by TocharianOU
Provides natural‑language and programmatic access to Kibana APIs, enabling search, inspection and execution of Kibana endpoints from any MCP‑compatible client.
Mcp Server Kibana exposes the full Elastic Kibana OpenAPI (v8.x) as MCP tools and resources. It lets an MCP client (e.g., Claude Desktop) query Kibana status, list available API paths, retrieve endpoint details, and run arbitrary Kibana API calls without writing HTTP code.
npm install -g @tocharian/mcp-server-kibana
# or
npm install @tocharian/mcp-server-kibana
KIBANA_URL=http://localhost:5601 \
KIBANA_USERNAME=admin \
KIBANA_PASSWORD=secret \
npx @tocharian/mcp-server-kibana
claude_desktop_config.json
(or any MCP client) using the npx
command and the same environment variables.get_status
, execute_kb_api
, search_kibana_api_paths
, …) or resource URIs (kibana-api://paths
, kibana-api://path/…
) to ask questions or perform actions.npx
for quick start.execute_kb_api
from an MCP‑enabled workflow to create dashboards, cases, or saved objects programmatically.Q: Do I need to build the project from source?
A: No. The package is published on npm and can be run directly with npx
. Build steps are only needed for custom development.
Q: Which Kibana versions are supported? A: The server uses the OpenAPI spec from Elastic Stack 8.x, so any Kibana 8.x release is compatible.
Q: How do I disable SSL certificate validation?
A: Set the environment variable NODE_TLS_REJECT_UNAUTHORIZED=0
. Use with caution as it disables TLS verification.
Q: Can I use this with other MCP clients besides Claude Desktop?
A: Yes. Any client that follows the MCP protocol can call the tools or consume the kibana-api://
resources.
Q: What if I need a custom CA certificate?
A: Provide the path via KIBANA_CA_CERT
environment variable.
Q: How are request retries handled?
A: The server respects KIBANA_MAX_RETRIES
(default 3) and KIBANA_TIMEOUT
(default 30000 ms).
Q: Is this an official Elastic product? A: No. It is community‑maintained and not affiliated with Elastic.
API Specification
This project is based on the official Elastic Kibana API documentation and uses the OpenAPI YAML specification from Elastic Stack 8.x (ES8) to dynamically retrieve and manage all Kibana API endpoints. For the latest details, see the Kibana API documentation.
A Kibana MCP server implementation that allows any MCP-compatible client (such as Claude Desktop) to access your Kibana instance via natural language or programmatic requests.
This project is community-maintained and is not an official product of Elastic or MCP.
# Global installation (recommended)
npm install -g @tocharian/mcp-server-kibana
# Or local installation
npm install @tocharian/mcp-server-kibana
git clone https://github.com/TocharinOU/mcp-server-kibana.git
cd mcp-server-kibana
npm install
npm run build
# Set your Kibana credentials and run
KIBANA_URL=http://your-kibana-server:5601 \
KIBANA_USERNAME=your-username \
KIBANA_PASSWORD=your-password \
npx @tocharian/mcp-server-kibana
Add to your Claude Desktop configuration file:
Config file locations:
~/Library/Application Support/Claude/claude_desktop_config.json
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"kibana-mcp-server": {
"command": "npx",
"args": ["@tocharian/mcp-server-kibana"],
"env": {
"KIBANA_URL": "http://your-kibana-server:5601",
"KIBANA_USERNAME": "your-username",
"KIBANA_PASSWORD": "your-password",
"KIBANA_DEFAULT_SPACE": "default",
"NODE_TLS_REJECT_UNAUTHORIZED": "0"
}
}
}
}
# Create .env file
cat > kibana-mcp.env << EOF
KIBANA_URL=http://your-kibana-server:5601
KIBANA_USERNAME=your-username
KIBANA_PASSWORD=your-password
NODE_TLS_REJECT_UNAUTHORIZED=0
EOF
# Run with environment file
env $(cat kibana-mcp.env | xargs) npx @tocharian/mcp-server-kibana
├── index.ts # Server entry point
├── src/
│ ├── types.ts # Type definitions and schemas
│ ├── base-tools.ts # Tool registration and API logic
│ ├── prompts.ts # Prompt registration (expert & resource helper)
│ └── resources.ts # Resource registration (API paths/URIs)
├── kibana-openapi-source.yaml # Kibana API OpenAPI index
├── README.md # English documentation
├── README_zh.md # Chinese documentation
Resource URI | Description |
---|---|
kibana-api://paths |
Returns all available Kibana API endpoints (can filter with search param) |
kibana-api://path/{method}/{encoded_path} |
Returns details for a specific API endpoint |
Examples:
kibana-api://paths?search=saved_objects
kibana-api://path/GET/%2Fapi%2Fstatus
Tool Name | Description | Input Parameters |
---|---|---|
get_status |
Get the current status of the Kibana server | space (optional string) - Target Kibana space |
execute_kb_api |
Execute a custom Kibana API request | method (GET/POST/PUT/DELETE), path (string), body (optional), params (optional), space (optional string) |
get_available_spaces |
Get available Kibana spaces and current context | include_details (optional boolean) - Include full space details |
search_kibana_api_paths |
Search Kibana API endpoints by keyword | search (string) |
list_all_kibana_api_paths |
List all Kibana API endpoints | None |
get_kibana_api_detail |
Get details for a specific Kibana API endpoint | method (string), path (string) |
Prompt Name | Description |
---|---|
kibana-tool-expert |
Tool expert mode (highly recommended in Claude Desktop), supports intelligent analysis, search, execution, and explanation of Kibana APIs via tools. Recommended for most users. |
kibana-resource-helper |
Resource helper mode, guides how to access and use Kibana API info via resource URIs. Suitable for clients that only support resource access or need raw API metadata. |
Configure the server via environment variables:
Variable Name | Description | Required |
---|---|---|
KIBANA_URL |
Kibana server address (e.g. http://localhost:5601) | Yes |
KIBANA_USERNAME |
Kibana username | Yes |
KIBANA_PASSWORD |
Kibana password | Yes |
KIBANA_DEFAULT_SPACE |
Default Kibana space (default: 'default') | No |
KIBANA_CA_CERT |
CA certificate path (optional, for SSL verification) | No |
KIBANA_TIMEOUT |
Request timeout in ms (default 30000) | No |
KIBANA_MAX_RETRIES |
Max request retries (default 3) | No |
NODE_TLS_REJECT_UNAUTHORIZED |
Set to 0 to disable SSL certificate validation (use with caution) |
No |
# Make sure you're using the latest version
npm install -g @tocharian/mcp-server-kibana@latest
# Or try using node directly
node $(which mcp-server-kibana)
NODE_TLS_REJECT_UNAUTHORIZED=0
When using this server with Claude Desktop, two different prompt interaction modes are supported:
get_status
, execute_api
, search_kibana_api_paths
, etc.) to answer your questions or perform actions.kibana-tool-expert
prompt in Claude Desktop for integration testing, then start using it.kibana-api://paths
or kibana-api://path/GET/%2Fapi%2Fstatus
), and the server returns structured data for Claude to parse.Note: The two endpoints in resources
(kibana-api://paths
and kibana-api://path/{method}/{encoded_path}
) have corresponding base tools (list_all_kibana_api_paths
, get_kibana_api_detail
). This design ensures compatibility with MCP clients that cannot intelligently select multiple resources, making it easier for tools like Claude Desktop to interact with Kibana.
Tip: Most users are recommended to use tool mode for a more natural and powerful experience; resource mode offers maximum flexibility for advanced and compatibility use cases.
Install dependencies:
npm install
Build the server:
npm run build
Auto-rebuild in development mode:
npm run watch
Since the MCP server communicates via stdio, debugging can be inconvenient. It is recommended to use MCP Inspector:
npm run inspector
After starting, Inspector will provide a browser-accessible debugging tool URL.
This project is community-maintained. Contributions and feedback are welcome! Please be respectful and inclusive in all communications, and follow the Elastic Community Code of Conduct.
This project is licensed under the Apache License 2.0. See the LICENSE file for details.
NODE_TLS_REJECT_UNAUTHORIZED=0
, be aware of security risksPlease log in to share your review and rating for this MCP.
{ "mcpServers": { "kibana-mcp-server": { "command": "npx", "args": [ "@tocharian/mcp-server-kibana" ], "env": { "KIBANA_URL": "<YOUR_KIBANA_URL>", "KIBANA_USERNAME": "<YOUR_USERNAME>", "KIBANA_PASSWORD": "<YOUR_PASSWORD>", "KIBANA_DEFAULT_SPACE": "default", "KIBANA_CA_CERT": "<PATH_TO_CA_CERT>", "KIBANA_TIMEOUT": "30000", "KIBANA_MAX_RETRIES": "3", "NODE_TLS_REJECT_UNAUTHORIZED": "0" } } } }
Discover more MCP servers with similar functionality and use cases
by netdata
Real-time, per‑second infrastructure monitoring platform that provides instant insights, auto‑discovery, edge‑based machine‑learning anomaly detection, and lightweight visualizations without requiring complex configuration.
by Arize-ai
Arize Phoenix is an open-source AI and LLM observability tool for inspecting traces, managing prompts, curating datasets, and running experiments.
by msgbyte
Provides website analytics, uptime monitoring, and server status in a single self‑hosted application.
by grafana
Provides programmatic access to Grafana dashboards, datasources, alerts, incidents, and related operational data through a Model Context Protocol server, enabling AI assistants and automation tools to query and manipulate Grafana resources.
by dynatrace-oss
Provides a local server that enables real‑time interaction with the Dynatrace observability platform, exposing tools for problem retrieval, DQL execution, Slack notifications, workflow automation, and AI‑assisted troubleshooting.
by pydantic
Provides tools to retrieve, query, and visualize OpenTelemetry traces and metrics from Pydantic Logfire via a Model Context Protocol server.
by VictoriaMetrics-Community
Access VictoriaMetrics instances through Model Context Protocol, enabling AI assistants and tools to query metrics, explore labels, debug configurations, and retrieve documentation without leaving the conversational interface.
by axiomhq
Axiom MCP Server implements the Model Context Protocol (MCP) for Axiom, enabling AI agents to query logs, traces, and other event data using the Axiom Processing Language (APL). It allows AI agents to perform monitoring, observability, and natural language analysis of data for debugging and incident response.
by GeLi2001
Datadog MCP Server is a Model Context Protocol (MCP) server that interacts with the official Datadog API. It enables users to access and manage various Datadog functionalities, including monitoring, dashboards, metrics, events, logs, and incidents.