Mcp Server Kibana
by
Provides natural‑language and programmatic access to Kibana APIs, enabling search, inspection and execution of Kibana endpoints from any MCP‑compatible client.
Mcp Server Kibana Overview
What is Mcp Server Kibana about?
Mcp Server Kibana exposes the full Elastic Kibana OpenAPI (v8.x) as MCP tools and resources. It lets an MCP client (e.g., Claude Desktop) query Kibana status, list available API paths, retrieve endpoint details, and run arbitrary Kibana API calls without writing HTTP code.
How to use Mcp Server Kibana?
- Install – globally or locally via npm:
npm install -g @tocharian/mcp-server-kibana # or npm install @tocharian/mcp-server-kibana - Run – set required environment variables and launch with npx:
KIBANA_URL=http://localhost:5601 \ KIBANA_USERNAME=admin \ KIBANA_PASSWORD=secret \ npx @tocharian/mcp-server-kibana - Configure – add a server entry to your Claude Desktop
claude_desktop_config.json(or any MCP client) using thenpxcommand and the same environment variables. - Interact – use the provided tools (
get_status,execute_kb_api,search_kibana_api_paths, …) or resource URIs (kibana-api://paths,kibana-api://path/…) to ask questions or perform actions.
Key Features of Mcp Server Kibana
- Dynamic loading of all Kibana API endpoints from the official OpenAPI spec.
- Secure authentication with username/password; optional TLS/CA support.
- Multi‑space awareness for enterprise Kibana deployments.
- Tools for status, space enumeration, API search, endpoint detail lookup, and arbitrary request execution.
- Resource URIs delivering raw API metadata for clients that only support resource access.
- Type‑safe TypeScript code base, easy to extend.
- CLI‑first design using
npxfor quick start.
Use Cases of Mcp Server Kibana
- Operations monitoring: Ask “What is the status of my Kibana server in the marketing space?” and receive a concise health report.
- Exploratory API discovery: Search “saved_objects” to list relevant endpoints, then view detailed request/response schemas.
- Automation scripts: Invoke
execute_kb_apifrom an MCP‑enabled workflow to create dashboards, cases, or saved objects programmatically. - Multi‑tenant management: Retrieve available spaces and perform actions within a selected space without manual URL handling.
- Developer assistance: Use Claude Desktop’s tool‑based prompt mode to get instant explanations of Kibana endpoints while building integrations.
FAQ from the Mcp Server Kibana
Q: Do I need to build the project from source?
A: No. The package is published on npm and can be run directly with npx. Build steps are only needed for custom development.
Q: Which Kibana versions are supported? A: The server uses the OpenAPI spec from Elastic Stack 8.x, so any Kibana 8.x release is compatible.
Q: How do I disable SSL certificate validation?
A: Set the environment variable NODE_TLS_REJECT_UNAUTHORIZED=0. Use with caution as it disables TLS verification.
Q: Can I use this with other MCP clients besides Claude Desktop?
A: Yes. Any client that follows the MCP protocol can call the tools or consume the kibana-api:// resources.
Q: What if I need a custom CA certificate?
A: Provide the path via KIBANA_CA_CERT environment variable.
Q: How are request retries handled?
A: The server respects KIBANA_MAX_RETRIES (default 3) and KIBANA_TIMEOUT (default 30000 ms).
Q: Is this an official Elastic product? A: No. It is community‑maintained and not affiliated with Elastic.
Mcp Server Kibana's README
Kibana MCP Server
API Specification
This project is based on the official Elastic Kibana API documentation and uses the OpenAPI YAML specification from Elastic Stack 8.x (ES8) to dynamically retrieve and manage all Kibana API endpoints. For the latest details, see the Kibana API documentation.
A Kibana MCP server implementation that allows any MCP-compatible client (such as Claude Desktop) to access your Kibana instance via natural language or programmatic requests.
This project is community-maintained and is not an official product of Elastic or MCP.
🚀 Installation
Quick Install
# Global installation (recommended)
npm install -g @tocharian/mcp-server-kibana
# Or local installation
npm install @tocharian/mcp-server-kibana
Alternative: From Source
git clone https://github.com/TocharinOU/mcp-server-kibana.git
cd mcp-server-kibana
npm install
npm run build
🎯 Quick Start
Method 1: Direct CLI Usage
# Set your Kibana credentials and run
KIBANA_URL=http://your-kibana-server:5601 \
KIBANA_USERNAME=your-username \
KIBANA_PASSWORD=your-password \
npx @tocharian/mcp-server-kibana
Method 2: Claude Desktop Integration (Recommended)
Add to your Claude Desktop configuration file:
Config file locations:
- MacOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"kibana-mcp-server": {
"command": "npx",
"args": ["@tocharian/mcp-server-kibana"],
"env": {
"KIBANA_URL": "http://your-kibana-server:5601",
"KIBANA_USERNAME": "your-username",
"KIBANA_PASSWORD": "your-password",
"KIBANA_DEFAULT_SPACE": "default",
"NODE_TLS_REJECT_UNAUTHORIZED": "0"
}
}
}
}
Method 3: Using Environment File
# Create .env file
cat > kibana-mcp.env << EOF
KIBANA_URL=http://your-kibana-server:5601
KIBANA_USERNAME=your-username
KIBANA_PASSWORD=your-password
NODE_TLS_REJECT_UNAUTHORIZED=0
EOF
# Run with environment file
env $(cat kibana-mcp.env | xargs) npx @tocharian/mcp-server-kibana
Features
- Connect to local or remote Kibana instances
- Secure authentication (username/password)
- SSL/TLS and custom CA certificate support
- Multi-space support for enterprise Kibana environments
- Exposes Kibana API endpoints as both tools and resources
- Search, view, and execute Kibana APIs from MCP clients
- Type-safe, extensible, and easy to integrate
Directory Structure
├── index.ts # Server entry point
├── src/
│ ├── types.ts # Type definitions and schemas
│ ├── base-tools.ts # Tool registration and API logic
│ ├── prompts.ts # Prompt registration (expert & resource helper)
│ └── resources.ts # Resource registration (API paths/URIs)
├── kibana-openapi-source.yaml # Kibana API OpenAPI index
├── README.md # English documentation
├── README_zh.md # Chinese documentation
Resources
| Resource URI | Description |
|---|---|
kibana-api://paths |
Returns all available Kibana API endpoints (can filter with search param) |
kibana-api://path/{method}/{encoded_path} |
Returns details for a specific API endpoint |
Examples:
kibana-api://paths?search=saved_objectskibana-api://path/GET/%2Fapi%2Fstatus
Tools
| Tool Name | Description | Input Parameters |
|---|---|---|
get_status |
Get the current status of the Kibana server | space (optional string) - Target Kibana space |
execute_kb_api |
Execute a custom Kibana API request | method (GET/POST/PUT/DELETE), path (string), body (optional), params (optional), space (optional string) |
get_available_spaces |
Get available Kibana spaces and current context | include_details (optional boolean) - Include full space details |
search_kibana_api_paths |
Search Kibana API endpoints by keyword | search (string) |
list_all_kibana_api_paths |
List all Kibana API endpoints | None |
get_kibana_api_detail |
Get details for a specific Kibana API endpoint | method (string), path (string) |
Prompts
| Prompt Name | Description |
|---|---|
kibana-tool-expert |
Tool expert mode (highly recommended in Claude Desktop), supports intelligent analysis, search, execution, and explanation of Kibana APIs via tools. Recommended for most users. |
kibana-resource-helper |
Resource helper mode, guides how to access and use Kibana API info via resource URIs. Suitable for clients that only support resource access or need raw API metadata. |
Configuration
Configure the server via environment variables:
| Variable Name | Description | Required |
|---|---|---|
KIBANA_URL |
Kibana server address (e.g. http://localhost:5601) | Yes |
KIBANA_USERNAME |
Kibana username | Yes |
KIBANA_PASSWORD |
Kibana password | Yes |
KIBANA_DEFAULT_SPACE |
Default Kibana space (default: 'default') | No |
KIBANA_CA_CERT |
CA certificate path (optional, for SSL verification) | No |
KIBANA_TIMEOUT |
Request timeout in ms (default 30000) | No |
KIBANA_MAX_RETRIES |
Max request retries (default 3) | No |
NODE_TLS_REJECT_UNAUTHORIZED |
Set to 0 to disable SSL certificate validation (use with caution) |
No |
📦 Package Information
- NPM Package: @tocharian/mcp-server-kibana
- GitHub Repository: TocharinOU/mcp-server-kibana
- Node.js: >= 18.0.0
- Package Size: ~685KB (6.4MB unpacked)
🔧 Troubleshooting
Common Issues
"import: command not found" error
# Make sure you're using the latest version
npm install -g @tocharian/mcp-server-kibana@latest
# Or try using node directly
node $(which mcp-server-kibana)
Connection issues
- Verify Kibana URL is accessible
- Check authentication credentials
- For SSL issues, try setting
NODE_TLS_REJECT_UNAUTHORIZED=0
Claude Desktop not detecting the server
- Restart Claude Desktop after config changes
- Check config file syntax with a JSON validator
- Verify environment variables are set correctly
Example Queries
- "What is the status of my Kibana server?"
- "What is the status of my Kibana server in the 'marketing' space?"
- "List all available Kibana spaces I can access."
- "List all available Kibana API endpoints."
- "Show details for the POST /api/saved_objects/_find endpoint."
- "Execute a custom API request for /api/status."
- "Get a list of all dashboards in Kibana."
- "Get a list of all dashboards in the 'production' space."
- "Query API endpoints related to endpoint events."
- "List all case-related API endpoints."
- "Create a new case in Kibana."
- "Create a new dashboard in Kibana."
- "Create a new dashboard in the 'dev-team' space."
Two Prompt Modes in Claude Desktop
When using this server with Claude Desktop, two different prompt interaction modes are supported:
1. Tool-based Prompt Mode
- How it works: Claude Desktop can directly call server tools (such as
get_status,execute_api,search_kibana_api_paths, etc.) to answer your questions or perform actions. - Best for: Users who want a conversational, guided experience. The server will automatically search, execute, and explain Kibana APIs.
- Example: "Show all Kibana API endpoints related to saved objects."
- Testing tip: Select the
kibana-tool-expertprompt in Claude Desktop for integration testing, then start using it.
2. Resource-based Prompt Mode
- How it works: Claude Desktop interacts with the server via resource URIs (such as
kibana-api://pathsorkibana-api://path/GET/%2Fapi%2Fstatus), and the server returns structured data for Claude to parse. - Best for: Advanced users, MCP clients that only support resource access, or programming scenarios needing raw API metadata.
- Example: "Get resource kibana-api://paths?search=dashboard"
Note: The two endpoints in resources (kibana-api://paths and kibana-api://path/{method}/{encoded_path}) have corresponding base tools (list_all_kibana_api_paths, get_kibana_api_detail). This design ensures compatibility with MCP clients that cannot intelligently select multiple resources, making it easier for tools like Claude Desktop to interact with Kibana.
Tip: Most users are recommended to use tool mode for a more natural and powerful experience; resource mode offers maximum flexibility for advanced and compatibility use cases.
Development
Install dependencies:
npm install
Build the server:
npm run build
Auto-rebuild in development mode:
npm run watch
Debugging
Since the MCP server communicates via stdio, debugging can be inconvenient. It is recommended to use MCP Inspector:
npm run inspector
After starting, Inspector will provide a browser-accessible debugging tool URL.
Community
This project is community-maintained. Contributions and feedback are welcome! Please be respectful and inclusive in all communications, and follow the Elastic Community Code of Conduct.
License
This project is licensed under the Apache License 2.0. See the LICENSE file for details.
Troubleshooting
- Check if MCP configuration is correct
- Ensure the Kibana address is accessible
- Verify authentication credentials have sufficient permissions
- If using a custom CA, ensure the certificate path is correct and readable
- If using
NODE_TLS_REJECT_UNAUTHORIZED=0, be aware of security risks - Check error messages output in the terminal
Mcp Server Kibana Reviews
Login Required
Please log in to share your review and rating for this MCP.
Actions
Mcp Server Kibana's Information
- Author
- TocharianOU
- Category
- Monitoring & Observability
- Language
- TypeScript
- License
- Apache License 2.0
- Version
- v0.1.6
- Stars
- 24
- Updated
- about 2 months ago
Configuration
{
"mcpServers": {
"kibana-mcp-server": {
"command": "npx",
"args": [
"@tocharian/mcp-server-kibana"
],
"env": {
"KIBANA_URL": "<YOUR_KIBANA_URL>",
"KIBANA_USERNAME": "<YOUR_USERNAME>",
"KIBANA_PASSWORD": "<YOUR_PASSWORD>",
"KIBANA_DEFAULT_SPACE": "default",
"KIBANA_CA_CERT": "<PATH_TO_CA_CERT>",
"KIBANA_TIMEOUT": "30000",
"KIBANA_MAX_RETRIES": "3",
"NODE_TLS_REJECT_UNAUTHORIZED": "0"
}
}
}
}Configure Clients
Related MCP Servers
Discover more MCP servers with similar functionality and use cases
Netdata
by netdata
Real-time, per‑second infrastructure monitoring platform that provides instant insights, auto‑discovery, edge‑based machine‑learning anomaly detection, and lightweight visualizations without requiring complex configuration.
Arize Phoenix
Officialby Arize-ai
Arize Phoenix is an open-source AI and LLM observability tool for inspecting traces, managing prompts, curating datasets, and running experiments.
Tianji
by msgbyte
Provides website analytics, uptime monitoring, and server status in a single self‑hosted application.
MCP Server For Grafana
by grafana
Provides programmatic access to Grafana dashboards, datasources, alerts, incidents, and related operational data through a Model Context Protocol server, enabling AI assistants and automation tools to query and manipulate Grafana resources.
Dynatrace MCP Server
by dynatrace-oss
Provides a local server that enables real‑time interaction with the Dynatrace observability platform, exposing tools for problem retrieval, DQL execution, Slack notifications, workflow automation, and AI‑assisted troubleshooting.
Logfire MCP
by pydantic
Provides tools to retrieve, query, and visualize OpenTelemetry traces and metrics from Pydantic Logfire via a Model Context Protocol server.
VictoriaMetrics MCP Server
by VictoriaMetrics-Community
Access VictoriaMetrics instances through Model Context Protocol, enabling AI assistants and tools to query metrics, explore labels, debug configurations, and retrieve documentation without leaving the conversational interface.
Axiom
Officialby axiomhq
Axiom MCP Server implements the Model Context Protocol (MCP) for Axiom, enabling AI agents to query logs, traces, and other event data using the Axiom Processing Language (APL). It allows AI agents to perform monitoring, observability, and natural language analysis of data for debugging and incident response.
Datadog
by GeLi2001
Datadog MCP Server is a Model Context Protocol (MCP) server that interacts with the official Datadog API. It enables users to access and manage various Datadog functionalities, including monitoring, dashboards, metrics, events, logs, and incidents.