Kibana MCP for AI Agents

Securely connect your AI agents and chatbots (Claude, ChatGPT, Cursor, etc) with Kibana MCP or direct API to visualize data, run queries, generate dashboards, and monitor analytics through natural language.

Kibana logoKibana
Api KeyBasic

Kibana is a visualization and analytics platform for Elasticsearch data. It helps you explore, visualize, and monitor your data using intuitive dashboards and interactive tools.

47 Tools

Try Kibana now

Type what you want done — sign in and watch it run live in the Tool Router playground.

TOOL ROUTER PLAYGROUND
Kibana
Try asking
TOOLS

Supported Tools

Every Kibana action and event your agent gets out of the box.

Delete Alerting Rule

Tool to delete an alerting rule in Kibana.

Delete Connector

Tool to delete a connector in Kibana.

Delete Fleet Output

Tool to delete a specific output configuration in Kibana Fleet.

Delete Fleet Proxy

Deletes a Fleet proxy configuration by its unique identifier.

Delete List

Deletes a list.

Delete Osquery Saved Query

Delete a saved Osquery query by its saved object ID.

Delete Saved Object

Tool to delete a saved object in Kibana.

Find Kibana Alerts

Tool to find and/or aggregate detection alerts in Kibana.

Get Action Types

Retrieves all available connector types (actions) in Kibana.

Get Alerting Rules

Tool to retrieve a list of alerting rules in Kibana.

Get Rule Types

Retrieves available rule types (alert types) in Kibana.

Get Cases

Tool to retrieve a list of cases in Kibana.

Get All Connectors

Tool to retrieve a list of all connectors in Kibana.

Get Data Views

Retrieves all data views (formerly known as index patterns) available in Kibana.

Find Detection Engine Rules

Retrieves a paginated list of Kibana detection engine rules with flexible filtering and sorting options.

Get Endpoint List Items

Retrieves Elastic Endpoint exception list items with filtering, pagination, and sorting capabilities.

Get Entity Store Engines

Retrieves all entity store engines configured in Kibana.

List Entity Store Entities

Tool to list entity records in the entity store with support for paging, sorting, and filtering.

Get Entity Store Status

Retrieves the current status of the Kibana Entity Store and its configured engines.

Get Fleet Agent Policies

Retrieves a paginated list of Fleet agent policies with filtering, sorting, and optional detailed information.

Get Fleet Agents Available Versions

Tool to retrieve the available versions for Fleet agents.

Get Fleet Agents Setup Status

Check Fleet setup readiness and identify missing requirements.

Check Fleet Permissions

Tool to check the permissions for the Fleet API.

Get Fleet Enrollment API Key

Tool to retrieve details of a specific enrollment API key by its ID.

Get Fleet Enrollment API Keys

Tool to fetch a list of enrollment API keys.

Get Fleet EPM Categories

Get all available package categories in the Elastic Package Manager (EPM) with package counts.

Get Fleet EPM Data Streams

Tool to retrieve the list of data streams in the Elastic Package Manager.

Get Fleet EPM Package Details

Retrieves comprehensive details for a specific Fleet integration package version from the Elastic Package Manager (EPM).

Get Fleet EPM Package File

Retrieves a specific file from an Elastic Package Manager (EPM) package.

Get Fleet EPM Packages

Tool to fetch the list of available packages in the Elastic Package Manager.

Get Installed EPM Packages

Tool to retrieve the list of installed packages in the Elastic Package Manager.

Get Fleet EPM Packages (Limited)

Retrieves a limited list of package names from the Elastic Package Manager (EPM) registry.

Get EPM Package Statistics

Retrieves usage statistics for a specific Fleet package in Kibana, including the number of package policies and agent policies using the package.

Get Fleet Package Policies

Retrieves a list of Fleet package policies (integration policies) in Kibana.

Get Fleet Server Host

Tool to fetch details of a specific Fleet server host by its item ID.

Get Fleet Server Hosts

Tool to retrieve the list of Fleet Server hosts.

Get Index Management Indices

Tool to fetch information about indices managed by Kibana's Index Management feature.

Get Node Metrics

Tool to retrieve statistics for nodes in an Elasticsearch cluster, often visualized in Kibana.

Get Reporting Jobs

Tool to retrieve a list of reporting jobs in Kibana.

Get Saved Objects

Tool to retrieve a list of saved objects in Kibana based on specified criteria.

Get Kibana Status

Tool to get the current status of Kibana.

Create Alerting Rule

Tool to create a new alerting rule in Kibana.

Create Case

Tool to create a new case in Kibana.

Create Kibana Connector

Tool to create a new connector in Kibana.

Create Dashboard

Tool to create a new dashboard in Kibana.

Create Data View

Tool to create a new data view (index pattern) in Kibana.

Create or Update Saved Object

Tool to create or update a saved object in Kibana.

SETUP GUIDE

Connect Kibana MCP Tool with your Agent

1

Install Composio

typescript
npm install @composio/core ai @ai-sdk/openai @ai-sdk/mcp
Install the Composio SDK for Python or TypeScript
2

Initialize Client and Create Tool Router Session

typescript
import { Composio } from '@composio/core';

const composio = new Composio({ apiKey: 'your-api-key' });
const session = await composio.create('your-user-id');
console.log(`Tool Router session created: ${session.mcp.url}`);
Import and initialize the Composio client, then create a Tool Router session for Kibana
3

Connect to AI Agent

typescript
import { openai } from '@ai-sdk/openai';
import { experimental_createMCPClient as createMCPClient } from '@ai-sdk/mcp';
import { generateText } from 'ai';

const client = await createMCPClient({
  transport: {
    type: 'http',
    url: session.mcp.url,
    headers: {
      'x-api-key': 'your-composio-api-key',
    },
  },
});

const tools = await client.tools();
const { text } = await generateText({
  model: openai('gpt-4o'),
  tools,
  messages: [{
    role: 'user',
    content: 'Show me Kibana dashboards for web traffic trends.'
  }],
  maxSteps: 5,
});

console.log(`Agent: ${text}`);
Use the MCP server with your AI agent (Anthropic Claude or Mastra)
SETUP GUIDE

Connect Kibana API Tool with your Agent

1

Install Composio

typescript
npm install @composio/openai
Install the Composio SDK
2

Initialize Composio and Create Tool Router Session

typescript
import OpenAI from 'openai';
import { Composio } from '@composio/core';
import { OpenAIResponsesProvider } from '@composio/openai';

const composio = new Composio({
  provider: new OpenAIResponsesProvider(),
});
const openai = new OpenAI({});
const session = await composio.create('your-user-id');
Import and initialize Composio client, then create a Tool Router session
3

Execute Kibana Tools via Tool Router with Your Agent

typescript
const tools = session.tools;
const response = await openai.responses.create({
  model: 'gpt-4.1',
  tools: tools,
  input: [{
    role: 'user',
    content: 'Show me a summary of today’s error logs in Kibana.'
  }],
});
const result = await composio.provider.handleToolCalls(
  'your-user-id',
  response.output
);
console.log(result);
Get tools from Tool Router session and execute Kibana actions with your Agent

Why Use Composio?

AI Native Kibana Integration

  • Supports both Kibana MCP and direct API based integrations
  • Structured, LLM-friendly schemas for reliable tool execution
  • Rich coverage for reading, writing, and querying your Kibana data

Managed Auth

  • Built-in OAuth handling with automatic token refresh and rotation
  • Central place to manage, scope, and revoke Kibana access
  • Per user and per environment credentials instead of hard-coded keys

Agent Optimized Design

  • Tools are tuned using real error and success rates to improve reliability over time
  • Comprehensive execution logs so you always know what ran, when, and on whose behalf

Enterprise Grade Security

  • Fine-grained RBAC so you control which agents and users can access Kibana
  • Scoped, least privilege access to Kibana resources
  • Full audit trail of agent actions to support review and compliance
FAQ

Frequently asked questions

Yes, Kibana requires you to configure your own API key credentials. Once set up, Composio handles secure credential storage and API request handling for you.

Yes! Composio's Tool Router enables agents to use multiple toolkits. Learn more.

Composio is SOC 2 and ISO 27001 compliant with all data encrypted in transit and at rest. Learn more.

Composio maintains and updates all toolkit integrations automatically, so your agents always work with the latest API versions.

Start with Kibana.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Kibana tool your agent needs.Free to start.

Start building