MCP endpoint
Authentication
You can authenticate MCP requests with either a Personal Access Token (PAT) or an OAuth 2.0 token. Both are passed as a standardAuthorization: Bearer <token> header.
Personal Access Tokens
PATs are the fastest way to get started. They’re scoped to a specific project and are shown only once at creation time.1
Open API Tokens settings
Navigate to Settings → Project → MCP tokens in the Superlog dashboard.
2
Mint a new token
Click New Token, give it a descriptive name, select the project it should default to, and choose an expiry (or select “never”).
3
Copy the token
The plaintext token starts with
superlog_pat_ and is displayed only once. Copy it now and store it in your secrets manager or shell environment.OAuth 2.0
MCP clients that support OAuth 2.0 (such as Claude Desktop and Cursor) can authenticate via the standard authorization code flow. The well-known metadata endpoint is:Quick install with the dashboard button
The dashboard includes a Connect MCP button under Settings → MCP that walks you through connecting Claude Code, Cursor, or Codex with one command. Select your client and run the generated command in your terminal:https://api.superlog.sh/mcp URL. Pass your PAT as Authorization: Bearer <token> in the request headers.
Skills install prompt
For AI coding agents that support skill installation, run this prompt to have the agent configure Superlog automatically:Available tools
Telemetry
Query the raw OpenTelemetry data flowing into your project.Incidents
Dashboards
Agent configuration
Projects
Alerts
Telemetry-only mode
PATs minted with thesuperlog:telemetry scope give access only to the telemetry tools (query_logs, query_traces, query_metrics, list_services). All incident, dashboard, agent config, and alert tools are unavailable in this mode. Use telemetry-only tokens when you want to give a tool read access to raw data without the ability to modify project configuration.
Telemetry-only sessions also omit the agent configuration instructions that Superlog normally injects into the MCP
initialize response, since those instructions reference tools that aren’t available in the restricted scope.