Splunk Integration MCP Server

Enables natural language interaction with Splunk Enterprise and Cloud for searching data and managing resources.

Local serverstdioPython★ 107

What is the Splunk Integration MCP Server?

Enables natural language interaction with Splunk Enterprise and Cloud for searching data and managing resources.

The short version

A FastMCP-based tool for interacting with Splunk Enterprise/Cloud through natural language. This tool provides a set of capabilities for searching Splunk data, managing KV stores, and accessing Splunk resources through an intuitive interface.

  • Splunk Search — Execute Splunk searches with natural language queries
  • Index Management — List and inspect Splunk indexes
  • User Management — View and manage Splunk users
  • KV Store Operations — Create, list, and manage KV store collections
  • Async Support — Built with async/await patterns for better performance
  • Detailed Logging — Comprehensive logging with emoji indicators for better visibility

What it needs from you

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
list_toolsLists all available MCP tools with their descriptions and parameters

Configuration

VariableDescriptionRequired
SPLUNK_HOSTEndpoint or connection string the server talks to.Optional
SPLUNK_TOKENCredential the server authenticates with.Yes

Example prompts to try

  • “Use Splunk Integration to list tools.”
  • “Use Splunk Integration to Search.”
  • “Use Splunk Integration to Prerequisites.”

Frequently asked questions

You can install it locally using Poetry or through Docker. Both methods are detailed in the documentation with step-by-step instructions.