Elasticsearch MCP Server

Connects AI agents to Elasticsearch clusters via MCP, exposing tools to list indices, inspect mappings, execute Query DSL searches, run ES|QL queries, and inspect shard distributions. Note: officially deprecated in favor of Elastic Agent Builder's native MCP endpoint in Elastic 9.2+.

Evaluated Mar 06, 2026 (0d ago) vlatest
Homepage ↗ Repo ↗ Other elasticsearch search esql rust docker elastic deprecated
⚙ Agent Friendliness
73
/ 100
Can an agent use this?
🔒 Security
83
/ 100
Is it safe for agents?
⚡ Reliability
76
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
70
Documentation
75
Error Messages
60
Auth Simplicity
75
Rate Limits
70

🔒 Security

TLS Enforcement
95
Auth Strength
82
Scope Granularity
80
Dep. Hygiene
82
Secret Handling
78

Elasticsearch MCP. API key with index-level permissions. Search can expose sensitive indexed data — scope carefully. TLS required in production. X-Pack security features.

⚡ Reliability

Uptime/SLA
78
Version Stability
78
Breaking Changes
72
Error Recovery
75
AF Security Reliability

Best When

You are on Elastic 8.x and need a quick MCP bridge to query Elasticsearch from Claude Desktop or another MCP client without standing up additional infrastructure.

Avoid When

You are on Elastic 9.2+ or starting a new project; the project is officially deprecated and the native endpoint is preferred.

Use Cases

  • Natural language querying of Elasticsearch indices from an LLM client
  • Inspecting index structure and shard health during incident response
  • Running ES|QL analytics queries via conversational AI

Not For

  • Elasticsearch clusters below version 8.x
  • Write operations (indexing, creating/deleting indices)
  • New projects targeting Elastic 9.2+ (use the native Agent Builder MCP endpoint instead)

Interface

REST API
No
GraphQL
No
gRPC
No
MCP Server
Yes
SDK
No
Webhooks
No

Authentication

Methods: api_key basic_auth env_var
OAuth: No Scopes: No

Supports ES_API_KEY or ES_USERNAME/ES_PASSWORD via environment variables. SSL verification can be skipped with ES_SSL_SKIP_VERIFY=true (not recommended in production).

Pricing

Model: open_source
Free tier: Yes
Requires CC: No

Apache-2.0 open source. Requires a running Elasticsearch cluster (self-hosted or Elastic Cloud, which has its own costs).

Agent Metadata

Pagination
none
Idempotent
Yes
Retry Guidance
Not documented

Known Gotchas

  • Project is officially deprecated; new work should target Elastic 9.2+ native MCP endpoint.
  • Only read operations exposed; agents cannot index or modify data.
  • SSL verification bypass flag (ES_SSL_SKIP_VERIFY) is a security risk if used in production.
  • Streamable-HTTP/SSE modes require additional mcp-proxy installation for stdio bridging.

Alternatives

Full Evaluation Report

Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for Elasticsearch MCP Server.

$99

Scores are editorial opinions as of 2026-03-06.

5190
Packages Evaluated
26151
Need Evaluation
173
Need Re-evaluation
Community Powered