← MCP Security Catalog

Grafana UI MCP Server 1.2.0

npm · @shelldandy/grafana-ui-mcp-server · latest release

Verified with no proven findings
Security result
1
Observed tools
29
Version rating
100
Change risk

Independent inventory

Observed 2026-08-17T23:38:22.838Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
grafana_uiUnified tool for accessing Grafana UI components, documentation, themes, and metadata
Input schema
{
  "type": "object",
  "properties": {
    "action": {
      "type": "string",
      "enum": [
        "get_component",
        "get_demo",
        "list_components",
        "get_metadata",
        "get_directory",
        "get_documentation",
        "get_stories",
        "get_tests",
        "search",
        "get_theme_tokens",
        "get_dependencies"
      ],
      "description": "The action to perform"
    },
    "componentName": {
      "type": "string",
      "description": "Name of the Grafana UI component (e.g., \"Button\", \"Alert\")"
    },
    "query": {
      "type": "string",
      "description": "Search query string (required for search action)"
    },
    "includeDescription": {
      "type": "boolean",
      "description": "Whether to search in documentation content (default: false)"
    },
    "category": {
      "type": "string",
      "description": "Token category to filter by (colors, typography, spacing, shadows, etc.)"
    },
    "deep": {
      "type": "boolean",
      "description": "Whether to analyze dependencies recursively (default: false)"
    },
    "path": {
      "type": "string",
      "description": "Path within the repository (default: components directory)"
    },
    "owner": {
      "type": "string",
      "description": "Repository owner (default: \"grafana\")"
    },
    "repo": {
      "type": "string",
      "description": "Repository name (default: \"grafana\")"
    },
    "branch": {
      "type": "string",
      "description": "Branch name (default: \"main\")"
    }
  },
  "required": [
    "action"
  ]
}

Resources 2

Resource templates 2

Prompts 5

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 291153007b24b08c86825b02c3908f0ab1282feb01ef2c6b3e239708eed360c6

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.