Netdata

Give an agent read-only access to Netdata Cloud with an API token.

Required permissions

Tool	Required Permission	Description
list_alarm_rooms	read	List rooms in the Netdata Cloud space with warning and critical alarm counts per room. Useful for spotting which rooms have firing alarms.
list_rooms	read	List every room in the space, including non-default rooms. Useful for broad discovery across the whole space.
list_nodes	read	List nodes in a room with hardware, OS, and cloud-provider labels, plus per-node alert counts.
list_alerts	read	List currently raised alerts in a space or room, including per-node instances with their current status and value.
get_alert_details	read	Get full detail for one or more alert transitions: old and new status and value, context, instance, summary, component, and units.
query_alert_metrics	read	Return time-series data for a metric context over a window, optionally filtered or grouped by label. Useful for seeing what a metric looked like when the alert fired.
query_alert_logs	read	Search log entries from a backend function (for example systemd-journal) on a single node over a time window.

All Netdata tools are read-only. The agent cannot silence alarms, change configuration, or write anything back to Netdata Cloud.

Create a Netdata Cloud API token

Using the Netdata MCP server requires a Netdata Cloud API token.

1

Sign in to Netdata Cloud and open your user profile settings.

2

Go to API Tokens and create a new token. A read-only token is sufficient — the agent never writes to Netdata.

3

Copy your token and temporarily paste it somewhere secure (e.g. a private note). You will later need the token when setting up the Netdata MCP server in ilert.

Verify Netdata access

Confirm that your token works and list the spaces it can reach:

curl -H "Authorization: Bearer your_netdata_token" \
  https://app.netdata.cloud/api/v2/spaces

The response contains one entry per space, each with an id — the space UUID. The agent needs a space UUID to start from and discovers rooms and nodes from there on its own, so the API token is the only thing you have to configure in ilert.

The Netdata tools take the space and room as UUIDs passed per call, not as part of the connector. If you work with a single space, mention its UUID (or just its name, so the agent can look it up) when you ask the agent to investigate.

Connect Netdata with agent

To connect Netdata with your AI SRE agent:

1

Navigate to Agents in the ilert navigation menu

2

Open the agent detail view for the agent you want to configure

3

Go to the Tools tab

4

Under the ilert hosted MCP servers section, locate the Netdata card

5

Click Connect on the Netdata card

6

In the connection dialog that appears:

• Select connector: Choose "Create new connector" (or select an existing connector if you have one)
• Type: Select Bearer Token from the dropdown
• Secret name: Enter a name for your connector (e.g., "Netdata Production" or "Netdata Main")
• Secret value: Paste the Netdata Cloud API token you created earlier
• Host URL: Leave this field empty

7

Click Connect to complete the connection

8

After connecting, you can enable or disable specific tools needed for alert investigation, such as:

• list_alarm_rooms - List rooms with warning and critical alarm counts
• list_rooms - List every room in the space
• list_nodes - List nodes in a room with labels and alert counts
• list_alerts - List currently raised alerts
• get_alert_details - Get full detail for alert transitions
• query_alert_metrics - Return time-series data for a metric context
• query_alert_logs - Search log entries on a node

Note: Netdata Cloud is reached at https://app.netdata.cloud, which is why the Host URL field stays empty. Self-hosted Netdata agents that are not connected to Netdata Cloud are not supported by this integration.

The Netdata integration is now connected and ready to use for root cause analysis.