Mmcp.market

VMware Log Insight MCP server

by zw008·io.github.zw008/vmware-log-insight·v1.8.8

Read-only VMware Aria Operations for Logs (Log Insight): search + aggregation. 7 MCP tools.

A94/100grade A
What users say
No reviews yet
Be the first
Safety scan
A94/100

full report

Adoption
Growing

0 stars158 downloads/wk

Reviews

Write one

Nobody has reviewed VMware Log Insight yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

VMware Log Insight tools (8)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • _environment_for

    Report the environment a target declares, for policy scoping.

  • alert_get

    [READ] Get full details for one alert. Use this after alert_list; alert_id = the id it returned. target = target name from config. Returns the alert's sanitized detail; for its firings use alert_history. Read-only.

  • alert_history

    [READ] List recent trigger-history records for an alert.

  • alert_list

    [READ] List defined Log Insight alerts.

  • log_aggregate

    [READ] Aggregate matching events into a time series and detect spikes.

  • log_fields

    [READ] List the extracted fields available to use in query filters.

  • log_search

    [READ] Search Log Insight events within a time window.

  • log_version

    [READ] Return the Log Insight appliance version/build (diagnostics and query-syntax compatibility). target = target name from config. Use this first when a query behaves unexpectedly, to confirm the appliance version before trusting log_search. Read-only.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan21 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 5 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 94/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the VMware Log Insight repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.vmware-skills/vmware-log-insight -->

VMware Log Insight

Disclaimer: Community-maintained open-source project, **not affiliated with,

endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware", "vSphere",

and "Aria" are trademarks of Broadcom. Source is publicly auditable under the MIT license.

Read-only log search and aggregation for VMware Aria Operations for Logs (formerly vRealize Log Insight) — the appliance that collects syslog from ESXi hosts, vCenter, and VMs. The centralized-log data source for the VMware skill family. Strictly non-destructive: it queries, it never writes.

Companion Skills

Install

uv tool install vmware-log-insight
mkdir -p ~/.vmware-log-insight
cp config.example.yaml ~/.vmware-log-insight/config.yaml   # edit host/username/provider
echo 'VMWARE_LOG_INSIGHT_PROD_PASSWORD=...' > ~/.vmware-log-insight/.env
chmod 600 ~/.vmware-log-insight/.env
vmware-log-insight doctor

Offline / Air-Gapped Install (from source)

This project uses the modern PEP 517 build system (hatchling), so there is no setup.py by design — that is expected, not a missing file. If you cloned the source and hit ERROR: File "setup.py" or "setup.cfg" not found ... editable mode currently requires a setuptools-based build, your pip is older than 21.3 and cannot do an editable (-e) install with a non-setuptools backend. Editable mode is a developer convenience, not needed to run the tool — do one of:

# From the source tree — a normal (non-editable) install builds a wheel:
pip install .              # NOT  pip install -e .

# ...or upgrade pip first, and editable works too:
pip install --upgrade pip && pip install -e .

For a truly air-gapped host, build the wheels on a connected machine and copy them over — the target then needs no network:

# On a connected machine, collect this package + its dependencies as wheels:
pip wheel . -w dist        # → dist/*.whl   (or: uv build, for just this package)

# Copy dist/ to the air-gapped host, then install offline:
pip install --no-index --find-links dist vmware-log-insight

MCP Tools (7 — all read-only)

Workflows

  • Find errors fast — vmware-log-insight search -q error -l 1h.
  • Where did logs burst? — vmware-log-insight aggregate -q error -l 6h --bin-ms 300000, read spikes[], then search the spike window.
  • Root cause — pass logsearch results (plus vCenter events from vmware-monitor and metrics from vmware-aria) to vmware-debug incidenttimeline.

Troubleshooting

  • 401 on /sessions → check username/password/provider and the VMWARELOGINSIGHT__PASSWORD env var.
  • 503 everywhere → appliance starting up; doctor reports it as a status, not a crash.
  • Empty results → widen --last; default API port is 9543 (set port if different).

Security

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add vmware-log-insight -- uvx vmware-log-insight
Add to Cursor

VMware Log Insight: common questions

Is VMware Log Insight MCP server safe?
Yes, by our scan: it is graded A (94/100). Read the VMware Log Insight safety report
How do I install VMware Log Insight?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does VMware Log Insight need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is VMware Log Insight maintained?
The last commit was 6 days ago (2026-09-20). The latest release is v1.8.8.

More from zw008 →