How to integrate Kibana MCP with OpenClaw

OpenClaw is the fastest growing agent harness out there, which can work 24/7 to automate almost any kind of tasks. However, its capabilities are limited to the tools it has access to. Composio allows your OpenClaw to access Kibana with authentication management handled for you. You can execute actions on Kibana via your favorite OpenClaw interface (Telegram, WhatsApp, TUI, etc), whichever you prefer.

Kibana logoKibana
Api KeyBasic

Kibana is a visualization and analytics platform for Elasticsearch data. It helps you explore, visualize, and monitor your data using intuitive dashboards and interactive tools.

47 Tools

Introduction

OpenClaw is the fastest growing agent harness out there, which can work 24/7 to automate almost any kind of tasks. However, its capabilities are limited to the tools it has access to. Composio allows your OpenClaw to access Kibana with authentication management handled for you. You can execute actions on Kibana via your favorite OpenClaw interface (Telegram, WhatsApp, TUI, etc), whichever you prefer.

Also integrate Kibana with

Why use Composio?

Apart from a managed and hosted MCP server, you will get:

  • Programmatic tool calling allows LLMs to write its code in a remote workbench to handle complex tool chaining. Reduces to-and-fro with LLMs for frequent tool calling.
  • Handling Large tool responses out of LLM context to minimize context rot.
  • Dynamic just-in-time access to 20,000 tools across 1000+ other Apps for cross-app workflows. It loads the tools you need, so LLMs aren't overwhelmed by tools you don't need.

How to install Kibana with OpenClaw

Using Composio API Key and Setup Prompt

Copy the setup prompt from the OpenClaw dashboard
  • Run it in your OpenClaw chat interface.
  • Authenticate Kibana from the dashboard
  • Go back to your OpenClaw interface and start asking questions.

Using OpenClaw/Composio Plugin

1. Install OpenClaw Composio plugin

bash
openclaw plugins install @composio/openclaw-plugin

2. Copy the API Key from dashboard.composio.dev

3. Setup OpenClaw Config

bash
openclaw config set plugins.entries.composio.config.consumerKey "ck_your_key_here"

4. Restart OpenClaw

bash
openclaw gateway restart

5. Go to your chat interface and start asking questions.

6. When prompted, authenticate the app and you're all set.

How It Works

The plugin connects to Composio's MCP server at https://connect.composio.dev/mcp and registers all available tools directly into the OpenClaw agent. Tools are called by name — no extra search or execute steps needed.

If a tool returns an auth error, the agent will prompt you to connect that toolkit at dashboard.composio.dev.

Configuration

bash
{
  "plugins": {
    "entries": {
      "composio": {
        "enabled": true,
        "config": {
          "consumerKey": "ck_your_key_here"
        }
      }
    }
  }
}
OptionDescriptionDefault
enabledEnable or disable the plugintrue
consumerKeyYour Composio consumer key (ck_...)
mcpUrlMCP server URL (advanced)https://connect.composio.dev/mcp

What is the Kibana MCP server, and what's possible with it?

The Kibana MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Kibana account. It provides structured and secure access so your agent can perform Kibana operations on your behalf.

Conclusion

You've successfully integrated Kibana with OpenClaw using Composio plugin. Now interact with Kibana directly from your terminal, Web UI, or any messenger app using natural language commands.

Key benefits of this setup:

  • Seamless integration across TUI, Web UIs, and Messenger apps like Telegram, WhatsApp, Slack, etc.
  • Natural language commands for Kibana operations
  • Managed authentication through Composio
  • Access to 20,000+ tools across 1000+ apps for cross-app workflows
  • Programmatic tool calling for complex tool chaining

Next steps:

  • Try asking OpenClaw to perform various Kibana operations
  • Explore cross-app workflows by connecting more toolkits like Calendar, Slack, Notion, etc.
  • Build complex automation scripts that leverage OpenClaw's 24/7 running capabilities
TOOLS

Supported Tools

Every Kibana action and event your agent gets out of the box.

Delete Alerting Rule

Tool to delete an alerting rule in Kibana.

Delete Connector

Tool to delete a connector in Kibana.

Delete Fleet Output

Tool to delete a specific output configuration in Kibana Fleet.

Delete Fleet Proxy

Deletes a Fleet proxy configuration by its unique identifier.

Delete List

Deletes a list.

Delete Osquery Saved Query

Delete a saved Osquery query by its saved object ID.

Delete Saved Object

Tool to delete a saved object in Kibana.

Find Kibana Alerts

Tool to find and/or aggregate detection alerts in Kibana.

Get Action Types

Retrieves all available connector types (actions) in Kibana.

Get Alerting Rules

Tool to retrieve a list of alerting rules in Kibana.

Get Rule Types

Retrieves available rule types (alert types) in Kibana.

Get Cases

Tool to retrieve a list of cases in Kibana.

Get All Connectors

Tool to retrieve a list of all connectors in Kibana.

Get Data Views

Retrieves all data views (formerly known as index patterns) available in Kibana.

Find Detection Engine Rules

Retrieves a paginated list of Kibana detection engine rules with flexible filtering and sorting options.

Get Endpoint List Items

Retrieves Elastic Endpoint exception list items with filtering, pagination, and sorting capabilities.

Get Entity Store Engines

Retrieves all entity store engines configured in Kibana.

List Entity Store Entities

Tool to list entity records in the entity store with support for paging, sorting, and filtering.

Get Entity Store Status

Retrieves the current status of the Kibana Entity Store and its configured engines.

Get Fleet Agent Policies

Retrieves a paginated list of Fleet agent policies with filtering, sorting, and optional detailed information.

Get Fleet Agents Available Versions

Tool to retrieve the available versions for Fleet agents.

Get Fleet Agents Setup Status

Check Fleet setup readiness and identify missing requirements.

Check Fleet Permissions

Tool to check the permissions for the Fleet API.

Get Fleet Enrollment API Key

Tool to retrieve details of a specific enrollment API key by its ID.

Get Fleet Enrollment API Keys

Tool to fetch a list of enrollment API keys.

Get Fleet EPM Categories

Get all available package categories in the Elastic Package Manager (EPM) with package counts.

Get Fleet EPM Data Streams

Tool to retrieve the list of data streams in the Elastic Package Manager.

Get Fleet EPM Package Details

Retrieves comprehensive details for a specific Fleet integration package version from the Elastic Package Manager (EPM).

Get Fleet EPM Package File

Retrieves a specific file from an Elastic Package Manager (EPM) package.

Get Fleet EPM Packages

Tool to fetch the list of available packages in the Elastic Package Manager.

Get Installed EPM Packages

Tool to retrieve the list of installed packages in the Elastic Package Manager.

Get Fleet EPM Packages (Limited)

Retrieves a limited list of package names from the Elastic Package Manager (EPM) registry.

Get EPM Package Statistics

Retrieves usage statistics for a specific Fleet package in Kibana, including the number of package policies and agent policies using the package.

Get Fleet Package Policies

Retrieves a list of Fleet package policies (integration policies) in Kibana.

Get Fleet Server Host

Tool to fetch details of a specific Fleet server host by its item ID.

Get Fleet Server Hosts

Tool to retrieve the list of Fleet Server hosts.

Get Index Management Indices

Tool to fetch information about indices managed by Kibana's Index Management feature.

Get Node Metrics

Tool to retrieve statistics for nodes in an Elasticsearch cluster, often visualized in Kibana.

Get Reporting Jobs

Tool to retrieve a list of reporting jobs in Kibana.

Get Saved Objects

Tool to retrieve a list of saved objects in Kibana based on specified criteria.

Get Kibana Status

Tool to get the current status of Kibana.

Create Alerting Rule

Tool to create a new alerting rule in Kibana.

Create Case

Tool to create a new case in Kibana.

Create Kibana Connector

Tool to create a new connector in Kibana.

Create Dashboard

Tool to create a new dashboard in Kibana.

Create Data View

Tool to create a new data view (index pattern) in Kibana.

Create or Update Saved Object

Tool to create or update a saved object in Kibana.

FAQ

Frequently asked questions

With a standalone Kibana MCP server, the agents and LLMs can only access a fixed set of Kibana tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Kibana and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. OpenClaw fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Kibana tools.

Yes, absolutely. You can configure which Kibana scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Kibana data and credentials are handled as safely as possible.

Start with Kibana.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Kibana tool your agent needs.Free to start.

Start building