Otel (moebiusx) MCP Server

@moebiusx/otel-mcp-server npm v1.7.1 Source verified

Published by moebiusx — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.

OpenTelemetry MCP Server — expose traces, metrics, logs, Elasticsearch, Alertmanager, and ZK proofs to AI agents via the Model Context Protocol

Trust grade
A
97/100
Last scanned get badge →
Trust
A · 97/100
Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.
Capability
Moderate
Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.
Coverage
Source
How much the scan could actually inspect. Shallow coverage is stated, never hidden.
Share this Trust Score
𝕏 Share LinkedIn Reddit
A Why this grade threat 100 − adoption risk = 97/100

The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.

1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:

The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.

2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:

PointsAdoption-risk factor
−3 capability blast radius (moderate) — client exposure if the model is manipulated

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind a deduction.

Findings 0

✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.

Tools 117

Each tool and what it can reach — statically extracted from the published source.

  • clickhouse_queryreads sensitive data
  • envoy_server_inforeads sensitive data
  • metrics_targetsingests untrusted input
  • agentrelay_agentsno sensitive capability
  • agentrelay_sendno sensitive capability
  • alertmanager_alertsno sensitive capability
  • alertmanager_groupsno sensitive capability
  • alertmanager_silencesno sensitive capability
  • alertmanager_statusno sensitive capability
  • anomalies_activeno sensitive capability
Show 107 more tools ↓
  • anomalies_baselinesno sensitive capability
  • backend_capabilitiesno sensitive capability
  • cilium_endpointsno sensitive capability
  • cilium_healthno sensitive capability
  • cilium_identitiesno sensitive capability
  • cilium_nodesno sensitive capability
  • cilium_policyno sensitive capability
  • cilium_servicesno sensitive capability
  • clickhouse_databasesno sensitive capability
  • clickhouse_logs_searchno sensitive capability
  • clickhouse_table_schemano sensitive capability
  • clickhouse_tablesno sensitive capability
  • consul_checksno sensitive capability
  • consul_healthno sensitive capability
  • consul_membersno sensitive capability
  • consul_service_instancesno sensitive capability
  • consul_servicesno sensitive capability
  • envoy_clustersno sensitive capability
  • envoy_listenersno sensitive capability
  • envoy_statsno sensitive capability
  • es_cat_nodesno sensitive capability
  • es_cluster_healthno sensitive capability
  • es_index_mappingno sensitive capability
  • es_indicesno sensitive capability
  • es_searchno sensitive capability
  • exchange_statusno sensitive capability
  • grafana_alert_rulesno sensitive capability
  • grafana_alertsno sensitive capability
  • grafana_contact_pointsno sensitive capability
  • grafana_create_alert_ruleno sensitive capability
  • grafana_create_dashboardno sensitive capability
  • grafana_create_folderno sensitive capability
  • grafana_dashboard_getno sensitive capability
  • grafana_dashboards_searchno sensitive capability
  • grafana_datasource_healthno sensitive capability
  • grafana_datasource_queryno sensitive capability
  • grafana_datasourcesno sensitive capability
  • grafana_delete_alert_ruleno sensitive capability
  • grafana_delete_dashboardno sensitive capability
  • grafana_foldersno sensitive capability
  • grafana_healthno sensitive capability
  • graylog_searchno sensitive capability
  • graylog_streamsno sensitive capability
  • graylog_systemno sensitive capability
  • influx_databasesno sensitive capability
  • influx_healthno sensitive capability
  • influx_queryno sensitive capability
  • k8s_api_resourcesno sensitive capability
  • k8s_eventsno sensitive capability
  • k8s_getno sensitive capability
  • k8s_healthno sensitive capability
  • k8s_listno sensitive capability
  • kong_pluginsno sensitive capability
  • kong_routesno sensitive capability
  • kong_servicesno sensitive capability
  • kong_statusno sensitive capability
  • logs_label_valuesno sensitive capability
  • logs_labelsno sensitive capability
  • logs_queryno sensitive capability
  • logs_tail_contextno sensitive capability
  • metrics_alertsno sensitive capability
  • metrics_label_valuesno sensitive capability
  • metrics_metadatano sensitive capability
  • metrics_queryno sensitive capability
  • metrics_query_rangeno sensitive capability
  • opa_datano sensitive capability
  • opa_healthno sensitive capability
  • opa_policiesno sensitive capability
  • opa_queryno sensitive capability
  • opentsdb_queryno sensitive capability
  • opentsdb_suggestno sensitive capability
  • opentsdb_versionno sensitive capability
  • pinpoint_applicationsno sensitive capability
  • pinpoint_getno sensitive capability
  • pinpoint_server_timeno sensitive capability
  • pipeline_alloyno sensitive capability
  • pipeline_beatsno sensitive capability
  • pipeline_fluentbitno sensitive capability
  • pipeline_vectorno sensitive capability
  • pyroscope_label_valuesno sensitive capability
  • pyroscope_labelsno sensitive capability
  • pyroscope_profile_typesno sensitive capability
  • pyroscope_renderno sensitive capability
  • recent_tradesno sensitive capability
  • system_healthno sensitive capability
  • system_topologyno sensitive capability
  • tempo_searchno sensitive capability
  • total_volumeno sensitive capability
  • trace_getno sensitive capability
  • traces_dependenciesno sensitive capability
  • traces_operationsno sensitive capability
  • traces_searchno sensitive capability
  • traces_servicesno sensitive capability
  • traefik_entrypointsno sensitive capability
  • traefik_overviewno sensitive capability
  • traefik_routersno sensitive capability
  • traefik_servicesno sensitive capability
  • transparency_metricsno sensitive capability
  • verify_traceno sensitive capability
  • vmalert_alertsno sensitive capability
  • vmalert_groupsno sensitive capability
  • vmalert_rule_healthno sensitive capability
  • vmalert_rulesno sensitive capability
  • zk_proof_getno sensitive capability
  • zk_proof_verifyno sensitive capability
  • zk_solvencyno sensitive capability
  • zk_statsno sensitive capability

What this scan could not see

Versions 1

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

VersionScoreFindingsEngineScanned
v1.7.1 latest A 97/100 0 1.13.0 2026-09-07

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

MCP Trust Score: A · 97/100
Markdown (GitHub README)
[![MCP Trust Score](https://mcptrustchecker.com/registry/moebiusx-otel-mcp-server/badge.svg)](https://mcptrustchecker.com/registry/moebiusx-otel-mcp-server)
HTML
<a href="https://mcptrustchecker.com/registry/moebiusx-otel-mcp-server"><img src="https://mcptrustchecker.com/registry/moebiusx-otel-mcp-server/badge.svg" alt="MCP Trust Score" height="20"></a>
Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/moebiusx-otel-mcp-server/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan @moebiusx/otel-mcp-server --online

Use the free API → How scoring works

Other implementations of Otel 3

Independent packages implementing the same tool, scanned with the same engine. Compare all 4 side by side →

More in Developer Tools