Zabbix MCP Server (official)
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://www.zabbix.com/documentation/8.0/en/manual/concepts/mcp_server |
|---|---|
| Category | Observability |
| Systems touched | Zabbix 8.0+: hosts, templates, items, triggers, problems, maintenance, history |
| Access (as described) | configurable |
| License / price | AGPL-3.0 / free (Zabbix packages & Docker) |
| GitHub stars | |
| Read tools | host/template/item/LLD/interface/macro/trigger/problem/maintenance/history gets (item_get, lld_get, interface_get, macro_get, history_get denied by default for sensitive data) |
| Write / delete / exec tools | problem updates (comment/ack/severity/suppress/close); create/update/delete maintenance periods |
| Read-only mode | Partial: DenyTool/AllowTool/Regexp rules in zabbix_mcp_server.conf; default conf denies tools that often expose secrets; client form-elicitation approval required for changes when supported (5-minute exact-change token) |
| Safety notes | Auth is the caller's Zabbix API token — scope it least-privilege and expiring. Clients without form elicitation apply writes immediately, so deny write tools or use a read-only token with those clients. Keep FrontendURL and AllowedIP locked down; TLSAccept=cert or terminate TLS at a proxy. Tool output can contain untrusted monitored-system text. |
| Verified | yes (docs + Docker Hub review 2026-11-07) |
| Notes | Official Zabbix SIA server shipped with Zabbix 8.0 LTS (released ~2026-11-05). Distributed as zabbix-mcp-server packages and Docker image zabbix/zabbix-mcp-server (not in the public zabbix/zabbix GitHub tree). Streamable HTTP at /mcp; client sends Zabbix API token per request. Added 2026-11-07. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.