---
title: "Grafbase integration for LuumenAI"
url: "https://www.luumen.ai/integrations/grafbase/"
entity: SoftwareIntegration
category: "Source control & CI/CD"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Grafbase integration for LuumenAI

Read federated schemas and audit logs, then change graph config with approval

## What LuumenAI can do with Grafbase

LuumenAI connects to Grafbase with an API token and exposes 28 tools (17 read-only · 4 write · 7 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 28 tools (17 read-only · 4 write · 7 destructive)
- Plan: available on all plans
- Category: Source control & CI/CD

## About Grafbase with LuumenAI

Connect Grafbase and your agent can read the composed federated schema, individual subgraph SDL, schema checks, audit logs, and API keys without waiting on a console tab. Changes — assigning a team role, enabling an MCP server, retiring an API key, removing a subgraph — are previewed first and go through approval before they run.

## Example tools

Read-only (17 in total):

- `GRAFBASE_DELETE_AUDIT_LOG` — Delete a specific Grafbase audit log entry.
- `GRAFBASE_DELETE_SCHEMA_CHECK` — Attempt to delete a schema check from the Grafbase platform.
- `GRAFBASE_GET_AUDIT_LOG` — Retrieve a specific Grafbase audit log entry by searching organization activity.
- `GRAFBASE_GET_EXTENSION_BY_NAME` — Retrieve a Grafbase extension by its name.
- `GRAFBASE_GET_EXTENSION_VERSION_BY_NAME_AND_VERSION` — Retrieve details of a specific Grafbase extension version by name and version.
- `GRAFBASE_GET_FEDERATED_SCHEMA` — Retrieves the composed federated graph schema from Grafbase in SDL format.
- `GRAFBASE_GET_INVITATION` — Retrieve details about a specific Grafbase invitation by ID.
- `GRAFBASE_GET_NOTIFICATIONS_INBOX_MESSAGES` — Retrieve notifications inbox messages for the authenticated Grafbase user.

Write and destructive (11 in total, approval required by default):

- `GRAFBASE_ADD_ZITADEL_REDIRECT` — Add a redirect URI to Zitadel OAuth configuration in Grafbase.
- `GRAFBASE_ASSIGN_TEAM_ROLE` — Assign a role to a team member in Grafbase.
- `GRAFBASE_DELETE_API_KEY` — Delete an existing Grafbase API key (access token) by ID.
- `GRAFBASE_DELETE_EXTENSION` — Delete a Grafbase extension configuration by its unique ID.
- `GRAFBASE_DELETE_MCP_SERVER` — Delete a Grafbase MCP server configuration by its unique ID.
- `GRAFBASE_DELETE_SCHEMA` — Delete a subgraph from a Grafbase federated graph.
- `GRAFBASE_DELETE_TEAM` — Delete a team from the Grafbase organization.
- `GRAFBASE_DISABLE_MCP` — Disable the Model Context Protocol (MCP) server for a Grafbase project.

## Frequently asked questions

### How does LuumenAI connect to Grafbase?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Grafbase on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 7 actions classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to Grafbase — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/grafbase/