MCP Servers / database / Elasticsearch Security Solution

Elasticsearch Security Solution

stdionone★ 6database

An Elasticsearch server focused on security and threat analysis. Requires a valid Elasticsearch license (trial, platinum, or enterprise) for connection.

github ↗

Install

How to run this server

[ { "cmd": "npx @tocharianou/elasticsearch-mcp", "imports": [] } ]

server path: elasticsearch-security-solution

Tools

What this server exposes

list_indices

List indices with pattern filter, health filter, sorting and token-aware summary

get_mappings

Get field mappings with flat/tree/raw modes, field filtering and multi-index compare

es_search

Full Query DSL search with auto-highlight on text/vector fields

execute_es_api

Execute any ES REST endpoint directly (GET/POST/PUT/DELETE/HEAD)

get_shards

Shard info with health analysis, problem detection and recommendations

list_data_streams

List and analyze Data Streams with ILM info and backing index details

esql_query

Execute ES|QL pipe-based queries with tabular output and parameterised support

Configuration

Environment & auth

authnone

envES_API_KEY

envMCP_HTTP_PORT

envMCP_HTTP_HOST

Resources

githubhttps://github.com/TocharianOU/mcp-server-elasticsearch-sl ↗