Elasticsearch MCP Server

Elasticsearch indices query, analysis, and data retrieval for AI agents.

Data last scanned today · Reviewed yesterday

485 tools★ 697RustApache-2.0

Overview

This server facilitates natural language interactions with Elasticsearch indices, enabling AI agents to search and retrieve data using the Model Context Protocol. It supports deployment via Docker container images, offering flexibility through either stdio or streamable-HTTP communication protocols for varied integration environments. Note that this project is currently deprecated and will receive only critical security updates moving forward. Users are encouraged to transition to the Elastic Agent Builder MCP endpoint, which is the officially supported path for Elastic 9.2.0+ and Elasticsearch Serverless deployments.

Our verdict

This server receives a high-risk security score of 33/100, primarily due to the lack of an authentication method, meaning anyone with access to the configuration can utilize it. Furthermore, it lacks a read-only mode, providing full write access by default. Because the project is deprecated and no longer receives active feature development, it should not be used for new integrations; it is intended only for existing users awaiting migration to the Elastic Agent Builder.

Supports both stdio and streamable-HTTP transport protocols
Zero direct dependencies minimize supply-chain surface area
Licensed under the Apache-2.0 open source license

Project is officially deprecated
Lacks any built-in authentication mechanism
Full write access is granted by default

Tools

Tool	Description	Risk
list_indices	List all available Elasticsearch indices	low
get_mappings	Get field mappings for a specific Elasticsearch index	low
search	Perform an Elasticsearch search using query DSL	low
esql	Execute an ES\|QL query	low
get_shards	Get shard information for all or specific indices	low

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›Is this server still actively maintained?

This MCP server is deprecated and will only receive critical security updates going forward. It has been superseded by the Elastic Agent Builder MCP endpoint available in Elastic 9.2.0 and later.

›What versions of Elasticsearch are supported?

The server supports Elasticsearch cluster versions 8.x and 9.x.

›Which communication protocols does the server support?

The server supports both stdio for direct client connections and streamable-HTTP for web-based integrations or concurrent clients. Server-Sent Events (SSE) is deprecated.

›What authentication methods are available?

You can authenticate using an Elasticsearch API key or a username and password pair.

›How can I test the streamable-HTTP connection?

A health check endpoint is available at http://<host>:8080/ping to verify your deployment.

›Can I bypass SSL certificate verification?

Yes, you can set the environment variable ES_SSL_SKIP_VERIFY to true, though this should only be done in development or testing environments.