splunk-mcp

What is this MCP

This is a Model Context Protocol (MCP) tool that enables natural language interaction with Splunk Enterprise/Cloud, providing capabilities for searching data, managing KV stores, and accessing Splunk resources through an intuitive interface.

How to use this MCP

The tool operates in three modes: SSE (Server-Sent Events) for web clients, API mode for RESTful access, and STDIO mode for direct integration with AI assistants. It can be installed locally with Python/Poetry or via Docker, and configured with Splunk credentials.

What this MCP can be used for

The Splunk MCP enables natural language querying of Splunk data, index management, user administration, KV store operations, and health checks through AI assistants like Claude, making Splunk more accessible to non-technical users.