Zabbix MCP Server (mpeirone)
Zabbix MCP Server
The MCP server exposes Zabbix API calls, documentation and method discovery with read-only and method-filter controls.
- 260 ★ on the repository
- Last commit
- GPL-3.0
Broad access
Why this level
- By default, the server lets an agent run every API method allowed by its role, including monitoring-system administration.
Install
- Works in
Manual install
claude mcp add zabbix \
--env ZABBIX_URL=https://your-zabbix-server.com \
--env ZABBIX_TOKEN=your_api_token \
-- uvx --from git+https://github.com/mpeirone/zabbix-mcp-server@main zabbix-mcpFirst functional Quick Start example. Host and token are placeholders; configure real values privately and restrict operations.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- By default, the server lets an agent run every API method allowed by its role, including monitoring-system administration.
This is third-party code. Review the repository files before installing.
What it does
This Zabbix MCP server offers a generic API call, method documentation and object discovery. An agent can inspect a method before retrieving hosts or active problems. Writes are enabled by default within the Zabbix role’s permissions. Administrators can enable read-only mode and method filters, selecting the data and actions the agent actually needs.
Who it is for. Zabbix on-call engineers investigating monitoring problems through a restricted agent interface.
Good fit when
- An incident needs host and problem information from Zabbix.
- Before querying, an agent needs the exact API method parameters.
- The team wants reads restricted to selected objects.
- For an administrative task, the team has agreed on one specific API method.
Not a fit when
- HTTP would be exposed without external access protection.
- An agent has an administrator token without method review.
- You need a built-in MCP client-access administration portal.
Example request
In read-only mode, collect active Zabbix problems and their hosts without changing monitoring configuration.MCP
- Transport
- stdio, http
- Authentication
- API key
Environment variables
ZABBIX_URLrequired- Your Zabbix instance URL.
ZABBIX_TOKENrequired, secret- Zabbix API token with the required role.
READ_ONLY- Set true to restrict methods to reads.
Limitations
Zabbix 6.0 or newer and working API credentials with suitable user permissions are required. READ_ONLY defaults to false and the allow pattern accepts every method, so configure the intended scope explicitly. HTTP mode uses no-auth and needs a controlled network boundary. Filters match full method names and denies take precedence; incorrect patterns can block needed calls or allow unintended ones.
How to disable. Remove the MCP connection, stop the server and revoke its unused Zabbix token. Review completed changes separately.
FAQ
How do I allow reads only?
Set `READ_ONLY=true` and restrict the Zabbix token role too.
What does Method is blacklisted mean?
Inspect the deny pattern for the full method name without removing all restrictions.
How do I discover method parameters?
Call `zabbix_api_docs` with the method name before preparing the request.
Which filter takes precedence?
The deny list is checked first and wins on overlap.
Is certificate verification enabled?
Yes, by default. Keep it enabled and configure a trusted server certificate.
Discussion
No questions or reviews yet.
Related
MCP serversZabbix MCP Server
zabbix-mcp-server
An MCP server for the whole Zabbix API: 237 tools, several Zabbix servers, scoped tokens and a read-only mode
An MCP server for Prometheus: the agent runs PromQL queries, discovers metrics and checks scrape targets
An MCP server connects agents to UniFi infrastructure for device diagnostics, configuration reviews and approved changes
Grafana MCP Server
Grafana MCP server
Grafana's official MCP server: dashboards, Prometheus and Loki queries, alerts and incidents straight from the agent
Datadog's official managed MCP server: logs, metrics, traces and incidents right in your agent
The official Prometheus MCP server: PromQL queries, metrics, rules and alerts plus built-in runbooks for troubleshooting.
README in short
stdio and Streamable HTTP are supported. API timeouts and diagnostic logging use environment settings.