Elastic

Kibana MCP server

Kibana MCP server

Kibana MCP server

for Claude, ChatGPT, Cursor and your own agents

for Claude, ChatGPT, Cursor and your own agents

for Claude, ChatGPT, Cursor and your own agents

Expose Kibana to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโ€™t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

Expose Kibana to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโ€™t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

Our customers scale automation with security built in.

Tools exposed by this MCP server

Every Kibana operation, as an MCP tool

Every Kibana operation, as an MCP tool

Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:

  • Kibana

    Kibana

    Add and remove detection alert tags

    Add and remove detection alert tags

  • Kibana

    Kibana

    Apply a bulk action to detection rules

    Apply a bulk action to detection rules

  • Kibana

    Kibana

    Assign and unassign users from detection alerts

    Assign and unassign users from detection alerts

  • Kibana

    Kibana

    Create a case

    Create a case

  • Kibana

    Kibana

    Create a detection rule

    Create a detection rule

  • Kibana

    Kibana

    Delete a detection rule

    Delete a detection rule

  • Kibana

    Kibana

    Export detection rules

    Export detection rules

  • Kibana

    Kibana

    Find and aggregate detection alerts

    Find and aggregate detection alerts

  • Kibana

    Kibana

    Get agents

    Get agents

  • Kibana

    Kibana

    Import detection rules

    Import detection rules

  • Kibana

    Kibana

    Install prebuilt detection rules and timelines

    Install prebuilt detection rules and timelines

  • Kibana

    Kibana

    List all detection rules

    List all detection rules

  • Kibana

    Kibana

    Retrieve a detection rule

    Retrieve a detection rule

  • Kibana

    Kibana

    Search cases

    Search cases

  • Kibana

    Kibana

    Set a detection alert status

    Set a detection alert status

  • Kibana

    Kibana

    Update a detection rule

    Update a detection rule

  • Kibana

    Add and remove detection alert tags

  • Kibana

    Apply a bulk action to detection rules

  • Kibana

    Assign and unassign users from detection alerts

  • Kibana

    Create a case

  • Kibana

    Create a detection rule

  • Kibana

    Delete a detection rule

  • Kibana

    Export detection rules

  • Kibana

    Find and aggregate detection alerts

  • Kibana

    Get agents

  • Kibana

    Import detection rules

  • Kibana

    Install prebuilt detection rules and timelines

  • Kibana

    List all detection rules

  • Kibana

    Retrieve a detection rule

  • Kibana

    Search cases

  • Kibana

    Set a detection alert status

  • Kibana

    Update a detection rule

  • Kibana

    Kibana

    Update a detection rule

    Update a detection rule

  • Kibana

    Kibana

    Set a detection alert status

    Set a detection alert status

  • Kibana

    Kibana

    Search cases

    Search cases

  • Kibana

    Kibana

    Retrieve a detection rule

    Retrieve a detection rule

  • Kibana

    Kibana

    List all detection rules

    List all detection rules

  • Kibana

    Kibana

    Install prebuilt detection rules and timelines

    Install prebuilt detection rules and timelines

  • Kibana

    Kibana

    Import detection rules

    Import detection rules

  • Kibana

    Kibana

    Get agents

    Get agents

  • Kibana

    Kibana

    Find and aggregate detection alerts

    Find and aggregate detection alerts

  • Kibana

    Kibana

    Export detection rules

    Export detection rules

  • Kibana

    Kibana

    Delete a detection rule

    Delete a detection rule

  • Kibana

    Kibana

    Create a detection rule

    Create a detection rule

  • Kibana

    Kibana

    Create a case

    Create a case

  • Kibana

    Kibana

    Assign and unassign users from detection alerts

    Assign and unassign users from detection alerts

  • Kibana

    Kibana

    Apply a bulk action to detection rules

    Apply a bulk action to detection rules

  • Kibana

    Kibana

    Add and remove detection alert tags

    Add and remove detection alert tags

  • Kibana

    Update a detection rule

  • Kibana

    Set a detection alert status

  • Kibana

    Search cases

  • Kibana

    Retrieve a detection rule

  • Kibana

    List all detection rules

  • Kibana

    Install prebuilt detection rules and timelines

  • Kibana

    Import detection rules

  • Kibana

    Get agents

  • Kibana

    Find and aggregate detection alerts

  • Kibana

    Export detection rules

  • Kibana

    Delete a detection rule

  • Kibana

    Create a detection rule

  • Kibana

    Create a case

  • Kibana

    Assign and unassign users from detection alerts

  • Kibana

    Apply a bulk action to detection rules

  • Kibana

    Add and remove detection alert tags

Connect Kibana to your AI client in three steps.

01

Connect the service

Add Kibana in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.

02

Choose the tools

Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.

03

Connect your AI client

Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.

Use cases

Use cases

What your AI agents can do with Kibana

What your AI agents can do with Kibana

AI clients

Mindflow

Kibana

โ†’ Streamline detection rule management by automating bulk creation, updating, and deletion based on security telemetry, reducing manual overhead and ensuring up-to-date threat detection coverage.  โ†’ Automate case lifecycle workflows including creation, comment additions, tagging, and alert associations to maintain organized investigation and compliance documentation.  โ†’ Manage Fleet agent policies and enrollments automatically to deploy consistent security configurations across distributed agent populations with minimal manual intervention.

โ†’ Streamline detection rule management by automating bulk creation, updating, and deletion based on security telemetry, reducing manual overhead and ensuring up-to-date threat detection coverage.  โ†’ Automate case lifecycle workflows including creation, comment additions, tagging, and alert associations to maintain organized investigation and compliance documentation.  โ†’ Manage Fleet agent policies and enrollments automatically to deploy consistent security configurations across distributed agent populations with minimal manual intervention.

Every call goes through one governed endpoint.

Every call goes through one governed endpoint.

Your AI clients get access. You keep control.

Your AI clients get access. You keep control.

Every call to Kibana goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

Every call to Kibana goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

Kibana MCP server

Live

RBAC ยท SecOps

Scoped credentials

Audit log

Add and remove detection alert tags

Allowed

Apply a bulk action to detection rules

Allowed

Assign and unassign users from detection alerts

Needs approval

Create a case

Blocked

Every call logged ยท Export to SIEM

Put this MCP server to work.

Bring one AI client and the tools it needs. Weโ€™ll show you the setup in Mindflow, from scoped access to the audit log.

Put this MCP server to work.

Bring one AI client and the tools it needs. Weโ€™ll show you the setup in Mindflow, from scoped access to the audit log.

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France