What it does

This community-maintained MCP server bridges Claude (via Claude Desktop or other MCP clients) with Kibana, Elastic's observability and visualization platform. It exposes 16 tools for API discovery, saved object management (dashboards, visualizations, index patterns, searches), and analysis utilities like dependency mapping and dashboard health checks. The server supports both stdio (local) and HTTP (remote) transport modes, with flexible authentication: API keys, basic auth, or session cookies.

Who it's for

Infrastructure and platform engineers managing Kibana instances who want Claude to help automate dashboard creation, manage saved objects in bulk, or troubleshoot analytics configurations. Teams using Kibana for observability and monitoring will find it valuable for programmatic access without leaving their chat interface or IDE.

Common use cases

• Query Kibana saved objects by name or type and retrieve their configurations programmatically
• Create or update dashboards and visualizations via Claude without manual UI navigation
• Analyze saved object dependencies to map out dashboard relationships before deletion
• Perform bulk updates on saved objects—apply tags, modify filters, or version changes across multiple items
• Check dashboard health and validate that visualizations reference valid index patterns

Setup pitfalls

• The repository contains 34 detected secrets—review the code, rotate any exposed credentials, and use only fresh API keys in production
• Multiple authentication methods in the config file can conflict silently; set only one of API key, basic auth, or cookies, not all three
• SSL/TLS validation is disabled by default (NODE_TLS_REJECT_UNAUTHORIZED=1)—suitable only for development; use a trusted CA certificate in production
• CI build is currently failing—test tool functionality against your Kibana version before relying on batch operations in production