I
io.github.dynatrace-oss/Dynatrace-mcp
@dynatrace-oss/dynatrace-mcp-server
Access Dynatrace observability data: logs, metrics, problems, vulnerabilities via DQL and Davis AI
No known CVEs
MIT license
Actively maintained
Last commit 7d ago
Works with most clients
Transport: stdio, sse, http
17 tools · ~714 tok
Grade B · 0.4% of 200K ctx
MCPpedia last refreshed this data
io.github.dynatrace-oss/Dynatrace-mcp is an MCP server that access Dynatrace observability data: logs, metrics, problems, vulnerabilities via DQL and Davis AI. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 91/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"dynatrace-mcp-server": {
"env": {
"DT_ENVIRONMENT": "https://abc12345.apps.dynatrace.com"
},
"args": [
"-y",
"@dynatrace-oss/dynatrace-mcp-server@latest"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-dynatrace-oss-dynatrace-mcp)
Read me
What io.github.dynatrace-oss/Dynatrace-mcp does
🚀 Try out our brand new Remote Dynatrace MCP Server! Now available - no local setup required, connect instantly to your Dynatrace environment from any MCP-compatible client. See our migration guide for a comparison and step-by-step instructions.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@dynatrace-oss/dynatrace-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
91/100across 5 weighted dimensions
0255075100
30
20
16
15
10
−9
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev4 fixed
GHSA-p7w7-4929-vpj5high · fixedCVSS 7.5
`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
### Summary `@dynatrace-oss/dynatrace-mcp-server` v1.8.5 exposes an HTTP transport mode (`--http` flag) that performs no authentication, session validation, or origin/host verification before dispatching MCP tool calls. Any network-reachable attacker can send a raw JSON-RPC `tools/call` request without an `Authorization` header and have it executed directly under the victim server's Dynatrace credentials. Confirmed high-impact tools reachable without authentication include `execute_dql` (reads
GHSA-xrmj-5g4g-8987medium · fixedCVSS 4.2
@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
### Summary A template injection vulnerability in the `create_workflow_for_notification` tool lets a caller embed Jinja2 expressions that the Dynatrace workflow engine evaluates at runtime, exfiltrating event data to attacker-controlled destinations through a workflow that persists in the tenant after the MCP session ends. ### Details The `create_workflow_for_notification` tool interpolates three caller-supplied parameters (`teamName`, `problemType`, `channel`) directly into a Dynatrace Workflo
GHSA-pqh8-p93p-2rx7medium · fixedCVSS 4.3
@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL
### Summary A DQL injection vulnerability in several read tools lets a caller bypass the tools' documented field-scope, time-window, and display caps by injecting DQL pipeline stages through parameters typed as identifiers. ### Details Several tools interpolate caller-supplied parameters directly into DQL query strings without quoting or escaping. The affected parameters are documented in their Zod schemas as identifiers or constrained shorthand (such as `"24h"` timeframe values or Kubernetes U
GHSA-pc2w-4mq8-32qwlow · fixedCVSS 3.7
@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
### Summary A missing human-approval gate on the `create_dynatrace_notebook` tool allows a caller to create persistent tenant-visible documents containing arbitrary content (including embedded DQL that other users execute when opening the notebook) without operator consent. ### Details `dynatrace-mcp-server` registers six write tools: `send_slack_message`, `send_email`, `send_event`, `create_workflow_for_notification`, `make_workflow_public`, and `create_dynatrace_notebook`. Five of these call
Inventory
Tools (17)
Click any tool to inspect its schema.
~714 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.dynatrace-oss/Dynatrace-mcp safe to use?
- io.github.dynatrace-oss/Dynatrace-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install io.github.dynatrace-oss/Dynatrace-mcp?
- io.github.dynatrace-oss/Dynatrace-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.dynatrace-oss/Dynatrace-mcp do?
- io.github.dynatrace-oss/Dynatrace-mcp provides 17 tools: list_problems, list_vulnerabilities, list_exceptions, get_kubernetes_events, execute_dql and 12 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.dynatrace-oss/Dynatrace-mcp?
- io.github.dynatrace-oss/Dynatrace-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is io.github.dynatrace-oss/Dynatrace-mcp actively maintained?
- io.github.dynatrace-oss/Dynatrace-mcp is actively maintained — last commit was 7 days ago. It has 134 GitHub stars.
Related
Similar servers
Others in devops / analytics
G
Mcp Gitlab96MCP server for using the GitLab API
1.9k 12
Observability MCP94MCP Server for GCP environment for interacting with various Observability APIs.
892 1
K
Komodo MCP Server93MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI
19 11
Tachyon93💫 Tachyon MCP Runtime for Java and Kotlin - Model Context Protocol (MCP) server with Streamable HTTP, native Netty transports, tools, tasks, resources, prompts, completions, resumable sessions, and stateless deployment support.
30 6
MCP Security Weekly
Get CVE alerts and security updates for io.github.dynatrace-oss/Dynatrace-mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.