Elastic

MCP connector

Server URL

https://www.elastic.co/docs/_mcp/Copy

Login

None

Protocol

MCP 2025-11-25

Instructions

Use this server to search, retrieve, and analyze Elastic product documentation published at elastic.co/docs. All content covers version 9 and later.

<triggers> Use the server when the user:

Wants to find, read, or verify Elastic documentation pages.

Needs to check whether a topic is already covered in Elastic documentation.

Asks about Elastic documentation structure, coherence, or inconsistencies across pages.

References Elastic product names such as Elasticsearch, Kibana, Fleet, APM, Logstash, Beats, Elastic Security, Elastic Observability, or Elastic Cloud. </triggers>

<tool_guidance>

Prefer search_docs over a general web search when looking up Elastic documentation content.

Show all

Tools

Skills

26 in the Claude listing

• Cloud onboardingOnboard an Elastic Cloud organization: configure the `elastic` CLI's Cloud context and API key, establish a default region, then invite users, assign predefined or custom Serverless project roles, and
• Cloud provisioningProvision and operate Elastic Cloud infrastructure: create, connect to, update, and delete Serverless projects (Elasticsearch, Observability, Security); manage traffic filters (IP and AWS PrivateLink
• Elasticsearch anomaly detectionCreate and manage Elastic ML anomaly detection jobs via the API.
• Elasticsearch anomaly detection explainerExplain Elasticsearch ML anomaly detection scores, model behavior, and result interpretation.
• Elasticsearch cluster healthDiagnose a non-green Elasticsearch cluster and surface the single most likely cause with remediation.
• Elasticsearch esqlExecute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL res
• Elasticsearch index designDesign and review Elasticsearch index mappings for stated access patterns: correct field types, text+keyword multi-fields, doc_values tuning, mapping-explosion avoidance, and explicit shard settings.
• Elasticsearch ingestLoad CSV and JSON files into Elasticsearch indices using the bulk API and explicit mappings when field types matter.
• Elasticsearch onboardingHelp developers new to Elasticsearch get from zero to a working search experience.
• Elasticsearch query optimizationDiagnose slow Elasticsearch Query DSL searches and propose measured fixes.
• Elasticsearch reindexGuide Elasticsearch reindex for performance: local and remote, slicing, throttling, task API.
• Elasticsearch search relevanceImprove Elasticsearch search relevance for content and catalog indices: pin or promote results with query rules (correct rule type, criteria, and rule-query wiring) and tune organic ranking with multi
• Kibana agent builderCreate and manage Kibana Agent Builder agents and custom tools.
• Kibana alerting rulesCreate and manage Kibana alerting rules.
• Kibana anomaly detectionElastic ML anomaly detection — investigation/RCA, score explanation, job lifecycle troubleshooting, and job operations.
• Kibana dashboardsCreate and manage Kibana Dashboards and Lens visualizations.
• Kibana workflowsAuthor, validate, test, run, and inspect Elastic Workflow YAML definitions.
• Observability k8s investigationInvestigate Kubernetes workload, node, and control-plane issues using OTel telemetry (EDOT).
• Observability llm obsAnswer questions about LLM and agentic-application behavior from data already ingested into Elastic: latency and error rate, token and cost utilization, response quality and guardrail events, and agen
• Observability onboardingOnboard an application into Elastic Observability with the Elastic Distribution of OpenTelemetry (EDOT): route on language and runtime, detect and replace a classic Elastic APM agent, apply the requir
• Observability service reliabilityDesign and operate service reliability targets in Elastic Observability: choose an SLI type and a defensible target, pick a time window and budgeting method, create and maintain SLOs through the Kiban
• Observability sre triageTriage a degraded or suspect service end to end: read SLO status and burn rate, check active alerting rules and ML anomalies, measure throughput, latency, and error rate, assess dependency health and
• Security alert triageTriage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.
• Security case managementCreate, search, update, and manage SOC cases via the Kibana Cases API.
• Security detection rule managementCreate, tune, and manage Elastic Security detection rules (SIEM and Endpoint).
• Security generate security sample dataGenerate sample security events, attack scenarios, and synthetic alerts for Elastic Security.