New Relic MCP server (Ground Truth): 38 tools and setup
New Relic's hosted observability connector, now part of Ground Truth: its three regional endpoints, its read tools, and the ones that need OAuth.
Checked 1 September 2026 · from New Relic's own MCP documentation and tool reference
One of 91 guides to monitoring and developer tools. Each covers what an AI coding agent can get out of the tool through MCP, the protocol that lets the agent query the tool directly.
Summary
New Relic runs a hosted MCP server with regional endpoints for the US, EU and Japan. Its tool reference lists 38 tools as of 6 October 2026. They cover entities, alerts, incidents, errors, logs, metrics, traces, dashboards, deployments and NRQL, which is New Relic's query language.
New Relic launched it as New Relic Ground Truth on 15 September 2026, and its docs file the MCP pages under that name. The public preview has ended. Three tools remain in preview: search_traces, analyze_trace_anomaly and analyze_service_dependencies.
Authentication decides what the agent gets. A user key reaches most tools. Four AI analysis tools and the three preview tools need OAuth, and the AI tools are billed against the Advanced Compute add-on.
What is the New Relic MCP server?
It is New Relic's server for the Model Context Protocol. New Relic is an observability platform, so a connected agent reaches telemetry, alerts and the entities that produce them.
Two tools carry the querying. execute_nrql_query runs NRQL directly, and natural_language_to_nrql_query turns a question into NRQL. The pairing is rare. The agent can write the query itself, or it can ask New Relic to write it.
The rest is analysis rather than retrieval. analyze_deployment_impact, analyze_golden_metrics, analyze_threads and generate_user_impact_report return New Relic's own assessment rather than raw rows.
It is strongest in production observability, touches release through change events, and reaches nothing in code review or cost.
| Part of the work | What New Relic has here | Can an agent reach it |
|---|---|---|
| Code, tests & review | None | Nothing for code or review |
| CI & release | Change tracking, deployment impact | Partial. list_change_events and analyze_deployment_impact connect a release to behavior; nothing runs a pipeline |
| Production observability | Entities, alerts, incidents, NRQL, logs, metrics, traces, dashboards, synthetics | Yes. Core strength, across the full telemetry surface |
| Agent observability & evals | None for your own agents | No traces or evaluations of your agents. The tools observe your services, not your models |
| AI cost management | None | No spend data exposed over this connector |
For an agent, New Relic answers what production is doing and what changed just before it started. Deployment impact analysis is the tool that links the two. It has no view of the code, so a fix still needs a repository connector.
What can an AI agent do with New Relic?
| Task | Tools | Works | Watch out for |
|---|---|---|---|
| Ask a question in English | natural_language_to_nrql_query execute_nrql_query | Yes | Have the agent call list_available_new_relic_accounts first, then compose the query. The first tool produces NRQL and the second runs it, so read the NRQL before trusting the answer. The first tool needs OAuth |
| Find the right service | get_entity search_entity_with_tag list_related_entities | Yes | list_available_new_relic_accounts establishes which account is in scope |
| See what is alerting | list_recent_issues list_alert_policies list_alert_conditions search_incident | Yes | Issues, policies and conditions are separate concepts with separate tools |
| Connect a deploy to a regression | list_change_events analyze_deployment_impact | Yes | Impact analysis is New Relic's assessment, not raw telemetry |
| Investigate performance | analyze_golden_metrics analyze_transactions analyze_threads list_garbage_collection_metrics | Yes | These tools work where the New Relic language agent reports thread and garbage-collection data |
| Read errors and logs | list_entity_error_groups analyze_entity_logs list_recent_logs | Yes | Error groups aggregate; recent logs do not |
| Report user impact | generate_user_impact_report generate_alert_insights_report | Yes | Both generate a report rather than returning a dataset |
| Trace a slow request | search_traces analyze_trace_anomaly get_distributed_trace_details | Yes | search_traces and analyze_trace_anomaly are preview tools. They need OAuth and the Preview Tools toggle |
list_available_new_relic_accounts belongs first. Most tools take an account, and an answer from the wrong one looks exactly like an answer from the right one.
38 tools documented as of 6 October 2026, 3 of them in preview
- Discovery8
get_entitysearch_entity_with_taglist_related_entitieslist_available_new_relic_accountslist_metric_namesget_dashboardlist_dashboardsconvert_time_period_to_epoch_ms- Data access2
execute_nrql_querynatural_language_to_nrql_query- Alerting7
list_recent_issueslist_alert_policieslist_alert_conditionssearch_incidentlist_synthetic_monitorslist_synthetic_monitor_resultsget_synthetic_check_statistics- Incident response7
list_change_eventsanalyze_deployment_impactlist_entity_error_groupsget_error_statisticssearch_errorsgenerate_alert_insights_reportgenerate_user_impact_report- Performance analytics11
analyze_golden_metricsanalyze_transactionsanalyze_threadsanalyze_kafka_metricslist_garbage_collection_metricsanalyze_entity_logslist_recent_logsget_log_statisticsget_metric_statisticsget_distributed_trace_detailslist_entity_performance_risk_groups- Preview3
search_tracesanalyze_trace_anomalyanalyze_service_dependencies
Groups follow New Relic's own tags, and the include-tags header filters tools by them. Each tool is listed once. A sixth tag, advanced-analysis, holds four tools listed above: natural_language_to_nrql_query, analyze_deployment_impact and the two report generators. Those four need OAuth and are billed as Advanced Compute. Counts come from New Relic's own MCP tool reference, read 6 October 2026. An unauthenticated tools/list gets no answer from the endpoints.
What the tool definitions cost in context
A client that loads every tool definition at the start of a session spends this much context before the first question. Claude Code defers definitions by default through tool search, and loads a tool's definition when the agent needs it. The method below gives the version and date measured.
A context window is the amount of text a model can hold at once. The 27 tools documented on 24 August 2026 cost 1,897 to 2,193 tokens on Claude. New Relic documents 38 as of 6 October 2026, so the current list costs more. The include-tags header filters tools by tag and trims that cost.
New Relic's list grew from 27 to 38 tools between August and October 2026, so the surface that registers changes and is not one to budget against.
| Tool set | Tools | Tokens (GPT-5.6, GPT-5.5) | Tokens (GPT-4, GPT-3.5) | Tokens (Claude Haiku 4.5 to Opus 5) | Share of a 200,000-token window |
|---|---|---|---|---|---|
| Every tool documented on 24 August 2026 | 27 | 668 to 913 | 668 to 913 | 1,897 to 2,193 | 0.3% to 1.1% |
Encodings: GPT-5.6, GPT-5.5 o200k_base; GPT-4, GPT-3.5 cl100k_base; Claude Haiku 4.5 to Opus 5 count_tokens. Counted from the 27 tool entries in the vendor's own documentation on 24 August 2026. That is the only public inventory.
The server could not be run for a live tools/list. So no input schemas are available. These figures cover each tool's name and description only. They are a floor, not the figure.
The Claude columns are measured through the API's count_tokens endpoint, with an empty schema per tool. So they cover the same content as the GPT columns. The range there is two tokenizer generations. Haiku 4.5 and Opus 4.6 sit at the low end. Opus 5 and Sonnet 5 sit at the high end. The gap between them is about a fifth.
New Relic MCP server limits: where answers come back incomplete
New Relic's authentication split, regional deployments and generated queries set the constraints below.
The agent says: “Error rate is up 12%.” A generated query produced that.
natural_language_to_nrql_query converts a question into NRQL, and execute_nrql_query runs it. A query that means something slightly different returns a real number for the wrong measurement.
Guard: Require the agent to print the NRQL alongside any figure it reports.
The agent says: “There is no data for that service.” It may be querying another region.
New Relic runs separate US, EU and Japan deployments with distinct hostnames. A key for one does not reach another.
Guard: Have the agent call list_available_new_relic_accounts and state the account and region behind an answer.
The agent says: “That tool is not available.” It needs OAuth.
New Relic makes seven tools OAuth-only: natural_language_to_nrql_query, analyze_deployment_impact, generate_alert_insights_report, generate_user_impact_report and the three preview tools. A client connected with a user key lacks all seven.
Guard: Connect over OAuth when the agent needs generated NRQL, deployment impact or the reports.
How to configure New Relic MCP for agents
- 1
Check access first
An administrator turns MCP on in feature control manager. The server and local-client toggles are on by default. API key access and preview tools stay off until an administrator enables them.
- 2
Choose OAuth if you need the AI tools
natural_language_to_nrql_query,analyze_deployment_impact, the two report generators and the three preview tools work only over OAuth. - 3
Pick the region
Endpoints differ: mcp.newrelic.com for the US, mcp.eu.newrelic.com for the EU and mcp.jp.newrelic.com for Japan.
- 4
Decide between a user key and OAuth
A user key is in the
NRAK-format; OAuth uses New Relic's pre-configured client and endpoints. - 5
Trim the tool list with tags
The
include-tagsheader limits tools to New Relic's tags, for examplediscovery,alerting.
Paste this into your agent’s instructions
Several tools generate an assessment rather than returning data, and one writes the query the answer rests on. Both need naming.
When you answer using New Relic MCP tools, state: - The account and entity the answer covers. - The NRQL that ran. If natural_language_to_nrql_query wrote it, show the query it produced. - Whether a claim came from an analyze_ or generate_ tool, which return New Relic's assessment rather than raw telemetry. Never state that data does not exist. State that the query above returned no results. Write your answer in ASD-STE100 Simplified Technical English. Use short sentences with one idea in each.
Do you need the MCP server at all?
Often not. NerdGraph and the NRQL API answer the same questions, and a coding agent can call them directly.
The connector earns its place on the analysis tools. Deployment impact and golden-metric analysis are New Relic's own assessments, which a raw query does not reproduce.
Grafana and Datadog both publish generally available servers over their own telemetry.
Connect it for investigation. Use NerdGraph for scripted or bulk pulls.
New Relic MCP server setup
The server is hosted, so nothing is installed. An administrator enables it in feature control manager, and your group needs an organization role that can read the MCP server.
Authentication is a user key or OAuth. Keys are in the NRAK- format and are created under API keys in the account menu. With a key, the four AI analysis tools and the three preview tools are unavailable; they need OAuth.
Claude Code
The user key is in the NRAK- format and travels as a header.
claude mcp add --transport http newrelic \ https://mcp.newrelic.com/mcp \ --header "Api-Key: NRAK-XXXXXXXXXXXXXXXXXXXXX"
Cursor
In ~/.cursor/mcp.json. Use the endpoint for your data region.
{"mcpServers":{"newrelic":{
"url":"https://mcp.newrelic.com/mcp",
"headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}Codex CLI
Codex reads TOML, so the JSON blocks above will not transfer. The key still applies.
[mcp_servers.newrelic]
url = "https://mcp.newrelic.com/mcp"
headers = { "Api-Key" = "NRAK-XXXXXXXXXXXXXXXXXXXXX" }Every other client
Each block below is the configuration for one client, with the file path and the key that client expects.
Claude Desktop
macOS ~/Library/Application Support/Claude/claude_desktop_config.json. Windows %APPDATA%\Claude\claude_desktop_config.json. There is no CLI. Edit through Settings, Developer, Edit Config.
Quit and restart fully for changes to load. Paths in args must be absolute. Logs at ~/Library/Logs/Claude/mcp.log.
{"mcpServers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
"headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}Gemini CLI
~/.gemini/settings.json globally, or .gemini/settings.json per project. Key mcpServers. CLI: gemini mcp add.
{"mcpServers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
"headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}VS Code Copilot
.vscode/mcp.json per workspace, or your user profile. CLI: code --add-mcp.
{"servers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
"headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}`.vscode/mcp.json` uses the key `servers`. VS Code's portable files, .mcp.json at the project root and ~/.copilot/mcp-config.json, use mcpServers. VS Code recommends them for new servers.
Windsurf
~/.codeium/windsurf/mcp_config.json, which is the path Windsurf documents. Key mcpServers, the same JSON shape as Cursor, carrying the same credential.
Zed
~/.config/zed/settings.json, carrying the same credential as the blocks above.
The key is `context_servers`. Zed does not call them MCP servers in config, so searching its settings for mcp finds nothing.
Google Antigravity
~/.gemini/config/mcp_config.json globally, or .agents/mcp_config.json per project. Key mcpServers. There is no CLI. Use the /mcp overlay in the editor. Supports stdio, streamable HTTP, SSE and websocket.
{"mcpServers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
"headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}Amp (Sourcegraph)
~/.config/amp/settings.json or .amp/settings.json, carrying the same credential. The amp mcp CLI covers approve, doctor and oauth.
The key is `amp.mcpServers`, namespaced. A bare mcpServers block is ignored.
Cline
~/.cline/mcp.json per the docs. The source also reads ~/.cline/data/settings/cline_mcp_settings.json. Key mcpServers, standard JSON shape, carrying the same credential. Supports stdio, streamable HTTP and SSE.
Goose (Block)
~/.config/goose/config.yaml, carrying the same credential.
YAML, and servers are called `extensions`. Goose does not use the MCP vocabulary in config at all. Add one interactively with goose configure, or per session with goose session --with-extension.
Kiro (AWS)
.kiro/settings/mcp.json per workspace, or ~/.kiro/settings/mcp.json globally. Key mcpServers, standard JSON shape, carrying the same credential.
Warp
~/.warp/.mcp.json or .warp/.mcp.json. Key mcpServers, standard shape, carrying the same credential. Also addable through the /agent-add-mcp skill.
JetBrains Junie
.junie/mcp/mcp.json per project, or ~/.junie/mcp/mcp.json. Key mcpServers, carrying the same credential. Use /mcp in the CLI to manage.
Roo Code
.roo/mcp.json per project. The global file is mcp_settings.json, opened from the Roo Code MCP settings view with Edit Global MCP. Key mcpServers, carrying the same credential.
Continue
.continue/mcpServers/*.yaml, one file per server, carrying the same credential.
YAML, and `mcpServers` is a list, not an object. Every JSON client keys servers by name. Continue takes an array, so a converted config will not parse.
Trae
.trae/mcp.json per project, or paste into the UI under Raw Config (JSON). Key mcpServers, standard shape, carrying the same credential.
Devin
Devin has no config file to edit. Servers are added through a web form in the settings UI, and Devin's documentation states you do not need to write or paste JSON. The block below is the shape those fields describe, shown for reference. Either route uses the same credential.
EU and Japan regions
Separate deployments with their own hostnames. The same key format and OAuth flow authorize them.
# EU https://mcp.eu.newrelic.com/mcp # Japan https://mcp.jp.newrelic.com/mcp
OAuth
New Relic publishes pre-configured OAuth endpoints, so the client authorizes in a browser rather than storing a key.
# Authorization URL: https://oauth2.service.newrelic.com/oauth2/auth # Token URL: https://oauth2.service.newrelic.com/oauth2/token # Scopes: ["observability:read", "offline", "offline_access"]
Read-only access, permissions and security
Check compliance with New Relic directly
The preview documentation prohibited FedRAMP-regulated accounts. The current MCP documentation, read 6 October 2026, makes no FedRAMP statement.
Three tools are still preview
search_traces,analyze_trace_anomalyandanalyze_service_dependenciesare read-only and provided for evaluation.Telemetry can carry sensitive content
Log and transaction tools return production data, which reaches the model like any other tool result.
Every documented tool reads
All 38 query, list, analyze or report, and New Relic labels the preview tools read-only.
Troubleshooting
- The endpoint refuses the connection
- An administrator has to enable MCP in feature control manager, and your group needs an organization-scoped role that can read the MCP server. API key connections also need the API Keys toggle.
- Data appears to be missing
- Check the region and the account. There are separate US, EU and Japan deployments, and
list_available_new_relic_accountsshows what the key can reach. - A natural-language answer looks wrong
natural_language_to_nrql_querywrites the query, andexecute_nrql_queryruns it. Have the agent print the generated NRQL and read it.- Some documented tools are missing
- The four AI analysis tools and the three preview tools are unavailable with a user key; connect over OAuth. Preview tools also need the Preview Tools toggle.
New Relic MCP server: Reference
| Item | Value |
|---|---|
| Endpoints | mcp.newrelic.com · mcp.eu.newrelic.com · mcp.jp.newrelic.com |
| Status | Generally available as part of New Relic Ground Truth since 15 September 2026 · 3 tools in preview |
| Compliance | The MCP documentation makes no FedRAMP statement, read 6 October 2026 · the preview documentation prohibited FedRAMP-regulated accounts |
| Auth | User key in the NRAK- format, or OAuth with published endpoints |
| OAuth scopes | ["observability:read", "offline", "offline_access"] |
| Tools | 38 documented, all read · 3 in preview · 7 need OAuth |
| Rate limit | 2,000 tool calls per hour per user |
| Billing | Core Compute Units for most tools · Advanced Compute for the four AI analysis tools |
| Repository | newrelic/mcp-server · 7 stars · 0 forks · 0 releases · created 16 October 2025 · last pushed 24 October 2025 |
| Inventory source | New Relic's own tool reference, read 6 October 2026 |
What engineers report
New Relic documents 38 tools as of 6 October 2026 and runs three regional endpoints, and the figures below come from those docs. Public discussion is small: newrelic/mcp-server has 7 stars, and the two issues below are what engineers have filed against it.
| What was checked | What it shows |
|---|---|
| Documented tools | 38 |
| Regional endpoints | 3: US, EU and Japan |
| Status | Generally available, as New Relic Ground Truth |
| OAuth-only tools | 7 |
| Repository stars | 7 |
| Repository last push | 24 October 2025 |
“The MCP tool is great but Agents will run the same query across all accounts for every investigation unless specifically prompted not to do so.”
“Even when I am already logged in, when clicking on the MCP oauth link, I am redirected out to my corporate SSO. After login, the mcp oath flow was lost, and nothing ever goes back to the MCP.”
Tool inventory, regions, authentication and status read from New Relic's own MCP documentation and tool reference on 6 October 2026. Repository facts from the GitHub API on 24 August 2026.
Should you connect an agent to New Relic?
Yes. Best for OAuth in the right region, with generated NRQL printed in every answer.
- Strongest fit
- New Relic customers who want an agent to investigate production from the editor.
- Main advantage
- Both routes to a query: the agent can write NRQL, or ask the platform to write it.
- Main weakness
- The AI analysis tools need OAuth and the Advanced Compute add-on, so a key-based setup loses New Relic's own assessments.
- Operational risk
- Low from the tools, which all read. The main risk is a generated NRQL query that measures the wrong thing.
From Oodle
One platform for agent traces and infrastructure
Agent traces usually sit in a different product from the rest of your telemetry, so when a slow database makes an agent slow the symptom is in one tool and the cause is in another. Oodle keeps both in one query surface.
See agent observabilityFrequently asked questions
How many tools does the New Relic MCP server have?
38 documented as of 6 October 2026, three of them in preview. The count comes from New Relic's own tool reference, because the hosted endpoints answer no unauthenticated tools/list.
Can I use it under FedRAMP?
Confirm with New Relic. Its current MCP documentation, read 6 October 2026, makes no FedRAMP statement. The preview documentation prohibited FedRAMP-regulated accounts.
Which regions are available?
US at mcp.newrelic.com, EU at mcp.eu.newrelic.com and Japan at mcp.jp.newrelic.com.
How does authentication work?
A user key in the NRAK- format, or OAuth using New Relic's pre-configured client and endpoints with the observability:read, offline and offline_access scopes. Seven tools work only over OAuth.
Can an agent change anything?
It can only read. All 38 documented tools query, list, analyze or generate a report.
What is New Relic Ground Truth?
The name New Relic gives the product that includes its MCP server, launched 15 September 2026. Its documentation files the MCP overview, setup and tool reference under Ground Truth.