"Elastic" matching MCP servers:

A read-only MCP server that gives AI assistants natural language access to Elasticsearch/Kibana logs for querying and analysis.

Unifies 7,283+ detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a single queryable interface via MCP, with a web dashboard and autonomous agent pipeline for detection engineering.

Sigma detection rule writing, validation, and pySigma-based multi-backend conversion (Splunk, Elastic, Wazuh, Kibana) via 3 MCP tools and 3 Claude Code skills, backed by a 61-rule production corpus across 11 MITRE ATT\&CK tactic categories.

This read-only MCP Server allows you to connect to Elasticsearch data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/).

Enables personal AI agents to triage inbox items by classifying their actionability, effort duration, and urgency, producing a prioritized queue with elastic recommendations. It plugs into MCP-compliant clients such as Claude Desktop and Cursor to protect focus and reduce attention fragmentation.

Enables querying AWS cost and usage data, monitoring budgets, and auditing for waste such as stopped EC2 instances, unattached EBS volumes, and unassociated Elastic IPs through natural language across multiple AWS profiles and regions. Runs locally using existing AWS CLI credentials to keep them secure.