MCP Server
Requires Node.js 18+, plus an API key and environment ID from Console > Profile > API Settings. Package: log10x-mcp on npm.
Config
{
"mcpServers": {
"log10x": {
"command": "npx",
"args": ["-y", "log10x-mcp"],
"env": {
"LOG10X_API_KEY": "your-api-key",
"LOG10X_ENV_ID": "your-env-id"
}
}
}
}
Optional log analyzer credentials
Setting log analyzer credentials in the MCP host's env block unlocks executed-mode behavior in tools that scan or analyze your log analyzer directly — most prominently Dependency check (returns the actual list of dashboards / alerts referencing a pattern instead of paste-ready bash) and POC submit. When omitted, the affected tools fall back to paste-ready output. All scans are read-only.
| Vendor | Env vars |
|---|---|
| Splunk | SPLUNK_HOST + SPLUNK_TOKEN (basic-auth and ~/.splunkrc also accepted; SPLUNK_WEB_URL overrides the derived :8000 web URL) |
| Datadog | DD_API_KEY + DD_APP_KEY (DATADOG_* aliases work; DD_SITE for site routing) |
| AWS / CloudWatch | Standard AWS credential chain (AWS_PROFILE, IAM role, etc.) |
| Elasticsearch (via Kibana) | KIBANA_URL + KIBANA_API_KEY (or ELASTIC_API_KEY) |
vendor and destination arguments are auto-detected when exactly one set of log analyzer creds is present. With multiple, the tool returns a structured "ambiguous" response listing the candidates.
Retriever tunables
| Env var | Default | Effect |
|---|---|---|
LOG10X_RETRIEVER_SERIES_USE_SUMMARIES |
off | When set, Series and other rollup-shaped tools route through the summaries pathway (qrs/) instead of events (qr/). Counts stay exact across all matched events at any window size. See Summaries for the trade-off. |
LOG10X_RETRIEVER_QUERY_PATH |
/streamer/query |
Override the engine REST path for POST /streamer/query. Set when fronting the Retriever query endpoint behind a different route. |
Clients
| Client | Config location | Setup |
|---|---|---|
| Claude Desktop | macOS: ~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\ |
Paste the config into mcpServers, restart Claude Desktop |
| Claude Code | CLI — no file edit | claude mcp add --transport stdio --env LOG10X_API_KEY=KEY --env LOG10X_ENV_ID=ID log10x -- npx -y log10x-mcp |
| Cursor / Windsurf / other | Varies by client | Paste the config into mcpServers |
Multiple Environments
Distinct entries per environment (e.g., log10x-prod, log10x-staging) — ask "check prod costs" and the assistant routes by name. For 10+ environments, set LOG10X_ENVS to a JSON array and route by nickname from a single process: