
Kibana Mcp
Connects Claude to Kibana and Elasticsearch for read-only log analysis. Hits the Elasticsearch REST API directly for searches and aggregations, or falls back to the Kibana Console proxy if you don't expose ES. Five tools: list indices, search logs with time ranges and full-text queries, run term aggregations with metrics like avg or sum, and browse saved dashboards. Supports API key auth (recommended) or basic auth. All responses include both structured JSON and markdown, so it works across MCP clients. Useful when you need Claude to dig through logs, compare error rates across services, or find the right dashboard without opening the Kibana UI yourself.
- tools
- 5
- auth
- Secret needed
- transport
- STDIO
- env vars
- 6
- last updated
- Apr 18, 2026
Tools
5 toolsPublic tool metadata for what this MCP can expose to an agent.
kibana_list_indicesDiscover available indices with health, docs, size
Discover available indices with health, docs, size
No parameter schema in public metadata yet.
kibana_search_logsFull-text log search with time range, sort, size
Full-text log search with time range, sort, size
No parameter schema in public metadata yet.
kibana_aggregate_logsTerms grouping with count/avg/sum/min/max metric
Terms grouping with count/avg/sum/min/max metric
No parameter schema in public metadata yet.
kibana_list_dashboardsList saved dashboards with search + pagination
List saved dashboards with search + pagination
No parameter schema in public metadata yet.
kibana_get_dashboardFetch one dashboard with panel breakdown
Fetch one dashboard with panel breakdown
No parameter schema in public metadata yet.
Sponsors
Configuration
KIBANA_URL*Kibana base URL (e.g. https://kibana.example.com)
ELASTICSEARCH_URLDirect Elasticsearch URL. If unset, ES requests route through the Kibana Console proxy.
KIBANA_API_KEYsecretElasticsearch API key (ApiKey base64(id:api_key) format). Takes priority over Basic auth.
KIBANA_USERNAMEHTTP Basic auth username. Used only when KIBANA_API_KEY is not set.
KIBANA_PASSWORDsecretHTTP Basic auth password.
KIBANA_SSL_VERIFYdefault: trueVerify SSL certificates (true/false). Set to 'false' for self-signed certs.
Readme
kibana-mcp
MCP server for Kibana / Elasticsearch — log search, aggregations, index discovery, and dashboard browsing via Claude and any MCP-compatible agent.
Why another Kibana MCP?
Existing integrations require a running Kibana instance with browser-level credentials and often wrap the Kibana UI rather than the stable REST APIs. This server:
Details
- Repository
- github.com/mshegolev/kibana-mcp
- Categories
- Databases, Search & Web Crawling, Monitoring & Observability
- Package
kibana-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active