Universal MCP server for application log intelligence across Datadog, Grafana Loki, AWS CloudWatch, and local files.
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"logintel-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# LogIntel MCP Server [](https://www.python.org/downloads/) [](https://python-poetry.org/) [](LICENSE) [](https://github.com/firas-mcp-servers/logintel-mcp-server/actions/workflows/test.yml) > **Universal Model Context Protocol (MCP) server** that connects LLMs to application logs across Datadog, Grafana Loki, AWS CloudWatch, and local log files. Ask your AI assistant questions like: - *"Why did orders spike at 2 AM?"* - *"Find all timeout errors in the payment service from last hour"* - *"Correlate 500 errors across api, payment, and db services"* - *"Compare error rates before and after the deployment at 3 PM"* ## Features - 🔌 **Multi-backend support** — Datadog, Grafana Loki, AWS CloudWatch, local files - 🔍 **Natural language queries** — Ask in plain English, get structured results - 📁 **Local file provider** — Search, filter, tail, and aggregate JSON/regex/plain-text logs - ☁️ **CloudWatch provider** — Query AWS CloudWatch Logs Insights with natural language - 📊 **Datadog provider** — Search and aggregate via Datadog Logs v2 API - 🔥 **Loki provider** — Query Grafana Loki with LogQL label matchers and metric queries - 🧠 **Intelligent analysis** — Root cause analysis, cross-service correlation, anomaly detection - 🔗 **Cross-service correlation** — Trace ID, timestamp proximity, and field matching - ⚡ **Caching & pagination** — TTL cache for repeated queries; cursor-based pagination - 🛡️ **Read-only by default** — Safe to use in production; no log mutation ### MCP Tools | Tool | Description | |------|-------------| | `list_log_sources` | List all configured log sources | | `get_source_health` | Check connectivity of a source | | `get_source_schema` |…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.