@tocharianou/mcp-server-kibana

Kibana MCP Server

npm · fingerprint 56733c45d8e748acae94db6a · repository · RSS

17tools

3recorded versions

45dtracked

changed 6d ago

What changed

Changed 2026-10-11 12:38 UTC

2 descriptions rewritten, 1 tool added.

--- pinned/execute_kb_api
+++ observed/execute_kb_api
  {
-   "description": "Execute a custom API request for Kibana with multi-space support.\n\nRETRY SAFETY: this tool can reach any write endpoint. A POST retried after a\ntimeout or dropped response can create a duplicate — prefer a caller-chosen\nstable id (or the vl_* tool for that object type, which documents the safe\npattern) over letting the server auto-generate one.",
+   "description": "Execute a custom API request for Kibana with multi-space support.\n\nFor Elasticsearch document or log searches, use search_elasticsearch instead.\nDo not use /api/console/proxy for Elasticsearch searches: that Console endpoint\ncan require Dev Tools privileges even when the configured user can read the\ntarget indices. Do not use this generic tool to rediscover an Elasticsearch\nsearch route when search_elasticsearch already provides the supported workflow.\n\nRETRY SAFETY: this tool can reach any write endpoint. A POST retried after a\ntimeout or dropped response can create a duplicate — prefer a caller-chosen\nstable id (or the vl_* tool for that object type, which documents the safe\npattern) over letting the server auto-generate one.",
    "execution": {
      "taskSupport": "forbidden"
    },

+ tool added: search_elasticsearch

--- pinned/search_kibana_api_paths
+++ observed/search_kibana_api_paths
  {
-   "description": "Search Kibana API endpoints by keyword",
+   "description": "Search documented Kibana OpenAPI endpoints by keyword. This index does not necessarily contain Kibana internal routes. Do not use this tool to discover how to search Elasticsearch documents or logs; use search_elasticsearch for that.",
    "execution": {
      "taskSupport": "forbidden"
    },

Changed 2026-10-05 14:22 UTC

1 description rewritten.

--- pinned/execute_kb_api
+++ observed/execute_kb_api
  {
-   "description": "Execute a custom API request for Kibana with multi-space support",
+   "description": "Execute a custom API request for Kibana with multi-space support.\n\nRETRY SAFETY: this tool can reach any write endpoint. A POST retried after a\ntimeout or dropped response can create a duplicate — prefer a caller-chosen\nstable id (or the vl_* tool for that object type, which documents the safe\npattern) over letting the server auto-generate one.",
    "execution": {
      "taskSupport": "forbidden"
    },

Current tools

Show all 17 tool fingerprints

analyze_deletion_impact

c6db58fd06a73020

analyze_object_dependencies

30dd0554282d4d4c

check_dashboard_health

733f4e96ccb1baf3

execute_kb_api

50035ea5a2a0129b

get_available_spaces

63721577116eca4b

get_kibana_api_detail

9e5e984ab5af6a41

get_status

dc9f5a7dda31c96d

list_all_kibana_api_paths

981aa1af0239ab26

scan_all_dashboards_health

2c7ff46b105a6f31

search_elasticsearch

807d9fe7acc2e192

search_kibana_api_paths

34f3b22800ef0aa6

vl_bulk_delete_saved_objects

c0865e7275e5dec8

vl_bulk_update_saved_objects

e33730dda4c7f042

vl_create_saved_object

a12e8e0e6ea3a737

vl_get_saved_object

98787e375e7cb6dc

vl_search_saved_objects

a004ff42c0e6ad23

vl_update_saved_object

796c334f22b9ba25

Watch this server yourself

If you run this server, put the proxy in front of it. It pins these exact fingerprints on first connect and stops the session if they move.

npx -y mcp-pin@0.2.3 -- <your @tocharianou/mcp-server-kibana command>

Or subscribe to this page's RSS feed to be told when it changes.

Badge

The badge states one fact about time and nothing else. It never claims a server is safe.

[![mcp-pin](https://mcp-pin.gautamkhosla.com/badge/61fb870d3ac6b12d.svg)](https://mcp-pin.gautamkhosla.com/servers/61fb870d3ac6b12d.html)