An MCP server for Kibana and Elasticsearch that lets compatible agents search logs, run aggregations, list indices, and browse dashboards. It can query Elasticsearch directly or use the Kibana Console proxy when no direct Elasticsearch URL is configured.
From the registry: Kibana/Elasticsearch MCP — log search, aggregations, index discovery, dashboards.
$ pip install kibana-mcphttps://pypi.org/project/kibana-mcp/Please install the `kibana-mcp` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Install Python 3.10+** — Python 3.10 or newer is required to run kibana-mcp. (https://www.python.org/)
- **Prepare Kibana access credentials** — Set up access to your Kibana instance. KIBANA_URL is required. Authentication can use an API key, basic auth, or anonymous access. API key auth is recommended for agents.
Optional prerequisites:
- Install kibana-mcp or use uvx — Preferred portable run path is via uvx. Alternatively, install the package with pip. Run: `pip install kibana-mcp` (https://pypi.org/project/kibana-mcp/)
Canonical MCP server config (stdio transport):
- command: `uvx`
- args: ["kibana-mcp"]
- required environment variables:
- `KIBANA_URL`: Kibana base URL. (example: `<your-kibana-url>`)
- optional environment variables:
- `ELASTICSEARCH_URL`: Direct Elasticsearch endpoint. If unset, Elasticsearch requests go through the Kibana Console proxy. (example: `<your-elasticsearch-url>`)
- `KIBANA_API_KEY`: Elasticsearch API key in `ApiKey base64(id:api_key)` format. Recommended for agents; takes priority over basic auth. (example: `<your-api-key>`)
- `KIBANA_USERNAME`: HTTP Basic auth username, used if API key is not set. (example: `<your-username>`)
- `KIBANA_PASSWORD`: HTTP Basic auth password, used with KIBANA_USERNAME if API key is not set. (example: `<your-password>`)
- `KIBANA_SSL_VERIFY`: Whether to verify SSL certificates; `true` by default, or set to `false` for self-signed certificates. (example: `<true-or-false>`)
Note: Auth priority is ApiKey > Basic > anonymous. The README also shows a Docker run option, but the simplest portable MCP config uses stdio via `uvx kibana-mcp`. If direct Elasticsearch access is available, setting ELASTICSEARCH_URL improves performance.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.KIBANA_URLrequiredKibana base URLKIBANA_API_KEYElasticsearch API key for authentication, recommended for agentsELASTICSEARCH_URLDirect Elasticsearch endpoint; if unset, requests go through the Kibana Console proxyKIBANA_USERNAMEHTTP Basic auth username if API key is not setKIBANA_PASSWORDHTTP Basic auth passwordKIBANA_SSL_VERIFYWhether to verify SSL certificates; true by default, false for self-signed certificatesMCP server for searching Airweave collections with natural language queries.