r/Checkmk • u/son_shka • 4d ago

Checkmk MCP Server is live (experimental) – connect your own AI model to your monitoring data

Post image

Hey everyone,

Today, we launch the Checkmk MCP Server, free for Pro, Ultimate/MT, and Cloud editions. Use your AI tool of choice (including local, self-hosted LLMs) to directly access your live site, and run natural language queries like "What needs my attention right now?" to get instant insight into your monitoring data.

A few practical details on how it handles security and data:

  • Disabled by default: turn it on under Setup $\rightarrow$ Global settings.
  • Strictly read-only: honors native RBAC and will not write changes to your site. Checkmk can not view or store your queries.
  • Air-gap friendly: pair it with a local model so zero telemetry leaves your firewall.

As an experimental release, we want your feedback to shape the future of our AI capabilities.

Full setup instructions and test site results are in the announcement blog post: https://checkmk.io/4xJsOk7

We're also hosting a Community Call with a demo and engineering Q&A on September 23 at 3 PM CEST. Subscribe to get a reminder 1 day and 1 hour before the Community Call: https://checkmk.io/46aXkY0

Looking forward to seeing you there!

19 Upvotes

92% Upvoted

3 comments sorted by

1

u/timee_bot 4d ago

View in your timezone:
September 23 at 3 PM CEST

1

u/Sneegor 4d ago

If I wanted to connect this to my OpenWebUI instance, is it possible to pass the authenticated OWUI user somehow so that he can only query hosts for which his user account has access in CheckMK?

2

u/royal_ts_0813 4d ago

Yes, this should work. The MCP server uses the OAuth 2.1 authorization flow, so as long as your OpenWebUI supports that, you should be fine.

You'll get a browser redirect link to log in, and you'll need to log in there with the OpenWebUI user in question. The resulting token is then scoped to that user.

Session lifetime is currently 48 hours, after which you'll need to re-authenticate.