{"slug": "show-hn-fanout-opentelemetry-back-end-in-one-go-binary-parquet-duckdb-mcp", "title": "Show HN: Fanout – OpenTelemetry back end in one Go binary (Parquet, DuckDB, MCP)", "summary": "Labstack released Fanout, a pre-release OpenTelemetry back end that runs as a single Go binary and stores traces, logs and metrics in local Parquet files with DuckDB analytics, ingesting OTLP over both gRPC and HTTP on port 7520. Fanout ships an MCP server that serves protocol versions 2026-07-28, 2025-11-25 and 2025-06-18 over Streamable HTTP, letting external agents use the same typed query tools as its built-in investigation agent, and it supports Anthropic or OpenAI as the AI provider via FANOUT_AI_PROVIDER. Labstack warns the release has no migration paths and that the browser client, built-in agent, MCP tools, dashboards and alerts are preview capabilities.", "body_md": "**Observability your agents can operate.** Send OpenTelemetry to one binary, then investigate with\nFanout's built-in agent or connect your own over MCP.\n\nFanout keeps OpenTelemetry traces, logs, and metrics in one binary and one data directory, with no\nexternal storage services to operate. Fanout is pre-release and changes without migration paths; the browser\nclient, built-in agent, MCP tools, dashboards, and alerts are preview capabilities\n([status](https://fanout.run/status/capabilities)). Start with the\n[documentation](https://fanout.run) or run it below.\n\n- OTLP ingest over gRPC and HTTP, with local Parquet storage and DuckDB analytics.\n- An investigation agent that answers questions about your telemetry in plain language.\n- An MCP server for external agents using the same typed query tools.\n- Dashboards across traces, logs, and metrics, and alerts on service error rate, latency, throughput, and log volume.\n\n```\ndocker run --name fanout -p 7520:7520 \\\n  -v fanout-data:/var/lib/fanout/data \\\n  -e FANOUT_AUTH_CODE_SECRET=$(openssl rand -hex 32) \\\n  labstack/fanout:latest\n```\n\nOpen the one-time setup URL printed by the container and create the first administrator. Fanout displays the ingest token exactly once; save it with your collector secrets. For later sign-in without SMTP, mint a 15-minute, single-use link against the running container's control database:\n\n```\ndocker exec fanout fanout login-link admin@example.com\n```\n\nThe UI, API, MCP, and both OTLP transports share port `7520`. See\n[installation](https://fanout.run/start/install) for image defaults and bind-mount ownership, and\n[first boot](https://fanout.run/start/first-boot) for setup and SMTP login.\n\nInstall a checksum-verified release for Linux or macOS, amd64 or arm64:\n\n```\ncurl -fsSL https://raw.githubusercontent.com/labstack/fanout/main/scripts/install.sh | sh\nexport FANOUT_AUTH_CODE_SECRET=$(openssl rand -hex 32)\nfanout\n```\n\nSet `FANOUT_VERSION` to a [release tag](https://github.com/labstack/fanout/releases), such as `v2026.10.23-alpha`, to pin a release, and `FANOUT_PREFIX` to choose the installation\ndirectory. Native installs bind `127.0.0.1:7520`; set `FANOUT_ADDR=:7520` for remote access, then\nfollow the same first-boot setup.\n\nA standard OTLP/HTTP exporter can use the saved ingest token:\n\n```\nexport OTEL_EXPORTER_OTLP_PROTOCOL=http/protobuf\nexport OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:7520\nexport OTEL_EXPORTER_OTLP_HEADERS=\"authorization=Bearer%20$INGEST_TOKEN\"\n```\n\nFor a Collector on the same private container network, the forwarding side is:\n\n```\nexporters:\n  otlp_http/fanout:\n    endpoint: http://fanout:7520\n    headers:\n      Authorization: \"Bearer ${env:INGEST_TOKEN}\"\n\nservice:\n  pipelines:\n    traces:  { receivers: [otlp], exporters: [otlp_http/fanout] }\n    metrics: { receivers: [otlp], exporters: [otlp_http/fanout] }\n    logs:    { receivers: [otlp], exporters: [otlp_http/fanout] }\n```\n\nUse an existing `otlp` receiver, set `INGEST_TOKEN`, and replace `fanout` with the Collector's\nreachable private hostname. OTLP/gRPC uses `localhost:7520` locally; see [send\ntelemetry](https://fanout.run/start/send-telemetry) for TLS and HTTP/2 setup.\n\nSelect `FANOUT_AI_PROVIDER=anthropic` and inject `ANTHROPIC_API_KEY`, or select\n`FANOUT_AI_PROVIDER=openai` and inject `OPENAI_API_KEY`, then restart Fanout; the selected provider\nrequires its key at startup. With no provider, chat is disabled and the other features still work.\nSee [AI settings](https://fanout.run/reference/settings/ai).\n\nSet `FANOUT_PUBLIC_URL` to your stable, externally reachable HTTPS origin, then point a remote MCP\nclient at that origin's `/mcp` endpoint. The client discovers and registers through OAuth; you\nauthorize its scopes in the browser. Fanout serves MCP `2026-07-28` and, through the `initialize`\nhandshake, `2025-11-25` and `2025-06-18` over Streamable HTTP. See [connect over\nMCP](https://fanout.run/guides/connect-over-mcp) for setup and permissions.\n\n| If you use | Where Fanout differs | \n|---|---|\n| **Grafana with Loki, Tempo, and Mimir** | That stack keeps a service and a query language per signal, plus object storage underneath. Fanout keeps one process, one data directory, and one typed contract across all three signals, at the cost of the horizontal scale those components are built for. | \n| **SigNoz** | Both are OTLP-native and self-hosted. SigNoz composes a collector, ClickHouse, and query services; Fanout compiles ingest, authoritative Parquet storage, indexed trace reads, DuckDB analytics, alerting, and the browser client into one binary. | \n| **Jaeger** | Jaeger covers traces and expects a storage backend you run separately. Fanout ingests traces, logs, and metrics into the same store, with nothing else to deploy. | \n| **Prometheus with Grafana** | Prometheus pulls metrics and is excellent at them. Fanout accepts pushed OTLP for all three signals and is built around investigating a specific incident rather than maintaining long-range metric series. | \n| **Datadog** ,**Honeycomb** ,**Grafana Cloud** | Those are managed services: someone else runs the storage, the scaling, and the upgrades, and your telemetry leaves your network to get there. Fanout is a binary you run, on data that stays on your disk. | \n| **An OpenTelemetry Collector piped into ClickHouse** | The same shape, assembled by hand: collector, database, dashboards, and the glue between them. Fanout is that assembly as one program, with an agent and an MCP server already wired to the same query contract. | \n\nFanout is a single node. It has no clustering, no replication, and no object tier; a deployment that outgrows one machine's disk and CPU has outgrown Fanout.\n\nOne process contains ingest, storage, query, alerts, the agent, MCP, and the React client. Browser and agent clients share a typed observability contract.\n\nParquet holds telemetry, DuckDB query state is rebuildable, and SQLite holds transactional product\nstate. See [how storage works](https://fanout.run/explanation/storage-model) for durable ingest,\nindexed reads, and compaction while reads continue.\n\nConfiguration is environment-only: built-in defaults followed by nonempty process environment values, validated before data files or listeners open. Settings are read once at startup; every change requires a restart.\n\n| Environment variable | Default | Purpose | \n|---|---|---|\n| `FANOUT_ADDR` | `127.0.0.1:7520` | UI, API, MCP, and both OTLP transports | \n| `FANOUT_DATA_DIR` | `./data` | Parquet, query state, and control SQLite | \n| `FANOUT_AUTH_MODE` | `local` | Login link or SMTP, or `oidc` | \n| `FANOUT_AUTH_CODE_SECRET` | — | Required in local mode, 32+ characters | \n| `FANOUT_AI_PROVIDER` | — | Empty disables chat; `anthropic` or`openai` enables it | \n| `ANTHROPIC_API_KEY` | — | Required for Anthropic chat | \n| `OPENAI_API_KEY` | — | Required for OpenAI chat | \n| `FANOUT_RETENTION_DAYS` | `30` | Telemetry retention window | \n| `FANOUT_MCP_ENABLED` | `true` | Serve the MCP endpoint at `/mcp` | \n\nEvery secret accepts `<NAME>_FILE` instead of its value; see the [settings\nreference](https://fanout.run/reference/configuration) for validation and [runtime secret\ndelivery](https://github.com/labstack/fanout/blob/main/docs/operations.md#runtime-secret-delivery) for deployment examples.\n\nFanout sizes DuckDB automatically; measured workloads can override memory, connections, and threads\nas described in [DuckDB sizing](https://fanout.run/reference/configuration#duckdb-sizing).\n\nFor TLS, health checks, backups, upgrades, retention, and recovery, see the [operator\nrunbook](https://github.com/labstack/fanout/blob/main/docs/operations.md).\n\nFanout v2026.10.8-alpha accepted **415,859 mixed OpenTelemetry items/s**\nover 303.5 seconds on a Hetzner Cloud ccx33 (8 dedicated vCPUs, 32 GB RAM), with\ntelemetrygen on a separate ccx33. The ingest run on 16 October 2026 passed every\nquality gate. See the [performance methodology](https://fanout.run/explanation/performance).\n[Fanout Bench](https://github.com/labstack/fanout-bench) reproduces the measurement on your hardware.\n\n- **Go 1.27.3 and a C/C++ toolchain** on native Linux or macOS, amd64 or arm64.\nBuild with`just build` or`bash scripts/with-duckdb.sh go build ./cmd/fanout` ;\nthe wrapper supplies DuckDB's pinned headers, static libraries, and CGO flags.\nThe first build needs network access to download the checksum-verified engine.\n- **[Bun](https://bun.sh)** — compiles the browser assets\n- **Node.js 24.19.0** — runs development helpers and builds the documentation site\n- **[just](https://just.systems)** — task runner\n- A 32-character **authentication code secret**\n\n```\ngit clone https://github.com/labstack/fanout.git\ncd fanout\njust install   # browser dependencies and git hooks\njust build     # browser assets, then the binary\n```\n\nRun it with the minimum configuration:\n\n```\nexport FANOUT_AUTH_CODE_SECRET=$(openssl rand -hex 32) # must be 32+ characters\n\n./bin/fanout\n```\n\nOpen [http://localhost:7520](http://localhost:7520) and follow first-boot setup. SMTP and chat are optional; without SMTP,\nrun `./bin/fanout login-link admin@example.com` with the same configuration and data directory.\n\nRun `just` to list recipes, `just check` for the full gate, `just test` for Go tests, and `just ui`\nto rebuild embedded browser assets. See [CONTRIBUTING.md](https://github.com/labstack/fanout/blob/main/CONTRIBUTING.md) for environment setup,\ngenerated assets, hooks, and project layout.\n\nVersions are CalVer — `vYYYY.M.N[-alpha|-beta|-rc]`, numbered from 0 within each month across all\nmaturity suffixes. Fanout is alpha (for example, `v2026.10.23-alpha`); GA has no suffix.\nContainer tags omit the leading `v`, and every release moves `latest`. Tagged releases publish\nidentical manifests to Docker Hub (`labstack/fanout`) and GHCR (` ghcr.io/labstack/fanout`); GHCR is\ncanonical and also carries development images.\n\n| Image tag | Points at | \n|---|---|\n| `labstack/fanout:latest` | the newest release, mirrored on Docker Hub | \n| `labstack/fanout:2026.10.23-alpha` | that exact release, mirrored on Docker Hub | \n| `ghcr.io/labstack/fanout:latest` | the newest release | \n| `ghcr.io/labstack/fanout:2026.10.23-alpha` | that exact release | \n| `ghcr.io/labstack/fanout:main` | the tip of `main` | \n| `ghcr.io/labstack/fanout:sha-<commit>` | one specific commit | \n\nSee [docs/release.md](https://github.com/labstack/fanout/blob/main/docs/release.md) for platforms, checksums, provenance, and verification.\n\nIssues and pull requests are welcome; follow [CONTRIBUTING.md](https://github.com/labstack/fanout/blob/main/CONTRIBUTING.md) and run `just check`\nand `just test-race` before opening a pull request. Report security issues through\n[SECURITY.md](https://github.com/labstack/fanout/blob/main/SECURITY.md).\n\nThis repository builds Fanout without another repository; LabStack's deployment configuration,\nuptime monitoring, and public demo instance are not included. The documentation site in\n[`site/`](https://github.com/labstack/fanout/blob/main/site) is included, with settings pages generated from the same `internal/config` type the\nloader binds and checked by `just check`.\n\n[Apache-2.0](https://github.com/labstack/fanout/blob/main/LICENSE) © LabStack LLC. See [NOTICE](https://github.com/labstack/fanout/blob/main/NOTICE) and\n[THIRD_PARTY_NOTICES](https://github.com/labstack/fanout/blob/main/THIRD_PARTY_NOTICES) for attribution, and\n[TRADEMARK](https://github.com/labstack/fanout/blob/main/TRADEMARK.md) for use of the Fanout name and logo.", "url": "https://wpnews.pro/news/show-hn-fanout-opentelemetry-back-end-in-one-go-binary-parquet-duckdb-mcp", "canonical_source": "https://github.com/labstack/fanout", "published_at": "2026-10-28 12:48:11+00:00", "updated_at": "2026-10-28 13:12:56.920227+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-tools", "developer-tools", "ai-infrastructure"], "entities": ["Labstack", "Fanout", "OpenTelemetry", "DuckDB", "Parquet", "Anthropic", "OpenAI", "Model Context Protocol"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/show-hn-fanout-opentelemetry-back-end-in-one-go-binary-parquet-duckdb-mcp", "markdown": "https://wpnews.pro/news/show-hn-fanout-opentelemetry-back-end-in-one-go-binary-parquet-duckdb-mcp.md", "text": "https://wpnews.pro/news/show-hn-fanout-opentelemetry-back-end-in-one-go-binary-parquet-duckdb-mcp.txt", "jsonld": "https://wpnews.pro/news/show-hn-fanout-opentelemetry-back-end-in-one-go-binary-parquet-duckdb-mcp.jsonld"}}