Elasticsearch MCP Server

A read-only MCP (Model Context Protocol) server for Elasticsearch, providing secure access to ES 7.10 clusters via Streamable HTTP transport with Google OAuth + static Bearer token authentication.

Tools

• es_cluster_info — cluster name, version, tagline

• es_cluster_health — cluster status, nodes, shards

• es_index_list — all indices with health, doc count, storage size

• es_search — full Query DSL search with pagination, sorting, source filtering

Environment Variables

Development

npm install
npm run build
npm run dev    # tsx watch mode
npm test       # vitest

Docker

docker build -t mcp-elasticsearch .
docker run -e ES_ADDRESSES=http://es:9200 -e API_TOKENS=my-token -p 8080:8080 mcp-elasticsearch

Authentication

1. Static Bearer tokens — for programmatic access and Teleport

2. Google OAuth + PKCE — for interactive access via Claude Code (restricted to @maestra.io)

Auth is handled entirely in the application; no Traefik middleware required.