sf-opensearch-logging-mcp
Provides tools for querying and managing OpenSearch logs, specifically for ShareFile production logs, with support for SigV4 authentication and OAuth.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@sf-opensearch-logging-mcpsearch for recent 500 errors in production logs"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
sf-opensearch-logging-mcp
Remote HTTP Streamable MCP server for ShareFile OpenSearch production logs with EntraID OAuth.
Overview
This service wraps opensearch-mcp-server-py with:
HTTP Streamable transport at
/mcp(and SSE fallback at/sse)EntraID OAuth with RFC 9728 Protected Resource Metadata for zero-config client discovery
SigV4 auth to OpenSearch via IRSA (cross-account assume role)
Related MCP server: mcp-obo
User Setup
Add to your VS Code settings.json or .vscode/mcp.json:
{
"mcpServers": {
"sharefile-opensearch": {
"type": "http",
"url": "https://mcp.sharefile-coretools.com/mcp"
}
}
}That's it. The MCP client handles OAuth discovery and login automatically.
Requirements: Must be on the Progress corporate network.
Architecture
VS Code MCP Client
│ HTTPS + OAuth Bearer token
▼
Internal ALB (ops-coretools)
│
▼
MCP Server Pod (this service)
│ SigV4 via IRSA
▼
OpenSearch VPC Endpoint (381491976936)Environment Variables
Variable | Required | Description |
| No | EntraID tenant (default: |
| Yes | EntraID app registration client ID |
| No | EntraID group ID for access control (empty = any authenticated user) |
| No | Public base URL (default: |
| No | Server port (default: |
| Yes | OpenSearch VPC endpoint URL |
| No | AWS region (default: |
Local Development
uv venv && source .venv/bin/activate
uv pip install -e ".[dev]"
# Set required env vars
export AZURE_CLIENT_ID="your-app-id"
export OPENSEARCH_URL="https://vpc-prod-us-east-1-....es.amazonaws.com"
python -m opensearch_mcp_remoteDeployment
Deployed on ops-coretools EKS cluster via ArgoCD. See the coretools repo for K8s manifests.
Endpoints
Path | Method | Auth | Description |
| POST | Bearer | MCP Streamable HTTP |
| GET | Bearer | SSE transport (fallback) |
| GET | None | ALB health check |
| GET | None | OAuth discovery metadata |
This server cannot be deployed
Maintenance
Related MCP Connectors
Remote MCP for Copilot CLI switch gate MCP, structured receipts, audit logs, and reviewer-ready evid
One OAuth connector for your team's remote MCP servers, with Tool Packs, guardrails and logs.
Official Microsoft MCP Server to query Microsoft Entra data using natural language
Governed MCP gateway: one endpoint for your tools, with credential custody and audit log.
Related MCP Servers
- FlicenseAqualityDmaintenanceEnables querying OpenTelemetry logs stored in OpenSearch across development and production environments. Provides tools for searching logs by various criteria including free-text Lucene queries, trace IDs, service names, error levels, and specific fields.8-
- FlicenseNot gradedqualityDmaintenanceImplements the on-behalf-of flow with Entra ID to enable authorized calls to Microsoft Graph API via MCP tools.9-
- AlicenseAqualityAmaintenanceConnects OpenEvidence to MCP clients for authenticated research queries using your browser session.526 npm48Apache 2.0
- AlicenseAqualityDmaintenanceEnables searching and analyzing AWS CloudWatch logs with support for configurable log groups, time-based searches, and service-specific log stream filtering.5MIT