NewAgent Observability — find failures before customers do.
Back to directory
New Relic logo

New Relic MCP server (Ground Truth): 38 tools and setup

New Relic's hosted observability connector, now part of Ground Truth: its three regional endpoints, its read tools, and the ones that need OAuth.

Connector
Official, hosted, US, EU and Japan
Coverage
Entities, alerts, NRQL, logs, dashboards, deployments
Tools
38 documented, 3 in preview
Biggest risk for an agent
AI analysis tools need OAuth and an add-on

Checked 1 September 2026 · from New Relic's own MCP documentation and tool reference

One of 91 guides to monitoring and developer tools. Each covers what an AI coding agent can get out of the tool through MCP, the protocol that lets the agent query the tool directly.

Summary

New Relic runs a hosted MCP server with regional endpoints for the US, EU and Japan. Its tool reference lists 38 tools as of 6 October 2026. They cover entities, alerts, incidents, errors, logs, metrics, traces, dashboards, deployments and NRQL, which is New Relic's query language.

New Relic launched it as New Relic Ground Truth on 15 September 2026, and its docs file the MCP pages under that name. The public preview has ended. Three tools remain in preview: search_traces, analyze_trace_anomaly and analyze_service_dependencies.

Authentication decides what the agent gets. A user key reaches most tools. Four AI analysis tools and the three preview tools need OAuth, and the AI tools are billed against the Advanced Compute add-on.

What is the New Relic MCP server?

It is New Relic's server for the Model Context Protocol. New Relic is an observability platform, so a connected agent reaches telemetry, alerts and the entities that produce them.

Two tools carry the querying. execute_nrql_query runs NRQL directly, and natural_language_to_nrql_query turns a question into NRQL. The pairing is rare. The agent can write the query itself, or it can ask New Relic to write it.

The rest is analysis rather than retrieval. analyze_deployment_impact, analyze_golden_metrics, analyze_threads and generate_user_impact_report return New Relic's own assessment rather than raw rows.

It is strongest in production observability, touches release through change events, and reaches nothing in code review or cost.

Part of the workWhat New Relic has hereCan an agent reach it
Code, tests & reviewNoneNothing for code or review
CI & releaseChange tracking, deployment impactPartial. list_change_events and analyze_deployment_impact connect a release to behavior; nothing runs a pipeline
Production observabilityEntities, alerts, incidents, NRQL, logs, metrics, traces, dashboards, syntheticsYes. Core strength, across the full telemetry surface
Agent observability & evalsNone for your own agentsNo traces or evaluations of your agents. The tools observe your services, not your models
AI cost managementNoneNo spend data exposed over this connector

For an agent, New Relic answers what production is doing and what changed just before it started. Deployment impact analysis is the tool that links the two. It has no view of the code, so a fix still needs a repository connector.

What can an AI agent do with New Relic?

TaskToolsWorksWatch out for
Ask a question in Englishnatural_language_to_nrql_query execute_nrql_queryYesHave the agent call list_available_new_relic_accounts first, then compose the query. The first tool produces NRQL and the second runs it, so read the NRQL before trusting the answer. The first tool needs OAuth
Find the right serviceget_entity search_entity_with_tag list_related_entitiesYeslist_available_new_relic_accounts establishes which account is in scope
See what is alertinglist_recent_issues list_alert_policies list_alert_conditions search_incidentYesIssues, policies and conditions are separate concepts with separate tools
Connect a deploy to a regressionlist_change_events analyze_deployment_impactYesImpact analysis is New Relic's assessment, not raw telemetry
Investigate performanceanalyze_golden_metrics analyze_transactions analyze_threads list_garbage_collection_metricsYesThese tools work where the New Relic language agent reports thread and garbage-collection data
Read errors and logslist_entity_error_groups analyze_entity_logs list_recent_logsYesError groups aggregate; recent logs do not
Report user impactgenerate_user_impact_report generate_alert_insights_reportYesBoth generate a report rather than returning a dataset
Trace a slow requestsearch_traces analyze_trace_anomaly get_distributed_trace_detailsYessearch_traces and analyze_trace_anomaly are preview tools. They need OAuth and the Preview Tools toggle

list_available_new_relic_accounts belongs first. Most tools take an account, and an answer from the wrong one looks exactly like an answer from the right one.

38 tools documented as of 6 October 2026, 3 of them in preview

Discovery8
get_entitysearch_entity_with_taglist_related_entitieslist_available_new_relic_accountslist_metric_namesget_dashboardlist_dashboardsconvert_time_period_to_epoch_ms
Data access2
execute_nrql_querynatural_language_to_nrql_query
Alerting7
list_recent_issueslist_alert_policieslist_alert_conditionssearch_incidentlist_synthetic_monitorslist_synthetic_monitor_resultsget_synthetic_check_statistics
Incident response7
list_change_eventsanalyze_deployment_impactlist_entity_error_groupsget_error_statisticssearch_errorsgenerate_alert_insights_reportgenerate_user_impact_report
Performance analytics11
analyze_golden_metricsanalyze_transactionsanalyze_threadsanalyze_kafka_metricslist_garbage_collection_metricsanalyze_entity_logslist_recent_logsget_log_statisticsget_metric_statisticsget_distributed_trace_detailslist_entity_performance_risk_groups
Preview3
search_tracesanalyze_trace_anomalyanalyze_service_dependencies

Groups follow New Relic's own tags, and the include-tags header filters tools by them. Each tool is listed once. A sixth tag, advanced-analysis, holds four tools listed above: natural_language_to_nrql_query, analyze_deployment_impact and the two report generators. Those four need OAuth and are billed as Advanced Compute. Counts come from New Relic's own MCP tool reference, read 6 October 2026. An unauthenticated tools/list gets no answer from the endpoints.

What the tool definitions cost in context

A client that loads every tool definition at the start of a session spends this much context before the first question. Claude Code defers definitions by default through tool search, and loads a tool's definition when the agent needs it. The method below gives the version and date measured.

A context window is the amount of text a model can hold at once. The 27 tools documented on 24 August 2026 cost 1,897 to 2,193 tokens on Claude. New Relic documents 38 as of 6 October 2026, so the current list costs more. The include-tags header filters tools by tag and trims that cost.

New Relic's list grew from 27 to 38 tools between August and October 2026, so the surface that registers changes and is not one to budget against.

Tool setToolsTokens (GPT-5.6, GPT-5.5)Tokens (GPT-4, GPT-3.5)Tokens (Claude Haiku 4.5 to Opus 5)Share of a 200,000-token window
Every tool documented on 24 August 202627668 to 913668 to 9131,897 to 2,1930.3% to 1.1%

Encodings: GPT-5.6, GPT-5.5 o200k_base; GPT-4, GPT-3.5 cl100k_base; Claude Haiku 4.5 to Opus 5 count_tokens. Counted from the 27 tool entries in the vendor's own documentation on 24 August 2026. That is the only public inventory.

The server could not be run for a live tools/list. So no input schemas are available. These figures cover each tool's name and description only. They are a floor, not the figure.

The Claude columns are measured through the API's count_tokens endpoint, with an empty schema per tool. So they cover the same content as the GPT columns. The range there is two tokenizer generations. Haiku 4.5 and Opus 4.6 sit at the low end. Opus 5 and Sonnet 5 sit at the high end. The gap between them is about a fifth.

New Relic MCP server limits: where answers come back incomplete

New Relic's authentication split, regional deployments and generated queries set the constraints below.

The agent says: “Error rate is up 12%.” A generated query produced that.

natural_language_to_nrql_query converts a question into NRQL, and execute_nrql_query runs it. A query that means something slightly different returns a real number for the wrong measurement.

Guard: Require the agent to print the NRQL alongside any figure it reports.

The agent says: “There is no data for that service.” It may be querying another region.

New Relic runs separate US, EU and Japan deployments with distinct hostnames. A key for one does not reach another.

Guard: Have the agent call list_available_new_relic_accounts and state the account and region behind an answer.

The agent says: “That tool is not available.” It needs OAuth.

New Relic makes seven tools OAuth-only: natural_language_to_nrql_query, analyze_deployment_impact, generate_alert_insights_report, generate_user_impact_report and the three preview tools. A client connected with a user key lacks all seven.

Guard: Connect over OAuth when the agent needs generated NRQL, deployment impact or the reports.

How to configure New Relic MCP for agents

  1. 1

    Check access first

    An administrator turns MCP on in feature control manager. The server and local-client toggles are on by default. API key access and preview tools stay off until an administrator enables them.

  2. 2

    Choose OAuth if you need the AI tools

    natural_language_to_nrql_query, analyze_deployment_impact, the two report generators and the three preview tools work only over OAuth.

  3. 3

    Pick the region

    Endpoints differ: mcp.newrelic.com for the US, mcp.eu.newrelic.com for the EU and mcp.jp.newrelic.com for Japan.

  4. 4

    Decide between a user key and OAuth

    A user key is in the NRAK- format; OAuth uses New Relic's pre-configured client and endpoints.

  5. 5

    Trim the tool list with tags

    The include-tags header limits tools to New Relic's tags, for example discovery,alerting.

Paste this into your agent’s instructions

Several tools generate an assessment rather than returning data, and one writes the query the answer rests on. Both need naming.

Terminal
When you answer using New Relic MCP tools, state:
- The account and entity the answer covers.
- The NRQL that ran. If natural_language_to_nrql_query wrote
  it, show the query it produced.
- Whether a claim came from an analyze_ or generate_ tool,
  which return New Relic's assessment rather than raw telemetry.
Never state that data does not exist. State that the query
above returned no results.
Write your answer in ASD-STE100 Simplified Technical
English. Use short sentences with one idea in each.

Do you need the MCP server at all?

Often not. NerdGraph and the NRQL API answer the same questions, and a coding agent can call them directly.

The connector earns its place on the analysis tools. Deployment impact and golden-metric analysis are New Relic's own assessments, which a raw query does not reproduce.

Grafana and Datadog both publish generally available servers over their own telemetry.

Connect it for investigation. Use NerdGraph for scripted or bulk pulls.

New Relic MCP server setup

The server is hosted, so nothing is installed. An administrator enables it in feature control manager, and your group needs an organization role that can read the MCP server.

Authentication is a user key or OAuth. Keys are in the NRAK- format and are created under API keys in the account menu. With a key, the four AI analysis tools and the three preview tools are unavailable; they need OAuth.

Claude Code

The user key is in the NRAK- format and travels as a header.

Terminal
claude mcp add --transport http newrelic \
  https://mcp.newrelic.com/mcp \
  --header "Api-Key: NRAK-XXXXXXXXXXXXXXXXXXXXX"

Cursor

In ~/.cursor/mcp.json. Use the endpoint for your data region.

Terminal
{"mcpServers":{"newrelic":{
  "url":"https://mcp.newrelic.com/mcp",
  "headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}

Codex CLI

Codex reads TOML, so the JSON blocks above will not transfer. The key still applies.

Terminal
[mcp_servers.newrelic]
url = "https://mcp.newrelic.com/mcp"
headers = { "Api-Key" = "NRAK-XXXXXXXXXXXXXXXXXXXXX" }

Every other client

Each block below is the configuration for one client, with the file path and the key that client expects.

Claude Desktop

macOS ~/Library/Application Support/Claude/claude_desktop_config.json. Windows %APPDATA%\Claude\claude_desktop_config.json. There is no CLI. Edit through Settings, Developer, Edit Config.

Quit and restart fully for changes to load. Paths in args must be absolute. Logs at ~/Library/Logs/Claude/mcp.log.

Terminal
{"mcpServers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
  "headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}
Gemini CLI

~/.gemini/settings.json globally, or .gemini/settings.json per project. Key mcpServers. CLI: gemini mcp add.

Terminal
{"mcpServers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
  "headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}
VS Code Copilot

.vscode/mcp.json per workspace, or your user profile. CLI: code --add-mcp.

Terminal
{"servers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
  "headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}

`.vscode/mcp.json` uses the key `servers`. VS Code's portable files, .mcp.json at the project root and ~/.copilot/mcp-config.json, use mcpServers. VS Code recommends them for new servers.

Windsurf

~/.codeium/windsurf/mcp_config.json, which is the path Windsurf documents. Key mcpServers, the same JSON shape as Cursor, carrying the same credential.

Zed

~/.config/zed/settings.json, carrying the same credential as the blocks above.

The key is `context_servers`. Zed does not call them MCP servers in config, so searching its settings for mcp finds nothing.

Google Antigravity

~/.gemini/config/mcp_config.json globally, or .agents/mcp_config.json per project. Key mcpServers. There is no CLI. Use the /mcp overlay in the editor. Supports stdio, streamable HTTP, SSE and websocket.

Terminal
{"mcpServers":{"newrelic":{"url":"https://mcp.newrelic.com/mcp",
  "headers":{"Api-Key":"NRAK-XXXXXXXXXXXXXXXXXXXXX"}}}}
Amp (Sourcegraph)

~/.config/amp/settings.json or .amp/settings.json, carrying the same credential. The amp mcp CLI covers approve, doctor and oauth.

The key is `amp.mcpServers`, namespaced. A bare mcpServers block is ignored.

Cline

~/.cline/mcp.json per the docs. The source also reads ~/.cline/data/settings/cline_mcp_settings.json. Key mcpServers, standard JSON shape, carrying the same credential. Supports stdio, streamable HTTP and SSE.

Goose (Block)

~/.config/goose/config.yaml, carrying the same credential.

YAML, and servers are called `extensions`. Goose does not use the MCP vocabulary in config at all. Add one interactively with goose configure, or per session with goose session --with-extension.

Kiro (AWS)

.kiro/settings/mcp.json per workspace, or ~/.kiro/settings/mcp.json globally. Key mcpServers, standard JSON shape, carrying the same credential.

Warp

~/.warp/.mcp.json or .warp/.mcp.json. Key mcpServers, standard shape, carrying the same credential. Also addable through the /agent-add-mcp skill.

JetBrains Junie

.junie/mcp/mcp.json per project, or ~/.junie/mcp/mcp.json. Key mcpServers, carrying the same credential. Use /mcp in the CLI to manage.

Roo Code

.roo/mcp.json per project. The global file is mcp_settings.json, opened from the Roo Code MCP settings view with Edit Global MCP. Key mcpServers, carrying the same credential.

Continue

.continue/mcpServers/*.yaml, one file per server, carrying the same credential.

YAML, and `mcpServers` is a list, not an object. Every JSON client keys servers by name. Continue takes an array, so a converted config will not parse.

Trae

.trae/mcp.json per project, or paste into the UI under Raw Config (JSON). Key mcpServers, standard shape, carrying the same credential.

Devin

Devin has no config file to edit. Servers are added through a web form in the settings UI, and Devin's documentation states you do not need to write or paste JSON. The block below is the shape those fields describe, shown for reference. Either route uses the same credential.

EU and Japan regions

Separate deployments with their own hostnames. The same key format and OAuth flow authorize them.

Terminal
# EU
https://mcp.eu.newrelic.com/mcp
# Japan
https://mcp.jp.newrelic.com/mcp
OAuth

New Relic publishes pre-configured OAuth endpoints, so the client authorizes in a browser rather than storing a key.

Terminal
# Authorization URL: https://oauth2.service.newrelic.com/oauth2/auth
# Token URL:         https://oauth2.service.newrelic.com/oauth2/token
# Scopes:            ["observability:read", "offline", "offline_access"]

Read-only access, permissions and security

  • Check compliance with New Relic directly

    The preview documentation prohibited FedRAMP-regulated accounts. The current MCP documentation, read 6 October 2026, makes no FedRAMP statement.

  • Three tools are still preview

    search_traces, analyze_trace_anomaly and analyze_service_dependencies are read-only and provided for evaluation.

  • Telemetry can carry sensitive content

    Log and transaction tools return production data, which reaches the model like any other tool result.

  • Every documented tool reads

    All 38 query, list, analyze or report, and New Relic labels the preview tools read-only.

Troubleshooting

The endpoint refuses the connection
An administrator has to enable MCP in feature control manager, and your group needs an organization-scoped role that can read the MCP server. API key connections also need the API Keys toggle.
Data appears to be missing
Check the region and the account. There are separate US, EU and Japan deployments, and list_available_new_relic_accounts shows what the key can reach.
A natural-language answer looks wrong
natural_language_to_nrql_query writes the query, and execute_nrql_query runs it. Have the agent print the generated NRQL and read it.
Some documented tools are missing
The four AI analysis tools and the three preview tools are unavailable with a user key; connect over OAuth. Preview tools also need the Preview Tools toggle.

New Relic MCP server: Reference

ItemValue
Endpointsmcp.newrelic.com · mcp.eu.newrelic.com · mcp.jp.newrelic.com
StatusGenerally available as part of New Relic Ground Truth since 15 September 2026 · 3 tools in preview
ComplianceThe MCP documentation makes no FedRAMP statement, read 6 October 2026 · the preview documentation prohibited FedRAMP-regulated accounts
AuthUser key in the NRAK- format, or OAuth with published endpoints
OAuth scopes["observability:read", "offline", "offline_access"]
Tools38 documented, all read · 3 in preview · 7 need OAuth
Rate limit2,000 tool calls per hour per user
BillingCore Compute Units for most tools · Advanced Compute for the four AI analysis tools
Repositorynewrelic/mcp-server · 7 stars · 0 forks · 0 releases · created 16 October 2025 · last pushed 24 October 2025
Inventory sourceNew Relic's own tool reference, read 6 October 2026

What engineers report

New Relic documents 38 tools as of 6 October 2026 and runs three regional endpoints, and the figures below come from those docs. Public discussion is small: newrelic/mcp-server has 7 stars, and the two issues below are what engineers have filed against it.

What was checkedWhat it shows
Documented tools38
Regional endpoints3: US, EU and Japan
StatusGenerally available, as New Relic Ground Truth
OAuth-only tools7
Repository stars7
Repository last push24 October 2025

“The MCP tool is great but Agents will run the same query across all accounts for every investigation unless specifically prompted not to do so.”

drod3763, GitHub issue, 24 April 2026 · Query scope across accounts, and a request for a default account.

“Even when I am already logged in, when clicking on the MCP oauth link, I am redirected out to my corporate SSO. After login, the mcp oath flow was lost, and nothing ever goes back to the MCP.”

Jason-Coyne, GitHub issue, 8 April 2026 · The OAuth flow against corporate SSO, on an issue still open at the time of writing.

Tool inventory, regions, authentication and status read from New Relic's own MCP documentation and tool reference on 6 October 2026. Repository facts from the GitHub API on 24 August 2026.

Should you connect an agent to New Relic?

Yes. Best for OAuth in the right region, with generated NRQL printed in every answer.

Strongest fit
New Relic customers who want an agent to investigate production from the editor.
Main advantage
Both routes to a query: the agent can write NRQL, or ask the platform to write it.
Main weakness
The AI analysis tools need OAuth and the Advanced Compute add-on, so a key-based setup loses New Relic's own assessments.
Operational risk
Low from the tools, which all read. The main risk is a generated NRQL query that measures the wrong thing.

From Oodle

One platform for agent traces and infrastructure

Agent traces usually sit in a different product from the rest of your telemetry, so when a slow database makes an agent slow the symptom is in one tool and the cause is in another. Oodle keeps both in one query surface.

See agent observability

Frequently asked questions

How many tools does the New Relic MCP server have?

38 documented as of 6 October 2026, three of them in preview. The count comes from New Relic's own tool reference, because the hosted endpoints answer no unauthenticated tools/list.

Can I use it under FedRAMP?

Confirm with New Relic. Its current MCP documentation, read 6 October 2026, makes no FedRAMP statement. The preview documentation prohibited FedRAMP-regulated accounts.

Which regions are available?

US at mcp.newrelic.com, EU at mcp.eu.newrelic.com and Japan at mcp.jp.newrelic.com.

How does authentication work?

A user key in the NRAK- format, or OAuth using New Relic's pre-configured client and endpoints with the observability:read, offline and offline_access scopes. Seven tools work only over OAuth.

Can an agent change anything?

It can only read. All 38 documented tools query, list, analyze or generate a report.

What is New Relic Ground Truth?

The name New Relic gives the product that includes its MCP server, launched 15 September 2026. Its documentation files the MCP overview, setup and tool reference under Ground Truth.

Changelog

  • 6 October 2026. New Relic's tool reference lists 38 tools, 3 of them in preview.
  • 15 September 2026. New Relic launched Ground Truth, which includes the MCP server. Organizations from the public preview keep their access under the new name.
  • 24 October 2025. Last push. The repository has never tagged a GitHub release.
  • 16 October 2025. newrelic/mcp-server created on GitHub.

Sources

Every number on the page traces to one of these

  1. New Relic Ground Truth MCP overview, setup and tool reference, read 6 October 2026
  2. Regional endpoints, OAuth configuration, feature control toggles and OAuth-only tools from the same documentation
  3. New Relic What's New post on Ground Truth, 15 September 2026
  4. The preview-era overview and its FedRAMP prohibition from the newrelic/docs-website history
  5. Repository facts from the GitHub API · newrelic/mcp-server, retrieved 24 August 2026

New Relic’s own MCP documentation

Also production observability:

For the release behind a regression: