MCP servers by product
Elasticsearch MCP servers
Elasticsearch and OpenSearch are search and analytics engines. 8 MCP Registry servers mention it in their own name or summary — 0 you can add by URL, 8 that run as a local package. Newest first.
- Servers
- 8
- Remote (add by URL)
- 0
- Local packages
- 8
A server listed here names the product in its registry entry; that does not make it official or tested. The publisher, repository and how to connect are on each server's page — check the publisher before connecting an assistant to an account.
| Server | Runs |
|---|---|
| MCP Server MalcolmMCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents. | Local · stdio |
| Databases (read-only, switchable)Read-only SQL, MongoDB, Redis and Elasticsearch access, switchable mid-conversation. | Local · stdio |
| Opensearch MCPSearch OpenSearch indices, manage documents, check health and stats. | Local · stdio |
| Crowdsentinel MCP ServerAI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics. | Local · stdio |
| MCP ElasticsearchRead-only Elasticsearch/OpenSearch for AI agents — search, indices, mappings, count, health. | Local · stdio |
| MCP ObservabilityObservability for incident agents — query Loki (LogQL), Prometheus (PromQL), Elasticsearch. | Local · stdio |
| Kibana MCPKibana/Elasticsearch MCP — log search, aggregations, index discovery, dashboards. | Local · stdio |
| ElasticsearchElasticsearch MCP Server with multi-version support (ES 5.x-9.x) and comprehensive API access. | Local · stdio, HTTP |