MCP.Market

Kibana MCP server

by mshegolev·io.github.mshegolev/kibana-mcp·v0.1.1
No reviews yet

Kibana/Elasticsearch MCP — log search, aggregations, index discovery, dashboards.

B78/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
New

0 stars57 downloads/wk

Reviews

Write one

Nobody has reviewed Kibana yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Kibana tools (7)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • _parse_bool

    Parse an env-var boolean.

  • kibana_aggregate_logs
  • kibana_get_dashboard

    Fetch a single Kibana dashboard with panel details.

  • kibana_list_dashboards

    List Kibana saved dashboards.

  • kibana_list_indices

    List available Elasticsearch indices.

  • kibana_search_logs
  • main

    Entry point for the ``kibana-mcp`` console script (stdio).

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan10 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 46 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Kibana compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 62% of 3,472 Web search servers
Tools
7
the typical Web search server has 5
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
57
more than 42% of 816 Web search servers with a package

What its tools let an agent do: 7 read

Install Kibana in Claude Code, Cursor or VS Code

claude mcp add kibana-mcp -- uvx kibana-mcp
Add to Cursor

What the publisher says

From the Kibana repository's README, as published. We do not edit it. Read it on GitHub

kibana-mcp

<!-- mcp-name: io.github.mshegolev/kibana-mcp -->

MCP server for Kibana / Elasticsearch — log search, aggregations, index discovery, and dashboard browsing via Claude and any MCP-compatible agent.

Why another Kibana MCP?

Existing integrations require a running Kibana instance with browser-level credentials and often wrap the Kibana UI rather than the stable REST APIs. This server:

  • Hits Elasticsearch REST API directly for log queries (faster, stable across Kibana UI changes)
  • Falls back to the Kibana Console proxy when no direct ES URL is configured (zero extra firewall rules)
  • Supports ApiKey auth (best for agents) as well as Basic auth and anonymous access
  • Returns both structured JSON (outputSchema) and markdown text so it works with any MCP client
  • Is read-only — all tools carry readOnlyHint: true, no data is modified

Tools

Installation

pip install kibana-mcp

Or run directly with uvx:

uvx kibana-mcp

Configuration

Environment Variables

Auth priority: ApiKey > Basic > anonymous.

Copy .env.example to .env and fill in your values.

MCP Client Configuration (Claude Desktop / claude.app)

{
  "mcpServers": {
    "kibana": {
      "command": "uvx",
      "args": ["kibana-mcp"],
      "env": {
        "KIBANA_URL": "https://kibana.example.com",
        "KIBANA_API_KEY": "your-api-key-here"
      }
    }
  }
}

Or with direct ES access for better performance:

{
  "mcpServers": {
    "kibana": {
      "command": "uvx",
      "args": ["kibana-mcp"],
      "env": {
        "KIBANA_URL": "https://kibana.example.com",
        "ELASTICSEARCH_URL": "https://es.example.com:9200",
        "KIBANA_API_KEY": "your-api-key-here"
      }
    }
  }
}

Docker

docker run --rm -i \
  -e KIBANA_URL=https://kibana.example.com \
  -e KIBANA_API_KEY=your-key \
  ghcr.io/mshegolev/kibana-mcp

Usage Examples

Log Search

Find the last 50 ERROR logs from the API service in the last hour

→ kibanasearchlogs(index="logs-", query="level:ERROR AND service:api", size=50, timefrom="2026-04-18T09:00:00Z")

Show 500 HTTP errors sorted oldest first for incident replay

→ kibanasearchlogs(index="nginx-", query="status:500", sortorder="asc", size=100)

Aggregations

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Kibana: common questions

Is Kibana MCP server safe?
Mostly: it is graded B (78/100). Read the Kibana safety report
How do I install Kibana?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Kibana need an API key?
Yes. The registry entry asks for KIBANA_API_KEY, KIBANA_PASSWORD.
Is Kibana maintained?
The last commit was 82 days ago (2026-08-12). The latest release is v0.1.1.
What can I use instead of Kibana?
Servers from other publishers that do the same job: Tinysearch MCP server and Watermelon UI MCP server.
How does Kibana compare with other Web search MCP servers?
safety score 78/100 (higher than 62% of 3,472 Web search servers); tools 7 (the typical Web search server has 5); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Kibana

Same job from other publishers: the closest match first, then the best rated.

  • Tinysearch
    Fast discovery search and self-hosted web research for MCP agents.
    B
  • Watermelon UI
    Search free React, Tailwind, and shadcn components, blocks, and dashboards; get installable source.
    B

More from mshegolev →