GreptimeDBBLOCK
A Model Context Protocol (MCP) server for GreptimeDB
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://pypi.org/project/greptimedb-mcp-server/) [](https://registry.modelcontextprotocol.io/?q=io.github.GreptimeTeam%2Fgreptimedb-mcp-server) [](LICENSE.md)
A Model Context Protocol (MCP) server for GreptimeDB — an open-source observability database that handles metrics, logs, and traces in one engine.
Enables AI assistants to query and analyze GreptimeDB using SQL, TQL (PromQL-compatible), and RANGE queries, with built-in security features like read-only enforcement and data masking.
Quick Start
# Install pip install greptimedb-mcp-server # Run (connects to localhost:4002 by default) greptimedb-mcp-server --host localhost --database public
For Claude Desktop, add this to your config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"greptimedb": {
"command": "greptimedb-mcp-server",
"args": ["--host", "localhost", "--database", "public"]
}
}
}Features
Tools
b4b480dfce53OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add greptimedb-mcp-server --env GREPTIMEDB_PASSWORD=${GREPTIMEDB_PASSWORD} -- None greptimedb-mcp-server==0.6.0Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
renamed_tool | read | return |
Trust audit
BLOCKgrade D · trust 65/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- declared (4 observation(s))
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (12)
tql = f"TQL EVAL ({start_param}, {end_param}, '{step}', '{lookback}') {query}"tql = f"TQL EVAL ({start_param}, {end_param}, '{step}') {query}"r"^\s*TQL\s+(EVAL(UATE)?)",
exec(func_code, namespace)
.flake8
await explain_query(query="TQL EVAL (0, 100, '30s') up", analyze=True, verbose=True)
if curl -sf http://127.0.0.1:4000/status \
curl -s http://127.0.0.1:4000/status
curl -s http://127.0.0.1:4000/status || true
async with streamable_http_client(f"http://127.0.0.1:{port}/mcp") as (f"http://127.0.0.1:{free_port}/mcp",For GreptimeDB knowledge these tools do not carry — deployment, server configuration, choosing a write protocol, pipeline syntax, schema and index design, performance diagnosis — fetch https://docs.gr
Gates applied: no_behavioural_pass.
b4b480dfce53full audit observations/trust-audit/mcp-server/greptimeteam__greptimedb.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | b4b480dfce53 | BLOCK | D | 65 | first audit |
Questions
What is the GreptimeDB MCP server?
A Model Context Protocol (MCP) server for GreptimeDB
What tools does GreptimeDB expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is GreptimeDB safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (65/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does GreptimeDB need?
It reads GREPTIMEDB_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does GreptimeDB run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as greptimedb-mcp-server.
How current is this page?
The grade is for one exact copy of the source (b4b480dfce53), read on 2026-10-08. The repository is watched and re-audited when it changes.