Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got a B
This grade describes the MCP endpoint built into Elastic Agent Builder in Kibana (generally available on Elastic Stack 9.3+ and Serverless, preview in 9.2), which Elastic's own repo now points to; it is not the older standalone elastic/mcp-server-elasticsearch (Apache-2.0, Rust), which is deprecated and gets only critical security fixes. It lives at {KIBANA_URL}/api/agent_builder/mcp and takes an Elastic API key, or OAuth 2.1 on Serverless. Tools run as the key's owner. The built-in set includes list_indices, get_index_mapping, search and execute_esql, but also execute_api, which can change or delete data, and workflow, stream, case and security write tools. Biggest deduction: Elastic's docs say Elastic Stack 9.2 to 9.5 excludes no built-in tools from MCP, and Agent Builder has had at least four CVEs in 2026 (fixed in Kibana 9.4.4 to 9.4.7), so keep Kibana patched, give the API key a read-only role limited to the indices you need, and keep tool approval on.
How to connect
Endpoint: {KIBANA_URL}/api/agent_builder/mcp (or {KIBANA_URL}/s/{SPACE_ID}/api/agent_builder/mcp), sent an Elastic API keyIs Elasticsearch MCP (Elastic Agent Builder) safe?
Is Elasticsearch MCP (Elastic Agent Builder) safe to use?
Elasticsearch MCP (Elastic Agent Builder) grades B (solid, with minor gaps). It has 4 open CVES. Check the advisories before you install. It runs locally over stdio, so it acts with your machine's access.
Does Elasticsearch MCP (Elastic Agent Builder) have known vulnerabilities?
Yes, 4 open CVES in our data. The listing above explains what they affect and what to run instead.
Does Elasticsearch MCP (Elastic Agent Builder) support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A Airtable MCP ServerAirtable's own hosted server. List your workspaces and bases, read and search records, and create or update them, using the permissions you already have in Airtable.
- A ClickHouse MCP ServerClickHouse's official hosted MCP server for ClickHouse Cloud - read-only SELECT queries, schema browsing, and service, backup, ClickPipes and billing tools, with OAuth or a scoped API key.
- A Databricks Managed MCP ServersDatabricks-hosted MCP servers in each workspace for Genie, SQL, Unity Catalog functions and vector search, signed in with OAuth and limited by Unity Catalog.
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
- A Neon MCP ServerOfficial hosted Neon server to manage Postgres projects and branches, run SQL, and inspect schema.
Embed this badge
[](https://trustedmcp.io/servers/elastic-mcp)<a href="https://trustedmcp.io/servers/elastic-mcp"><img src="https://trustedmcp.io/badge/elastic-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.