MCP For Claude Marketplace
Azure Log Analytics Workspace

Azure Log Analytics Workspace MCP Connector for Claude

A+

This MCP does exactly one thing: it queries logs from a single Azure Log Analytics table. That's its only function, and nothing else. Incredible for giving your AI secure observability.

1 tools Official Updated Oct 1, 2026 Official Vinkius Partner
More Details Connect to Claude

This server strips away dangerous global Azure permissions. It gives your AI agent one surgical superpower: the ability to run KQL queries on one specific Log Analytics table.

By strictly scoping access, your AI can safely troubleshoot application errors, analyze traffic spikes, and monitor infrastructure without ever gaining access to sensitive audit trails globally.

The Superpowers

  • Absolute Containment: The agent is strictly locked to query a single table. It cannot search across all workspace logs.
  • Native KQL Power: Supports full Kusto Query Language syntax, allowing the AI to filter, parse JSON payloads, and extract insights.
  • Plug & Play Troubleshooting: Instantly gives your agent the eyes and ears it needs to debug production issues autonomously.
kqllog-queryingcloud-monitoringtelemetrytroubleshootingscoped-access

1 tools expose this connector's capabilities to your AI agent.

query_logs

Do NOT include the table name in your query operations. The engine automatically prepends the authorized table name. Just provide the KQL operations (e.g., "| where TimeGenerated > ago(1h) | limit 10"). Execute a Kusto (KQL) query against the configured Log Analytics table

See how to talk to your AI agent using Azure Log Analytics Workspace.

Fetch the last 10 error logs.

I queried the logs using `| where SeverityLevel == 'Error' | sort by TimeGenerated desc | limit 10`. Here are the results...

Find logs where the user ID was 'admin' in the last 24 hours.

I used `| where TimeGenerated > ago(24h) | where UserId == 'admin'` and found 3 relevant log entries.

To enforce zero-trust security. A Workspace often contains sensitive audit trails (like AzureActivity or SecurityEvents). By locking the agent to a specific table (e.g., 'AppExceptions'), you prevent it from reading global infrastructure access logs.

Related Connectors

Gainsight CS

Gainsight CS MCP

12 tools Official

Manage customer success, track health scores, and oversee the timeline via AI agents with Gainsight CS.

A+ View details →
Sliding Window Rate Limiter

Sliding Window Rate Limiter MCP

3 tools Official

Enforces exact API rate limits across parallel agents to prevent 429 errors.

A+ View details →
OpenDataSUS

OpenDataSUS MCP

8 tools Official

Access Brazilian public health data (SUS) directly from your AI. Query datasets, search resources, and analyze health statistics from the official portal.

A+ View details →
Brandwatch

Brandwatch MCP

8 tools Official

Access consumer research via Brandwatch — list projects, track queries, and retrieve social mentions directly from any AI agent.

A+ View details →