# Coralogix Headless Usage How customers use Coralogix headlessly: through coding agents, the Coralogix CLI and the Coralogix MCP server, instead of the web app. Live, refreshed every 5 minutes. Source: https://benchmarks.coralogix.com/headless-usage ## Current figures As of 2026-10-14T01:40:22Z. - Since 20 February 2026: 30,206,021 headless commands, 2,224 dashboards created headlessly and 11,692 alerts created headlessly. - Last 7 days: 37% of Coralogix sessions ran headlessly, 33% of people worked headlessly, and 29% of alerts and 31% of dashboards were created headlessly. ## Why agents work well on Coralogix Agents use Coralogix differently from people. They ask more questions, read every answer into a limited context window, and come back to the same data again and again. Five things make that work. Server-side aggregationEmbedded skillsTOONNo rehydrationNo charge per queryThe Streama tour ## Server-side aggregation An agent that pulls raw logs into its context fills it within a few thousand lines, and pays in tokens for every one. Coralogix turns that around: a DataPrime query filters, groups and aggregates millions of documents where they live, and sends back only the rows that answer the question. The agent asks which services are failing and gets a ranked list, not a log dump. Its context window stays free for reasoning. ### Documents, query, insight #### Millions of documents A question as simple as “which services are failing?” touches millions of log lines and spans. #### One DataPrime query DataPrime filters, groups and aggregates them in the customer’s own storage, in seconds. #### A few rows back The agent reads the handful of rows that answer the question, not the million that don’t. ## Embedded skills Installing the Coralogix CLI adds more than 20 skills to a coding agent: short, tested guides for querying logs, spans and metrics, writing DataPrime, building dashboards, defining alerts and SLOs, following a RUM session and cutting costs. The agent loads the skill it needs when it needs it. Instead of guessing at syntax it explores: it finds the right fields, runs the right query and follows the answer to the next question. ## Adaptive formatting with TOON The Coralogix CLI writes its answers in three formats: text for people at a terminal, JSON for scripts, and TOON for agents. One flag, -o toon, or a profile default, and every answer comes back sized for a context window. TOON, Token-Oriented Object Notation, states each field name once and then lists the values row by row, where JSON repeats every key on every row. The data is identical; the agent reads a fraction of it. The more rows an answer has, the bigger the saving. ## Unlimited data access, without rehydration Agents ask follow-up questions, and the follow-up is often about last month rather than the last hour. Where older data sits in cold storage, that means a rehydration job first: restore the data, wait, then query. Coralogix gives you unlimited access to your data, queried directly in your own cloud object storage. There is no restore step and no second hot copy to pay for, so an agent gets an answer about last quarter as readily as one about the last five minutes. ## No charge per query Agents are curious. A single investigation can run dozens of queries, and a team of agents runs thousands a day. Coralogix does not charge per query or per byte scanned, so nobody has to ration an agent’s curiosity, or decide in advance which questions are worth the bill. ## See the architecture for yourself Server-side aggregation, querying in place and flat pricing all come from the same design: Streama, and the telemetry lake beneath it. Walk through the model that handles billions of daily queries across hundreds of petabytes. [ Take the Streama Tour ](https://benchmarks.coralogix.com/streama)