{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "honeycomb-mcp", "name": "Honeycomb MCP", "vendor": "Honeycomb", "vendorUrl": "https://www.honeycomb.io", "kind": "mcp", "category": "observability", "summary": "Honeycomb's hosted MCP server lets AI agents query a team's traces, metrics and events, run BubbleUp analysis, and create or update Boards, Triggers and SLOs. It uses OAuth or a Management API key and has US and EU endpoints.", "url": "https://www.anchorterminal.com/tools/honeycomb-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/honeycomb-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/honeycomb-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/honeycomb-mcp.json", "repo": "https://github.com/honeycombio/agent-skill", "license": "Proprietary hosted service under Honeycomb's Terms of Service and Honeycomb Intelligence Supplemental Terms. The companion plugin in honeycombio/agent-skill is MIT", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.honeycomb.io/mcp", "packages": [], "auth": "mixed", "authNotes": "OAuth is the documented default. The server at https://mcp.honeycomb.io/mcp answers 401 with a pointer to its protected-resource metadata, and ui.honeycomb.io is the authorisation server, with PKCE S256, dynamic client registration and the scopes `mcp:read` and `mcp:write`. Write tools need `mcp:write`, granted at consent. Unattended agents can send a Management API key as `Authorization: Bearer \u003cKEY_ID\u003e:\u003cSECRET_KEY\u003e`, with Read or Write under Model Context Protocol and access under Environments. Only a Team Owner can create that key, and its scopes can't be changed later. Access is self-serve, but a Team Owner must first enable Honeycomb Intelligence for the team.", "pricing": "byo-plan", "pricingNotes": "No separate charge. Honeycomb MCP is in the feature list of every plan, the Free plan included (20 million events and 100 million metric data points a month). Pro starts at $150 a month for 50 million events and Enterprise is quoted. The signup page asks for an email address or a Google account, and the signup guide names no payment step, so an agent's owner can start without a contract (https://www.honeycomb.io/pricing, checked 2026-10-09).", "priceSummary": "Your plan", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the MCP docs, the pricing page or the terms (checked 2026-10-09).", "endpoints": [] }, "toolCount": 34, "popularity": { "githubStars": 27, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.honeycomb.io/integrations/mcp/", "llmsTxt": "https://docs.honeycomb.io/llms.txt", "registryName": "io.honeycomb/mcp", "capabilities": [ "observability.traces", "observability.metrics", "observability.logs" ], "tags": [ "official", "hosted", "mcp", "oauth", "api-key", "toolsets", "free-tier", "eu-region", "llms-txt", "mcp-registry", "status-page", "soc2" ], "lastRelease": "2026-09-29", "graded": true, "anchor": { "graded": true, "score": 58.3, "grade": "C", "agentReady": false, "rank": 527, "ranked": true, "rankOf": 842, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 53, "maintenance": 61, "payments": 30, "reliability": 65, "schema": 57, "security": 71, "transparency": 68 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 65, "points": 13, "reason": "Scored as a hosted MCP server. status.honeycomb.io is an Atlassian Statuspage with 14 components for US1, EU1, the website and the sandbox. It has no MCP component, though MCP incidents are posted there (17). Four incidents in the 90 days to 9 October 2026, all marked minor. Querying failures for about 30 minutes on 31 July, with a postmortem. Triggers failing intermittently in the EU on 27 and 28 July. US1 queries over older data erroring for 67 minutes on 10 August. Canvas not loading for 38 minutes on 21 August. The 10 August outage hit the query path the server depends on for over an hour, so we score between minor-only and one major (15). Per-tool limits are published with numbers (15). Rate-limit errors carry the time to retry after. No backoff guidance or idempotency keys for the nine write tools were found (8). No SLA found in the terms, and honeycomb.io/sla returns 404 (0). The docs list MCP as graduated to general availability (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 57, "points": 9.26, "reason": "The server is closed source and `tools/list` needs sign-in, so we could not read the input schemas. Partial credit for a contract that exists but is not public (12). docs.honeycomb.io publishes llms.txt and a Markdown twin of every page (10). The tools reference says what each of the 34 tools returns and when an agent reaches for it, for example calling `get_workspace_context` first and `list_boards` before `update_board`. These are docs, not the definitions the model sees (14). Parameters are mentioned only in passing, such as `metric_name` and `usage_mode`, with no types, enums or required fields published (4). A use-cases page and a troubleshooting page document the Unauthorized, rate-limit, permission and not-found errors with causes and fixes (9). The registry entry carries version 1.0.0 and Honeycomb links a UI changelog and an API changelog, but both hosts disallow unnamed crawlers, so we could not confirm MCP entries (8)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 53, "points": 8.61, "reason": "34 tools is above the 30 line (5). The `X-MCP-Toolset` header loads `query` or `canvas` subsets, and the docs don't say how many tools each holds (add 8, so 13). Size controls are described per tool, such as up to 100 datasets or 100 columns a call, subtree zoom on `get_trace` and query limits. Pagination parameters aren't documented (10). Errors are documented with causes and fixes, and the rate-limit message names the retry time. No error code list was found (12). The reference labels each tool read or write and `update_slo` keeps omitted fields. No idempotency keys were found, and we couldn't confirm readOnlyHint or destructiveHint annotations (8). `get_workspace_context` takes no parameters, relative time is the default, and setup is one command or link in nine documented clients. SDKs don't apply (10)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 71, "points": 12.43, "reason": "OAuth authorisation code with PKCE S256, dynamic client registration, client ID metadata documents, refresh tokens and the scopes `mcp:read` and `mcp:write`, with the token accepted in the header only. Sessions are listed on the account's Integrations tab. The alternative is a Management API key whose scopes are fixed at creation and which can be disabled or deleted (28). Tools are read-only until `mcp:write` is granted at consent or on the key, API keys are limited to chosen environments, the Activity Log environment is shown through MCP only to Team Owners, and there is no delete tool. No confirmation step for writes was found (15). Trace, log and span content is untrusted text, and no injection guidance was found in the MCP docs (2). The Activity Log records OAuth sessions with requested and granted scopes and one event per query run with its source, MCP included. The compliance page describes activity logging as for enterprise customers (11). SOC 2 Type II each year, annual third-party penetration tests, HIPAA BAAs and a bug bounty by email with discretionary rewards. No security.txt, the trust centre is open only to Pro and Enterprise customers, and the bounty scope names ui.honeycomb.io and api.honeycomb.io, not the MCP hosts (15)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 (0). Plan prices are public, Free and Pro from $150 a month for 50 million events, and MCP is in every plan with no per-call price (10). The Free plan is described as free forever and the signup guide asks for an email address or Google account with no payment step (20). A person signs up in a browser, a Team Owner enables Honeycomb Intelligence, and then OAuth consent or a Team Owner's API key is needed (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 61, "points": 5.34, "reason": "The product changelogs at changelog.honeycomb.io and api-changelog.honeycomb.io disallow unnamed crawlers, so we didn't read them and scored from what else is dated. The docs sitemap gives 29 September 2026 for the tools reference, the companion plugin reached 1.2.2 on 20 September, and the AI policy page was updated on 21 September. Docs dates are weaker evidence than a release note (20). The plugin repository has 14 commits since 11 July, with fixes released on 21 August, 26 August and 20 September, and one explicit version bump. Half credit without the changelog (10). A support site, a community Slack and a `feedback` tool reach the team, and the plugin repository merged an outside contributor's fix on 17 July and has five open issues (10). `io.honeycomb/mcp` 1.0.0 is in the official MCP registry under the vendor's domain namespace, published 29 April 2026 (15). The plugin repository runs structural and scenario test workflows. The server itself is closed (6)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 68, "points": 5.95, "note": "editorial 64, provenance 71", "reason": "The hosted server is closed, under published Terms of Service and Honeycomb Intelligence Supplemental Terms. The companion plugin is MIT (17). The privacy notice, the DPA and an AI policy page dated 21 September 2026 are public. The AI page says MCP's model provider is whichever the client uses, and that Honeycomb uses no provider that trains foundation models on input. Telemetry is deleted after the retention window, 60 days for most customers. The terms also let Honeycomb use customer data to improve its services, and the AI page says Honeycomb may fine-tune pre-trained models (22). The self-hosted server carries a deprecation notice dated 21 August 2025. No deprecation policy was found, the AI terms allow any Honeycomb Intelligence feature to be changed or ended at any time with commercially reasonable efforts at notice, and the docs say rate limits may change (6). The subprocessor list is public with purposes and countries, the DPA promises 30 days' notice of new subprocessors, and customers choose a US or EU data location (19)." } ], "assessment": { "date": "2026-10-09", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "34 tools is above the 30 line (5). The `X-MCP-Toolset` header loads `query` or `canvas` subsets, and the docs don't say how many tools each holds (add 8, so 13). Size controls are described per tool, such as up to 100 datasets or 100 columns a call, subtree zoom on `get_trace` and query limits. Pagination parameters aren't documented (10). Errors are documented with causes and fixes, and the rate-limit message names the retry time. No error code list was found (12). The reference labels each tool read or write and `update_slo` keeps omitted fields. No idempotency keys were found, and we couldn't confirm readOnlyHint or destructiveHint annotations (8). `get_workspace_context` takes no parameters, relative time is the default, and setup is one command or link in nine documented clients. SDKs don't apply (10).", "maintenance": "The product changelogs at changelog.honeycomb.io and api-changelog.honeycomb.io disallow unnamed crawlers, so we didn't read them and scored from what else is dated. The docs sitemap gives 29 September 2026 for the tools reference, the companion plugin reached 1.2.2 on 20 September, and the AI policy page was updated on 21 September. Docs dates are weaker evidence than a release note (20). The plugin repository has 14 commits since 11 July, with fixes released on 21 August, 26 August and 20 September, and one explicit version bump. Half credit without the changelog (10). A support site, a community Slack and a `feedback` tool reach the team, and the plugin repository merged an outside contributor's fix on 17 July and has five open issues (10). `io.honeycomb/mcp` 1.0.0 is in the official MCP registry under the vendor's domain namespace, published 29 April 2026 (15). The plugin repository runs structural and scenario test workflows. The server itself is closed (6).", "payments": "No x402, MPP or L402 (0). Plan prices are public, Free and Pro from $150 a month for 50 million events, and MCP is in every plan with no per-call price (10). The Free plan is described as free forever and the signup guide asks for an email address or Google account with no payment step (20). A person signs up in a browser, a Team Owner enables Honeycomb Intelligence, and then OAuth consent or a Team Owner's API key is needed (0).", "reliability": "Scored as a hosted MCP server. status.honeycomb.io is an Atlassian Statuspage with 14 components for US1, EU1, the website and the sandbox. It has no MCP component, though MCP incidents are posted there (17). Four incidents in the 90 days to 9 October 2026, all marked minor. Querying failures for about 30 minutes on 31 July, with a postmortem. Triggers failing intermittently in the EU on 27 and 28 July. US1 queries over older data erroring for 67 minutes on 10 August. Canvas not loading for 38 minutes on 21 August. The 10 August outage hit the query path the server depends on for over an hour, so we score between minor-only and one major (15). Per-tool limits are published with numbers (15). Rate-limit errors carry the time to retry after. No backoff guidance or idempotency keys for the nine write tools were found (8). No SLA found in the terms, and honeycomb.io/sla returns 404 (0). The docs list MCP as graduated to general availability (10).", "schema": "The server is closed source and `tools/list` needs sign-in, so we could not read the input schemas. Partial credit for a contract that exists but is not public (12). docs.honeycomb.io publishes llms.txt and a Markdown twin of every page (10). The tools reference says what each of the 34 tools returns and when an agent reaches for it, for example calling `get_workspace_context` first and `list_boards` before `update_board`. These are docs, not the definitions the model sees (14). Parameters are mentioned only in passing, such as `metric_name` and `usage_mode`, with no types, enums or required fields published (4). A use-cases page and a troubleshooting page document the Unauthorized, rate-limit, permission and not-found errors with causes and fixes (9). The registry entry carries version 1.0.0 and Honeycomb links a UI changelog and an API changelog, but both hosts disallow unnamed crawlers, so we could not confirm MCP entries (8).", "security": "OAuth authorisation code with PKCE S256, dynamic client registration, client ID metadata documents, refresh tokens and the scopes `mcp:read` and `mcp:write`, with the token accepted in the header only. Sessions are listed on the account's Integrations tab. The alternative is a Management API key whose scopes are fixed at creation and which can be disabled or deleted (28). Tools are read-only until `mcp:write` is granted at consent or on the key, API keys are limited to chosen environments, the Activity Log environment is shown through MCP only to Team Owners, and there is no delete tool. No confirmation step for writes was found (15). Trace, log and span content is untrusted text, and no injection guidance was found in the MCP docs (2). The Activity Log records OAuth sessions with requested and granted scopes and one event per query run with its source, MCP included. The compliance page describes activity logging as for enterprise customers (11). SOC 2 Type II each year, annual third-party penetration tests, HIPAA BAAs and a bug bounty by email with discretionary rewards. No security.txt, the trust centre is open only to Pro and Enterprise customers, and the bounty scope names ui.honeycomb.io and api.honeycomb.io, not the MCP hosts (15).", "transparency": "The hosted server is closed, under published Terms of Service and Honeycomb Intelligence Supplemental Terms. The companion plugin is MIT (17). The privacy notice, the DPA and an AI policy page dated 21 September 2026 are public. The AI page says MCP's model provider is whichever the client uses, and that Honeycomb uses no provider that trains foundation models on input. Telemetry is deleted after the retention window, 60 days for most customers. The terms also let Honeycomb use customer data to improve its services, and the AI page says Honeycomb may fine-tune pre-trained models (22). The self-hosted server carries a deprecation notice dated 21 August 2025. No deprecation policy was found, the AI terms allow any Honeycomb Intelligence feature to be changed or ended at any time with commercially reasonable efforts at notice, and the docs say rate limits may change (6). The subprocessor list is public with purposes and countries, the DPA promises 30 days' notice of new subprocessors, and customers choose a US or EU data location (19)." }, "sources": [ { "what": "MCP concepts and security model", "url": "https://docs.honeycomb.io/integrations/mcp/concepts", "seen": "2026-10-09" }, { "what": "connection guide, API key auth and toolset header", "url": "https://docs.honeycomb.io/integrations/mcp/configuration-guide", "seen": "2026-10-09" }, { "what": "tools reference, rate limits and scopes", "url": "https://docs.honeycomb.io/integrations/mcp/tools", "seen": "2026-10-09" }, { "what": "troubleshooting and errors", "url": "https://docs.honeycomb.io/integrations/mcp/troubleshooting", "seen": "2026-10-09" }, { "what": "prompts reference", "url": "https://docs.honeycomb.io/integrations/mcp/prompts", "seen": "2026-10-09" }, { "what": "docs index for agents", "url": "https://docs.honeycomb.io/llms.txt", "seen": "2026-10-09" }, { "what": "docs sitemap, page modification dates", "url": "https://docs.honeycomb.io/sitemap.xml", "seen": "2026-10-09" }, { "what": "beta and early access list, MCP graduated", "url": "https://docs.honeycomb.io/troubleshoot/product-lifecycle/experimental-features", "seen": "2026-10-09" }, { "what": "AI policies", "url": "https://docs.honeycomb.io/security-compliance/ai-policies", "seen": "2026-10-09" }, { "what": "compliance and data privacy", "url": "https://docs.honeycomb.io/security-compliance/compliance-data-privacy", "seen": "2026-10-09" }, { "what": "security and data protection", "url": "https://docs.honeycomb.io/security-compliance/security-data-protection", "seen": "2026-10-09" }, { "what": "bug bounty programme", "url": "https://docs.honeycomb.io/security-compliance/bug-bounty-program", "seen": "2026-10-09" }, { "what": "Management API keys and scopes", "url": "https://docs.honeycomb.io/configure/teams/manage-api-keys", "seen": "2026-10-09" }, { "what": "Activity Log datasets", "url": "https://docs.honeycomb.io/configure/teams/investigate-activity", "seen": "2026-10-09" }, { "what": "signup guide", "url": "https://docs.honeycomb.io/get-started/create-account", "seen": "2026-10-09" }, { "what": "OAuth protected-resource metadata", "url": "https://mcp.honeycomb.io/.well-known/oauth-protected-resource", "seen": "2026-10-09" }, { "what": "OAuth authorisation server metadata", "url": "https://ui.honeycomb.io/.well-known/oauth-authorization-server", "seen": "2026-10-09" }, { "what": "pricing and plan comparison", "url": "https://www.honeycomb.io/pricing", "seen": "2026-10-09" }, { "what": "Terms of Service", "url": "https://www.honeycomb.io/terms", "seen": "2026-10-09" }, { "what": "Honeycomb Intelligence Supplemental Terms", "url": "https://www.honeycomb.io/ai-terms", "seen": "2026-10-09" }, { "what": "Privacy Notice", "url": "https://www.honeycomb.io/privacy", "seen": "2026-10-09" }, { "what": "Data Processing Addendum", "url": "https://www.honeycomb.io/dpa", "seen": "2026-10-09" }, { "what": "subprocessor list", "url": "https://www.honeycomb.io/subprocessors", "seen": "2026-10-09" }, { "what": "security.txt (404)", "url": "https://www.honeycomb.io/.well-known/security.txt", "seen": "2026-10-09" }, { "what": "status page", "url": "https://status.honeycomb.io", "seen": "2026-10-09" }, { "what": "incident history, May to October 2026", "url": "https://status.honeycomb.io/history", "seen": "2026-10-09" }, { "what": "US1 cold query outage, 10 August 2026", "url": "https://status.honeycomb.io/incidents/fqv171nyvhyf", "seen": "2026-10-09" }, { "what": "MCP tool access degraded, 19 June 2026", "url": "https://status.honeycomb.io/incidents/qkgzs5msfltc", "seen": "2026-10-09" }, { "what": "trust centre front page", "url": "https://trust.honeycomb.io/", "seen": "2026-10-09" }, { "what": "MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=honeycomb", "seen": "2026-10-09" }, { "what": "companion plugin repository", "url": "https://github.com/honeycombio/agent-skill", "seen": "2026-10-09" }, { "what": "deprecated self-hosted server", "url": "https://github.com/honeycombio/honeycomb-mcp", "seen": "2026-10-09" } ], "openQuestions": [ "unchecked: changelog.honeycomb.io and api-changelog.honeycomb.io, whose robots.txt disallows every path to unnamed crawlers. Release cadence, breaking changes and the general availability date of the MCP server rest on docs dates, the registry and the plugin repository", "unchecked: tool input schemas, the size of the tool definitions and whether tools carry readOnlyHint and destructiveHint, since `tools/list` needs a Honeycomb account", "unchecked: how many tools the `query` and `canvas` toolsets load", "unchecked: the registration date of honeycomb.io. No RDAP service answered for the .io registry", "unchecked: whether signup asks for a card. The signup guide names no payment step and we did not open the signup form", "unchecked: documents inside the trust centre, which is open only to Pro and Enterprise customers", "The terms forbid using any technology or means not authorised by Honeycomb to access the service or extract data. The MCP server is an authorised route, and the clause matters before our probes run", "The lead was right on the endpoints, OAuth and the Honeycomb Intelligence requirement. It did not mention the Management API key route or that MCP is in the Free plan" ] }, "negative": 0, "verdict": "OAuth with `mcp:read` and `mcp:write` scopes keeps the 34 tools read-only until write access is granted, and per-tool rate limits are published. Tool input schemas are visible only after sign-in, and no injection guidance was found for telemetry content. The product changelogs disallow unnamed crawlers, so release history went unread.", "bestFor": "Agents that investigate latency and error spikes in a team already sending traces and events to Honeycomb, and that record findings as Boards, Triggers or SLOs.", "strengths": [ "OAuth with PKCE, dynamic client registration and two scopes. Write tools need `mcp:write`, granted at consent or on the API key", "Per-tool rate limits are published, from 10 calls a minute for `get_service_map` to 300 for semantic-convention lookups", "Listed in the official MCP registry as `io.honeycomb/mcp` 1.0.0, under the vendor's own domain namespace", "Included in the Free plan (20 million events a month), with separate US and EU endpoints", "The Activity Log records OAuth sessions with granted scopes and each query run with its source, MCP included" ], "weaknesses": [ "Tool input schemas and annotations are visible only through `tools/list` after sign-in. The public reference gives descriptions, not parameters", "No guidance on prompt injection was found, although trace and log content returned to the agent is untrusted text", "The status page has no MCP component. US1 queries over older data failed for 67 minutes on 10 August 2026", "No SLA was found, and the AI terms allow Honeycomb to change or end any Honeycomb Intelligence feature at any time", "A Team Owner must enable Honeycomb Intelligence first, and API key scopes can't be changed after creation" ], "agentNotes": [ "Use https://mcp.honeycomb.io/mcp for US teams and https://mcp.eu1.honeycomb.io/mcp for EU teams. A team's data lives in one region only", "If no tools appear after sign-in, ask a Team Owner to enable Honeycomb Intelligence in team settings", "Send `X-MCP-Toolset: query` or `canvas` to load a subset of the 34 tools. An empty or unknown value makes every request fail", "Call `get_workspace_context` first, then `find_columns`, before `run_query`. Pass absolute time ranges as epoch timestamps", "For unattended runs send `Authorization: Bearer \u003cKEY_ID\u003e:\u003cSECRET_KEY\u003e` from a Management key with only Model Context Protocol and Environments scopes" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.3 } ], "editorialScores": { "ergonomics": 53, "maintenance": 61, "payments": 30, "reliability": 65, "schema": 57, "security": 71, "transparency": 64 }, "provenanceScore": 71 }, "connect": { "claudeCode": "claude mcp add honeycomb --transport http https://mcp.honeycomb.io/mcp", "config": { "mcpServers": { "honeycomb": { "url": "https://mcp.honeycomb.io/mcp" } } }, "headless": { "mcpServers": { "honeycomb": { "args": [ "-y", "mcp-remote", "https://mcp.honeycomb.io/mcp", "--header", "Authorization: Bearer $HONEYCOMB_API_KEY" ], "command": "npx", "env": { "HONEYCOMB_API_KEY": "\u003cKEY_ID\u003e:\u003cSECRET_KEY\u003e" } } } } }, "letme": { "capability": "https://letme.dev/observability.traces", "tool": "https://letme.dev/honeycomb-mcp" }, "notable": [ "34 tools in 12 groups, 25 read and 9 write. Write tools cover Boards, Triggers, SLOs, notification recipients, Canvas investigations and feedback, and there is no delete tool (https://docs.honeycomb.io/integrations/mcp/tools)", "Per-tool rate limits per minute: 50 by default, 100 for `run_query` and `get_trace`, 20 for create tools, 10 for `get_service_map`. Limits apply per API key or per OAuth user (https://docs.honeycomb.io/integrations/mcp/tools)", "The endpoint answers 401 with a `resource_metadata` pointer, and the authorisation server at ui.honeycomb.io publishes PKCE S256, dynamic client registration and client ID metadata documents (https://ui.honeycomb.io/.well-known/oauth-authorization-server)", "Honeycomb's AI policy page lists the MCP server's model provider as client-dependent, and says Honeycomb uses no provider that trains foundation models on input (https://docs.honeycomb.io/security-compliance/ai-policies)", "The self-hosted server in honeycombio/honeycomb-mcp was deprecated on 21 August 2025 in favour of the hosted one (https://github.com/honeycombio/honeycomb-mcp)", "On 19 June 2026 the status page recorded 42 minutes of degraded MCP write tools, with read tools unaffected (https://status.honeycomb.io/incidents/qkgzs5msfltc)" ], "area": "developer", "details": [ { "label": "What is graded", "value": "The hosted remote MCP server at https://mcp.honeycomb.io/mcp (EU https://mcp.eu1.honeycomb.io/mcp). It is closed source. The MIT plugin in honeycombio/agent-skill adds skills, two agents and a setup command, and is not required" }, { "label": "Tools", "value": "34 in the public reference. Discovery (4), query and analysis (5), traces and spans (3), service map and anomalies (2), semantic conventions (3), Boards (3), Triggers (3), SLOs (3), recipients (2), Canvas (2), AI conversation analysis (2), `refinery_docs` and `feedback`. `get_service_map` is Enterprise only" }, { "label": "Prompts", "value": "MCP prompts such as `honeycomb-onboarding`, `honeycomb-learning` and `otel_analysis`, shown by most clients as slash commands. They need no extra scope" }, { "label": "Credentials", "value": "OAuth authorisation code with PKCE S256 and refresh tokens, scopes `mcp:read` and `mcp:write`, token in the header only. Or a Management API key sent as `Bearer \u003cKEY_ID\u003e:\u003cSECRET_KEY\u003e`, which only a Team Owner can create and whose scopes are fixed at creation" }, { "label": "Tool subsets", "value": "`X-MCP-Toolset` header with `all` (default), `query` or `canvas`. The header narrows what loads and grants nothing" }, { "label": "Rate limits", "value": "Per tool, per minute. 300 for semantic-convention tools and `canvas_agent_poll_response`, 200 for discovery tools, 150 for `get_triggers`, `find_queries` and `get_query_results`, 100 for `run_query`, `get_trace`, `get_dataset_columns` and `get_slos`, 30 for updates, 20 for creates, 10 for `get_service_map`, 50 otherwise. The docs say limits may change" }, { "label": "Errors", "value": "Rate-limit errors read `Rate limit exceeded, please try again after \u003ctime\u003e`. The troubleshooting page also covers Unauthorized, missing tools, missing `mcp:write` and unknown environments, datasets or columns" }, { "label": "Sessions", "value": "MCP sessions may time out after 24 hours. OAuth sessions are listed on the account's Integrations tab" }, { "label": "Plans", "value": "Honeycomb MCP is in the Free, Pro and Enterprise feature lists. Free allows 20 million events and 100 million metric data points a month. Pro starts at $150 a month for 50 million events. Enterprise is quoted" }, { "label": "Requirement", "value": "A Team Owner must enable Honeycomb Intelligence for the team. Through MCP the Activity Log environment is shown only to Team Owners" }, { "label": "Status", "value": "Generally available. The docs list MCP among past betas as graduated. Registry entry `io.honeycomb/mcp` 1.0.0, published 29 April 2026" }, { "label": "Last dated change read", "value": "The tools reference was last modified on 29 September 2026 per the docs sitemap, and the plugin reached 1.2.2 on 20 September 2026. The product changelogs were not read" } ], "unitPrices": [ { "item": "Pro plan, 50 million events", "unit": "month", "usd": 150, "note": "Starting price. MCP is also in the Free plan at no charge" } ], "provenance": { "legalEntity": "Hound Technology, Inc. d/b/a Honeycomb", "domain": "honeycomb.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.honeycomb.io/terms", "privacy": "https://www.honeycomb.io/privacy", "statusPage": "https://status.honeycomb.io", "changelog": "https://changelog.honeycomb.io/", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The Terms of Service (effective 22 May 2025) name Hound Technology, Inc. d/b/a Honeycomb, are governed by California law, and incorporate the Honeycomb Intelligence Supplemental Terms at honeycomb.io/ai-terms and the Data Processing Addendum at honeycomb.io/dpa.", "The Privacy Notice (last updated 24 July 2025) covers the website and the services, and says it does not apply to content customers submit under a customer account. The DPA (last updated 22 May 2025) governs that content.", "The MCP server answers at mcp.honeycomb.io and mcp.eu1.honeycomb.io, and the OAuth server at ui.honeycomb.io, all honeycomb.io subdomains.", "www.honeycomb.io/.well-known/security.txt and /security.txt return 404. Reports go to security@honeycomb.io under a bug bounty programme whose stated scope is ui.honeycomb.io and api.honeycomb.io.", "changelog.honeycomb.io and api-changelog.honeycomb.io disallow every path to unnamed crawlers in robots.txt, so neither was read.", "The .io registry has no RDAP service that answered, so the domain's registration date is not recorded." ], "score": 71, "checks": [ { "check": "Legal entity named", "value": "Hound Technology, Inc. d/b/a Honeycomb", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "honeycomb.io, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "mcp.honeycomb.io", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 1 clause that costs points", "points": 7.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 7 of the 8 things a reader expects", "points": 9.3, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.honeycomb.io", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.honeycomb.io/terms", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-05-22", "words": 5426, "points": 7.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Effective Date: May 22, 2025", "says": "Last updated 2025-05-22" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "The Terms, and Customer’s relationship with us under the Terms, shall be governed by the laws of the State of California without regard to its conflict of laws provisions.", "says": "The law of the State of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "The provisions of the Terms relating to limitation of liability, warranty disclaimer, indemnification and intellectual property rights shall continue to be effective after these Terms are terminated." }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Plan on a pro rata basis, we may limit or suspend Customer’s Service until such Customer’s usage is within a more typical operating range." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "We may make changes to the Terms or to the Service from time to time without prior notice to Customer.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "Without limiting the foregoing, Customer will not: (i) use the Service in a way that negatively affects others or our ability to provide the Service;" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We may make changes to the Terms or to the Service from time to time without prior notice to Customer.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Customer agrees that we, in our sole discretion and for any or no reason, may terminate Customer’s User Account and access to the Service." } ], "notes": [ { "date": "2026-10-08", "text": "During and after the term, Honeycomb may use customer data and data derived from it to improve its services and for development in connection with other Honeycomb products.", "quote": "Honeycomb will have the right (during and after the term hereof) to (i) use such Customer Data (and data derived therefrom) to improve and enhance the Services and for other development, diagnostic and corrective purposes in connection with the Services and other Honeycomb offerings" }, { "date": "2026-10-08", "text": "Honeycomb may name the customer as a customer and show its name and logo on its websites and in published marketing materials.", "quote": "Customer hereby agrees that Honeycomb shall have the right to identify Customer as a customer of the Service, and display Customer’s name and logo (if any) in connection with such identification, on the Honeycomb websites and in our other published marketing materials." }, { "date": "2026-10-08", "text": "After termination the customer loses access to its data through the service and Honeycomb may delete all of it.", "quote": "After any termination hereof, Customer will no longer have access to Customer Data through the Service, and we may delete all such Customer Data." } ] }, { "kind": "privacy", "url": "https://www.honeycomb.io/privacy", "state": "read", "readAt": "2026-10-08", "words": 5080, "points": 9.3, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": false }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "This Privacy Notice describes how we collect and process personal information when you interact with Honeycomb, such as by visiting the Honeycomb website, or accessing and using the internet-based services offered by Honeycomb on our website honeycomb.io (such services, software, and the website are collectively refer…" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We store the personal data we collect about you for as long as is necessary for the purpose for which such information was collected or for other legitimate business purposes, including for the purposes of satisfying any legal, accounting, or reporting obligations or to resolve disputes.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "With Providers of Third-Party Features: Certain features and functionality available to users of Honeycomb’s Services are provided by third parties, including certain embedded video services, such as YouTube, and certain AI services that power features like Query Assistant, such as OpenAI." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Business Transfers: We may share your personal data in connection with, or during negotiations of, any merger, sale of assets, financing or acquisition of all or a portion of our business." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Additional Rights: In addition to the access, correction, and deletion rights described above in the Your Rights section, you have the following rights, subject to certain limitations and exceptions allowed by law:" }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "DPF and the Swiss-DPF should first contact Honeycomb at: privacy@honeycomb.io or Honeycomb Privacy, 548 Market Street #25362 San Francisco, CA 94104-5401.", "says": "privacy@honeycomb.io" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Data Privacy Framework, the UK Extension thereto, and the Swiss Extension thereto, as applicable.", "says": "Relies on the Data Privacy Framework" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Certain data collection and processing on our websites and other Services for purposes of interest-based advertising and social media tools may be deemed by applicable state laws, including the CCPA, a “sale” or “sharing” of personal information." } ], "notes": [ { "date": "2026-10-08", "text": "The notice does not cover content that customers submit to the services under a customer account.", "quote": "This Privacy Notice does not apply to content submitted by Honeycomb customers to the Services under a customer account." }, { "date": "2026-10-08", "text": "Some functions are run by third parties, including AI services such as OpenAI for Query Assistant, and personal data may be shared with them.", "quote": "Certain features and functionality available to users of Honeycomb’s Services are provided by third parties, including certain embedded video services, such as YouTube, and certain AI services that power features like Query Assistant, such as OpenAI." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/honeycomb-mcp.json", "live": { "slug": "honeycomb-mcp", "probe": { "target": "https://mcp.honeycomb.io/mcp", "method": "mcp-initialize", "lastAt": "2026-10-09T10:42:45.394737159Z", "lastOk": true, "lastStatus": 401, "lastMs": 362, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 342, "p95ms24h": 395, "samples24h": 33, "samples30d": 33, "days": [ { "date": "2026-10-09", "probes": 33, "ok": 33 } ] }, "vendorStatus": { "page": "https://status.honeycomb.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T10:41:43.601194596Z" }, "updatedAt": "2026-10-09T10:42:45.394737159Z" } } }