Kibana MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/mshegolev-kibana-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

5 read · 0 write · 0 deleteRead-only

Secrets

2 (API keys, tokens or passwords)

Install scripts

Not scanned yet

Runs as

Python package

Tools (5)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• kibana_aggregate_logsAggregate Logsread-only

  Aggregate logs using a terms grouping and optional metric. Wraps ``POST {ES_URL}/{index}/_search`` with ``size:0`` (no hits returned) and a ``terms`` aggregation on ``group_by``. This is the efficient way to get counts, averages, or sums grouped by a field value. When more than 20 buckets are rendered in the text output, a truncation hint is appended — use the structured ``buckets`` field for the full list. Examples: - Use when: "How many logs per log level in the last hour?" → ``index='logs-*'``, ``group_by='level'``, ``time_from='2026-04-18T09:00:00Z'``. - Use when: "W…

• kibana_get_dashboardGet Kibana Dashboardread-only

  Fetch a single Kibana dashboard with panel details. Calls ``GET {KIBANA_URL}/api/saved_objects/dashboard/{id}``. Returns the dashboard metadata and a summary of contained panels (visualisations, controls, maps, etc.). Examples: - Use when: "What panels does the 'Infrastructure Overview' dashboard have?" → obtain the ID from ``kibana_list_dashboards``, then call with ``dashboard_id=<id>``. - Use when: "Give me the description and panel count of dashboard X." → single call, no search needed if you have the ID. - Use when: Verifying that a dashboard ID from a URL o…

• kibana_list_dashboardsList Kibana Dashboardsread-only

  List Kibana saved dashboards. Calls ``GET {KIBANA_URL}/api/saved_objects/_find?type=dashboard``. The ``kbn-xsrf: true`` header is always sent to satisfy Kibana's CSRF guard. Use this to discover dashboard IDs before calling ``kibana_get_dashboard``. Pagination: if ``has_more`` is ``True``, call again with ``page + 1``. Examples: - Use when: "What Kibana dashboards are available?" → default params. - Use when: "Find the infrastructure dashboard." → ``search='infrastructure'``. - Use when: "List all dashboards — page 2." → ``page=2``. - Don't use when: You al…

• kibana_list_indicesList Elasticsearch Indicesread-only

  List available Elasticsearch indices. Calls ``GET {ES_URL}/_cat/indices?format=json`` and returns a structured list of indices with health, status, document count, and storage size. Use this first to discover which index names / patterns exist before calling ``kibana_search_logs`` or ``kibana_aggregate_logs``. Examples: - Use when: "What log indices are available in Elasticsearch?" → default params, ``pattern='*'``. - Use when: The user mentions a service name but not the index. Try ``pattern='logs-myservice-*'`` to narrow down. - Use when: "How many documents in the …

• kibana_search_logsSearch Logsread-only

  Search logs using Elasticsearch Query String Syntax. Wraps ``POST {ES_URL}/{index}/_search`` with a ``bool/must`` query. Returns the top matching log entries with their ``_source`` fields. When more than 20 hits are rendered in the text output, a truncation hint is appended — use the structured ``hits`` field for the full list. Examples: - Use when: "Show me the last 20 ERROR logs from the API service." → ``index='logs-*'``, ``query='level:ERROR AND service:api'``. - Use when: "Find 'connection refused' errors in the last hour." → ``query='message:"connection refused"'``…

Signals

Stars

0

Forks

1

Open issues

0

Weekly downloads

64

Last commit

Aug 12, 2026 (2 months ago)

Last release

May 2, 2026 (5 months ago)

Last package publish

Aug 7, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.mshegolev/kibana-mcp

Version

0.1.1

Auth

API key

Packages

pypi kibana-mcp

License

MIT

Repository

github.com/mshegolev/kibana-mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql