B

Prometheus MCP Server

MCP server for querying and discovering Prometheus metrics, labels, targets, and runtime information.

Overall Score71/100

Score Breakdown

Server Info

Package
prometheus-mcp
Registry
npm
Maintainer
Community
Category
Developer Tools
Tags
monitoringmetricsalerting
Last Scanned
7 Apr 2026

Findings

7 issues

Authentication & Identity

MEDIUMHTTP/SSE transport supports per-request credentials

Supports both stdio and StreamableHTTP transport via Express. No authentication on the HTTP endpoint itself. Prometheus URL is configured via env var; the Prometheus API is assumed to handle its own auth. No OAuth or bearer token support on the MCP HTTP layer.

Remediation

Implement the MCP OAuth spec so users authenticate directly without platform mediation.

Tool Schema Quality

MEDIUMOnly 0 of 10 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

CRITICALDangerous execution surface: prometheus_query accepts arbitrary PromQL expressions

Tool allows raw code/query execution which could be exploited via prompt injection.

Remediation

Use parameterized queries or validated command sets.

CRITICALDangerous execution surface: prometheus_query_range accepts arbitrary PromQL expressions

Tool allows raw code/query execution which could be exploited via prompt injection.

Remediation

Use parameterized queries or validated command sets.

Data Exposure

MEDIUM3 list operations lack pagination

prometheus_list_metrics, prometheus_list_labels, and prometheus_list_targets return full result sets without pagination parameters. Query results are also returned in full. No field selection is supported.

Remediation

Add limit/offset or cursor-based pagination.

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Maintenance & Trust

LOWCommunity-maintained by Idan Fishman

No official vendor backing.

Remediation

Seek vendor verification.

Tools

10 total
NameDescriptionRisk
prometheus_list_metricsList all available Prometheus metricsread
prometheus_metric_metadataGet metadata for a specific Prometheus metricread
prometheus_list_labelsList all available Prometheus labelsread
prometheus_label_valuesGet all values for a specific Prometheus labelread
prometheus_list_targetsList all Prometheus targetsread
prometheus_scrape_pool_targetsGet targets for a specific scrape poolread
prometheus_runtime_infoGet Prometheus runtime informationread
prometheus_build_infoGet Prometheus build informationread
prometheus_queryExecute a Prometheus queryread
prometheus_query_rangeExecute a Prometheus range queryread

Deploy Prometheus MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow