Zabbix MCP for Zabbix: safety score

B 74 Provisional Not reviewed Not tested read-only mode

Zabbix MCP is a community MCP server for Zabbix with 24 read, 17 write and 11 destructive tools. It has a read-only mode and needs to run locally and a secret in an environment variable; its provisional OpsMCP grade is B (74%), last checked 16 Oct 2026.

Last checked 16 Oct 2026.

MCP server for Zabbix monitoring and automation

Publisher's description

io.github.mhajder/zabbix-mcp · version 0.6.1

Access partly scored. 3 of 4 factors scored.

Not hands-on tested. No test date, notes, or observed write behavior.

Zabbix GitHub Registry record Website Report this listing

Can it change or delete things?

Yes. The extracted tools include at least one destructive tool, so it can change or delete things.

Classified from the tool name, or from the description when the name has no listed verb.

52 tools

Tool	Class
`action_get` List actions (triggers, autoregistration, etc.) from the name (get)	Read
`api_version` Get Zabbix API version information from the description (get)	Read
`call_tool` Executes any discovered tool by name from the description (executes)	Destructive
`discoveryrule_get` List LLD discovery rules from the name (get)	Read
`drule_get` List network discovery rules from the name (get)	Read
`event_get` Get events with time range filtering from the name (get)	Read
`graph_get` List graphs with optional filtering from the name (get)	Read
`history_get` Get historical data for items from the name (get)	Read
`host_create` Create a new host with interfaces and template linking from the name (create)	Write
`host_delete` Delete hosts by ID from the name (delete)	Destructive
`host_get` List hosts with optional filtering by groups, templates, proxies, and search criteria from the name (get)	Read
`host_update` Update host properties (name, status, description) from the name (update)	Write
`hostgroup_create` Create a new host group from the name (create)	Write
`hostgroup_delete` Delete host groups from the name (delete)	Destructive
`hostgroup_get` List host groups with optional filtering from the name (get)	Read
`hostgroup_update` Update an existing host group's properties (name) from the name (update)	Write
`item_create` Create a new item on a host from the name (create)	Write
`item_delete` Delete items from the name (delete)	Destructive
`item_get` List items with optional filtering by hosts, groups, templates from the name (get)	Read
`item_update` Update item properties (name, delay, units, description, status) from the name (update)	Write
`itemprototype_get` Get item prototypes from discovery rules from the name (get)	Read
`maintenance_create` Create a new maintenance period from the name (create)	Write
`maintenance_delete` Delete maintenance periods from the name (delete)	Destructive
`maintenance_get` List maintenance periods from the name (get)	Read
`maintenance_update` Update maintenance period properties (name, times, description) from the name (update)	Write
`mediatype_get` List media types from the name (get)	Read
`problem_get` Get current problems with severity and time filtering from the name (get)	Read
`proxy_create` Create a new proxy from the name (create)	Write
`proxy_delete` Delete proxies from the name (delete)	Destructive
`proxy_get` List proxies with optional filtering from the name (get)	Read
`proxy_update` Update proxy properties (name, operating mode, description) from the name (update)	Write
`script_execute` Execute a script on a host from the name (execute)	Destructive
`script_get` List scripts from the name (get)	Read
`search_tools` Finds matching tools and returns their full schemas from the name (search)	Read
`service_get` List services from the name (get)	Read
`sla_get` List SLAs from the name (get)	Read
`template_create` Create a new template from the name (create)	Write
`template_delete` Delete templates from the name (delete)	Destructive
`template_get` List templates with optional filtering from the name (get)	Read
`template_update` Update template properties (name, description) from the name (update)	Write
`trend_get` Get trend data for items from the name (get)	Read
`trigger_create` Create a new trigger with expression from the name (create)	Write
`trigger_delete` Delete triggers from the name (delete)	Destructive
`trigger_get` List triggers with severity and state filtering from the name (get)	Read
`trigger_update` Update trigger properties (description, expression, priority, status, comments) from the name (update)	Write
`user_create` Create a new user from the name (create)	Write
`user_delete` Delete users from the name (delete)	Destructive
`user_get` List users with optional filtering from the name (get)	Read
`user_update` Update user properties (name, surname, password, type) from the name (update)	Write
`usermacro_create` Create a host macro from the name (create)	Write
`usermacro_delete` Delete host macros from the name (delete)	Destructive
`usermacro_get` List user macros (host and global) from the name (get)	Read

Score

74 of 100 points (74%). A factor that was not scored counts as 0 of its full weight.

OpsMCP rubric 2026-10-16.3. Checked 16 Oct 2026.
Factor	Points	Full weight	Status
Tool capability	28	35	Scored
Access	12	25	Partly scored
Maintenance	20	20	Scored
Publisher	14	20	Scored

Tool capability

24 read, 17 write, 11 destructive.

The repository mentions a read-only mode. View the repository.

Access

Part	Value	Points	Where this came from
Scope	unknown	unknown	unknown
Where it runs	Local process	6 of 8	Registry package transport is stdio.
Credentials	Secret in an environment variable	6 of 7	Registry marked isSecret true for ZABBIX_TOKEN, ZABBIX_PASSWORD, ZABBIX_TOKEN, ZABBIX_PASSWORD, ZABBIX_TOKEN, ZABBIX_PASSWORD

Maintenance

Part	Value	Points
Last commit	2 days	8 of 8
Releases	44 days	6 of 6
Issues	2 closed / 2 issues (1.00)	6 of 6

Publisher

Part	Value	Points	Where this came from
Who publishes it	Individual	3 of 8	GitHub owner type is User (mhajder).
Registry listing	Listed	5 of 5	Official registry server io.github.mhajder/zabbix-mcp (status active).
License	MIT	4 of 4	GitHub SPDX license MIT.
Stars	10	1 of 2	10 GitHub stars.
Repository age	282 days	1 of 1	Repository created 2026-01-06T22:06:26Z.

How the rubric works

What this score does not cover

This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.

Access needed

Variable	Required	Secret	Default	Description
`ZABBIX_URL`	yes	unknown	unset	Zabbix API URL (e.g., https://zabbix.example.com/api_jsonrpc.php)
`ZABBIX_TOKEN`	unknown	yes	unset	Zabbix API token (preferred for Zabbix 5.4+)
`ZABBIX_USER`	unknown	unknown	unset	Zabbix username (alternative to token)
`ZABBIX_PASSWORD`	unknown	yes	unset	Zabbix password (alternative to token)
`ZABBIX_VERIFY_SSL`	unknown	unknown	true	Verify SSL certificates (true/false)
`ZABBIX_TIMEOUT`	unknown	unknown	30	Request timeout in seconds
`ZABBIX_SKIP_VERSION_CHECK`	unknown	unknown	false	Skip Zabbix API version compatibility check
`READ_ONLY_MODE`	unknown	unknown	false	Enable read-only mode to restrict write operations
`DISABLED_TAGS`	unknown	unknown	unset	Comma-separated list of tags to disable tools for
`LOG_LEVEL`	unknown	unknown	INFO	Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL)
`RATE_LIMIT_ENABLED`	unknown	unknown	false	Enable rate limiting
`RATE_LIMIT_MAX_REQUESTS`	unknown	unknown	60	Maximum requests per rate limit window
`RATE_LIMIT_WINDOW_MINUTES`	unknown	unknown	1	Rate limit window in minutes
`TOOL_SEARCH_ENABLED`	unknown	unknown	false	Enable FastMCP tool search transform
`TOOL_SEARCH_STRATEGY`	unknown	unknown	bm25	Tool search strategy (bm25 or regex)
`TOOL_SEARCH_MAX_RESULTS`	unknown	unknown	5	Maximum tool search results returned by search_tools
`MCP_HTTP_PORT`	unknown	unknown	8000	Port for HTTP server (default: 8000)
`MCP_TRANSPORT`	unknown	unknown	unset	MCP transport type (http for HTTP, stdio for stdio)

Maintenance

Archived: no
Last commit: 14 Oct 2026 · c174159
Latest release: v0.6.1 · 2 Sep 2026
Issues: 0 open · 2 closed
Stars: 10
License: MIT
Repository created: 6 Jan 2026

npm and PyPI

npm: No npm package in the registry entry.
PyPI: zabbix-mcp · version 0.6.1 · downloads last month 669 · published 2 Sep 2026
Maintainers: Mateusz Hajder

Install

Source: registry. This is the published command, not a rewritten one.

# requires ZABBIX_URL: Zabbix API URL (e.g., https://zabbix.example.com/api_jsonrpc.php)
uvx zabbix-mcp==0.6.1
docker run ghcr.io/mhajder/zabbix-mcp:0.6.1

Other Zabbix servers

Zabbix AI CLI

Badge

The SVG is generated for this server. The embed links to this server page.

Embed snippet

[![OpsMCP B provisional](https://opsmcp.dev/badge/mhajder-zabbix-mcp.svg)](https://opsmcp.dev/servers/mhajder-zabbix-mcp/)

Sources for this listing

registry:zabbix
github:zabbix mcp in:name,description

Official registry server io.github.mhajder/zabbix-mcp (status active).