Best Kibana MCP Servers
Kibana is a data visualization dashboard software for Elasticsearch. It provides visualization capabilities on top of the content indexed on Elasticsearch, allowing users to search, view, and interact with data stored in Elasticsearch indices.
Why this server?
Enables searching and analyzing logs in Kibana through the user's logged-in browser session, with tools for summarizing, filtering, and inspecting log entries.
AlicenseAqualityBmaintenanceEnables AI assistants to search, summarize, and inspect Kibana/OpenSearch Dashboards logs through the user's logged-in browser session, eliminating the need for API keys or service accounts.5315 npm2MITWhy this server?
Mentions that Kibana is accessible as part of the Elasticsearch cluster setup, though interaction is primarily through the Elasticsearch API
AlicenseAqualityAmaintenanceFacilitates interaction with Elasticsearch clusters by allowing users to perform index operations, document searches, and cluster management via a Model Context Protocol server and natural language commands.20308Apache 2.0Why this server?
Offers access to Kibana as part of the OpenSearch integration, allowing users to visualize and explore data stored in OpenSearch through the Kibana interface.
AlicenseBqualityDmaintenanceA Model Context Protocol server implementation that enables natural language interactions with OpenSearch clusters, allowing users to search documents, analyze indices, and manage clusters through simple conversational commands.1411Apache 2.0Why this server?
Enables AI assistants to interact with Kibana dashboards, visualizations, data views, and saved searches, with tools for executing searches, exporting dashboards, and querying Elasticsearch data through Kibana's REST API.
AlicenseBqualityDmaintenanceEnables AI assistants to interact with Kibana dashboards, visualizations, and Elasticsearch data through read-only resources and executable tools for searching logs, exporting dashboards, and querying data.717 npm3MITWhy this server?
Provides access to Kibana instances through API endpoints, allowing users to search, view, and execute Kibana APIs. Supports operations like checking server status, managing saved objects, creating dashboards, handling cases, and accessing endpoint events through Kibana's API.
AlicenseAqualityAmaintenanceMCP server for Kibana, Access search and manage Kibana in MCP Client.62,349 npm82Apache 2.0Why this server?
Converts Sigma rules to Kibana query strings for use in Kibana dashboards.
AlicenseAqualityAmaintenanceSigma detection rule writing, validation, and pySigma-based multi-backend conversion (Splunk, Elastic, Wazuh, Kibana) via 3 MCP tools and 3 Claude Code skills, backed by a 61-rule production corpus across 11 MITRE ATT\&CK tactic categories.32MITWhy this server?
Allows searching logs, performing aggregations, discovering indices, and browsing dashboards in Kibana/Elasticsearch via REST API.
AlicenseAqualityBmaintenanceMCP server for Kibana / Elasticsearch — log search, aggregations, index discovery, and dashboard browsing. Hits Elasticsearch REST API directly for log queries; falls back to Kibana Console proxy when no direct ES URL is configured. Supports ApiKey auth (best for agents), Basic auth, and anonymous access. All 5 tools are read-only (readOnlyHint: true). Returns structured JSON (outputSchema).5MITWhy this server?
Enables listing Kibana data views, querying logs through Kibana's API, and utilizing Kibana spaces for log analysis.
AlicenseAqualityDmaintenanceA read-only MCP server that gives AI assistants natural language access to Elasticsearch/Kibana logs for querying and analysis.71MITWhy this server?
Allows interaction with a Kibana deployment, providing tools for building Lens visualizations and dashboards from declarative specs, as well as managing data views, alerts, cases, security detections, Fleet, streams, observability, and platform administration/health.
AlicenseAqualityAmaintenanceEnables LLMs to interact with Kibana through composable toolboxes for building dashboards, managing data, and handling alerts, among other operations.16Apache 2.0