mcp-server-elasticsearch
access level: read-only✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/elastic/mcp-server-elasticsearch |
|---|---|
| Category | Logs/observability |
| Systems touched | Elasticsearch |
| Access (as described) | read-only |
| License / price | Apache-2.0 / free |
| GitHub stars | 719 |
| Read tools | list_indices, get_mappings, search (DSL), esql, get_shards (all annotated read_only_hint=true) |
| Write / delete / exec tools | None in base tools |
| Read-only mode | N/A (base tools all read-only) |
| Safety notes | DEPRECATED by Elastic (critical security fixes only); superseded by Elastic Agent Builder MCP endpoint in 9.2+. Use an API key with read privileges on specific indices. |
| Verified | yes (source review 2026-10-20) |
| Notes | Official Elastic |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.