---
title: "Configure the Grafana MCP server | Grafana documentation"
description: "Authentication, transports, tool options, and TLS for the Grafana MCP server."
---

# Configure the Grafana MCP server

Configure how the server connects to Grafana, which tools are enabled, and how clients connect to the server.

- [Authentication](/docs/grafana/latest/developer-resources/mcp/configure/authentication/)  
  Authenticate the Grafana MCP server to Grafana using a service account token or username and password.
- [Transports and addresses](/docs/grafana/latest/developer-resources/mcp/configure/transports-and-addresses/)  
  Choose how the Grafana MCP server communicates with clients: stdio, SSE, or streamable-http.
- [Enable and disable tools](/docs/grafana/latest/developer-resources/mcp/configure/enable-and-disable-tools/)  
  Control which MCP tools the Grafana MCP server exposes and use read-only mode.
- [Client TLS (Grafana connection)](/docs/grafana/latest/developer-resources/mcp/configure/client-tls-grafana-connection/)  
  Use TLS certificates when the Grafana MCP server connects to Grafana (mTLS or custom CA).
- [Proxied tools](/docs/grafana/latest/developer-resources/mcp/configure/proxied-tools/)  
  Additional MCP tools loaded through Grafana’s datasource proxy; today only Grafana Tempo.
- [Server TLS (streamable-http)](/docs/grafana/latest/developer-resources/mcp/configure/server-tls-streamable-http/)  
  Serve the Grafana MCP server over HTTPS when using streamable-http transport.
- [Multi-organization and headers](/docs/grafana/latest/developer-resources/mcp/configure/multi-organization-and-headers/)  
  Target a specific Grafana organization and send custom HTTP headers from the MCP server.
- [Command-line flags](/docs/grafana/latest/developer-resources/mcp/configure/command-line-flags/)  
  CLI flags for the mcp-grafana binary, including transports, tools, TLS, and read-only mode.
- [Health check endpoint](/docs/grafana/latest/developer-resources/mcp/configure/health-check-endpoint/)  
  HTTP health check for SSE and streamable-http transports.