Splunk
Splunk Enterprise Security MCP server
Splunk Enterprise Security MCP server
Splunk Enterprise Security MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Splunk Enterprise Security MCP server
Splunk Enterprise Security MCP server
Splunk Enterprise Security MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Expose Splunk Enterprise Security to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
Expose Splunk Enterprise Security to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
24
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Splunk AppInspect
Splunk Cloud Action
Splunk Cloud Administration
Splunk Cloud App Registry
Splunk Cloud Catalog
Splunk Cloud Collect
Splunk Cloud Data Stream Processing
Splunk Cloud Forwarder
Splunk Cloud Identity
Splunk Cloud Ingest
Splunk Cloud KV Store
Splunk Cloud Machine Learning
Splunk Cloud Provisioner
Splunk Cloud Search
Splunk Enterprise
Splunk OnCall
Splunk SOAR
24
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Splunk AppInspect
Splunk Cloud Action
Splunk Cloud Administration
Splunk Cloud App Registry
Splunk Cloud Catalog
Splunk Cloud Collect
Splunk Cloud Data Stream Processing
Splunk Cloud Forwarder
Splunk Cloud Identity
Splunk Cloud Ingest
Splunk Cloud KV Store
Splunk Cloud Machine Learning
Splunk Cloud Provisioner
Splunk Cloud Search
Splunk Enterprise
Splunk OnCall
Splunk SOAR
24
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Splunk AppInspect
Splunk Cloud Action
Splunk Cloud Administration
Splunk Cloud App Registry
Splunk Cloud Catalog
Splunk Cloud Collect
Splunk Cloud Data Stream Processing
Splunk Cloud Forwarder
Splunk Cloud Identity
Splunk Cloud Ingest
Splunk Cloud KV Store
Splunk Cloud Machine Learning
Splunk Cloud Provisioner
Splunk Cloud Search
Splunk Enterprise
Splunk OnCall
Splunk SOAR
Our customers scale automation with security built in.
Tools exposed by this MCP server
Every Splunk Enterprise Security operation, as an MCP tool
Every Splunk Enterprise Security operation, as an MCP tool
Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:
Splunk Enterprise Security
Splunk Enterprise Security
Create investigation-related objects
Create investigation-related objects
Splunk Enterprise Security
Splunk Enterprise Security
Create new items in threat intelligence collection
Create new items in threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Delete items from threat intelligence collection
Delete items from threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Get a specific investigation-related object by ID
Get a specific investigation-related object by ID
Splunk Enterprise Security
Splunk Enterprise Security
Get ACL information of a story or category
Get ACL information of a story or category
Splunk Enterprise Security
Splunk Enterprise Security
Get investigation-related objects
Get investigation-related objects
Splunk Enterprise Security
Splunk Enterprise Security
Get single threat intelligence item by key
Get single threat intelligence item by key
Splunk Enterprise Security
Splunk Enterprise Security
Get the JSON schema for analytic stories
Get the JSON schema for analytic stories
Splunk Enterprise Security
Splunk Enterprise Security
Move an analytic story or category to another app
Move an analytic story or category to another app
Splunk Enterprise Security
Splunk Enterprise Security
Retrieve a specific analytic story or category
Retrieve a specific analytic story or category
Splunk Enterprise Security
Splunk Enterprise Security
Retrieve analytic stories or categories
Retrieve analytic stories or categories
Splunk Enterprise Security
Splunk Enterprise Security
Retrieve items from threat intelligence collection
Retrieve items from threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Update a specific investigation-related object by ID
Update a specific investigation-related object by ID
Splunk Enterprise Security
Splunk Enterprise Security
Update ACL information
Update ACL information
Splunk Enterprise Security
Splunk Enterprise Security
Update items in threat intelligence collection
Update items in threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Upload threat intelligence file
Upload threat intelligence file
Splunk Enterprise Security
Create investigation-related objects
Splunk Enterprise Security
Create new items in threat intelligence collection
Splunk Enterprise Security
Delete items from threat intelligence collection
Splunk Enterprise Security
Get a specific investigation-related object by ID
Splunk Enterprise Security
Get ACL information of a story or category
Splunk Enterprise Security
Get investigation-related objects
Splunk Enterprise Security
Get single threat intelligence item by key
Splunk Enterprise Security
Get the JSON schema for analytic stories
Splunk Enterprise Security
Move an analytic story or category to another app
Splunk Enterprise Security
Retrieve a specific analytic story or category
Splunk Enterprise Security
Retrieve analytic stories or categories
Splunk Enterprise Security
Retrieve items from threat intelligence collection
Splunk Enterprise Security
Update a specific investigation-related object by ID
Splunk Enterprise Security
Update ACL information
Splunk Enterprise Security
Update items in threat intelligence collection
Splunk Enterprise Security
Upload threat intelligence file
Splunk Enterprise Security
Splunk Enterprise Security
Upload threat intelligence file
Upload threat intelligence file
Splunk Enterprise Security
Splunk Enterprise Security
Update items in threat intelligence collection
Update items in threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Update ACL information
Update ACL information
Splunk Enterprise Security
Splunk Enterprise Security
Update a specific investigation-related object by ID
Update a specific investigation-related object by ID
Splunk Enterprise Security
Splunk Enterprise Security
Retrieve items from threat intelligence collection
Retrieve items from threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Retrieve analytic stories or categories
Retrieve analytic stories or categories
Splunk Enterprise Security
Splunk Enterprise Security
Retrieve a specific analytic story or category
Retrieve a specific analytic story or category
Splunk Enterprise Security
Splunk Enterprise Security
Move an analytic story or category to another app
Move an analytic story or category to another app
Splunk Enterprise Security
Splunk Enterprise Security
Get the JSON schema for analytic stories
Get the JSON schema for analytic stories
Splunk Enterprise Security
Splunk Enterprise Security
Get single threat intelligence item by key
Get single threat intelligence item by key
Splunk Enterprise Security
Splunk Enterprise Security
Get investigation-related objects
Get investigation-related objects
Splunk Enterprise Security
Splunk Enterprise Security
Get ACL information of a story or category
Get ACL information of a story or category
Splunk Enterprise Security
Splunk Enterprise Security
Get a specific investigation-related object by ID
Get a specific investigation-related object by ID
Splunk Enterprise Security
Splunk Enterprise Security
Delete items from threat intelligence collection
Delete items from threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Create new items in threat intelligence collection
Create new items in threat intelligence collection
Splunk Enterprise Security
Splunk Enterprise Security
Create investigation-related objects
Create investigation-related objects
Splunk Enterprise Security
Upload threat intelligence file
Splunk Enterprise Security
Update items in threat intelligence collection
Splunk Enterprise Security
Update ACL information
Splunk Enterprise Security
Update a specific investigation-related object by ID
Splunk Enterprise Security
Retrieve items from threat intelligence collection
Splunk Enterprise Security
Retrieve analytic stories or categories
Splunk Enterprise Security
Retrieve a specific analytic story or category
Splunk Enterprise Security
Move an analytic story or category to another app
Splunk Enterprise Security
Get the JSON schema for analytic stories
Splunk Enterprise Security
Get single threat intelligence item by key
Splunk Enterprise Security
Get investigation-related objects
Splunk Enterprise Security
Get ACL information of a story or category
Splunk Enterprise Security
Get a specific investigation-related object by ID
Splunk Enterprise Security
Delete items from threat intelligence collection
Splunk Enterprise Security
Create new items in threat intelligence collection
Splunk Enterprise Security
Create investigation-related objects
Connect Splunk Enterprise Security to your AI client in three steps.
01
Connect the service
Add Splunk Enterprise Security in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.
02
Choose the tools
Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.
03
Connect your AI client
Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.
Use cases
Use cases
What your AI agents can do with Splunk Enterprise Security
What your AI agents can do with Splunk Enterprise Security
AI clients
Mindflow
Splunk Enterprise Security
→ Difficulty managing threat intelligence updates is resolved by automating creates, updates, and deletions of threat items using API operations to maintain accurate threat data without manual intervention. → Complex investigation workflows are simplified as the agent autonomously creates, updates, and deletes investigation-related objects, centralizing incident response processes. → Analytic story and category handling challenges are overcome by automating retrieval, replacement, and relocation of analytic stories, ensuring relevant data is accessible and correctly categorized.
→ Difficulty managing threat intelligence updates is resolved by automating creates, updates, and deletions of threat items using API operations to maintain accurate threat data without manual intervention. → Complex investigation workflows are simplified as the agent autonomously creates, updates, and deletes investigation-related objects, centralizing incident response processes. → Analytic story and category handling challenges are overcome by automating retrieval, replacement, and relocation of analytic stories, ensuring relevant data is accessible and correctly categorized.
More
More
Splunk
Splunk
MCP servers:
MCP servers:
Splunk AppInspect
Splunk AppInspect
Splunk AppInspect
Splunk Cloud Action
Splunk Cloud Action
Splunk Cloud Action
Splunk Cloud Administration
Splunk Cloud Administration
Splunk Cloud Administration
Splunk Cloud App Registry
Splunk Cloud App Registry
Splunk Cloud App Registry
Splunk Cloud Catalog
Splunk Cloud Catalog
Splunk Cloud Catalog
Splunk Cloud Collect
Splunk Cloud Collect
Splunk Cloud Collect
Splunk Cloud Data Stream Processing
Splunk Cloud Data Stream Processing
Splunk Cloud Data Stream Processing
Splunk Cloud Forwarder
Splunk Cloud Forwarder
Splunk Cloud Forwarder
Splunk Cloud Identity
Splunk Cloud Identity
Splunk Cloud Identity
Splunk Cloud Ingest
Splunk Cloud Ingest
Splunk Cloud Ingest
Splunk Cloud KV Store
Splunk Cloud KV Store
Splunk Cloud KV Store
Splunk Cloud Machine Learning
Splunk Cloud Machine Learning
Splunk Cloud Machine Learning
Splunk Cloud Provisioner
Splunk Cloud Provisioner
Splunk Cloud Provisioner
Splunk Cloud Search
Splunk Cloud Search
Splunk Cloud Search
Splunk Enterprise
Splunk Enterprise
Splunk Enterprise
Splunk OnCall
Splunk OnCall
Splunk OnCall
Splunk SOAR
Splunk SOAR
Splunk SOAR
Every call goes through one governed endpoint.
Every call goes through one governed endpoint.
Your AI clients get access. You keep control.
Your AI clients get access. You keep control.
Every call to Splunk Enterprise Security goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Every call to Splunk Enterprise Security goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Splunk Enterprise Security MCP server
Live
RBAC · SecOps
Scoped credentials
Audit log
Create investigation-related objects
Allowed
Create new items in threat intelligence collection
Allowed
Delete items from threat intelligence collection
Needs approval
Get a specific investigation-related object by ID
Blocked
Every call logged · Export to SIEM
Questions about the Splunk Enterprise Security MCP server
Clear answers before you connect an AI client.
Questions about the Splunk Enterprise Security MCP server
Clear answers before you connect an AI client.
Explore more MCP servers in our catalog of 4,000+ services.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.