mshegolev avatar

Kibana Mcp

mshegolev/kibana-mcp

Connects Claude to Kibana and Elasticsearch for read-only log analysis. Hits the Elasticsearch REST API directly for searches and aggregations, or falls back to the Kibana Console proxy if you don't expose ES. Five tools: list indices, search logs with time ranges and full-text queries, run term aggregations with metrics like avg or sum, and browse saved dashboards. Supports API key auth (recommended) or basic auth. All responses include both structured JSON and markdown, so it works across MCP clients. Useful when you need Claude to dig through logs, compare error rates across services, or find the right dashboard without opening the Kibana UI yourself.

tools
5
auth
Secret needed
transport
STDIO
env vars
6
last updated
Apr 18, 2026

Tools

5 tools

Public tool metadata for what this MCP can expose to an agent.

kibana_list_indicesDiscover available indices with health, docs, size

Discover available indices with health, docs, size

No parameter schema in public metadata yet.

kibana_search_logsFull-text log search with time range, sort, size

Full-text log search with time range, sort, size

No parameter schema in public metadata yet.

kibana_aggregate_logsTerms grouping with count/avg/sum/min/max metric

Terms grouping with count/avg/sum/min/max metric

No parameter schema in public metadata yet.

kibana_list_dashboardsList saved dashboards with search + pagination

List saved dashboards with search + pagination

No parameter schema in public metadata yet.

kibana_get_dashboardFetch one dashboard with panel breakdown

Fetch one dashboard with panel breakdown

No parameter schema in public metadata yet.

Sponsors

Configuration

KIBANA_URL*

Kibana base URL (e.g. https://kibana.example.com)

ELASTICSEARCH_URL

Direct Elasticsearch URL. If unset, ES requests route through the Kibana Console proxy.

KIBANA_API_KEYsecret

Elasticsearch API key (ApiKey base64(id:api_key) format). Takes priority over Basic auth.

KIBANA_USERNAME

HTTP Basic auth username. Used only when KIBANA_API_KEY is not set.

KIBANA_PASSWORDsecret

HTTP Basic auth password.

KIBANA_SSL_VERIFYdefault: true

Verify SSL certificates (true/false). Set to 'false' for self-signed certs.

Readme

kibana-mcp

PyPI version Python 3.10+ License: MIT Tests

MCP server for Kibana / Elasticsearch — log search, aggregations, index discovery, and dashboard browsing via Claude and any MCP-compatible agent.

Why another Kibana MCP?

Existing integrations require a running Kibana instance with browser-level credentials and often wrap the Kibana UI rather than the stable REST APIs. This server:


View the full README on GitHub

Details

Repository
github.com/mshegolev/kibana-mcp
Categories
Databases, Search & Web Crawling, Monitoring & Observability
Package
kibana-mcp
Transport
STDIO
Auth
Required
Registry
MCP registry, active

More from mshegolev

Related Databases MCP servers

View all
1purahmanian avatarJunglescout Mcppurahmanian/junglescout-mcpJungle Scout MCP server: keyword volumes, product database, sales estimates, share of voice0stars
2ronin93 avatarGrindFree Agent Securityronin93/grindfree-agent-securityPay-per-call agent security (x402): injection, tools, shell/SQL, memory, leaks, docs, safe web reads0stars
3www avatarToolssite.jiebang.www/tools20 free dev tools: JSON/YAML, XML/SQL, Cron, SEO, QR code, URL shortener, cron tasks, files0stars
4xultrax-web avatarAgent Memory Mcpxultrax-web/agent-memory-mcpMarkdown memory for AI agents. Files you can read, edit, grep, and commit. Not a database.0stars
5waystation-ai avatarPostgreswaystation-ai/mcpConnect to your PostgreSQL database to query data and schemas.0stars
6hovecapital avatarRead Only Local Postgres Mcp Serverhovecapital/read-only-local-postgres-mcp-serverMCP server for read-only PostgreSQL database queries in Claude Desktop2stars