Read-only MCP server for OpenSearch and OpenSearch Dashboards
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"mcp-opensearch","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# mcp-opensearch ``` /\ /\ / \___/ \ / (o) (o) \ | ~~ v ~~ | | `-----` | mcp-opensearch | / \ | ───────────────────────────────────── | | ─ | | Read-only MCP server for \| |/ OpenSearch & OpenSearch Dashboards. | | Fuzzy log hunting. /| |\ / | | \ ( | | )~~~~~ \_|_________|_/ ~~ ``` [](https://pypi.org/project/mcp-opensearch/) [](https://ghcr.io/bunnyiesart/mcp-opensearch) > Read-only MCP server for OpenSearch and OpenSearch Dashboards — search, aggregate, and explore your log data from Claude Code or any MCP-compatible AI assistant. ## Features - **17 tools** covering connectivity checks, index/field discovery, full-text search, aggregations, time-series histograms, numeric stats, PPL queries, index settings, document explain, comparative analysis, and a generic GET escape hatch - **3 investigation prompts** — reusable templates for common log analysis workflows (single-agent investigation, top-offenders sweep, baseline comparison) - **Parallel requests** — all tools support concurrent execution; Claude Code can fire multiple queries in a single turn (e.g. `opensearch_count` + `opensearch_terms` + `opensearch_search` simultaneously) for faster investigations - Two backends: OpenSearch Dashboards proxy (preferred) or direct OpenSearch REST API - Hard limits on search result size (default 200) and histogram bucket count (default 2,000) to protect cluster health - Text field aggregation warnings (fielddata heap pressure) - No-time-range warnings on potentially expensive full-history queries - Read-only write guard — only safe endpoints are in the allowlist - Configurable via environment variables or `~/.config/mcp-o…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.