Elasticsearch

Elasticsearch MCP Server for ES 5.x-9.x with a query harness, field validation and full API access

Connector by TocharianOU · GitHub account verified by the MCP Registry

IndexedApache-2.0Local (stdio)Remote (HTTP)★ 8

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/tocharianou-elasticsearch

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Elasticsearch MCP Server for ES 5.x-9.x with a query harness, field validation and full API access

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools: 6 read · 1 write · 0 delete · 1 not yet classified
Secrets: 3 (API keys, tokens or passwords)
Install scripts: None found
Runs as: Node.js package

Tools by what they do 8

Read from the source code; the running server may list different tools.

Read 6 · Look things up without changing anything.

es_search
get_mappings
get_shards
list_data_streams
list_indices
lookup_fields

Write 1 · Create, change, send or run things.

execute_es_api

Not yet classified 1 · We could not tell from the name and description.

esql_query

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

ES_API_KEY
ES_PASSWORD
MAX_TOKEN_CALL

Other settings (environment variables or headers).

ES_CA_CERT
ES_URL
ES_USERNAME
NODE_TLS_REJECT_UNAUTHORIZED

Network hosts it talks to 2

buildkite.com · found in code
github.com · found in code

Files it touches

Any path the agent passes to its tools

Tools (8)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

es_search
Perform an Elasticsearch search with the provided query DSL. Highlights are always enabled. Field names are validated against the index's real field_caps before execution: unambiguous mistakes (e.g. a spurious .keyword suffix on ECS/built-in mappings) are auto-fixed, unknown fields return suggestions instead of running a doomed query. If unsure about field names, call lookup_fields or get_mappings first instead of guessing.
esql_query
Execute an Elasticsearch ES|QL query (requires ES 8.11+). ES|QL is Elasticsearch's pipe-based query language. Queries look like: FROM index_name | WHERE field == "value" | STATS count = COUNT(*) BY category | SORT count DESC | LIMIT 10 Useful for analytics, aggregations and data exploration without complex DSL. Parameterised values can be passed via the 'params' argument (use ? as placeholder).
execute_es_api
Execute any Elasticsearch API endpoint directly
get_mappings
Get field mappings for Elasticsearch index(es) with intelligent analysis and filtering
get_shards
Get detailed shard information with intelligent health analysis and optimization recommendations
list_data_streams
List and analyze Elasticsearch data streams with health monitoring and rollover tracking
list_indices
List all available Elasticsearch indices with smart filtering and analysis for large index sets
lookup_fields
Find the right field names before writing a query. Searches the bundled ECS (Elastic Common Schema) dictionary by English keywords AND intersects with the target index's real fields, telling you which fields actually exist, their types, and whether they are aggregatable. ALWAYS prefer this over guessing field names (e.g. never guess a .keyword suffix). Use English keywords like 'source ip', 'process name', 'login failure outcome'.

Signals

Stars: 8
Forks: 6
Open issues: 1
Last commit: Oct 11, 2026 (18 days ago)
Last release: Oct 11, 2026 (18 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name: io.github.TocharianOU/elasticsearch
Version: 0.9.1
Auth: API key
Packages: npm @tocharianou/elasticsearch-mcpnpm @tocharianou/elasticsearch-mcp
License: Apache-2.0
Repository: github.com/TocharianOU/elasticsearch-mcp
Website: github.com/TocharianOU/elasticsearch-mcp
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql