MCP server for AI agents
Wakora exposes the workspace to AI agents through a Model Context Protocol server at
https://mcp.wakora.io. An assistant with the token can list what is on fire, read the
metric or the log lines behind an incident, pull the trace of a slow request, and, if you
let it, acknowledge the incident or open a maintenance window. Every call is audited, and
actions show up in the timeline as performed by "AI", never as you.
Available on the Business plan and above; see the pricing page.
Connecting a client
- In the console, Settings, AI agents, mint a token. Pick the scope: read (observe
only), act (acknowledge, resolve, maintenance, Jira, test runs) or admin (rules,
APM sites). The token starts with
wkm_and is shown once. - Point the client at the server with the token as a bearer header. For Cursor or Claude Desktop that is an entry in the MCP configuration file:
{
"mcpServers": {
"wakora": {
"url": "https://mcp.wakora.io",
"headers": { "Authorization": "Bearer wkm_..." }
}
}
}
The console shows this snippet ready to paste. The server speaks MCP over streamable HTTP, stateless, one JSON-RPC request per call, so it works with any client that supports remote HTTP servers; there is no long-lived stream to keep open. After adding the server, restart the client so it fetches the tool list.
Tools
Tools mirror the REST API and follow the same nesting of scopes. A tool above the token's scope is still listed but answers an error naming the scope it needs, so an assistant can explain what it cannot do instead of failing silently.
Read
| Tool | What it answers |
|---|---|
list_hosts, host_overview, host_detail, host_inventory, host_checks, host_uptime | the fleet and one host's meters, services, sites, inventory, checks, uptime |
query_metrics, list_metric_names | a metric series (exact name) and the names a host produces |
list_events, list_insights | the event feed and insights (N+1, disk forecasts, deployment audits) |
list_incidents, get_incident | incidents by state and one incident with its timeline and the runbooks that apply to it |
apm_services, apm_red, apm_nplusone, get_trace | APM summary, per-endpoint RED, N+1 findings, one trace as a waterfall |
search_logs | full-text log search with host, service and level filters |
security_overview, security_cve | patches, SSH doors, integrity, hardening score, matched CVEs |
list_rules, list_maintenance, usage | the armed rule catalog with overrides, maintenance windows, billing axes |
list_definitions, list_market_templates, list_fleet_rollout | the signed definition catalog, marketplace templates, rollout rings |
list_txn_flows, list_slos, list_deliverability | transaction flows, SLA objectives with budgets, e-mail deliverability |
list_audit | the audit chain (admin scope) |
Act
| Tool | What it does |
|---|---|
ack_incident, resolve_incident | acknowledge or resolve by incident number; attributed as AI |
open_maintenance | open a maintenance window for the workspace or one host |
create_jira_issue | create the Jira issue for an incident (Jira must be connected) |
test_txn_flow | run a transaction flow once and return the step trace |
Admin
| Tool | What it does |
|---|---|
save_rule, reset_rule | tune a rule or create a custom one; reset an override |
enable_apm_site, disable_apm_site | switch APM on or off for a site, quota rules included |
What the assistant does not get
Nothing the REST API does not give a human either. Credential values, visitor IP addresses
and the raw command lines of processes never appear in any answer. Metric queries need an
exact metric name; list_metric_names exists precisely so the assistant can discover them
instead of guessing. Historical windows are clamped to the plan's retention.
Auditing
Every tool call, read or write, is written to the workspace audit log with the token that made it. Acknowledgements and resolutions performed through MCP are attributed to "AI" in the incident timeline and in notifications, so a team always knows when an assistant, rather than a colleague, took an incident.
Related
- REST API overview: the same surface over HTTP
- Integrations: where tokens are minted