Alibaba Cloud SLS MCP Proxy

简体中文 | English

Connect your MCP client to Alibaba Cloud Simple Log Service (SLS).

Requirements

• Python 3.10 or later and uv.
• Alibaba Cloud credentials with permission to access the SLS resources you need.
• Alibaba Cloud CLI if using a CLI profile.

Quick start

Configure an Alibaba Cloud CLI profile, then add the following to your MCP client configuration. Replace default with your profile name:

{
  "mcpServers": {
    "alibabacloud-sls": {
      "command": "uvx",
      "args": [
        "alibabacloud-sls-mcp-proxy@latest",
        "--profile",
        "default"
      ]
    }
  }
}

This uses stdio mode: your MCP client starts the proxy automatically. Configuration locations vary by client; follow your client's MCP setup guide. If it cannot find uvx or aliyun, ensure both are available to the client, or use the absolute path to uvx in the configuration.

Use environment credentials instead

Omit --profile and its value from the configuration above, and set these variables in the environment that starts the proxy:

• ALIBABA_CLOUD_ACCESS_KEY_ID
• ALIBABA_CLOUD_ACCESS_KEY_SECRET
• ALIBABA_CLOUD_SECURITY_TOKEN (required for temporary credentials)

Choose either a CLI profile or environment credentials. When using a profile, remove the credential variables above; when using environment credentials, also remove any ALIBABA_CLOUD_PROFILE setting.

Connect over local HTTP

If your client requires an HTTP URL, run this command and keep it running:

uvx alibabacloud-sls-mcp-proxy@latest --profile default --transport http --port 8080

Configure your client to use Streamable HTTP at http://127.0.0.1:8080/mcp. Only clients on the same machine can connect.

Common options

For all options, run:

uvx alibabacloud-sls-mcp-proxy@latest --help

Credential safety

• Use a CLI profile or your client's secure environment configuration. Do not put credentials in shared configuration, command lines, or source control.
• Grant only the permissions needed for your SLS resources.
• Use HTTPS when specifying a remote service endpoint.

Troubleshooting

When requesting help, include the error message and request ID if available. Remove credentials and other sensitive information before sharing.