Elasticsearch

Elasticsearch

Query your data in Elasticsearch

554
Stars
111
Forks
12
Releases

Overview

Elasticsearch MCP Server is a Model Context Protocol (MCP) server that connects MCP clients to data stored in Elasticsearch. It enables natural language interactions with Elasticsearch indices through a defined set of MCP tools and is distributed as a Docker image (docker.elastic.co/mcp/elasticsearch). The server supports MCP stdio, streamable-HTTP, and, optionally, SSE transports. It requires an Elasticsearch cluster (via ES_URL) and credentials (API key or basic auth via ES_API_KEY or ES_USERNAME/ES_PASSWORD), with optional SSL verification skip (ES_SSL_SKIP_VERIFY). It exposes tools such as list_indices, get_mappings, search, esql, and get_shards to perform common Elasticsearch operations. The server supports Elasticsearch versions 8.x and 9.x and can be run in stdio mode for direct I/O or in HTTP mode for streamable HTTP with a health endpoint at /ping. Deployment guidance includes Claude Desktop integration via an mcp-proxy bridge. Important: This server is deprecated and superseded by Elastic Agent Builder’s MCP endpoint in Elastic 9.2.0+ and Elasticsearch Serverless projects."

Details

Owner
elastic
Language
Rust
License
Apache License 2.0
Updated
2025-12-07

Features

list_indices

List all available Elasticsearch indices

get_mappings

Get field mappings for a specific Elasticsearch index

search

Perform an Elasticsearch search with the provided query DSL

esql

Perform an ES|QL query

get_shards

Get shard information for all or specific indices

Transport & deployment options

Docker image and MCP transport protocols supported (stdio, streamable-http; optional SSE)

Audience

DevelopersBridge MCP clients to Elasticsearch data for natural language queries.
Elasticsearch usersInteract with indices via natural language conversations in MCP-enabled clients.
MCP clientsConfigure clients like Claude Desktop or Goose to connect to Elasticsearch.

Tags

ElasticsearchMCPMCP serverdockerstdiostreamable-httpSSEauthenticationindicesmappingssearchESQLshards