skills.rest
nebius
nebiusOFFICIAL
Explore all skills by this author →
WebsiteGitHub

install-grafana-mcp-for-nebius

Install and configure the Grafana MCP server for Nebius-managed Grafana with pinned human authentication.

7|5|Updated Jul 22, 2025
Search Tags:#codex#mcp#observability#grafana#token refresh#nebius#setup automation
One-click install
npx skills add https://github.com/nebius/nebius-ps-services --skill install-grafana-mcp-for-nebius-nebius
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: install-grafana-mcp-for-nebius
Source: https://github.com/nebius/nebius-ps-services/tree/main/skills/install-grafana-mcp-for-nebius
Command: npx skills add https://github.com/nebius/nebius-ps-services --skill install-grafana-mcp-for-nebius-nebius

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Setting up the official Grafana MCP server so Codex can query Nebius-managed Grafana involves tricky credential handling, Codex MCP registration, and token refresh logic that is easy to misconfigure. This Skill automates the installation, wiring, and validation while enforcing strict security boundaries between Nebius IAM tokens, Grafana service-account tokens, and static keys. ## Core Features & Use Cases - Idempotent Setup Helper: Checks the existing mcp-grafana binary, pinned human CLI profile binding, and Codex MCP registration before creating or repairing only missing or drifted state. - Secure Token Wrapper: Refreshes short-lived Nebius IAM tokens through a validated human profile, stores them in private mode-0600 files, and always launches mcp-grafana in read-only mode. - Validated Registration: Registers the grafana-nebius MCP server in Codex with canonical read-only arguments and a bounded 300-second startup timeout, with digest-bound concurrent-change protection. - Use Case: A platform engineer wants Codex to answer GPU utilization questions for a Nebius Managed Kubernetes cluster. Run this Skill once to install and validate the Grafana MCP connection, then hand routine metrics, logs, and trace queries to the nebius-grafana-query skill. ## Quick Start Ask the agent to install Grafana MCP for Nebius-managed Grafana and validate read-only access using your pinned human Nebius CLI profile.

Frequently Asked Questions about install-grafana-mcp-for-nebius

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up Grafana MCP for Nebius-managed Grafana in Codex?▼

Invoke the skill explicitly and it installs the mcp-grafana binary, pins a validated human Nebius CLI profile, registers the grafana-nebius MCP server in Codex config, and validates by listing Grafana datasources. Re-running it reuses matching state and only creates what is missing.

How do I connect mcp-grafana to Nebius metrics and logs?▼

Point GRAFANA_URL at the Grafana base URL https://grafana.nebius.dev/, never at a Nebius Prometheus, Loki, or Tempo read endpoint. mcp-grafana queries PromQL-compatible and Loki datasources through Grafana, authenticated by a profile-scoped Nebius IAM token file.

Can I use this setup with Grafana Cloud or a self-hosted Grafana?▼

The Nebius token wrapper only supports https://grafana.nebius.dev/ and refuses other URLs. For external Grafana instances, use a Grafana service-account token, and optionally configure a datasource with a Nebius Observability static key through the documented external-Grafana flow.

Why does the Grafana MCP server stop working after several hours?▼

Nebius IAM tokens expire after 12 hours, and mcp-grafana stdio builds keep the startup credential in memory. The wrapper rotates the token file in the background and then closes the stdio process, so start a new chat or restart Codex to load the rotated credential.

What are the security limitations of the Nebius Grafana MCP setup?▼

The wrapper always launches mcp-grafana with --disable-write and a Loki result limit of 20, rejects all other caller arguments, and stores bindings and tokens as user-owned mode-0600 files under a mode-0700 directory. It never prints tokens or user IDs and clears competing Grafana and Nebius credentials.

Related Skills

Explore More Software Engineering Skills→
nebiusnebius
17

npa-agent

Orchestrate Nebius Physical AI agent VM deployment and lifecycle operations.

Official
Advanced
cosmixcosmix
53

grafana

Configures Grafana-based observability dashboards with the LGTM stack, including RBAC and alerting for logs, traces, and metrics.

Community
Advanced
sitharaj88sitharaj88
1

aws-eks

Generate AWS EKS cluster configurations, node groups, Helm charts, and Kubernetes manifests.

Community
Advanced
grafanagrafana
213

assistant-mcp

Connect AI coding agents to Grafana Cloud via an MCP server.

Official
Intermediate