splunk-mcp
Splunk MCP tool for natural language interaction with Splunk. splunk-mcp is a Model Context Protocol (MCP) server maintained by livehybrid. It connects to MCP-compatible clients such as Claude Desktop, Cursor, Cline, and other agents that speak the protocol. It exposes 13 tools, including list_tools, health_check, ping, current_user, list_users, list_indexes, get_index_info and indexes_and_sourcetypes, that an agent can call directly. It is categorized under Tool/Search and AI/Integration.
What is this MCP
This is a Model Context Protocol (MCP) tool that enables natural language interaction with Splunk Enterprise/Cloud, providing capabilities for searching data, managing KV stores, and accessing Splunk resources through an intuitive interface.
How to use this MCP
The tool operates in three modes: SSE (Server-Sent Events) for web clients, API mode for RESTful access, and STDIO mode for direct integration with AI assistants. It can be installed locally with Python/Poetry or via Docker, and configured with Splunk credentials.
What this MCP can be used for
The Splunk MCP enables natural language querying of Splunk data, index management, user administration, KV store operations, and health checks through AI assistants like Claude, making Splunk more accessible to non-technical users.
AIMCP authority
DR and traffic signal for the AIMCP public domain.
Frequently asked questions
What is the splunk-mcp MCP server?
splunk-mcp is a Model Context Protocol server from livehybrid. It lets MCP-compatible AI clients call its tools over a standard interface, so agents like Claude, Cursor, and Cline can use it without custom integration.
How do I connect splunk-mcp to my AI client?
Add splunk-mcp to your client's MCP configuration using the stdio or SSE connection shown in the usage examples on this page, then restart the client to load the server.
What tools does splunk-mcp provide?
splunk-mcp provides 13 tools: list_tools, health_check, ping, current_user, list_users, list_indexes, get_index_info, indexes_and_sourcetypes, search_splunk, list_saved_searches, list_kvstore_collections and create_kvstore_collection.
Is splunk-mcp free to use?
splunk-mcp is listed on AIMCP for free. Any API keys or accounts required by the underlying service are set by its provider.
Vernclaw Plugins for OpenClaw
Ready-to-use connectors for SEO data, social reading & content generation. Pay-as-you-go credits with audit logs.