Sumo Logic MCP server

What the model can do

Sumo Logic: search logs with a Sumo Logic query over a time range (raw messages or aggregate results), list monitors and whether they are triggered, and the account's open health events (collectors and sources failing). Can disable or delete monitors, save and delete log searches, create library folders, and start or pause scheduled views.

Reads

• sumologic_search_logsSearches Sumo Logic logs with a Sumo Logic query over a time range (default the last hour, at most 31 days) and returns the messages…
• sumologic_monitorsMonitors in Sumo Logic: name, description, type (logs, metrics, SLO), folder path, whether disabled, current status (Normal, Critical, Warning…
• sumologic_health_eventsOpen health events in the Sumo Logic account: collectors, sources, ingest budgets and other pieces that are failing or throttled, with severity…
• sumologic_personal_folderThe connected user's personal folder in the Sumo Logic library and what is directly inside it (id, name, type: Folder, Search, Dashboard…).

Acts, when you ask

These change something in Sumo Logic. The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• sumologic_disable_monitorsDisable the named Sumo Logic monitors, so they stop evaluating and send no alerts until re-enabled in Sumo Logic.
• sumologic_delete_monitorPermanently delete one Sumo Logic monitor; it stops alerting and its configuration is gone.
• sumologic_save_log_searchSave a log search to a folder in the Sumo Logic library, visible to whoever can see that folder.
• sumologic_delete_saved_searchPermanently delete a saved log search from the Sumo Logic library, for everyone who could see it.
• sumologic_create_folderCreate a folder in the Sumo Logic library under a parent folder, visible to whoever can see the parent.
• sumologic_start_scheduled_viewStart (resume) a paused Sumo Logic scheduled view, which continuously indexes matching data again and uses ingest capacity.
• sumologic_pause_scheduled_viewPause a Sumo Logic scheduled view: it stops indexing new data until started again, so searches on it miss the paused period.

Connect it

First connect Sumo Logic on Dashboard → Connections, then add Memtro to your client once. The Sumo Logic tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared Sumo Logic connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › What errors did the API log this morning?
• › How many timeouts per host has the checkout service had in the last hour?
• › Which Sumo Logic monitors are critical right now?
• › Is our logging pipeline healthy?
• › Disable the two disk-space monitors on the old staging hosts

Questions

Is this an official Sumo Logic MCP server?

No. It is Memtro's MCP server with Memtro's Sumo Logic connector behind it: the connector reads Sumo Logic through its API with the credentials you connect on Dashboard → Connections, and Sumo Logic publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in Sumo Logic?

Only when you ask, and only what it has been granted: disable chosen monitors so they stop alerting; delete a monitor (permanent); save a log search to a library folder; delete a saved log search (permanent); create a library folder; start a scheduled view; pause a scheduled view. Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server