

Create a token

Request body
Response — includes plaintext (the full token value, shown once):

Revoke a token

Returns {"ok": true} on success. Returns 404 if the token does not exist or belongs to another user.