Kibana

🚀 Kibana MCP Server

A Kibana MCP server implementation that allows any MCP-compatible client (such as Claude Desktop) to access your Kibana instance through natural language or programmatic requests.

This project is based on the official Elastic Kibana API documentation and uses the OpenAPI YAML specification of Elastic Stack 8.x (ES8) to dynamically obtain and manage all Kibana API endpoints. For the latest details, please refer to the Kibana API documentation.

This project is community-maintained and is not an official product of Elastic or MCP.

🚀 Quick Start

1. Build the project

   npm install
   

2. Start the server

   node dist/index.js
   

3. Configure the MCP server Add the following content to claude_desktop_config.json:

   {
     "mcpServers": {
       "kibana-mcp-server": {
         "command": "node",
         "args": ["./path/to/mcp-server-kibana/dist/index.js"],
         "env": {
           "KIBANA_URL": "http://your-kibana-server:5601",
           "KIBANA_USERNAME": "your-username",
           "KIBANA_PASSWORD": "your-password",
           "NODE_TLS_REJECT_UNAUTHORIZED": "0"
         }
       }
     }
   }
   

✨ Features

• Dynamic API Management: Dynamically obtain and manage all Kibana API endpoints using the OpenAPI specification.
• Compatibility: Supports integration with tools such as Claude Desktop, offering two interaction modes: tool-based and resource-based.
• Security: Supports authentication and permission control to ensure secure access to the Kibana instance.

📦 Installation

Install Dependencies

npm install

Build the Server

npm run build

Automatic Rebuild (Development Mode)

npm run watch

💻 Usage Examples

• "How is the status of my Kibana server?"
• "List all available Kibana API endpoints."
• "Show the details of the POST /api/saved_objects/_find endpoint."
• "Execute a custom API request to get the content of /api/status."
• "Get the list of all Kibana dashboards."
• "Query the API endpoints related to endpoint events."
• "List all API endpoints related to cases."
• "Create a new case in Kibana."
• "Create a new dashboard in Kibana."

📚 Documentation

Two Interaction Modes

1. Tool-based Prompt Mode

• Working Principle: Claude Desktop can directly call server tools (such as get_status, execute_api, search_kibana_api_paths, etc.) to answer questions or perform operations.
• Applicable Scenarios: Users who desire a conversational and guided experience. The server will automatically search, execute, and interpret Kibana APIs.
• Example: "Show all Kibana API endpoints related to saved objects."

2. Resource-based Prompt Mode

• Working Principle: Claude Desktop interacts with the server through resource URIs (such as kibana-api://paths or kibana-api://path/GET/%2Fapi%2Fstatus), and the server returns structured data for Claude to parse.
• Applicable Scenarios: Advanced users, MCP clients that only support resource access, or programming scenarios that require raw API metadata.

Development

Install Dependencies

npm install

Build the Project

npm run build

Automatic Rebuild (Development Mode)

npm run watch

Debugging

Since the MCP server communicates through standard input and output, debugging may not be very convenient. It is recommended to use the MCP Inspector:

npm run inspector

After starting, the Inspector will provide a debugging tool URL that can be accessed via a browser.

Community

This project is community-maintained. Contributions and feedback are welcome! Please maintain respect and inclusiveness in all communications and abide by the Elastic Community Code of Conduct.

License

This project is licensed under the Apache License 2.0. See the LICENSE file for details.

Troubleshooting

• Check if the MCP configuration is correct.
• Ensure that the Kibana address is accessible.
• Verify that the authentication credentials have sufficient permissions.
• If using a custom CA, ensure that the certificate path is correct and readable.
• If using NODE_TLS_REJECT_UNAUTHORIZED=0, be aware of the security risks.
• Check the error information in the terminal output.