MCP servers for Elasticsearch
7 servers from the official MCP Registry that work with Elasticsearch. 2 need no API key and 0 can run hosted. Each row shows the security checks, the secrets asked for and an install command.
Elasticsearch MCP servers 7
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
★ 314 io.github.cr7258/elasticsearch-mcp-server Code reviewed MCP server for interacting with Elasticsearch | 7/7All passed | 76health of 100 | PyPIRuns locally | 2secrets asked | 2.0.15 | ||
★ 8 io.github.TocharianOU/elasticsearch Elasticsearch MCP Server for ES 5.x-9.x with a query harness, field validation and full API access | 7/7All passed | 62health of 100 | npmRuns locally | 2secrets asked | 0.9.1 | ||
★ 204 io.github.thomasxm/crowdsentinel-mcp-server AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics | 6/82 warnings | 45health of 100 | PyPIRuns locally | 3secrets asked | 0.6.0 | ||
★ 2 io.github.nagameTW/mcp-server-malcolm MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents | 6/71 warning | 47health of 100 | PyPIRuns locally | Noneno keys asked | 1.2.1 | ||
★ 1 io.github.ed-smartass/esmole-mcp Elasticsearch 7.x/8.x with connections managed at runtime by the agent, SSH tunnels, readonly. | 7/7All passed | 53health of 100 | npmRuns locally | Noneno keys asked | 0.2.0 | ||
★ 1 io.github.mshegolev/kibana-mcp Kibana/Elasticsearch MCP — log search, aggregations, index discovery, dashboards. | 7/7All passed | 55health of 100 | PyPIRuns locally | 2secrets asked | 0.1.1 | ||
io.github.shibbirweb/mcp-db-read-only Read-only SQL, MongoDB, Redis and Elasticsearch access, switchable mid-conversation. | 7/81 warning | 53health of 100 | npmRuns locally | 3secrets asked | 1.1.0 |
Showing 1 to 7 of 7. These are the most recently updated; search or pick a category for the rest.
Elasticsearch MCP servers: common questions
What's the most popular MCP server for Elasticsearch?
On GitHub stars, elasticsearch-mcp-server (★ 314) and Elasticsearch (★ 8) lead the 7 we list. elasticsearch-mcp-server is named for Elasticsearch and passed every check we run.
Is it safe to give an AI a Elasticsearch MCP server?
4 of the 7 passed every registry check. Reading the package code or tool descriptions of 7 of them turned up 2 with something to look at, from install scripts to obfuscated code. A clean result means none of our patterns matched, not that a server is safe.
Are Elasticsearch MCP servers kept up to date?
3 of the 7 were updated in the 30 days before 31 Oct 2026. The latest was esmole, on 25 October.
MCP server or Claude skill for Elasticsearch?
An MCP server gives the AI new tools, such as reaching Elasticsearch itself. A skill only teaches it how to do a task with tools it already has. There are 14 Claude skills for Elasticsearch if that fits better.
Is there an official Elasticsearch MCP server?
Not in the official MCP Registry as of 31 Oct 2026. All 7 Elasticsearch servers are community builds from 7 different publishers, so check who is behind one before you hand it a Elasticsearch key.
More topics: every “MCP server for…” page. Prefer a skill? Claude skills for this (14).