Kibana MCP. Manage your entire observability stack via natural language.

Kibana MCP Server - Manage Dashboards & Observability

Your AI agent lets you control your entire observability stack right from the prompt. This server gives you the tools to manage everything in your Elastic environment—from spaces to dashboards and rules. You'll use your agent to list, create, update, and delete resources, letting you manage your data lifecycle using plain language.

Managing Kibana Spaces and Roles

You can segment your dashboards and visualizations by creating, deleting, or updating entire Kibana spaces using create_space, delete_space, and update_space. You can also manage user access by listing and getting details on roles with list_roles and get_role, or by creating or updating specific permissions with create_or_update_role and delete_role.

Handling Saved Objects

Need to manage dashboards or visualizations? You can create a new saved object, like a dashboard, with create_saved_object. You can also bulk-create or bulk-update multiple saved objects at once using bulk_create_saved_objects and bulk_update_saved_objects. To keep your environments consistent, copy saved objects from one Kibana space to another using copy_saved_objects. You can search for existing objects using find_saved_objects, or get the full details of any object with get_saved_object.

You can also delete specific objects with delete_saved_object, or export groups of objects into a file with export_saved_objects.

Alerting and Monitoring Rules

To keep tabs on your system, you can create a new alerting rule using create_rule, or update an existing one with update_rule. You can find all existing rules with find_rules, and you can temporarily disable a rule with disable_rule or activate it with enable_rule. If a rule is garbage, you can delete it entirely using delete_rule.

Data Views and Connectors

When it comes to data, you can create a new data view or modify an existing one using create_data_view or update_data_view. You can also enhance your data views by adding or changing a calculated field with create_runtime_field. You'll need to run external data sources using execute_connector after creating or fetching connector details with create_connector or get_connector.

You can list all available connectors with list_connectors and remove one with delete_connector.

Agents and Support

For your monitoring agents, you can list all enrolled agents with list_agents, or get details for a specific agent with get_agent. You can also generate new enrollment keys with create_enrollment_key and manage agent policies using list_agent_policies and create_agent_policy. If an agent is retired, you can remove it from the system with unenroll_agent.

For support issues, you can create a new case with create_case, search existing ones using search_cases, or get full details on a case with get_case. You can also update details on an existing case with update_cases or modify a case's comment with add_case_comment. Finally, you can delete multiple cases with delete_cases or modify a case's details with update_cases.