cr7258/elasticsearch-mcp-server

Overview
A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction. This server enables searching documents, analyzing indices, and managing cluster through a set of tools.
Demo
https://github.com/user-attachments/assets/f7409e31-fac4-4321-9c94-b0ff2ea7ff15
Features
General Operations
- general_api_request: Perform a general HTTP API request. Use this tool for any Elasticsearch/OpenSearch API that does not have a dedicated tool.
Index Operations
- list_indices: List all indices.
- get_index: Returns information (mappings, settings, aliases) about one or more indices.
- create_index: Create a new index.
- delete_index: Delete an index.
- create_data_stream: Create a new data stream (requires matching index template).
- get_data_stream: Get information about one or more data streams.
- delete_data_stream: Delete one or more data streams and their backing indices.
Document Operations
- search_documents: Search for documents.
- index_document: Creates or updates a document in the index.
- get_document: Get a document by ID.
- delete_document: Delete a document by ID.
- delete_by_query: Deletes documents matching the provided query.
Cluster Operations
- get_cluster_health: Returns basic information about the health of the cluster.
- get_cluster_stats: Returns high-level overview of cluster statistics.
Alias Operations
- list_aliases: List all aliases.
- get_alias: Get alias information for a specific index.
- put_alias: Create or update an alias for a specific index.
- delete_alias: Delete an alias for a specific index.
Analyzer Operations
- analyze_text: Analyze text using a specified analyzer or custom analysis chain. Useful for debugging search queries and understanding how text is tokenized.
Configure Environment Variables
The MCP server supports the following environment variables:
Basic Authentication (Username/Password)
- ELASTICSEARCH_USERNAME: Username for basic authentication
- ELASTICSEARCH_PASSWORD: Password for basic authentication
- OPENSEARCH_USERNAME: Username for OpenSearch basic authentication
- OPENSEARCH_PASSWORD: Password for OpenSearch basic authentication
API Key Authentication (Elasticsearch only) - Recommended
- ELASTICSEARCH_API_KEY: API key for Elasticsearch or Elastic Cloud Authentication.
Connection Settings
- ELASTICSEARCH_HOSTS / OPENSEARCH_HOSTS: Comma-separated list of hosts (default: https://localhost:9200)
- ELASTICSEARCH_CLUSTERS / OPENSEARCH_CLUSTERS: Inline JSON object for named cluster configurations. When set, tools can target a specific cluster with the optional cluster parameter.
- ELASTICSEARCH_CLUSTERS_FILE / OPENSEARCH_CLUSTERS_FILE: Path to a JSON file with the clusters object. Recommended when the configuration is embedded inside another JSON file (e.g. the MCP client config) because it avoids JSON-in-JSON escaping. Takes precedence over the inline variable when both are set.
- DEFAULT_CLUSTER: Default cluster name to use when multi-cluster configuration is set and a tool call omits cluster (defaults to the first configured cluster).
- VERIFY_CERTS: Whether to verify SSL certificates (default: false)
- REQUEST_TIMEOUT: Request timeout in seconds (optional, uses client default if not set)
Multiple Cluster Configuration
By default, the server uses a single Elasticsearch cluster from ELASTICSEARCH_HOSTS, ELASTICSEARCH_USERNAME, ELASTICSEARCH_PASSWORD, and ELASTICSEARCH_API_KEY, or a single OpenSearch cluster from OPENSEARCH_HOSTS, OPENSEARCH_USERNAME, and OPENSEARCH_PASSWORD. To configure multiple named clusters, set ELASTICSEARCH_CLUSTERS (or OPENSEARCH_CLUSTERS) to a JSON object inside the MCP server configuration. Because the value is a JSON string embedded in another JSON file, the inner quotes need to be escaped: