HoneycombSAFE
Allows Honeycomb Enterprise customers to use AI to query and analyze their data, alerts, dashboards, and more; and cross-reference production behavior with the codebase.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
⚠️ DEPRECATED: This self-hosted MCP server is deprecated. Please migrate to the hosted Honeycomb Model Context Protocol (MCP) solution at Honeycomb MCP Documentation.
A Model Context Protocol server for interacting with Honeycomb observability data. This server enables LLMs like Claude to directly analyze and query your Honeycomb datasets across multiple environments.
Requirements
- Node.js 18+
- Honeycomb API key with full permissions:
- Query access for analytics
- Read access for SLOs and Triggers
- Environment-level access for dataset operations
Honeycomb MCP is effectively a complete alternative interface to Honeycomb, and thus you need broad permissions for the API.
Honeycomb Enterprise Only
Currently, this is only available for Honeycomb Enterprise customers.
How it works
Today, this is a single server process that you must run on your own computer. It is not authenticated. All information uses STDIO between your client and the server.
Installation
pnpm install pnpm run build
The build artifact goes into the /build folder.
Configuration
To use this MCP server, you need to provide Honeycomb API keys via environment variables in your MCP config.
{
"mcpServers": {
"honeycomb": {
"command": "node",
"args": [
"/fully/qualified/path/to/honeycomb-mcp/build/index.mjs"
],
"env": {
"HONEYCOMB_API_KEY": "your_api_key"
}
}
}
}For multiple environments:
{
"mcpServers": {
"honeycomb": {
"command": "node",
"args": [
"/fully/qualified/path/to/honeycomb-mcp/build/index.mjs"
],
"env": {
"HONEYCOMB_ENV_PROD_API_KEY": "your_prod_api_key",
"HONEYCOMB_ENV_STAGING_API_KEY": "your_staging_api_key"
}
}
e435e78cd214OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add honeycomb-mcp --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env GEMINI_API_KEY=${GEMINI_API_KEY} --env HONEYCOMB_API_KEY=${HONEYCOMB_API_KEY} --env HONEYCOMB_CACHE_AUTH_TTL=${HONEYCOMB_CACHE_AUTH_TTL} -- npx -y @honeycombio/[email protected]{
"mcpServers": {
"honeycomb-mcp": {
"command": "npx",
"args": [
"-y",
"@honeycombio/[email protected]"
],
"env": {
"ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
"GEMINI_API_KEY": "${GEMINI_API_KEY}",
"HONEYCOMB_API_KEY": "${HONEYCOMB_API_KEY}",
"HONEYCOMB_CACHE_AUTH_TTL": "${HONEYCOMB_CACHE_AUTH_TTL}"
}
}
}
}Exposed tools (12)
10 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
filepath | read | Path to the file being instrumented |
get_board | read | Retrieves a specific board (dashboard) from a Honeycomb environment. This tool returns a detailed object containing the board |
get_slo | read | Retrieves a specific SLO (Service Level Objective) by ID with detailed information. This tool returns a detailed object containing the SLO |
get_trigger | write | Retrieves a specific trigger (alert) by ID with detailed information. This tool returns a detailed object containing the trigger |
instrumentation-guidance | read | OpenTelemetry Instrumentation guidance optimized for Honeycomb |
language | read | Programming language of the code to instrument |
list_boards | read | Lists available boards (dashboards) for a specific environment with pagination, sorting, and search support. Returns board IDs, names, descriptions, creation times, and last update times. |
list_columns | read | Lists all columns available in the specified dataset, including their names, types, descriptions, and hidden status. Supports pagination, sorting by type/name/created_at, and searching by name/description. Note: __all__ is NOT supported as a dataset name. |
list_datasets | read | Lists available datasets for the active environment with pagination, sorting, and search support. Returns dataset names, slugs, descriptions, and timestamps. |
list_markers | read | Lists available markers (deployment events) for a specific dataset or environment with pagination, sorting, and search support. Returns IDs, messages, types, URLs, creation times, start times, and end times. |
list_recipients | read | Lists available recipients for notifications in a specific environment. This tool returns a list of all recipients available in the specified environment, including their names, types, targets, and metadata. |
run_query | write | Executes a Honeycomb query, returning results with statistical summaries. CRITICAL RULE: For COUNT operations, NEVER include a |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
zod, @anthropic-ai/sdk, @google/genai, @modelcontextprotocol/sdk, @total-typescript/tsconfig, @types/mustache, @types/node, @vitest/coverage-v8
- Honeycomb API key with full permissions:
img/logo.png
Gates applied: no_behavioural_pass.
e435e78cd214full audit observations/trust-audit/mcp-server/honeycombio__honeycomb-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | e435e78cd214 | SAFE | B | 89 | first audit |
Questions
What is the Honeycomb MCP server?
Allows Honeycomb Enterprise customers to use AI to query and analyze their data, alerts, dashboards, and more; and cross-reference production behavior with the codebase.
What tools does Honeycomb expose?
12 in total: 10 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Honeycomb safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Honeycomb need?
It reads ANTHROPIC_API_KEY, GEMINI_API_KEY, HONEYCOMB_API_KEY, HONEYCOMB_CACHE_AUTH_TTL, HONEYCOMB_ENV_PROD_API_KEY, HONEYCOMB_ENV_STAGING_API_KEY and OPENAI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Honeycomb run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @honeycombio/honeycomb-mcp at 0.0.1.
How current is this page?
The grade is for one exact copy of the source (e435e78cd214), read on 2026-10-08. The repository is watched and re-audited when it changes.