# RunReveal MCP
> A security investigation MCP server for querying RunReveal log data, inspecting schemas, and managing detections, agents, investigations, notifications, dashboards, and related workspace resources.
Canonical: https://www.mcpfolio.com/servers/runreveal
Last updated: 2026-10-28
## Catalog record

- Publisher: RunReveal
- Categories: Uncategorized

## Website

https://runreveal.com/

## Transports

Remote Streamable HTTP; local stdio

## Authentication

Remote: OAuth authorization to a selected RunReveal workspace. Local CLI server: uses the same credential resolution as the RunReveal CLI and requires an API token with permissions for intended tools. OAuth scopes and API token permissions are workspace-specific.

## Tools

- **source_list**: List available data sources, optionally filtered by type.
- **run_query**: Execute ClickHouse SQL against workspace log data.
- **list_tables**: List available data tables.
- **get_table_schema**: Get table columns, types, indexes, and primary key.

## Sources

- [official_mcp_setup_and_tool_reference](https://docs.runreveal.com/ai-chat/model-context-protocol)
- [official_cli_reference](https://docs.runreveal.com/reference/using-the-cli)
- [official_ai_chat_overview](https://docs.runreveal.com/ai-chat)

## Setup

Use the interactive setup panel on [the detail page](https://www.mcpfolio.com/servers/runreveal) to view instructions for each supported client.